Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
File: V8dqgOwpEqVok1y1e2plDwPf2NI.mft (raw, json)
Hash identifier: A+Redvc1joH648ZPrYdv+pRYAEDtSFahj1PuQziBGuU=
Subject key identifier: 7C:D4:6A:57:31:AB:73:BE:AA:A2:1F:47:3E:36:FB:62:18:3D:7B:45
Authority key identifier: 57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
Certificate issuer: /CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Certificate serial: 0197B6D7B58338856E806A731CA59932B8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
Manifest number: 0BE1
Signing time: Sat 28 Jun 2025 14:01:19 +0000
Manifest this update: Sat 28 Jun 2025 14:01:19 +0000
Manifest next update: Sun 29 Jun 2025 14:01:19 +0000
Files and hashes: 1: V8dqgOwpEqVok1y1e2plDwPf2NI.crl (hash: mQti2ogNiMB7m2Pf3JLJtkJiJD/aVqCDC1v4tkaqVoQ=)
2: c0WcDmEa-I3e6oejtEWp5xBEKhk.roa (hash: gv5nn6HuxLobRhPQtfW9QLB/XRSSApZbiTBp/n9p8eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b5:83:38:85:6e:80:6a:73:1c:a5:99:32:b8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Validity
Not Before: Jun 28 14:01:19 2025 GMT
Not After : Jun 29 14:01:19 2025 GMT
Subject: CN=7cd46a5731ab73beaaa21f473e36fb62183d7b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:2f:e1:fc:46:de:bf:e5:1a:c2:08:36:94:
c8:d3:65:86:a4:88:cb:fc:a5:20:a2:47:29:0c:fc:
a1:33:92:11:a0:3f:97:0d:6e:57:ca:53:29:a1:1f:
b5:57:de:5e:4b:5d:b0:43:b4:c0:16:34:ce:43:74:
84:85:ca:ed:e0:46:dc:03:ae:ca:ba:d5:4e:97:07:
c7:37:4f:f8:ff:d8:d0:42:42:ee:d5:af:73:17:a8:
5a:27:df:8a:8c:5b:93:3f:45:47:59:fe:76:04:11:
8d:72:63:e6:11:38:fe:21:5e:e9:cb:ab:ea:17:4c:
e4:77:11:63:49:8b:c3:82:b7:52:d8:a6:74:f7:98:
3f:b7:af:93:c1:c0:19:1b:8f:2c:ce:ca:5c:f6:26:
a8:0e:19:c4:7d:32:13:6e:b0:0f:17:25:61:8d:b2:
e4:01:c0:87:19:0a:31:bd:93:ed:87:fd:1f:68:ee:
e9:c4:3b:9d:e1:c3:2e:fb:1d:b3:a6:05:4e:45:74:
d1:b8:f3:a4:2b:9a:68:e7:15:e5:b1:93:51:03:ad:
5e:e3:1c:d7:28:59:31:de:46:26:12:ba:e4:7b:ae:
04:6a:63:2b:cb:60:58:ef:91:55:72:b4:31:2d:3f:
bf:81:69:e3:d0:b8:91:f6:cc:a5:f4:16:78:5c:db:
b9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D4:6A:57:31:AB:73:BE:AA:A2:1F:47:3E:36:FB:62:18:3D:7B:45
X509v3 Authority Key Identifier:
keyid:57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9a:4a:75:e3:cd:6a:c6:3a:fd:15:95:6e:98:f9:74:ed:1a:
39:ae:b3:3e:ab:e4:06:42:e9:a0:db:fb:a5:32:05:03:ce:19:
