Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
File: cHdwf2aXiCaodeuNLrMzvthWlmc.mft (raw, json)
Hash identifier: 65AKY6/M++EPFUsQ91cVzg7ojbcj9cY/afEYtZnf9R4=
Subject key identifier: E1:39:0D:C3:22:17:66:59:E5:1A:83:76:64:BB:9B:8E:58:AF:4C:CE
Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
Certificate issuer: /CN=7077707f66978826a875eb8d2eb333bed8569667
Certificate serial: 0197B6A09DFEDB2A292B6E8E0271B31E7FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
Manifest number: 079B
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: ZBqGiL5Lwt5_4rzPo7SO0cTda9c.roa (hash: KELG75sz8Tw2WawKyeiPVA4v+ezxNcK7f4e9XzFuUUw=)
2: cHdwf2aXiCaodeuNLrMzvthWlmc.crl (hash: MJm2mFiHNgarh3Jh8P6UafGeDFwF6taTO6YTGTHoRK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9d:fe:db:2a:29:2b:6e:8e:02:71:b3:1e:7f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=e1390dc322176659e51a837664bb9b8e58af4cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:f1:49:e8:14:f1:5a:2b:df:23:40:56:96:
88:b9:e1:53:71:5a:3e:cc:9c:52:29:39:4c:ce:48:
87:95:3d:1b:5a:04:39:68:78:93:19:5d:60:dd:f8:
f4:8e:84:f2:5e:40:99:2c:b0:dc:17:8c:46:ab:4a:
0c:67:27:b2:99:07:8e:f8:89:8a:38:d9:04:d9:a7:
a8:e5:84:df:38:1b:40:f2:45:96:c8:74:d8:c3:4d:
64:4c:6c:0a:4a:ac:6d:57:88:0e:36:45:5f:d0:b2:
bd:cc:ab:d2:b5:58:63:fe:1d:87:46:64:f3:c3:d3:
6c:a4:c9:b6:31:8e:d8:06:e5:94:e8:8b:4a:45:f3:
70:d4:fd:d3:46:7a:4b:8b:b4:73:4c:63:fa:5a:19:
6e:87:d3:ae:d9:47:e7:c3:bc:6a:32:9b:6d:31:91:
bb:19:e4:28:ec:89:63:18:ac:53:6a:35:dc:b2:0e:
b5:26:e4:22:de:b6:75:bb:34:70:59:d4:c3:48:4a:
c6:2a:d0:de:ec:14:8a:62:d7:33:19:f3:48:bb:aa:
dd:96:fb:69:e2:c2:fd:38:d7:90:25:c9:bf:15:10:
04:94:ed:57:ce:72:64:97:fd:c6:bd:aa:2f:d8:52:
4a:cd:71:07:ee:c7:bc:ad:63:cb:5e:a9:1d:c9:a9:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:39:0D:C3:22:17:66:59:E5:1A:83:76:64:BB:9B:8E:58:AF:4C:CE
X509v3 Authority Key Identifier:
keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bb:b3:05:1a:c0:7c:1b:75:50:0b:6d:74:66:c4:88:ad:78:
7c:c0:ab:54:f9:eb:80:db:59:06:4a:6e:bc:ed:c4:9a:f4:62:
59:e7:f3:d2:c0:dc:7b:67:21:32:a7:a9:9e:1b:56:a7:b8:fc:
55:8c:c1:a8:70:bc:12:f1:a1:7a:72:e8:9b:4e:f8:2c:6b:db:
ca:e6:1a:5a:c1:f9:f7:9f:6c:56:72:65:7f:43:6f:89:bb:9e:
2a:46:ff:d0:2d:47:18:70:ca:67:ec:3f:d3:ce:18:d4:47:a1:
ac:17:30:eb:f7:5f:44:17:63:c0:38:ad:21:c0:12:55:f7:17:
22:09:41:b8:5a:f3:ac:b7:75:42:4a:26:31:44:6c:81:fd:91:
f5:d6:7a:46:3b:30:f4:55:0d:57:dc:28:1a:51:5e:74:64:e7:
f7:73:87:a0:c4:aa:5c:51:2a:db:ce:cb:99:f6:63:54:c4:dc:
4c:72:a6:74:2d:4d:50:ad:4a:c3:c2:3a:19:e0:f8:cb:1f:8e:
6f:7c:75:45:a8:4a:3b:28:38:1f:05:31:2c:a3:4e:6b:b0:99:
43:e5:5b:25:c8:7e:3e:2e:cc:a1:dc:b9:f5:98:3b:eb:e1:bc:
3f:71:a3:de:54:b8:5f:9f:64:64:be:3a:d7:a4:db:cc:c1:c2:
04:7b:7c:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oJ3+2yopK26OAnGzHn/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNzc3MDdmNjY5Nzg4MjZhODc1ZWI4ZDJlYjMzM2JlZDg1
Njk2NjcwHhcNMjUwNjI4MTMwMTA4WhcNMjUwNjI5MTMwMTA4WjAzMTEwLwYDVQQD
EyhlMTM5MGRjMzIyMTc2NjU5ZTUxYTgzNzY2NGJiOWI4ZTU4YWY0Y2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv7xSegU8Vor3yNAVpaIueFTcVo+
zJxSKTlMzkiHlT0bWgQ5aHiTGV1g3fj0joTyXkCZLLDcF4xGq0oMZyeymQeO+ImK
ONkE2aeo5YTfOBtA8kWWyHTYw01kTGwKSqxtV4gONkVf0LK9zKvStVhj/h2HRmTz
w9NspMm2MY7YBuWU6ItKRfNw1P3TRnpLi7RzTGP6Whluh9Ou2Ufnw7xqMpttMZG7
GeQo7IljGKxTajXcsg61JuQi3rZ1uzRwWdTDSErGKtDe7BSKYtczGfNIu6rdlvtp
4sL9ONeQJcm/FRAElO1XznJkl/3Gvaov2FJKzXEH7se8rWPLXqkdyakC8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOE5DcMiF2ZZ5RqDdmS7m45Yr0zOMB8GA1UdIwQY
MBaAFHB3cH9ml4gmqHXrjS6zM77YVpZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iOWExYTAtNmFkYS00ZGRlLTk2NWIt
NDZmZjdjZTJjMTQwLzEvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iOWExYTAtNmFkYS00ZGRlLTk2NWItNDZmZjdjZTJjMTQw
LzEvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbuzBRrA
fBt1UAttdGbEiK14fMCrVPnrgNtZBkpuvO3EmvRiWefz0sDce2chMqepnhtWp7j8
VYzBqHC8EvGhenLom074LGvbyuYaWsH5959sVnJlf0NvibueKkb/0C1HGHDKZ+w/
084Y1EehrBcw6/dfRBdjwDitIcASVfcXIglBuFrzrLd1QkomMURsgf2R9dZ6Rjsw
9FUNV9woGlFedGTn93OHoMSqXFEq287LmfZjVMTcTHKmdC1NUK1Kw8I6GeD4yx+O
b3x1RahKOyg4HwUxLKNOa7CZQ+VbJch+Pi7Mody59Zg76+G8P3Gj3lS4X59kZL46
16TbzMHCBHt8xQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:17 2025 by rpki-client