Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: V3e22t5dUj9OIevmcWTABzh0v+IAs/oqQp08rG7qAX8=
Subject key identifier: 7A:06:75:B4:9B:A5:4E:0F:17:96:C9:DB:94:EC:64:CA:01:18:76:E2
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 0197D1057F90CAC864DF3F8FAFFD72C7CAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 0C02
Signing time: Thu 03 Jul 2025 16:01:27 +0000
Manifest this update: Thu 03 Jul 2025 16:01:27 +0000
Manifest next update: Fri 04 Jul 2025 16:01:27 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: rtbT1XtRQPkj3AalBTnlIorwfvQMfhMtkRvtQae7Gk8=)
2: U0OBxV0NmzWdhOROB_4XE_nOuxo.roa (hash: R0oHniHcgRLjr+xP295YEa+yjJ7+h87sW92ahFuO7CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:05:7f:90:ca:c8:64:df:3f:8f:af:fd:72:c7:ca:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Jul 3 16:01:27 2025 GMT
Not After : Jul 4 16:01:27 2025 GMT
Subject: CN=7a0675b49ba54e0f1796c9db94ec64ca011876e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:00:6f:93:ba:8e:d7:9d:e0:dd:27:00:c3:
ac:c3:46:24:80:f8:c6:24:f2:19:8e:8c:e2:95:f3:
5f:51:4d:ca:66:2c:0f:14:8e:eb:a8:d4:d8:a9:aa:
b2:ae:93:da:14:be:b9:a7:ce:31:82:ec:b0:3f:1b:
22:c1:13:a7:e6:83:ea:91:28:d8:17:d2:7e:60:51:
4f:e5:19:d7:3c:3f:02:65:39:ba:3d:ef:e0:91:2a:
21:4c:19:dd:94:55:b7:af:10:fa:4f:4b:c3:b2:16:
ea:7e:cf:e4:6a:5e:17:29:ba:6c:67:f5:97:12:85:
bd:7f:d2:9d:96:73:5f:53:bf:60:5a:b4:01:0b:d1:
bb:6a:b3:a8:c0:34:03:be:77:1f:a3:ac:67:bd:36:
96:2d:91:cf:8b:34:0a:54:46:be:32:bd:fd:5f:24:
0a:59:fe:e6:82:41:73:9f:5b:d7:b6:67:58:66:7d:
a5:92:11:0c:1f:7e:ab:eb:36:16:44:cb:57:b3:23:
5a:00:25:e0:8d:73:23:40:c2:f3:82:10:5a:9f:dd:
33:91:41:da:15:04:6d:f8:9e:2d:b5:14:4e:72:15:
28:e7:2e:d0:86:4a:7d:13:ef:60:3a:e5:58:25:eb:
af:4d:59:a2:4a:35:7e:02:6e:bc:1e:bf:aa:47:16:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:06:75:B4:9B:A5:4E:0F:17:96:C9:DB:94:EC:64:CA:01:18:76:E2
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cb:4a:ad:4d:c3:4c:20:e6:4f:aa:a9:bd:71:6f:7c:d4:81:
1a:f4:e6:11:7d:39:d3:9c:e4:f7:04:25:0b:5e:bc:ba:ce:1b:
b9:79:50:e1:29:1c:a4:8b:5e:37:8f:4a:fb:ae:ec:1c:db:f2:
b3:81:88:98:14:9e:df:db:9f:fc:a8:0d:ef:80:bf:56:e8:c9:
f9:b1:81:40:28:54:28:ca:a1:8e:7a:ca:51:ab:c7:d0:80:a3:
08:30:b9:90:56:17:ad:59:31:87:88:8f:55:d4:ef:56:ec:77:
27:84:ed:55:43:a7:76:51:31:d1:48:e4:d9:9a:e5:f3:8f:ad:
81:bf:52:e5:43:3e:63:d3:79:36:ee:13:d5:71:d5:0b:d2:07:
81:04:cf:58:45:22:ce:64:e0:c4:22:16:81:f0:57:50:25:41:
98:a7:8b:b0:c2:f8:4e:57:87:d4:a9:3e:63:7b:f9:a9:c6:6e:
ab:8f:b6:6e:31:02:f8:3a:c2:c9:ef:83:58:6b:46:03:22:67:
81:9d:4b:54:ee:f1:88:0c:c6:1c:69:0c:7f:8f:1b:46:60:3a:
3a:87:10:cd:5b:6d:fd:46:83:0b:a1:cb:ca:91:1c:76:67:9a:
66:9f:87:24:2b:dd:4f:a0:f7:ca:cf:62:27:18:fa:6f:88:b7:
63:97:e1:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfRBX+Qyshk3z+Pr/1yx8rpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDRhYWFjN2YyZWJiMjk4MWMyNDc2M2ViM2Q2MDQ1ZWZi
ZDZmMDYwHhcNMjUwNzAzMTYwMTI3WhcNMjUwNzA0MTYwMTI3WjAzMTEwLwYDVQQD
Eyg3YTA2NzViNDliYTU0ZTBmMTc5NmM5ZGI5NGVjNjRjYTAxMTg3NmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz00Ab5O6jted4N0nAMOsw0YkgPjG
JPIZjozilfNfUU3KZiwPFI7rqNTYqaqyrpPaFL65p84xguywPxsiwROn5oPqkSjY
F9J+YFFP5RnXPD8CZTm6Pe/gkSohTBndlFW3rxD6T0vDshbqfs/kal4XKbpsZ/WX
EoW9f9KdlnNfU79gWrQBC9G7arOowDQDvncfo6xnvTaWLZHPizQKVEa+Mr39XyQK
Wf7mgkFzn1vXtmdYZn2lkhEMH36r6zYWRMtXsyNaACXgjXMjQMLzghBan90zkUHa
FQRt+J4ttRROchUo5y7Qhkp9E+9gOuVYJeuvTVmiSjV+Am68Hr+qRxYm9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoGdbSbpU4PF5bJ25TsZMoBGHbiMB8GA1UdIwQY
MBaAFAlEqqx/LrspgcJHY+s9YEXvvW8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUt
NjZjZDAxOTYxZTQ2LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS80MzQ4NDktODlkYS00M2FlLWIyYmUtNjZjZDAxOTYxZTQ2
LzEvQ1VTcXJIOHV1eW1Cd2tkajZ6MWdSZS05YndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8tKrU3D
TCDmT6qpvXFvfNSBGvTmEX0505zk9wQlC168us4buXlQ4SkcpIteN49K+67sHNvy
s4GImBSe39uf/KgN74C/VujJ+bGBQChUKMqhjnrKUavH0ICjCDC5kFYXrVkxh4iP
VdTvVux3J4TtVUOndlEx0Ujk2Zrl84+tgb9S5UM+Y9N5Nu4T1XHVC9IHgQTPWEUi
zmTgxCIWgfBXUCVBmKeLsML4TleH1Kk+Y3v5qcZuq4+2bjEC+DrCye+DWGtGAyJn
gZ1LVO7xiAzGHGkMf48bRmA6OocQzVtt/UaDC6HLypEcdmeaZp+HJCvdT6D3ys9i
Jxj6b4i3Y5fhpA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 18:18:04 2025 by rpki-client