Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: gZDwxNsiH42msdw0zslMHQaoY4c7J3m1MyEtJ8SdEv4=
Subject key identifier: F8:22:06:8F:75:EF:12:EA:10:23:B7:5B:A4:06:0D:15:F6:A1:74:9D
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 0198D47265660FBF43FF20724815FB7EA8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 1469
Signing time: Sat 23 Aug 2025 01:02:03 +0000
Manifest this update: Sat 23 Aug 2025 01:02:03 +0000
Manifest next update: Sun 24 Aug 2025 01:02:03 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: j1naMfGnX/STBo4OKui2Fuk2J8cpg5KLcTg+ceiMrUU=)
2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=)
3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:65:66:0f:bf:43:ff:20:72:48:15:fb:7e:a8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Aug 23 01:02:03 2025 GMT
Not After : Aug 24 01:02:03 2025 GMT
Subject: CN=f822068f75ef12ea1023b75ba4060d15f6a1749d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:3d:02:24:a0:f7:44:fa:fe:06:8b:41:84:
96:db:8e:18:e0:e4:56:dd:72:d0:8d:70:88:4a:9e:
70:3d:07:b0:b8:d7:cb:51:34:cb:6f:2d:38:47:18:
23:72:47:08:8b:3b:fe:cb:f0:91:3d:34:f8:df:ee:
f0:41:c6:ac:5c:83:7b:f2:05:5d:63:50:0c:d9:71:
3a:98:58:57:66:f8:04:fc:10:3f:c9:2c:45:c0:44:
1b:65:a2:a3:cb:fe:b3:77:d4:61:ff:88:7e:c4:98:
33:ca:15:06:82:ae:b3:d2:cd:9b:8d:da:b4:83:f9:
9f:d0:4e:16:59:f1:0d:b0:a1:78:b8:ca:83:eb:b2:
52:69:ef:fb:e7:31:2d:8f:e8:40:f7:59:26:0f:23:
a7:83:6c:eb:3e:7d:41:10:3a:1d:53:26:5c:3e:41:
45:63:17:61:ca:1c:51:35:40:99:36:3b:b0:50:cb:
aa:e5:e9:fe:64:92:53:6d:1c:7e:c2:9e:c1:a8:a0:
1f:f1:f0:b6:87:25:78:84:cd:e5:59:8f:d1:8f:9b:
e6:69:c1:8f:ae:74:7b:95:d2:07:02:ac:19:f7:57:
6c:37:f3:59:72:87:ad:2f:32:a4:71:24:19:1d:f8:
1a:49:ca:f3:5c:41:70:2f:99:64:d3:f5:f6:1d:0a:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:22:06:8F:75:EF:12:EA:10:23:B7:5B:A4:06:0D:15:F6:A1:74:9D
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f5:dd:91:04:ef:54:3b:16:d9:29:49:ca:de:34:f9:91:9b:
48:0e:00:56:fb:d6:ff:88:e8:52:0e:1b:5a:e7:c4:07:5a:06:
23:85:91:60:b1:6e:0d:3a:a3:7b:76:ca:b6:29:5f:36:8b:9c:
e9:40:55:a3:6c:af:48:28:29:3a:77:04:61:19:01:3a:03:02:
16:a6:a2:f6:88:41:11:52:16:32:86:36:9f:ff:8b:c2:ee:02:
f6:60:91:90:40:ad:ae:16:b7:8e:ce:58:a3:6f:a9:d2:9d:40:
02:c9:cf:18:b8:71:d4:11:05:40:8d:74:e7:37:96:0a:a6:db:
88:b2:91:ae:d2:83:b4:ba:a4:40:a3:e4:26:96:4e:f2:29:33:
71:90:d3:60:d6:78:61:d8:8c:aa:d8:e1:f9:a9:1e:24:05:f8:
3a:3c:40:8d:37:84:db:23:3b:dd:39:6c:b9:55:09:8e:8e:9f:
cf:cb:ce:61:b0:fe:3a:e2:52:cb:49:11:ef:84:b0:1d:ec:20:
53:b1:af:7b:fd:39:53:a5:3d:76:34:08:39:01:c2:19:5f:47:
0b:d9:5d:b1:e6:b8:03:44:32:ed:d9:9c:cf:f1:6f:db:ca:8c:
21:45:68:5b:fd:0b:8a:50:dc:bd:22:ff:f0:4f:87:1f:13:ce:
11:98:6f:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcmVmD79D/yBySBX7fqjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYTdjM2JlMDZiYzQ1YzNmMTJiOTBiMTg1Mjc4YWQ0ZWM5
MTk3NTYwHhcNMjUwODIzMDEwMjAzWhcNMjUwODI0MDEwMjAzWjAzMTEwLwYDVQQD
EyhmODIyMDY4Zjc1ZWYxMmVhMTAyM2I3NWJhNDA2MGQxNWY2YTE3NDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmY9AiSg90T6/gaLQYSW244Y4ORW
3XLQjXCISp5wPQewuNfLUTTLby04RxgjckcIizv+y/CRPTT43+7wQcasXIN78gVd
Y1AM2XE6mFhXZvgE/BA/ySxFwEQbZaKjy/6zd9Rh/4h+xJgzyhUGgq6z0s2bjdq0
g/mf0E4WWfENsKF4uMqD67JSae/75zEtj+hA91kmDyOng2zrPn1BEDodUyZcPkFF
YxdhyhxRNUCZNjuwUMuq5en+ZJJTbRx+wp7BqKAf8fC2hyV4hM3lWY/Rj5vmacGP
rnR7ldIHAqwZ91dsN/NZcoetLzKkcSQZHfgaScrzXEFwL5lk0/X2HQrWHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgiBo917xLqECO3W6QGDRX2oXSdMB8GA1UdIwQY
MBaAFNOnw74GvEXD8SuQsYUnitTskZdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEt
OGFhNTBkNjcwMzdjLzEvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEtOGFhNTBkNjcwMzdj
LzEvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfXdkQTv
VDsW2SlJyt40+ZGbSA4AVvvW/4joUg4bWufEB1oGI4WRYLFuDTqje3bKtilfNouc
6UBVo2yvSCgpOncEYRkBOgMCFqai9ohBEVIWMoY2n/+Lwu4C9mCRkECtrha3js5Y
o2+p0p1AAsnPGLhx1BEFQI105zeWCqbbiLKRrtKDtLqkQKPkJpZO8ikzcZDTYNZ4
YdiMqtjh+akeJAX4OjxAjTeE2yM73TlsuVUJjo6fz8vOYbD+OuJSy0kR74SwHewg
U7Gve/05U6U9djQIOQHCGV9HC9ldsea4A0Qy7dmcz/Fv28qMIUVoW/0LilDcvSL/
8E+HHxPOEZhvTw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:25 2025 by rpki-client