Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
File: 8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json)
Hash identifier: xQFJpn8x2jTNBj/oAsFWLq20BEM3J10jgFqZ1HqZCY8=
Subject key identifier: D6:A2:06:4E:CA:63:1D:5F:8A:FA:3C:AF:45:17:BB:2F:13:B9:24:55
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Certificate issuer: /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial: 0197B6A05E0D855237ADFD42EE2A7553D8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
Manifest number: 07F1
Signing time: Sat 28 Jun 2025 13:00:52 +0000
Manifest this update: Sat 28 Jun 2025 13:00:52 +0000
Manifest next update: Sun 29 Jun 2025 13:00:52 +0000
Files and hashes: 1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: 1cs80wCYSpKq4CmPCI8515i6R5oE0NsMWL/e5Z9xU0A=)
2: nTEco9mT1eULi7_9dIxqABgskB8.roa (hash: yHq4DLSIuBnBv74/JgQY/5bfqTpB6DfkqhhtGE6kqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5e:0d:85:52:37:ad:fd:42:ee:2a:75:53:d8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
Validity
Not Before: Jun 28 13:00:52 2025 GMT
Not After : Jun 29 13:00:52 2025 GMT
Subject: CN=d6a2064eca631d5f8afa3caf4517bb2f13b92455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:5d:80:6e:af:b8:b2:5a:f8:bf:e4:66:66:
8e:18:30:49:b5:15:4c:f6:93:9b:7a:93:ea:3c:ce:
2c:21:52:32:cb:a1:f3:9e:15:71:67:8e:8d:ca:cb:
cd:94:19:26:a3:df:89:4b:1a:f6:1c:87:43:cb:c1:
4a:bb:7a:93:37:c8:dc:e9:68:77:54:a1:b8:9a:8b:
07:2b:c2:49:11:dd:d8:a0:8c:47:1f:74:01:72:d0:
c7:29:13:98:27:71:b2:5d:82:66:bd:b8:55:21:87:
91:ff:c3:a1:78:bb:97:d7:c6:5f:ff:94:61:cd:2a:
89:5b:42:c1:4b:fa:36:98:6e:89:15:01:6c:c7:78:
d3:f3:68:a5:c5:ff:87:af:78:71:3e:f9:18:df:ed:
01:f3:f5:c2:b9:17:82:2a:00:3d:c8:de:96:6d:4c:
e8:af:1e:4e:76:17:f5:90:f1:53:b7:58:46:88:d7:
31:d0:38:ac:df:5d:c2:ea:6b:38:f9:5e:3d:87:e0:
a5:f0:78:f2:f0:9e:58:be:f8:f0:d7:fa:22:3a:0d:
5d:04:10:88:bc:77:94:c4:fe:f8:fd:87:dc:f8:a6:
eb:93:4e:eb:b9:a0:0c:fc:27:90:89:c5:a5:d8:8c:
e9:8d:f7:36:9e:12:94:ab:6a:50:65:f9:79:e5:61:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A2:06:4E:CA:63:1D:5F:8A:FA:3C:AF:45:17:BB:2F:13:B9:24:55
X509v3 Authority Key Identifier:
keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:12:ef:66:d9:4d:8d:fa:aa:09:15:2c:ff:66:b0:39:11:73:
cc:33:1d:75:d4:fa:41:69:60:1f:de:71:6f:cd:fe:59:a7:60:
40:cf:12:c4:72:03:e7:ab:d5:c6:ba:3e:02:af:64:ab:08:63:
e2:62:53:fa:ce:83:c9:91:3b:ff:f3:e3:08:dd:92:cf:c3:d3:
95:ee:95:2b:25:4a:b2:a7:c2:d1:87:ec:c0:ac:cb:76:80:77:
c1:ed:d7:a5:41:9f:c9:e4:b2:3a:7f:90:93:24:33:a3:3c:72:
54:e7:dd:33:b3:a4:58:0e:5e:d3:d8:65:2d:c1:b8:5c:9e:44:
4d:f0:d6:e2:71:77:b9:1e:ed:f3:7d:29:fc:3d:e2:c4:d3:f8:
ed:73:a9:95:8d:e8:99:f1:bc:23:0d:6f:69:e4:35:e2:f9:1b:
c2:d1:9a:80:a0:53:49:da:96:68:97:e0:b8:14:6c:79:2b:e1:
28:b2:da:b4:24:c8:ad:a6:d9:8f:c7:9b:27:84:38:f7:95:f2:
18:90:c9:a7:a9:fb:77:d1:90:ce:dd:1a:db:a1:5e:c5:85:60:
7c:2b:67:ea:53:9b:1f:87:b5:06:8b:8b:b0:e6:40:51:b1:e2:
f9:07:ef:61:d8:74:ee:bf:0b:0e:aa:ae:a6:96:5c:4d:f7:a9:
bb:27:64:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oF4NhVI3rf1C7ip1U9ivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOWE2OTk1ODAxODVkNjUxMDAxNWUxZDJjYTE5ZWZmNDM2
NDFlZGMwHhcNMjUwNjI4MTMwMDUyWhcNMjUwNjI5MTMwMDUyWjAzMTEwLwYDVQQD
EyhkNmEyMDY0ZWNhNjMxZDVmOGFmYTNjYWY0NTE3YmIyZjEzYjkyNDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwytdgG6vuLJa+L/kZmaOGDBJtRVM
9pObepPqPM4sIVIyy6HznhVxZ46NysvNlBkmo9+JSxr2HIdDy8FKu3qTN8jc6Wh3
VKG4mosHK8JJEd3YoIxHH3QBctDHKROYJ3GyXYJmvbhVIYeR/8OheLuX18Zf/5Rh
zSqJW0LBS/o2mG6JFQFsx3jT82ilxf+Hr3hxPvkY3+0B8/XCuReCKgA9yN6WbUzo
rx5Odhf1kPFTt1hGiNcx0Dis313C6ms4+V49h+Cl8Hjy8J5Yvvjw1/oiOg1dBBCI
vHeUxP74/Yfc+Kbrk07ruaAM/CeQicWl2Izpjfc2nhKUq2pQZfl55WH7IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaiBk7KYx1fivo8r0UXuy8TuSRVMB8GA1UdIwQY
MBaAFPKaaZWAGF1lEAFeHSyhnv9DZB7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMDhlNDEtZDYwOS00MWQ4LTg2YTIt
OGU2YTI5NWY4MDZmLzEvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lMDhlNDEtZDYwOS00MWQ4LTg2YTItOGU2YTI5NWY4MDZm
LzEvOHBwcGxZQVlYV1VRQVY0ZExLR2VfME5rSHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahLvZtlN
jfqqCRUs/2awORFzzDMdddT6QWlgH95xb83+WadgQM8SxHID56vVxro+Aq9kqwhj
4mJT+s6DyZE7//PjCN2Sz8PTle6VKyVKsqfC0YfswKzLdoB3we3XpUGfyeSyOn+Q
kyQzozxyVOfdM7OkWA5e09hlLcG4XJ5ETfDW4nF3uR7t830p/D3ixNP47XOplY3o
mfG8Iw1vaeQ14vkbwtGagKBTSdqWaJfguBRseSvhKLLatCTIrabZj8ebJ4Q495Xy
GJDJp6n7d9GQzt0a26FexYVgfCtn6lObH4e1BouLsOZAUbHi+QfvYdh07r8LDqqu
ppZcTfepuydkKA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:43 2025 by rpki-client