Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
File: D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json)
Hash identifier: DUYycR6TqXF2C+XkpJXNPEvcIJ9npFfYp5uVs3IqT7I=
Subject key identifier: E8:0D:FC:9F:9A:FD:B8:B0:18:68:FD:37:BA:71:6D:3A:DC:42:0D:A0
Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
Certificate issuer: /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Certificate serial: 0197B6D7A2834B299C7DB6DE7513F207F77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
Manifest number: 01BB
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: yg/Xa6GjozgCWx2SwZlqjnI9wyoZ4u7Ga4BSAtnr2zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a2:83:4b:29:9c:7d:b6:de:75:13:f2:07:f7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=e80dfc9f9afdb8b01868fd37ba716d3adc420da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:32:b8:60:88:4d:52:92:04:af:c0:92:e0:
e3:ed:b5:40:41:12:0a:d5:87:02:80:b7:08:e3:8d:
94:4f:75:48:85:51:2a:63:98:05:78:8f:f1:05:63:
35:20:ac:3f:e6:e3:74:5c:45:f7:f4:58:4c:a7:ba:
ba:69:b0:9c:86:9c:85:e2:ab:11:6e:d2:8c:8a:10:
3b:46:46:d4:c6:9f:d0:74:a6:77:8c:97:c3:4a:e3:
d9:5b:83:15:05:28:11:c2:05:cc:a1:60:96:ee:a7:
c1:29:84:42:5c:bf:6d:75:fe:2f:77:d8:04:dc:26:
04:86:ee:11:1f:1f:12:ae:03:a0:ae:3e:28:cc:ea:
25:be:dd:55:4b:a5:bc:83:fa:d1:10:13:99:41:48:
fa:0a:38:8a:cd:80:90:36:8f:96:bc:5d:65:17:2c:
60:72:4d:b7:6b:93:4b:78:96:0a:52:aa:9d:41:d7:
af:04:e5:c4:a2:4b:c4:67:82:50:9e:7a:f4:32:af:
9c:15:1f:fc:0f:47:ab:50:cb:cb:0d:1e:f7:73:1b:
fd:8b:16:9a:e4:9b:4b:d4:7d:6f:a3:d3:b4:0c:30:
57:c9:5f:27:31:ea:d5:0d:82:13:d8:35:79:78:3b:
11:30:b3:e7:6e:d3:60:1d:df:ec:35:6f:cb:20:84:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0D:FC:9F:9A:FD:B8:B0:18:68:FD:37:BA:71:6D:3A:DC:42:0D:A0
X509v3 Authority Key Identifier:
keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:30:43:bd:ee:9e:13:df:15:c0:f1:7e:5c:bf:49:9f:c7:93:
85:2b:77:be:1e:6c:0d:8b:a6:50:b9:6a:4f:c1:e5:54:b9:33:
a6:c7:6d:3b:50:a2:d9:62:0e:d8:95:29:b9:35:36:f3:7f:a4:
64:85:21:a8:80:24:95:77:88:bb:a7:cd:5d:ea:54:35:af:4b:
bc:f3:79:6c:0c:8f:55:a9:2c:a5:98:38:f9:e4:fe:6a:53:1a:
e7:5d:ef:e8:9c:ae:5b:bc:b4:b6:d7:7f:54:b2:b8:0c:93:59:
0b:fc:af:3a:65:f4:4a:84:b2:b7:9f:d5:fc:4d:5d:25:75:d6:
1b:87:cd:04:29:a6:dc:3a:54:ee:64:64:93:63:d4:99:63:17:
f7:5c:c2:90:fe:01:a2:52:14:63:d0:04:7a:30:b0:83:27:9d:
b9:e1:03:c6:d1:6f:b3:b5:5f:af:9e:0a:75:0b:2f:20:d2:e8:
7c:5c:bc:27:80:d4:86:6d:df:45:82:5b:14:c6:27:37:de:c4:
ea:8a:7a:48:06:5e:5a:ec:ac:ca:fb:02:f8:e6:6b:cc:88:be:
a3:9a:2e:81:23:50:96:89:fb:16:73:23:e0:c4:b9:0b:9f:9b:
1d:f9:d5:6b:98:42:55:68:1b:c4:b4:0a:43:e8:f8:e3:15:72:
90:26:14:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216KDSymcfbbedRPyB/d7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOGYwNmMzNTQ5NDYwOGQ5YWNjZWIwNzBhNGNkMTZhYjk1
ZmY2YTYwHhcNMjUwNjI4MTQwMTE0WhcNMjUwNjI5MTQwMTE0WjAzMTEwLwYDVQQD
EyhlODBkZmM5ZjlhZmRiOGIwMTg2OGZkMzdiYTcxNmQzYWRjNDIwZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE0yuGCITVKSBK/AkuDj7bVAQRIK
1YcCgLcI442UT3VIhVEqY5gFeI/xBWM1IKw/5uN0XEX39FhMp7q6abCchpyF4qsR
btKMihA7RkbUxp/QdKZ3jJfDSuPZW4MVBSgRwgXMoWCW7qfBKYRCXL9tdf4vd9gE
3CYEhu4RHx8SrgOgrj4ozOolvt1VS6W8g/rREBOZQUj6CjiKzYCQNo+WvF1lFyxg
ck23a5NLeJYKUqqdQdevBOXEokvEZ4JQnnr0Mq+cFR/8D0erUMvLDR73cxv9ixaa
5JtL1H1vo9O0DDBXyV8nMerVDYIT2DV5eDsRMLPnbtNgHd/sNW/LIIRt+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgN/J+a/biwGGj9N7pxbTrcQg2gMB8GA1UdIwQY
MBaAFA+PBsNUlGCNmszrBwpM0Wq5X/amMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9iMDkyMTgtODllNy00ODU5LWIzMmMt
NjBlOWI3ZGM1NTBiLzEvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9iMDkyMTgtODllNy00ODU5LWIzMmMtNjBlOWI3ZGM1NTBi
LzEvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjBDve6e
E98VwPF+XL9Jn8eThSt3vh5sDYumULlqT8HlVLkzpsdtO1Ci2WIO2JUpuTU283+k
ZIUhqIAklXeIu6fNXepUNa9LvPN5bAyPVakspZg4+eT+alMa513v6JyuW7y0ttd/
VLK4DJNZC/yvOmX0SoSyt5/V/E1dJXXWG4fNBCmm3DpU7mRkk2PUmWMX91zCkP4B
olIUY9AEejCwgyedueEDxtFvs7Vfr54KdQsvINLofFy8J4DUhm3fRYJbFMYnN97E
6op6SAZeWuysyvsC+OZrzIi+o5ougSNQlon7FnMj4MS5C5+bHfnVa5hCVWgbxLQK
Q+j44xVykCYUeQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:25 2025 by rpki-client