Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: wNDhanioJKI9NZiQds7fHDFXZsajTtAMaC/e0T2vVww=
Subject key identifier: 8E:6A:DF:4E:9F:40:D3:37:48:24:15:CD:B2:F0:33:DA:87:22:05:79
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 0197BB21F09C2FC874537EEF1EF5A11A0628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 06CD
Signing time: Sun 29 Jun 2025 10:00:52 +0000
Manifest this update: Sun 29 Jun 2025 10:00:52 +0000
Manifest next update: Mon 30 Jun 2025 10:00:52 +0000
Files and hashes: 1: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: AKurtkPrpLw9jDd0juee15w0CbbsO0Dw0x1HUSZmAoQ=)
2: dHoLxhcoAEUuRvCDtuAMppchNpk.roa (hash: u7XKc4RK1KVYd/fCuO1odA9687+dNJirNjEcVK4j3l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:21:f0:9c:2f:c8:74:53:7e:ef:1e:f5:a1:1a:06:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: Jun 29 10:00:52 2025 GMT
Not After : Jun 30 10:00:52 2025 GMT
Subject: CN=8e6adf4e9f40d337482415cdb2f033da87220579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:04:4a:7e:af:a6:48:da:29:51:12:0e:19:
99:3c:36:b2:71:43:08:90:e8:15:c8:ac:4e:15:86:
5f:f4:f0:dc:54:de:d7:94:70:bb:b3:3b:1b:46:21:
71:6a:cb:49:09:09:14:f4:06:eb:f9:0b:37:ce:80:
12:6c:9a:3b:67:ba:5c:38:36:17:43:c8:92:4f:88:
48:28:fd:20:90:ff:da:e8:69:3c:7b:8e:b3:63:38:
84:a3:aa:ae:0e:7d:51:50:91:dd:7a:71:0c:05:a9:
48:b2:44:ef:16:06:e3:e8:f0:cf:27:d3:fd:16:77:
0a:0c:7e:1a:0a:e3:fd:c3:91:d8:c1:5e:34:92:af:
0b:0e:93:dc:70:5e:d6:93:d7:83:83:ce:70:75:3a:
f1:8f:02:ae:93:08:f1:9c:3a:9a:7d:a8:ed:68:f6:
b7:53:4f:3a:f1:2c:d9:2b:e5:3f:62:3e:be:c9:b1:
63:dd:92:86:e8:24:22:17:58:88:28:8b:fa:5d:e7:
2e:fd:6c:af:42:b2:a5:90:91:d0:fe:ec:fa:17:73:
f1:dc:c1:ab:e2:af:5a:2f:60:89:a3:d2:19:30:61:
68:36:09:cd:f6:25:6b:c0:8d:f4:7c:d8:d8:ef:2c:
e3:32:47:76:d9:7a:f6:a4:89:6d:6f:f6:4d:66:f4:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6A:DF:4E:9F:40:D3:37:48:24:15:CD:B2:F0:33:DA:87:22:05:79
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e1:37:32:a9:18:75:e6:d6:c9:f5:cf:16:11:5f:9a:57:88:
e5:8c:ff:a9:22:c7:85:79:d8:f0:b7:e2:34:17:f8:17:37:bc:
b5:4b:c2:c8:08:10:0e:a5:af:c8:dd:74:78:0c:ce:6a:15:34:
99:12:2f:1c:51:7f:a5:e6:0a:d7:8e:64:0b:78:d2:9c:78:d8:
30:69:5a:97:3a:a4:6f:fe:9c:04:1e:75:d4:8f:9e:c9:08:ab:
fa:3c:ce:6a:4d:8d:b7:76:4e:db:cf:80:21:86:d7:4c:1d:08:
ad:02:2f:91:27:37:61:32:aa:92:88:91:8b:0c:4e:91:17:25:
4b:6f:8a:3e:a3:31:f9:66:17:8d:3f:f9:b2:bb:da:53:30:c5:
26:8f:1b:21:fd:56:e9:7b:88:6e:02:15:d9:07:14:68:a4:88:
fe:a9:7b:f0:a2:c3:8c:b4:ef:49:c2:c2:32:fc:66:78:e0:69:
f2:d1:cb:44:3a:56:58:0c:db:e3:77:4a:14:a5:f7:66:06:19:
0a:39:cd:78:fb:ad:e0:fa:d5:0c:07:ad:04:8b:10:4e:b3:38:
73:5d:b3:b0:82:58:c6:b8:74:80:ce:e7:0a:14:1e:fb:48:f6:
c7:7b:52:39:f7:9b:1c:26:7a:eb:75:59:78:29:3a:6a:02:ff:
0d:ef:29:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7IfCcL8h0U37vHvWhGgYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MGY2NWYzMDIzMzViYWE5MGVkODFjMDUzODRkNTNmMjMz
MjM5MWEwHhcNMjUwNjI5MTAwMDUyWhcNMjUwNjMwMTAwMDUyWjAzMTEwLwYDVQQD
Eyg4ZTZhZGY0ZTlmNDBkMzM3NDgyNDE1Y2RiMmYwMzNkYTg3MjIwNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw0ESn6vpkjaKVESDhmZPDaycUMI
kOgVyKxOFYZf9PDcVN7XlHC7szsbRiFxastJCQkU9Abr+Qs3zoASbJo7Z7pcODYX
Q8iST4hIKP0gkP/a6Gk8e46zYziEo6quDn1RUJHdenEMBalIskTvFgbj6PDPJ9P9
FncKDH4aCuP9w5HYwV40kq8LDpPccF7Wk9eDg85wdTrxjwKukwjxnDqafajtaPa3
U0868SzZK+U/Yj6+ybFj3ZKG6CQiF1iIKIv6Xecu/WyvQrKlkJHQ/uz6F3Px3MGr
4q9aL2CJo9IZMGFoNgnN9iVrwI30fNjY7yzjMkd22Xr2pIltb/ZNZvRQHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5q306fQNM3SCQVzbLwM9qHIgV5MB8GA1UdIwQY
MBaAFHQPZfMCM1uqkO2BwFOE1T8jMjkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEE5bDh3SXpXNnFRN1lIQVU0VFZQeU15T1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zYjFjMWYtMmQ4Yy00ODYxLWI3MWQt
ZDAzYTJjNDM1YWVjLzEvZEE5bDh3SXpXNnFRN1lIQVU0VFZQeU15T1JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zYjFjMWYtMmQ4Yy00ODYxLWI3MWQtZDAzYTJjNDM1YWVj
LzEvZEE5bDh3SXpXNnFRN1lIQVU0VFZQeU15T1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOE3MqkY
debWyfXPFhFfmleI5Yz/qSLHhXnY8LfiNBf4Fze8tUvCyAgQDqWvyN10eAzOahU0
mRIvHFF/peYK145kC3jSnHjYMGlalzqkb/6cBB511I+eyQir+jzOak2Nt3ZO28+A
IYbXTB0IrQIvkSc3YTKqkoiRiwxOkRclS2+KPqMx+WYXjT/5srvaUzDFJo8bIf1W
6XuIbgIV2QcUaKSI/ql78KLDjLTvScLCMvxmeOBp8tHLRDpWWAzb43dKFKX3ZgYZ
CjnNePut4PrVDAetBIsQTrM4c12zsIJYxrh0gM7nChQe+0j2x3tSOfebHCZ663VZ
eCk6agL/De8p+g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:49:44 2025 by rpki-client