Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File: C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier: zKr3koPtHGpfIOg8YwmOR0eTMPnr69y/kwzcJXcB3J0=
Subject key identifier: D8:6E:76:13:BE:33:C1:61:21:4D:42:90:07:7C:7D:76:DD:53:90:31
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial: 0197B5FC0BCF2F255BEA873CE70E941D5C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 10:01:22 +0000
Manifest this update: Sat 28 Jun 2025 10:01:22 +0000
Manifest next update: Sun 29 Jun 2025 10:01:22 +0000
Files and hashes: 1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: nsnPkL0kzObGUXlj81W/rZFsYaVi45S8jO2We7rMD+4=)
2: zmy93HOVaR95SsJ_nMqWvP0tGkI.roa (hash: CpAhgA9BKzHDj13uVF86y4qqslsHctpwgNDLQY2WnPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:0b:cf:2f:25:5b:ea:87:3c:e7:0e:94:1d:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Validity
Not Before: Jun 28 10:01:22 2025 GMT
Not After : Jun 29 10:01:22 2025 GMT
Subject: CN=d86e7613be33c161214d4290077c7d76dd539031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:68:1f:9e:03:32:7b:4a:00:78:de:7b:cd:
3c:1e:ce:ac:59:f4:f9:ec:39:5d:b1:5b:1c:0f:3e:
b6:d4:2c:98:2d:dd:61:b0:1b:4c:6b:0d:58:3b:ec:
ae:2e:1a:d7:0e:44:2c:ae:b8:82:49:cb:7e:da:96:
2b:9f:75:fa:ac:dd:b7:2b:07:f3:79:ec:8a:96:9b:
ad:d0:6f:8d:37:12:d6:c3:0c:07:b6:21:6f:e5:e8:
04:9d:b5:23:70:de:17:30:21:f5:07:40:ca:1d:45:
45:ec:80:77:79:b7:92:ee:1b:f8:ea:dd:b2:09:d4:
e0:56:2d:ef:73:17:6e:9c:18:8d:88:0c:2d:bd:cb:
a9:36:02:52:fd:f8:6c:5d:57:13:c3:96:79:6d:72:
ff:c3:74:88:6b:85:72:b3:66:c5:0c:0b:57:ca:31:
10:4c:d2:47:75:72:5d:33:1a:5d:6b:bb:31:aa:cc:
24:de:78:cf:eb:3b:a9:2e:76:f2:e2:cf:6c:8f:04:
b2:c5:68:66:f4:ff:4a:60:7d:ca:4e:96:84:41:34:
85:b9:88:f6:f2:ae:00:50:52:28:ca:db:06:6d:20:
30:68:36:24:e6:1d:25:8c:54:11:84:db:5e:34:a4:
8d:be:73:0b:d8:fd:a0:5c:5f:1a:9f:4e:8a:da:79:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6E:76:13:BE:33:C1:61:21:4D:42:90:07:7C:7D:76:DD:53:90:31
X509v3 Authority Key Identifier:
keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:80:1f:7c:64:76:44:b5:86:38:08:cb:ce:d7:b1:68:69:aa:
04:3b:97:a9:08:46:dc:81:b7:71:90:b4:00:29:fb:43:2f:ef:
12:4c:3b:db:d9:8a:92:1f:9c:7a:fd:84:d1:5f:6a:0e:c9:d7:
fb:d0:30:00:b8:98:b6:cb:10:ab:8a:09:6a:35:0b:ff:82:4f:
ae:96:32:c9:18:56:1c:be:2d:30:82:74:f9:49:1c:2c:11:53:
e5:cc:77:63:a0:98:d4:0f:bd:2c:4b:e5:08:cb:58:d9:04:72:
f5:51:7b:14:e7:f2:b8:bd:84:0e:67:33:65:e8:36:5e:b1:08:
c6:04:57:02:5b:fc:ca:90:d8:00:d4:42:1f:68:15:aa:70:81:
2f:58:bd:80:02:5e:d4:41:bc:44:7c:c6:4d:91:e4:76:a8:eb:
c3:3b:72:89:e6:f6:ec:cd:82:f1:fa:8b:27:e7:62:02:ee:d5:
25:de:83:9d:69:f0:75:d8:9f:5e:23:90:5c:53:18:b3:e3:4c:
32:a0:5d:32:67:21:50:b1:25:55:14:2d:46:9e:91:0a:6a:fa:
f5:04:80:e9:e3:b8:da:b6:d4:3c:fe:1d:ba:57:e2:ee:56:15:
6c:9b:af:75:f0:c2:a9:a9:30:98:57:20:3d:92:20:fb:59:3d:
37:cb:3f:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/AvPLyVb6oc85w6UHVwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDJmYjQ4MzFjMWRhZjJkOTYzYzQ3NjM4ZDcwMzA4NmVl
Y2E4ZGUwHhcNMjUwNjI4MTAwMTIyWhcNMjUwNjI5MTAwMTIyWjAzMTEwLwYDVQQD
EyhkODZlNzYxM2JlMzNjMTYxMjE0ZDQyOTAwNzdjN2Q3NmRkNTM5MDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRNoH54DMntKAHjee808Hs6sWfT5
7DldsVscDz621CyYLd1hsBtMaw1YO+yuLhrXDkQsrriCSct+2pYrn3X6rN23Kwfz
eeyKlput0G+NNxLWwwwHtiFv5egEnbUjcN4XMCH1B0DKHUVF7IB3ebeS7hv46t2y
CdTgVi3vcxdunBiNiAwtvcupNgJS/fhsXVcTw5Z5bXL/w3SIa4Vys2bFDAtXyjEQ
TNJHdXJdMxpda7sxqswk3njP6zupLnby4s9sjwSyxWhm9P9KYH3KTpaEQTSFuYj2
8q4AUFIoytsGbSAwaDYk5h0ljFQRhNteNKSNvnML2P2gXF8an06K2nkseQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhudhO+M8FhIU1CkAd8fXbdU5AxMB8GA1UdIwQY
MBaAFAtC+0gxwdry2WPEdjjXAwhu7KjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEt
YjM2NjNhMzQ1NTE4LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEtYjM2NjNhMzQ1NTE4
LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoAffGR2
RLWGOAjLztexaGmqBDuXqQhG3IG3cZC0ACn7Qy/vEkw729mKkh+cev2E0V9qDsnX
+9AwALiYtssQq4oJajUL/4JPrpYyyRhWHL4tMIJ0+UkcLBFT5cx3Y6CY1A+9LEvl
CMtY2QRy9VF7FOfyuL2EDmczZeg2XrEIxgRXAlv8ypDYANRCH2gVqnCBL1i9gAJe
1EG8RHzGTZHkdqjrwztyieb27M2C8fqLJ+diAu7VJd6DnWnwddifXiOQXFMYs+NM
MqBdMmchULElVRQtRp6RCmr69QSA6eO42rbUPP4dulfi7lYVbJuvdfDCqakwmFcg
PZIg+1k9N8s/+g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:11 2025 by rpki-client