Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: HUq/qnucaNimQE9GCL/XEsKzPF9Ng6h1jDyLiXBKSNs=
Subject key identifier: 5B:94:6C:53:39:B5:5F:57:38:AB:63:46:4F:A3:E8:07:21:03:2D:32
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 0197B6A1680537B2B6B8712E96A412C53224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:02:00 +0000
Manifest this update: Sat 28 Jun 2025 13:02:00 +0000
Manifest next update: Sun 29 Jun 2025 13:02:00 +0000
Files and hashes: 1: 1OOgCvrkMSPlJGXfwud-L77F8RQ.roa (hash: OfGMkg4R8dFeR/FCs55Nk0J17chraeTKhOgexIz+stY=)
2: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: P4INcfBdOo6Zny+UwiOCFug5TLadWmXxrmcD/K9A8Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:68:05:37:b2:b6:b8:71:2e:96:a4:12:c5:32:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Jun 28 13:02:00 2025 GMT
Not After : Jun 29 13:02:00 2025 GMT
Subject: CN=5b946c5339b55f5738ab63464fa3e80721032d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:cf:fb:a3:0c:99:21:c3:20:9a:0d:5c:64:
41:51:32:f3:f7:1e:3f:7f:d7:1b:95:8f:8a:9b:55:
dc:0b:97:58:e1:50:65:b7:8a:84:6e:47:75:87:90:
82:c6:9f:a7:56:a7:33:21:61:be:49:4a:4b:b0:6e:
b7:ec:4c:fe:d3:41:e9:01:b8:3c:77:c0:08:ee:e4:
ec:59:6b:1e:a3:cd:85:54:10:3d:f6:2c:10:c3:9b:
36:1b:25:a5:e5:cb:df:3a:b1:2d:67:e3:13:2b:da:
aa:aa:b6:9e:5d:c9:44:b5:d2:15:a2:14:28:49:5a:
ff:37:bd:07:5a:c4:ff:6d:48:0b:be:a1:56:30:ff:
c7:ee:66:e5:4a:76:83:86:51:7d:c0:75:54:24:8f:
81:a1:ba:94:ec:9c:83:d6:44:53:0f:e2:3e:48:75:
33:50:7a:5c:76:cd:50:37:37:48:19:73:40:a7:e5:
2f:88:42:32:45:df:06:b0:8e:4d:3c:0a:6c:4e:1b:
ab:82:da:6c:f9:72:a4:93:b8:e4:99:20:43:ba:7a:
09:8f:49:f2:30:f5:5f:71:81:68:f6:a9:2f:c0:7f:
fc:cf:14:5d:07:35:f8:61:1d:84:ea:ae:8c:57:d5:
31:45:eb:fb:7a:c5:40:b8:33:a3:97:91:39:dd:04:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:94:6C:53:39:B5:5F:57:38:AB:63:46:4F:A3:E8:07:21:03:2D:32
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f1:74:cd:dd:00:70:1c:34:1e:0f:b1:d2:53:61:96:91:b8:
6e:8b:d5:f0:99:48:c6:b7:a0:3a:45:3f:6a:75:27:95:47:0b:
d7:0d:36:b2:a4:42:3d:1e:c3:36:53:96:18:a1:ba:72:89:4a:
80:46:69:65:92:d5:51:22:a9:1d:5d:8a:01:f3:8f:90:fa:be:
36:12:47:e7:59:be:0f:7c:98:03:9b:1e:3c:ca:ef:d4:45:75:
ab:51:4e:c4:85:20:a4:43:a6:bd:ed:57:17:fc:3b:c6:58:a5:
bd:a6:ef:b7:c5:69:6c:5d:4d:3c:91:27:b8:06:41:a5:64:2b:
59:ba:0e:02:37:05:50:f8:b8:6b:1c:2f:ea:f0:5b:3c:fc:a4:
64:1e:f2:0e:e5:4b:bc:2e:70:99:96:3e:11:f4:09:c5:67:f6:
21:42:1a:02:12:27:eb:81:0a:84:64:39:be:0a:f1:e1:5b:1f:
05:1a:8a:28:f7:15:f7:11:82:92:99:82:41:a5:9f:78:9d:84:
dc:f1:f8:a9:ce:86:96:d3:47:ce:c4:08:c1:41:e8:3a:e5:32:
23:82:68:a6:92:30:e4:de:64:68:44:61:ef:76:ac:46:d6:b3:
eb:d3:3e:8f:6a:c8:ee:1d:95:74:f0:a4:8f:bb:9f:6c:9e:0c:
e6:aa:39:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oWgFN7K2uHEulqQSxTIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZDBhMjk3OWU5YjY2NTJkNjFiOTAxZGQ1NWExOTI4ZGJm
ZGNmNmQwHhcNMjUwNjI4MTMwMjAwWhcNMjUwNjI5MTMwMjAwWjAzMTEwLwYDVQQD
Eyg1Yjk0NmM1MzM5YjU1ZjU3MzhhYjYzNDY0ZmEzZTgwNzIxMDMyZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0vP+6MMmSHDIJoNXGRBUTLz9x4/
f9cblY+Km1XcC5dY4VBlt4qEbkd1h5CCxp+nVqczIWG+SUpLsG637Ez+00HpAbg8
d8AI7uTsWWseo82FVBA99iwQw5s2GyWl5cvfOrEtZ+MTK9qqqraeXclEtdIVohQo
SVr/N70HWsT/bUgLvqFWMP/H7mblSnaDhlF9wHVUJI+BobqU7JyD1kRTD+I+SHUz
UHpcds1QNzdIGXNAp+UviEIyRd8GsI5NPApsThurgtps+XKkk7jkmSBDunoJj0ny
MPVfcYFo9qkvwH/8zxRdBzX4YR2E6q6MV9UxRev7esVAuDOjl5E53QQbvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuUbFM5tV9XOKtjRk+j6AchAy0yMB8GA1UdIwQY
MBaAFAnQopeem2ZS1huQHdVaGSjb/c9tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84YzMzYzItNmY3Mi00MWI2LWE5ZTQt
MDlmNzNjMzU0ZTdjLzEvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84YzMzYzItNmY3Mi00MWI2LWE5ZTQtMDlmNzNjMzU0ZTdj
LzEvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvF0zd0A
cBw0Hg+x0lNhlpG4bovV8JlIxregOkU/anUnlUcL1w02sqRCPR7DNlOWGKG6colK
gEZpZZLVUSKpHV2KAfOPkPq+NhJH51m+D3yYA5sePMrv1EV1q1FOxIUgpEOmve1X
F/w7xlilvabvt8VpbF1NPJEnuAZBpWQrWboOAjcFUPi4axwv6vBbPPykZB7yDuVL
vC5wmZY+EfQJxWf2IUIaAhIn64EKhGQ5vgrx4VsfBRqKKPcV9xGCkpmCQaWfeJ2E
3PH4qc6GltNHzsQIwUHoOuUyI4JoppIw5N5kaERh73asRtaz69M+j2rI7h2VdPCk
j7ufbJ4M5qo5Ug==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:52 2025 by rpki-client