Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
File: cpnOZKDxYk17stKWnlwRrbqlSFw.mft (raw, json)
Hash identifier: k+sP88mVMMXsC63seS28jljAGULbsGAc/VfWo4z/EyY=
Subject key identifier: 5B:98:4C:30:41:67:57:49:13:1A:A3:0C:92:14:24:FC:82:C4:03:05
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial: 0196C3F0E9FFD008147379FC4FDFDDC41F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
Manifest number: 095F
Signing time: Mon 12 May 2025 10:01:07 +0000
Manifest this update: Mon 12 May 2025 10:01:07 +0000
Manifest next update: Tue 13 May 2025 10:01:07 +0000
Files and hashes: 1: cpnOZKDxYk17stKWnlwRrbqlSFw.crl (hash: gBL3qsTkvBXx6Anvt5MDNZ+49rc4MnBStQdF8IPsBpE=)
2: hGLXMAJyrLLUknw2I4rIa47GY5A.roa (hash: 2PfIq+E4/YZaE6ygL6f+ygB4E8ocD+aiVc7FkOqVsVA=)
3: vbTBxrwzB75awQdnuHxvUmGSxrI.roa (hash: BNvntPsh9Cs3tqn2zXlS+7ZhQF3J782Zk6D2d5jtV8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:e9:ff:d0:08:14:73:79:fc:4f:df:dd:c4:1f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Validity
Not Before: May 12 10:01:07 2025 GMT
Not After : May 13 10:01:07 2025 GMT
Subject: CN=5b984c3041675749131aa30c921424fc82c40305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:a2:c3:81:be:02:47:8c:c2:b5:f8:49:5b:
94:79:86:45:99:65:e9:46:95:5b:29:4d:24:be:13:
e7:24:a3:fe:b5:72:49:cb:5b:bb:7f:17:d4:4e:14:
b8:28:60:5d:9f:bb:cd:b1:7e:6c:32:44:39:56:51:
66:d3:7b:9d:2f:5d:15:68:e1:5e:e1:21:e8:6c:0a:
91:03:2c:88:89:e8:c8:60:71:1a:5a:2b:ef:a4:01:
f2:7b:84:b7:0b:6f:2b:3f:f1:23:eb:b4:05:f4:cc:
ac:85:da:2e:08:43:59:ef:74:6e:cf:a2:5f:97:b8:
08:54:ca:6c:03:93:a0:13:b9:de:37:61:a9:2b:9d:
18:53:50:5c:cb:77:63:47:16:9e:26:ba:c1:41:6e:
4c:32:a8:74:3b:39:87:e3:98:00:59:78:a6:63:18:
cc:3c:08:f1:99:81:41:dd:e4:7a:4f:4b:81:f5:af:
34:d7:82:f2:b9:72:61:03:38:46:96:b9:7c:83:9d:
3d:71:dc:bf:71:ca:e7:1b:8b:cf:1e:1c:4d:b8:e4:
1e:6b:8b:4a:6a:26:b1:7b:ea:7c:75:90:f0:9a:08:
75:25:40:d6:63:12:67:04:26:60:5b:19:e9:be:68:
d3:8e:8f:1e:34:92:1c:ea:5e:69:5c:1c:e5:51:1f:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:98:4C:30:41:67:57:49:13:1A:A3:0C:92:14:24:FC:82:C4:03:05
X509v3 Authority Key Identifier:
keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:db:1d:e2:17:27:06:62:b9:2f:1a:23:fb:45:60:4c:c3:a1:
