Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: ve104m2vEf+eG/dNq/mfBxKezszLnbzf5PAvlDkYd1Y=
Subject key identifier: 60:D9:47:10:B1:50:94:16:AA:5A:0A:F1:A0:15:AF:D1:E8:4B:21:33
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 0198D5F11EFFD0EC922D550D322590E45E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 0CCD
Signing time: Sat 23 Aug 2025 08:00:05 +0000
Manifest this update: Sat 23 Aug 2025 08:00:05 +0000
Manifest next update: Sun 24 Aug 2025 08:00:05 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: bBBh9NtWDU2x20ZmeE+iHoN/UCQKNQC7XtqCMy0/WYY=)
2: cmLjyeJCay-rIpV13cL4nS3umqA.roa (hash: zv80BsoFgYMaUhk2eqxE9kG1WrpCEraiiqsDzPaa4r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1e:ff:d0:ec:92:2d:55:0d:32:25:90:e4:5e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Aug 23 08:00:05 2025 GMT
Not After : Aug 24 08:00:05 2025 GMT
Subject: CN=60d94710b1509416aa5a0af1a015afd1e84b2133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0e:62:67:19:3b:99:02:da:d4:97:3e:9e:df:
7e:07:46:2a:60:96:9d:27:07:a3:5f:ce:12:d5:27:
f3:40:a6:e2:d7:71:a4:f1:08:20:b3:32:6f:13:4c:
d8:b3:eb:ed:6e:6e:9c:22:d2:3a:c5:0d:b9:d0:07:
d3:41:3d:6c:dd:27:07:be:f4:dc:f1:26:f3:0b:10:
cf:4d:2e:10:06:b0:6f:34:12:63:05:f1:ca:15:eb:
e5:d6:8d:99:df:00:47:7d:d1:9c:f6:23:07:49:f4:
c4:8a:69:df:01:46:f6:83:71:f0:3a:e8:a3:26:87:
0d:48:65:19:c7:9f:3a:d0:1f:57:db:b5:29:bc:68:
3d:91:6c:66:ba:36:23:98:d7:ce:89:07:3a:d8:1a:
72:b9:75:eb:88:e5:06:cb:51:9f:c2:bf:8e:2c:37:
b3:5c:f6:d0:45:2e:b4:0d:3a:d2:32:2e:58:dc:40:
fb:94:71:d0:a4:d2:4f:a0:33:2a:03:0f:3b:5f:15:
c1:70:c3:ac:16:ec:43:01:88:c4:5f:9c:bb:33:29:
82:ad:db:84:ef:94:5a:27:3a:10:6e:21:57:0f:7b:
a9:03:ab:e5:7c:57:27:64:e2:f1:59:70:53:78:2d:
0b:e1:de:a9:3c:97:d4:13:02:c5:07:76:35:bb:ae:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D9:47:10:B1:50:94:16:AA:5A:0A:F1:A0:15:AF:D1:E8:4B:21:33
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:85:4b:13:76:a9:09:f7:a4:11:f1:6b:c5:42:30:1c:cb:90:
1e:97:43:39:58:88:d6:10:c2:2f:35:52:e1:ca:3e:0b:44:b1:
3a:e1:2a:1e:b4:09:cf:87:29:fe:25:40:1b:b0:76:91:4b:02:
45:c0:2d:eb:36:92:48:bf:ce:a0:31:1f:68:8d:3e:d6:c2:b6:
09:05:c6:be:71:95:ac:0a:90:98:21:19:b6:ae:ca:dc:6a:80:
20:45:cc:e1:6c:5f:99:3c:ed:0a:b6:6b:b0:f8:7c:02:b1:e6:
c6:10:2e:26:b0:fb:33:52:19:cb:22:50:48:72:03:3d:01:57:
6e:b6:75:b7:bd:d2:7d:82:52:6d:0c:2e:dc:06:53:02:e9:88:
9a:79:72:bb:0a:f1:70:b4:f3:cd:9c:2d:39:3e:1a:f5:a6:a0:
3f:9e:eb:19:f2:75:68:16:e6:52:15:a5:50:9e:0a:52:4b:2f:
c1:0b:73:37:9b:fe:53:42:ec:c9:63:5c:f0:2f:15:24:ed:89:
75:0b:17:2b:28:43:10:0d:4d:3d:87:5e:4e:29:96:41:54:a7:
77:63:2b:8b:ae:9c:35:b0:20:bf:e3:c8:f5:ea:fe:69:f5:a4:
29:bc:cd:5b:36:fd:67:fb:f3:93:cf:59:10:e5:48:e5:e6:e7:
27:ad:7f:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8R7/0OySLVUNMiWQ5F42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OTc3YWY1ODBjODUwY2M4YmY5MDY0OWY5YmRhOGE2YTQ4
YmYzOTYwHhcNMjUwODIzMDgwMDA1WhcNMjUwODI0MDgwMDA1WjAzMTEwLwYDVQQD
Eyg2MGQ5NDcxMGIxNTA5NDE2YWE1YTBhZjFhMDE1YWZkMWU4NGIyMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g5iZxk7mQLa1Jc+nt9+B0YqYJad
JwejX84S1SfzQKbi13Gk8QggszJvE0zYs+vtbm6cItI6xQ250AfTQT1s3ScHvvTc
8SbzCxDPTS4QBrBvNBJjBfHKFevl1o2Z3wBHfdGc9iMHSfTEimnfAUb2g3HwOuij
JocNSGUZx5860B9X27UpvGg9kWxmujYjmNfOiQc62BpyuXXriOUGy1Gfwr+OLDez
XPbQRS60DTrSMi5Y3ED7lHHQpNJPoDMqAw87XxXBcMOsFuxDAYjEX5y7MymCrduE
75RaJzoQbiFXD3upA6vlfFcnZOLxWXBTeC0L4d6pPJfUEwLFB3Y1u65EpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDZRxCxUJQWqloK8aAVr9HoSyEzMB8GA1UdIwQY
MBaAFPeXevWAyFDMi/kGSfm9qKaki/OWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iMzYxZWYtNWY2OS00YmNiLTk4M2Mt
MjExMjgwMjcyNTVkLzEvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iMzYxZWYtNWY2OS00YmNiLTk4M2MtMjExMjgwMjcyNTVk
LzEvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYVLE3ap
CfekEfFrxUIwHMuQHpdDOViI1hDCLzVS4co+C0SxOuEqHrQJz4cp/iVAG7B2kUsC
RcAt6zaSSL/OoDEfaI0+1sK2CQXGvnGVrAqQmCEZtq7K3GqAIEXM4WxfmTztCrZr
sPh8ArHmxhAuJrD7M1IZyyJQSHIDPQFXbrZ1t73SfYJSbQwu3AZTAumImnlyuwrx
cLTzzZwtOT4a9aagP57rGfJ1aBbmUhWlUJ4KUksvwQtzN5v+U0LsyWNc8C8VJO2J
dQsXKyhDEA1NPYdeTimWQVSnd2Mri66cNbAgv+PI9er+afWkKbzNWzb9Z/vzk89Z
EOVI5ebnJ61/Dg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:36:28 2025 by rpki-client