Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
File: d88I7pookZe3EQCl8AsZUB2UwJM.mft (raw, json)
Hash identifier: bLSPJHWqPo3gycWOmQvMxgeVRe3GRxQiER/jnO6vCWk=
Subject key identifier: BF:58:7C:FB:FC:99:1D:09:00:C2:B5:6F:A7:97:E0:6C:10:6D:C0:7E
Authority key identifier: 77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
Certificate issuer: /CN=77cf08ee9a289197b71100a5f00b19501d94c093
Certificate serial: 0197B70EEC0F81E05F643D3C65FDC751BF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
Manifest number: 01BD
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: WecqEhgOSAbXZ3Im_QJkisWYch0.roa (hash: yP0d2DYh05Kav8sMdEFhk832MGjVh6BaMrRs10W9wIw=)
2: d88I7pookZe3EQCl8AsZUB2UwJM.crl (hash: q/4s+k1gfsqzOTGpr9QUhMNRdkK0sJv5TKVgyaWdSi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ec:0f:81:e0:5f:64:3d:3c:65:fd:c7:51:bf:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cf08ee9a289197b71100a5f00b19501d94c093
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=bf587cfbfc991d0900c2b56fa797e06c106dc07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:a2:62:5a:c2:8c:92:36:95:42:71:12:dc:
ec:aa:cb:72:85:cf:15:6b:11:df:84:04:28:c8:08:
3c:02:c3:e6:4b:1f:bd:49:5b:4b:26:f6:05:5f:3f:
66:8c:aa:7a:8b:28:1e:46:33:38:60:06:cb:3c:59:
5d:5f:8e:0b:28:99:19:60:0b:42:76:0d:b5:3b:bf:
f2:dc:a5:3a:22:fe:a2:30:39:db:71:a8:4d:2e:fb:
91:c1:20:1a:4c:22:5f:ef:12:98:b3:6e:14:ae:8a:
15:d4:b7:a8:03:1b:09:ab:b4:24:0b:54:31:5f:01:
1c:74:e8:24:b4:0b:d2:35:a5:5a:14:cc:20:f1:37:
f2:07:f3:1b:4d:1c:6e:2c:b7:84:bd:ec:99:8e:57:
a9:10:e9:35:2c:8d:77:e0:c3:52:cf:c9:e6:f6:0b:
ef:34:27:76:ac:8f:84:58:d0:e3:1d:34:a0:de:0d:
6a:4d:04:29:a0:c0:89:f8:9b:87:8d:4f:4a:e7:44:
97:6d:36:76:2b:8b:dc:f6:29:6e:ce:6f:22:bd:e0:
bd:94:6f:aa:24:a4:77:ae:b8:e1:11:ff:c8:30:62:
df:9d:1f:88:fd:9c:87:19:0d:64:3d:a9:81:87:5d:
9e:e1:23:2d:6d:8e:ee:e6:3f:31:af:a8:d1:83:b8:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:58:7C:FB:FC:99:1D:09:00:C2:B5:6F:A7:97:E0:6C:10:6D:C0:7E
X509v3 Authority Key Identifier:
keyid:77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e8:19:09:84:95:90:fb:b2:5c:82:e0:42:13:c4:20:3d:2f:
4d:2d:60:96:89:63:73:02:ac:16:1e:77:2e:09:ab:b4:76:80:
2e:c4:d9:f8:16:e4:46:e5:dc:45:e6:35:d4:d0:47:02:b4:35:
e5:dc:6a:39:8e:01:4b:a6:09:8b:5b:28:05:58:ba:bc:87:18:
79:e7:1f:38:d8:a5:ab:cf:06:91:09:d7:0c:99:a2:0c:52:f6:
58:6f:c4:bd:e1:c2:2f:f7:75:f7:08:37:60:2e:09:49:41:56:
71:a7:bc:fe:b4:fd:c0:e2:8d:06:b8:17:f2:52:fd:00:9d:c7:
ca:32:e4:31:2f:87:62:75:6f:7f:10:33:fb:07:63:5e:6b:ae:
21:14:52:27:ed:5e:ab:93:45:e9:4f:f7:66:40:fd:1c:09:ed:
c0:a8:73:31:fb:76:ac:02:2c:c5:96:ff:c4:67:4f:bc:e2:88:
58:06:2f:93:dd:94:b0:b1:c3:c5:5d:85:4b:b8:42:0b:75:f4:
64:bc:9f:2b:f1:7c:a6:14:cf:8a:11:35:8b:18:f1:0e:54:f3:
8c:e4:70:8d:8f:04:e1:63:f0:8e:eb:4a:3e:f8:33:71:ec:bd:
3a:53:ab:31:0d:70:c0:9e:c6:dd:d3:a2:71:3b:f1:fa:87:41:
69:03:56:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DuwPgeBfZD08Zf3HUb8UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3Y2YwOGVlOWEyODkxOTdiNzExMDBhNWYwMGIxOTUwMWQ5
NGMwOTMwHhcNMjUwNjI4MTUwMTM3WhcNMjUwNjI5MTUwMTM3WjAzMTEwLwYDVQQD
EyhiZjU4N2NmYmZjOTkxZDA5MDBjMmI1NmZhNzk3ZTA2YzEwNmRjMDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXuiYlrCjJI2lUJxEtzsqstyhc8V
axHfhAQoyAg8AsPmSx+9SVtLJvYFXz9mjKp6iygeRjM4YAbLPFldX44LKJkZYAtC
dg21O7/y3KU6Iv6iMDnbcahNLvuRwSAaTCJf7xKYs24UrooV1LeoAxsJq7QkC1Qx
XwEcdOgktAvSNaVaFMwg8TfyB/MbTRxuLLeEveyZjlepEOk1LI134MNSz8nm9gvv
NCd2rI+EWNDjHTSg3g1qTQQpoMCJ+JuHjU9K50SXbTZ2K4vc9iluzm8iveC9lG+q
JKR3rrjhEf/IMGLfnR+I/ZyHGQ1kPamBh12e4SMtbY7u5j8xr6jRg7ge9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9YfPv8mR0JAMK1b6eX4GwQbcB+MB8GA1UdIwQY
MBaAFHfPCO6aKJGXtxEApfALGVAdlMCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85Y2VlYTYtMzIxOC00YjM5LTk3YTct
Y2ZhZjZlZjg0OWQ2LzEvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85Y2VlYTYtMzIxOC00YjM5LTk3YTctY2ZhZjZlZjg0OWQ2
LzEvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVugZCYSV
kPuyXILgQhPEID0vTS1gloljcwKsFh53LgmrtHaALsTZ+BbkRuXcReY11NBHArQ1
5dxqOY4BS6YJi1soBVi6vIcYeecfONilq88GkQnXDJmiDFL2WG/EveHCL/d19wg3
YC4JSUFWcae8/rT9wOKNBrgX8lL9AJ3HyjLkMS+HYnVvfxAz+wdjXmuuIRRSJ+1e
q5NF6U/3ZkD9HAntwKhzMft2rAIsxZb/xGdPvOKIWAYvk92UsLHDxV2FS7hCC3X0
ZLyfK/F8phTPihE1ixjxDlTzjORwjY8E4WPwjutKPvgzcey9OlOrMQ1wwJ7G3dOi
cTvx+odBaQNWdg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:52 2025 by rpki-client