Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: b8MB2zss57soMdLhbNEjZLwVkjyhNdrD59xNCXjyQIg=
Subject key identifier: 21:B8:05:E2:15:E1:EB:90:1F:3D:11:C8:FA:49:08:03:64:93:1D:9B
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 0197B70EBBAA061766F019465159E757BF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 02AB
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: IIqim98ZJA0rZ1tY5b95X6LEFKvobJutazTJeEW5SMA=)
2: pTTtPKmhE713zQ-lNSyfapckqck.roa (hash: Z4OXgVLMtdMbDgwAv+QfBL8XpAweOau33nbHajpmsxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bb:aa:06:17:66:f0:19:46:51:59:e7:57:bf:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=21b805e215e1eb901f3d11c8fa49080364931d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:6f:a1:8e:31:03:dc:74:97:9b:44:4c:66:
d1:57:f8:92:a3:37:aa:9f:af:86:a4:1d:c4:4e:1e:
d1:f4:2c:45:b1:22:71:33:15:b2:81:51:72:38:ba:
85:b8:98:6e:7b:5b:47:54:f7:c6:9f:4f:86:f5:09:
8e:85:4c:d5:f4:21:c5:d0:b1:96:8a:c8:23:99:5a:
1b:fd:db:9a:82:2a:2f:17:f6:47:27:8f:b8:b6:00:
cf:e9:8f:7b:ac:ae:23:d3:a5:66:e4:ff:73:c9:1a:
c6:74:07:67:fd:c2:54:11:d8:6b:6d:ac:5f:81:96:
cc:33:8d:9c:0c:6d:9c:1a:8d:da:71:3f:fb:eb:d4:
40:46:7d:33:ee:72:97:f7:ca:2d:26:56:22:bc:e1:
e6:07:99:65:f6:5d:bc:82:15:9d:d0:3b:17:c8:60:
bf:ff:ea:6e:85:88:a7:7e:32:f6:4d:5d:65:24:37:
7a:22:04:99:32:af:29:ad:b8:ba:9a:1e:3f:61:ac:
97:82:38:75:38:f2:19:9a:bc:29:65:f6:85:e1:44:
91:b3:70:1f:4c:b0:88:32:85:19:69:d8:cf:9c:b8:
72:0d:db:ae:d9:aa:25:bd:e5:3e:57:9f:f5:9b:8e:
99:0e:c0:57:de:0f:01:69:c7:2b:b5:36:67:8e:72:
94:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:05:E2:15:E1:EB:90:1F:3D:11:C8:FA:49:08:03:64:93:1D:9B
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2f:4f:2a:c6:20:bc:63:87:7f:62:c0:fc:a5:ab:00:53:64:
13:79:94:0c:8a:b8:e8:14:be:ee:0a:90:ae:88:10:a3:c2:01:
e9:7c:74:8d:17:28:aa:c1:a8:e8:81:2d:15:ea:df:84:68:1e:
9a:ad:8e:21:99:3d:a7:16:1a:9d:ee:26:2d:66:73:1d:20:b4:
00:87:c4:b0:d5:b0:fd:79:c5:6f:37:85:cc:31:c0:22:65:5e:
e3:03:f9:e6:6b:25:20:f3:5a:73:88:49:81:a0:28:11:06:a7:
cf:f2:f6:ac:d8:57:3d:d2:0c:25:67:b4:82:ca:2a:8b:2a:c8:
cd:0e:e9:bb:c8:4c:a5:39:62:fc:cb:1e:ce:a6:90:9d:63:da:
7e:7b:5c:70:47:dc:6c:2a:14:af:de:ed:38:1d:9f:50:83:09:
b9:86:9c:49:38:f7:93:37:7a:48:b9:46:53:d8:75:62:49:64:
d2:42:03:56:1e:a5:ce:ab:86:33:09:55:12:e2:83:97:47:9f:
eb:37:96:6a:39:e9:ce:9d:4a:89:85:00:b2:15:b3:bf:c1:2d:
0a:13:7f:d2:8f:1c:17:66:54:96:99:4f:61:f9:a0:50:76:c3:
99:bc:29:6e:7e:a9:52:46:7f:c4:d9:47:19:52:61:11:d0:4a:
60:37:a5:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DruqBhdm8BlGUVnnV799MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ODE1YzdkMGU4NjNjMjE3ODBmOGJmNGI5ZWNjM2E5YzY0
NTkyOTgwHhcNMjUwNjI4MTUwMTI1WhcNMjUwNjI5MTUwMTI1WjAzMTEwLwYDVQQD
EygyMWI4MDVlMjE1ZTFlYjkwMWYzZDExYzhmYTQ5MDgwMzY0OTMxZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMZvoY4xA9x0l5tETGbRV/iSozeq
n6+GpB3ETh7R9CxFsSJxMxWygVFyOLqFuJhue1tHVPfGn0+G9QmOhUzV9CHF0LGW
isgjmVob/duagiovF/ZHJ4+4tgDP6Y97rK4j06Vm5P9zyRrGdAdn/cJUEdhrbaxf
gZbMM42cDG2cGo3acT/769RARn0z7nKX98otJlYivOHmB5ll9l28ghWd0DsXyGC/
/+puhYinfjL2TV1lJDd6IgSZMq8prbi6mh4/YayXgjh1OPIZmrwpZfaF4USRs3Af
TLCIMoUZadjPnLhyDduu2aolveU+V5/1m46ZDsBX3g8BaccrtTZnjnKUqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCG4BeIV4euQHz0RyPpJCANkkx2bMB8GA1UdIwQY
MBaAFHaBXH0OhjwheA+L9Lnsw6nGRZKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG9GY2ZRNkdQQ0Y0RDR2MHVlekRxY1pGa3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yYWFhNDktMjgyMy00ZWUyLWI1ZDEt
ZTU0NzM5NWQ2YjQ3LzEvZG9GY2ZRNkdQQ0Y0RDR2MHVlekRxY1pGa3BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8yYWFhNDktMjgyMy00ZWUyLWI1ZDEtZTU0NzM5NWQ2YjQ3
LzEvZG9GY2ZRNkdQQ0Y0RDR2MHVlekRxY1pGa3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS9PKsYg
vGOHf2LA/KWrAFNkE3mUDIq46BS+7gqQrogQo8IB6Xx0jRcoqsGo6IEtFerfhGge
mq2OIZk9pxYane4mLWZzHSC0AIfEsNWw/XnFbzeFzDHAImVe4wP55mslIPNac4hJ
gaAoEQanz/L2rNhXPdIMJWe0gsoqiyrIzQ7pu8hMpTli/MsezqaQnWPafntccEfc
bCoUr97tOB2fUIMJuYacSTj3kzd6SLlGU9h1Yklk0kIDVh6lzquGMwlVEuKDl0ef
6zeWajnpzp1KiYUAshWzv8EtChN/0o8cF2ZUlplPYfmgUHbDmbwpbn6pUkZ/xNlH
GVJhEdBKYDelyw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:34 2025 by rpki-client