88:3f:af:00:63:fe:f8:8c:69:1f:43:78:95:8d:4a:6d:23:87:
dd:4b:d2:9f:67:35:77:98:92:b0:43:87:df:43:2c:8e:56:eb:
5d:4d:f1:e2:1f:6a:59:9e:71:2f:bc:bb:9d:a2:c6:61:0a:5c:
b3:17:e3:4c:a6:36:90:0e:ba:dd:ec:1c:57:0f:42:d0:f2:aa:
78:40:1e:e3:67:26:7c:05:e6:3b:93:81:8f:72:b4:7c:a6:1e:
bc:5b:ba:d1:5a:a9:c0:26:4b:8f:33:ce:bf:7d:12:3d:3d:9c:
d7:7a:16:b9:30:83:c3:97:a1:29:84:18:e4:f2:c4:23:69:c6:
cc:57:b8:f6:e2:78:f0:e7:b4:da:9d:89:9a:a2:ca:31:c6:e1:
29:65:e8:cf:10:9e:49:f0:d3:c1:1a:8b:aa:94:68:8a:7e:7d:
5b:4e:55:bd:60:ff:a0:1e:7a:e4:cb:6f:12:34:2a:c3:9c:98:
f3:c6:a5:95:9f:bc:ad:c8:9a:3b:25:be:b7:f5:46:2e:58:f9:
1d:5c:b9:e3:cd:78:1e:88:86:08:30:bd:3e:5e:6f:33:e6:84:
85:96:a9:a8:8e:96:25:fb:17:42:17:bb:6c:80:ce:47:fe:f7:
fe:5b:1c:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbD8On/0AgUc3n8T9/dxB9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOTljZTY0YTBmMTYyNGQ3YmIyZDI5NjllNWMxMWFkYmFh
NTQ4NWMwHhcNMjUwNTEyMTAwMTA3WhcNMjUwNTEzMTAwMTA3WjAzMTEwLwYDVQQD
Eyg1Yjk4NGMzMDQxNjc1NzQ5MTMxYWEzMGM5MjE0MjRmYzgyYzQwMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfiiw4G+AkeMwrX4SVuUeYZFmWXp
RpVbKU0kvhPnJKP+tXJJy1u7fxfUThS4KGBdn7vNsX5sMkQ5VlFm03udL10VaOFe
4SHobAqRAyyIiejIYHEaWivvpAHye4S3C28rP/Ej67QF9MyshdouCENZ73Ruz6Jf
l7gIVMpsA5OgE7neN2GpK50YU1Bcy3djRxaeJrrBQW5MMqh0OzmH45gAWXimYxjM
PAjxmYFB3eR6T0uB9a8014LyuXJhAzhGlrl8g509cdy/ccrnG4vPHhxNuOQea4tK
aiaxe+p8dZDwmgh1JUDWYxJnBCZgWxnpvmjTjo8eNJIc6l5pXBzlUR+dPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuYTDBBZ1dJExqjDJIUJPyCxAMFMB8GA1UdIwQY
MBaAFHKZzmSg8WJNe7LSlp5cEa26pUhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jMjBmYmEtNWI2Ny00MzhjLWFiMDAt
YzdlYjM0ZTJkY2E2LzEvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jMjBmYmEtNWI2Ny00MzhjLWFiMDAtYzdlYjM0ZTJkY2E2
LzEvY3BuT1pLRHhZazE3c3RLV25sd1JyYnFsU0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtsd4hcn
BmK5Lxoj+0VgTMOhiD+vAGP++IxpH0N4lY1KbSOH3UvSn2c1d5iSsEOH30Msjlbr
XU3x4h9qWZ5xL7y7naLGYQpcsxfjTKY2kA663ewcVw9C0PKqeEAe42cmfAXmO5OB
j3K0fKYevFu60VqpwCZLjzPOv30SPT2c13oWuTCDw5ehKYQY5PLEI2nGzFe49uJ4
8Oe02p2JmqLKMcbhKWXozxCeSfDTwRqLqpRoin59W05VvWD/oB565MtvEjQqw5yY
88allZ+8rciaOyW+t/VGLlj5HVy54814HoiGCDC9Pl5vM+aEhZapqI6WJfsXQhe7
bIDOR/73/lscug==
-----END CERTIFICATE-----
Generated at Mon May 12 20:00:35 2025 by rpki-client