Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier: 8n1UYTMFj3JZTmXyF7qMbiNZvzBCGFnLmPNhjF6AnJI=
Subject key identifier: C1:86:97:AE:E8:1C:E2:C6:D4:65:6C:B9:E8:D4:00:5A:97:9F:D4:4F
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer: /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial: 0198D5F1972785189CA0770AEFB2D76FB90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number: 0601
Signing time: Sat 23 Aug 2025 08:00:36 +0000
Manifest this update: Sat 23 Aug 2025 08:00:36 +0000
Manifest next update: Sun 24 Aug 2025 08:00:36 +0000
Files and hashes: 1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: Rwg38QubP6QxuTyTGm4AJ93ySZ3WwBuCdjKFh6PIzSI=)
2: B30qKHB4pvW_uIxt5ksptRBP4PQ.roa (hash: Y9HutrF2XOKiS4omLhBmOgiWSK360mai1Yz5rvj0XF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:97:27:85:18:9c:a0:77:0a:ef:b2:d7:6f:b9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
Validity
Not Before: Aug 23 08:00:36 2025 GMT
Not After : Aug 24 08:00:36 2025 GMT
Subject: CN=c18697aee81ce2c6d4656cb9e8d4005a979fd44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:a5:6c:c0:fd:5c:d9:77:79:a7:04:dd:68:
52:f5:6d:fc:10:f5:82:5b:50:31:12:ac:93:35:4d:
51:de:2c:13:82:46:3f:3b:01:d1:eb:1e:dd:44:1a:
ee:f8:be:fe:2e:74:00:af:b9:0a:c7:0d:3e:bd:9a:
d0:80:c4:1a:e9:aa:f5:31:55:62:07:ee:b3:e5:d8:
71:e8:4a:6c:88:3a:1c:6c:a9:c4:98:da:93:33:95:
f6:42:e9:68:9c:50:5b:cf:75:3f:6e:72:28:b4:21:
f9:e6:1a:a8:a2:96:b5:92:b1:1a:92:fc:33:af:db:
d4:4a:ff:da:9d:59:06:f1:24:da:97:b4:7c:fc:eb:
af:ec:a9:59:73:44:7f:f7:f6:f7:56:f3:a5:64:62:
26:4c:ee:60:7d:97:d6:57:da:f9:6b:14:11:b4:a3:
7d:aa:9b:11:c4:3e:14:43:8a:1a:82:6f:75:82:d4:
f6:ed:bd:fc:73:72:2b:62:67:ba:86:74:b4:b1:8d:
c0:1b:eb:c3:21:59:26:bf:aa:46:1e:fd:a0:9b:3f:
10:ac:0b:e5:b9:b4:87:87:d9:b5:86:82:df:6f:69:
11:7e:fc:0f:e0:27:6a:c3:0d:8b:43:ab:53:03:37:
2c:23:cd:bc:32:83:17:14:a8:30:b3:58:99:a2:89:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:86:97:AE:E8:1C:E2:C6:D4:65:6C:B9:E8:D4:00:5A:97:9F:D4:4F
X509v3 Authority Key Identifier:
keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9b:9c:08:49:2e:a1:a4:1a:ea:8f:cc:05:40:26:6f:24:fe:
19:2a:65:1d:ce:f5:05:9e:92:83:23:91:d7:e5:ae:cc:e0:63:
30:45:b0:0e:07:55:79:c7:88:94:c7:4e:25:01:69:26:12:a1:
40:ef:b6:9e:12:ed:fc:ee:41:7c:91:a1:74:d8:2b:d7:44:25:
7c:89:ce:ec:14:72:86:52:7d:11:65:6f:ea:61:cb:ef:84:89:
3e:a2:d3:1d:2e:c1:73:69:74:32:eb:40:0a:37:56:41:9f:66:
d1:e7:68:e9:15:ea:04:61:85:97:db:cc:60:75:12:42:da:10:
b9:ab:f9:a9:48:fa:68:9d:32:81:c5:35:90:b1:8a:95:30:5e:
25:9e:1e:16:8f:4a:98:4b:42:75:10:c0:b8:6e:71:53:1f:e6:
14:5f:18:42:81:6d:15:6d:24:e9:24:2e:4d:8f:a8:1c:65:0b:
48:89:7c:0a:4a:35:03:7f:61:e0:ea:e5:40:95:ac:69:6e:9a:
4d:d0:bb:17:c0:99:00:61:fa:b6:ac:57:c6:cf:f3:d7:33:e6:
de:b5:2d:88:29:70:cc:34:34:cf:55:d0:31:27:9a:c5:93:3d:
0f:88:53:58:95:6d:76:eb:ca:79:33:cc:b9:36:17:78:05:ea:
8d:cb:9b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8ZcnhRicoHcK77LXb7kOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOWVmMjA5M2RhMTVlZWM5MGVmYjgzN2I5NTAxNjQ2Njlm
NjE5OGIwHhcNMjUwODIzMDgwMDM2WhcNMjUwODI0MDgwMDM2WjAzMTEwLwYDVQQD
EyhjMTg2OTdhZWU4MWNlMmM2ZDQ2NTZjYjllOGQ0MDA1YTk3OWZkNDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1ylbMD9XNl3eacE3WhS9W38EPWC
W1AxEqyTNU1R3iwTgkY/OwHR6x7dRBru+L7+LnQAr7kKxw0+vZrQgMQa6ar1MVVi
B+6z5dhx6EpsiDocbKnEmNqTM5X2QulonFBbz3U/bnIotCH55hqoopa1krEakvwz
r9vUSv/anVkG8STal7R8/Ouv7KlZc0R/9/b3VvOlZGImTO5gfZfWV9r5axQRtKN9
qpsRxD4UQ4oagm91gtT27b38c3IrYme6hnS0sY3AG+vDIVkmv6pGHv2gmz8QrAvl
ubSHh9m1hoLfb2kRfvwP4Cdqww2LQ6tTAzcsI828MoMXFKgws1iZoolx+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGGl67oHOLG1GVsuejUAFqXn9RPMB8GA1UdIwQY
MBaAFNCe8gk9oV7skO+4N7lQFkZp9hmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOWVjMmItZDI2Yy00OGE2LWE1ODgt
NmIyZTY4ZGRlMWUzLzEvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iOWVjMmItZDI2Yy00OGE2LWE1ODgtNmIyZTY4ZGRlMWUz
LzEvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJucCEku
oaQa6o/MBUAmbyT+GSplHc71BZ6SgyOR1+WuzOBjMEWwDgdVeceIlMdOJQFpJhKh
QO+2nhLt/O5BfJGhdNgr10QlfInO7BRyhlJ9EWVv6mHL74SJPqLTHS7Bc2l0MutA
CjdWQZ9m0edo6RXqBGGFl9vMYHUSQtoQuav5qUj6aJ0ygcU1kLGKlTBeJZ4eFo9K
mEtCdRDAuG5xUx/mFF8YQoFtFW0k6SQuTY+oHGULSIl8Cko1A39h4OrlQJWsaW6a
TdC7F8CZAGH6tqxXxs/z1zPm3rUtiClwzDQ0z1XQMSeaxZM9D4hTWJVtduvKeTPM
uTYXeAXqjcubzw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:03:09 2025 by rpki-client