80:de:5b:e2:dd:65:a0:20:ae:21:a8:e0:79:b6:17:13:57:b0:
a0:11:50:0c:c7:92:ad:bf:e7:7f:6c:92:36:f4:d7:d2:2f:44:
63:64:6c:03:c3:7e:db:c3:47:d9:6d:b2:41:de:bf:29:c2:ce:
5c:8b:2c:d7:7c:f3:a3:71:ba:d9:c7:f5:1a:94:5f:f9:ac:f9:
fd:21:81:ed:aa:c3:d4:33:86:ae:09:04:fe:5a:25:e7:8a:08:
24:d3:51:51:6d:69:c1:d1:49:66:4c:8a:cd:8c:7d:3f:11:8a:
19:54:19:da:3d:61:f1:87:db:bf:a5:2e:38:2e:8e:e9:da:3f:
5c:dd:ce:74:11:02:58:0f:1c:f3:76:42:f9:6e:ad:db:66:ef:
45:08:37:f2:7e:d8:c1:b5:1e:8b:15:23:a5:cd:75:66:85:5f:
2b:f1:77:c4:59:b1:d9:6d:a5:c2:59:2d:90:8d:c4:80:73:2f:
6f:15:49:9a:a6:38:52:29:f1:48:e5:d9:4e:e0:c2:5a:ff:f7:
a9:02:ef:a7:bf:80:9c:81:0c:29:98:a7:7f:23:7a:ff:bd:62:
ed:95:65:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe217WDOIVugGpzHKWZMrjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3Yzc2YTgwZWMyOTEyYTU2ODkzNWNiNTdiNmE2NTBmMDNk
ZmQ4ZDIwHhcNMjUwNjI4MTQwMTE5WhcNMjUwNjI5MTQwMTE5WjAzMTEwLwYDVQQD
Eyg3Y2Q0NmE1NzMxYWI3M2JlYWFhMjFmNDczZTM2ZmI2MjE4M2Q3YjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGUv4fxG3r/lGsIINpTI02WGpIjL
/KUgokcpDPyhM5IRoD+XDW5XylMpoR+1V95eS12wQ7TAFjTOQ3SEhcrt4EbcA67K
utVOlwfHN0/4/9jQQkLu1a9zF6haJ9+KjFuTP0VHWf52BBGNcmPmETj+IV7py6vq
F0zkdxFjSYvDgrdS2KZ095g/t6+TwcAZG48szspc9iaoDhnEfTITbrAPFyVhjbLk
AcCHGQoxvZPth/0faO7pxDud4cMu+x2zpgVORXTRuPOkK5po5xXlsZNRA61e4xzX
KFkx3kYmErrke64EamMry2BY75FVcrQxLT+/gWnj0LiR9syl9BZ4XNu5zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzUalcxq3O+qqIfRz42+2IYPXtFMB8GA1UdIwQY
MBaAFFfHaoDsKRKlaJNctXtqZQ8D39jSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhkcWdPd3BFcVZvazF5MWUycGxEd1BmMk5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80MGU1ZjQtZDA1Ni00NGYyLTg5OWUt
MjI4NmI4OWU3YTdlLzEvVjhkcWdPd3BFcVZvazF5MWUycGxEd1BmMk5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS80MGU1ZjQtZDA1Ni00NGYyLTg5OWUtMjI4NmI4OWU3YTdl
LzEvVjhkcWdPd3BFcVZvazF5MWUycGxEd1BmMk5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZpKdePN
asY6/RWVbpj5dO0aOa6zPqvkBkLpoNv7pTIFA84ZgN5b4t1loCCuIajgebYXE1ew
oBFQDMeSrb/nf2ySNvTX0i9EY2RsA8N+28NH2W2yQd6/KcLOXIss13zzo3G62cf1
GpRf+az5/SGB7arD1DOGrgkE/lol54oIJNNRUW1pwdFJZkyKzYx9PxGKGVQZ2j1h
8Yfbv6UuOC6O6do/XN3OdBECWA8c83ZC+W6t22bvRQg38n7YwbUeixUjpc11ZoVf
K/F3xFmx2W2lwlktkI3EgHMvbxVJmqY4UinxSOXZTuDCWv/3qQLvp7+AnIEMKZin
fyN6/71i7ZVlWw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:09 2025 by rpki-client