Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
File: rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft (raw, json)
Hash identifier: AgTbjdLvK69A9GiQtdJfRa04Q14WsR8CmZY70g/BSlc=
Subject key identifier: AC:E2:71:10:01:E2:6E:61:F9:AC:08:23:92:99:88:53:35:75:C9:E8
Authority key identifier: AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
Certificate issuer: /CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Certificate serial: 0197BA7D35677E53411E2EEFE65CD3142EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
Manifest number: 05A6
Signing time: Sun 29 Jun 2025 07:00:56 +0000
Manifest this update: Sun 29 Jun 2025 07:00:56 +0000
Manifest next update: Mon 30 Jun 2025 07:00:56 +0000
Files and hashes: 1: rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl (hash: L6aJ2MtAKHiXu0tOe0ju0N3Z+pcR+E7GmOgUqOc24aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:35:67:7e:53:41:1e:2e:ef:e6:5c:d3:14:2e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Validity
Not Before: Jun 29 07:00:56 2025 GMT
Not After : Jun 30 07:00:56 2025 GMT
Subject: CN=ace2711001e26e61f9ac0823929988533575c9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:8b:8a:66:3c:d4:90:a6:e2:cd:8f:66:60:
a1:c5:d4:55:f4:00:8e:84:42:9c:98:4e:69:ab:1a:
d4:dc:64:f3:58:68:d7:2e:6f:f4:7a:fb:60:03:86:
85:fc:52:58:3f:9f:59:32:f5:1d:f3:63:3c:b5:f8:
74:5b:04:95:03:f0:80:59:20:ce:b0:78:ce:80:bf:
79:65:2a:36:ef:c3:81:44:3e:a9:59:7c:06:d5:66:
c2:54:38:5d:02:e8:bb:be:f7:01:7b:c9:08:40:a2:
49:c8:40:64:0f:d9:79:4b:36:be:36:74:fd:b4:68:
cb:85:45:a2:a0:a0:dd:c7:ca:5a:2e:f5:e5:1d:f2:
94:aa:1c:81:25:a1:2c:58:bd:19:ce:37:0f:aa:bc:
03:37:81:1d:79:29:4b:d9:7c:a1:83:78:e4:64:7a:
4d:8c:fe:f0:19:8f:11:d3:34:26:c6:56:b2:5e:7e:
42:1a:02:8d:3a:60:fd:21:90:3a:80:cb:f3:04:e9:
b8:ca:e3:2e:56:ef:02:34:d6:ec:96:e5:d3:b1:7d:
27:85:b6:9d:85:6b:23:e2:23:8e:20:2d:ce:ab:73:
73:f8:a4:9c:e5:51:0a:da:c0:9b:6b:54:b4:9c:7a:
aa:b6:70:cb:9e:14:35:8f:d6:97:64:7d:5e:9e:3b:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E2:71:10:01:E2:6E:61:F9:AC:08:23:92:99:88:53:35:75:C9:E8
X509v3 Authority Key Identifier:
keyid:AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4c:e5:3b:77:03:21:22:9d:57:34:86:fa:15:41:1d:63:5b:
51:fc:a5:2a:73:af:73:79:01:e8:1e:2c:b5:c6:7e:af:73:3a:
47:76:b6:51:85:d5:75:a8:a8:6a:09:2b:6c:3e:53:14:80:01:
fe:3a:ee:79:d8:7c:82:2e:35:7a:d6:df:f7:78:91:be:14:84:
48:4e:e3:a8:82:ca:8f:3a:35:67:24:d4:2d:d1:04:2e:cc:b6:
32:1b:36:7e:4e:8c:fa:5e:7d:c5:da:5a:e1:63:e3:1c:d9:64:
ac:00:36:31:e5:4b:2a:ff:a3:00:33:a0:fa:dd:4a:89:21:6e:
11:27:2e:7f:9a:ea:6c:72:b2:25:35:2a:77:50:56:3f:55:1e:
9b:cc:41:f8:0c:04:48:a0:41:92:b1:ff:18:d4:34:a7:6c:d1:
5f:f0:fe:e4:7d:3f:f7:6b:4a:db:39:3f:d8:b7:06:01:7c:62:
04:c4:19:0f:fc:10:5c:f6:d7:83:e3:a9:64:ee:10:23:0b:45:
0b:db:3f:35:32:10:26:32:97:ff:f9:74:05:d0:21:9f:42:6e:
53:a5:ba:9d:18:66:8d:11:bd:22:f5:7a:6e:fe:26:00:57:2f:
14:5f:ed:81:8f:86:45:f1:ab:8b:f5:d5:fb:c4:de:17:4a:3e:
55:a7:ac:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fTVnflNBHi7v5lzTFC7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMzQ0MGYzMGUzMDViYzAwNThiODU5YjY4YTgzNDBhMDMz
YjZiNDIwHhcNMjUwNjI5MDcwMDU2WhcNMjUwNjMwMDcwMDU2WjAzMTEwLwYDVQQD
EyhhY2UyNzExMDAxZTI2ZTYxZjlhYzA4MjM5Mjk5ODg1MzM1NzVjOWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6WLimY81JCm4s2PZmChxdRV9ACO
hEKcmE5pqxrU3GTzWGjXLm/0evtgA4aF/FJYP59ZMvUd82M8tfh0WwSVA/CAWSDO
sHjOgL95ZSo278OBRD6pWXwG1WbCVDhdAui7vvcBe8kIQKJJyEBkD9l5Sza+NnT9
tGjLhUWioKDdx8paLvXlHfKUqhyBJaEsWL0ZzjcPqrwDN4EdeSlL2Xyhg3jkZHpN
jP7wGY8R0zQmxlayXn5CGgKNOmD9IZA6gMvzBOm4yuMuVu8CNNbsluXTsX0nhbad
hWsj4iOOIC3Oq3Nz+KSc5VEK2sCba1S0nHqqtnDLnhQ1j9aXZH1enjsu8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzicRAB4m5h+awII5KZiFM1dcnoMB8GA1UdIwQY
MBaAFKw0QPMOMFvABYuFm2ioNAoDO2tCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckRSQTh3NHdXOEFGaTRXYmFLZzBDZ003YTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hNjc3N2QtYjc3OC00NDJjLWI4MmYt
NDM4ZDQwNGVkYzJhLzEvckRSQTh3NHdXOEFGaTRXYmFLZzBDZ003YTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9hNjc3N2QtYjc3OC00NDJjLWI4MmYtNDM4ZDQwNGVkYzJh
LzEvckRSQTh3NHdXOEFGaTRXYmFLZzBDZ003YTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEzlO3cD
ISKdVzSG+hVBHWNbUfylKnOvc3kB6B4stcZ+r3M6R3a2UYXVdaioagkrbD5TFIAB
/jruedh8gi41etbf93iRvhSESE7jqILKjzo1ZyTULdEELsy2Mhs2fk6M+l59xdpa
4WPjHNlkrAA2MeVLKv+jADOg+t1KiSFuEScuf5rqbHKyJTUqd1BWP1Uem8xB+AwE
SKBBkrH/GNQ0p2zRX/D+5H0/92tK2zk/2LcGAXxiBMQZD/wQXPbXg+OpZO4QIwtF
C9s/NTIQJjKX//l0BdAhn0JuU6W6nRhmjRG9IvV6bv4mAFcvFF/tgY+GRfGri/XV
+8TeF0o+VaesJw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:56:53 2025 by rpki-client