Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
File: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json)
Hash identifier: n3exP3W1lUpcZ5WasaHEyzdLCd1u5efdXWvYzVt6xUc=
Subject key identifier: 12:1F:6C:DF:D8:85:C5:C0:6A:E2:29:C5:06:60:FF:60:D9:C9:1D:C5
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial: 0197C07F2F4421828B0359957898982CE055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
Manifest number: 0EFB
Signing time: Mon 30 Jun 2025 11:00:49 +0000
Manifest this update: Mon 30 Jun 2025 11:00:49 +0000
Manifest next update: Tue 01 Jul 2025 11:00:49 +0000
Files and hashes: 1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: fJhz6yrNmMRUk+xjFWa2z7o3rFn2iTrk/IAAhcre2yg=)
2: gbK6DHiZq7AYAmJhGhegTd1JJGM.roa (hash: 3ZhInyD7W5kRDFPCm7P1BZAvCR0mhPTykPk/poLoSao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:7f:2f:44:21:82:8b:03:59:95:78:98:98:2c:e0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3277a239664d245becf4214dde15923042a142f
Validity
Not Before: Jun 30 11:00:49 2025 GMT
Not After : Jul 1 11:00:49 2025 GMT
Subject: CN=121f6cdfd885c5c06ae229c50660ff60d9c91dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:35:78:d2:96:d6:3d:70:18:7c:d6:cf:7c:
f3:41:28:ef:81:02:85:25:55:f2:93:7e:9d:ac:60:
0b:af:7c:89:17:55:c6:65:2f:aa:3d:fb:77:78:72:
db:76:09:30:54:03:1b:6b:90:a2:3a:24:f6:ad:e9:
f5:49:9d:ed:44:cd:ed:83:e9:c7:6f:23:f2:90:31:
4c:93:b6:40:32:d6:d1:7f:15:82:a2:77:5b:0f:27:
e1:03:42:5b:01:16:9b:7e:7a:0a:8c:ae:9c:dc:4d:
a0:08:d8:82:24:4b:7b:06:5a:9f:2d:f3:11:c6:d4:
79:29:8e:d2:fe:a0:43:ad:51:2e:07:23:4e:9e:20:
96:86:c5:33:22:e5:02:e9:58:21:45:70:4e:d9:ab:
0e:69:df:3a:b6:85:19:9f:46:79:81:d1:f8:16:22:
57:d4:f1:98:c5:2d:0a:b1:ef:50:e1:52:2a:0e:f0:
c1:58:f2:73:e9:af:bd:87:f1:71:e0:9d:89:ff:6d:
5f:b9:25:77:e4:f2:13:7b:11:8f:30:8a:62:5a:46:
29:17:d7:d0:38:8d:26:02:4c:84:28:a3:b0:2a:54:
03:84:49:2e:b7:1d:ca:ea:9a:49:13:6b:87:94:02:
92:02:e3:5a:16:49:44:52:f3:61:7f:29:72:2a:b0:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1F:6C:DF:D8:85:C5:C0:6A:E2:29:C5:06:60:FF:60:D9:C9:1D:C5
X509v3 Authority Key Identifier:
keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2d:d8:3b:11:a5:6d:f5:93:28:03:3f:5e:29:56:69:d6:82:
7a:21:1f:cd:f9:fc:2c:91:7e:43:b5:df:ef:4b:f0:df:4b:14:
c5:a8:cd:66:5d:65:7a:c8:88:86:2c:c0:7d:4d:2f:36:d1:e1:
b5:b7:31:0e:fd:0b:57:c8:53:bd:b4:3d:8d:da:89:0b:7e:af:
e1:26:ce:16:0c:b2:92:10:29:d2:90:38:3a:39:c3:56:27:33:
44:56:22:f9:a8:0e:72:77:7f:72:c0:cb:69:3a:67:75:83:b9:
69:cf:0f:16:b8:2f:f3:2c:59:2b:8d:13:e4:b9:42:d4:52:fb:
3b:4a:4b:84:39:7a:2e:28:70:cb:67:73:a7:f3:dc:97:19:45:
08:ac:b3:e7:71:a6:8d:b7:45:de:71:e7:48:14:17:75:fe:9d:
93:ca:18:45:e2:67:41:fa:75:b2:67:64:79:12:7d:85:1f:5d:
e1:34:8f:d9:3c:7e:9c:ef:32:2b:3e:c9:a7:66:a9:71:cf:25:
4d:82:db:63:51:18:0a:48:d1:58:fd:53:35:45:d3:a5:fe:f7:
05:38:10:35:ff:5f:42:0e:61:67:07:81:55:c7:f3:65:4b:7a:
6b:c7:2c:94:93:fa:e6:31:bf:8d:56:7a:95:1e:27:49:f0:06:
49:9e:17:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfAfy9EIYKLA1mVeJiYLOBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMjc3YTIzOTY2NGQyNDViZWNmNDIxNGRkZTE1OTIzMDQy
YTE0MmYwHhcNMjUwNjMwMTEwMDQ5WhcNMjUwNzAxMTEwMDQ5WjAzMTEwLwYDVQQD
EygxMjFmNmNkZmQ4ODVjNWMwNmFlMjI5YzUwNjYwZmY2MGQ5YzkxZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEs1eNKW1j1wGHzWz3zzQSjvgQKF
JVXyk36drGALr3yJF1XGZS+qPft3eHLbdgkwVAMba5CiOiT2ren1SZ3tRM3tg+nH
byPykDFMk7ZAMtbRfxWCondbDyfhA0JbARabfnoKjK6c3E2gCNiCJEt7BlqfLfMR
xtR5KY7S/qBDrVEuByNOniCWhsUzIuUC6VghRXBO2asOad86toUZn0Z5gdH4FiJX
1PGYxS0Kse9Q4VIqDvDBWPJz6a+9h/Fx4J2J/21fuSV35PITexGPMIpiWkYpF9fQ
OI0mAkyEKKOwKlQDhEkutx3K6ppJE2uHlAKSAuNaFklEUvNhfylyKrAGMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIfbN/YhcXAauIpxQZg/2DZyR3FMB8GA1UdIwQY
MBaAFNMneiOWZNJFvs9CFN3hWSMEKhQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82YjQzODYtZGYzZC00ZjljLWFmMWMt
YzM3M2Y0NTNhMjQ1LzEvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS82YjQzODYtZGYzZC00ZjljLWFmMWMtYzM3M2Y0NTNhMjQ1
LzEvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjy3YOxGl
bfWTKAM/XilWadaCeiEfzfn8LJF+Q7Xf70vw30sUxajNZl1lesiIhizAfU0vNtHh
tbcxDv0LV8hTvbQ9jdqJC36v4SbOFgyykhAp0pA4OjnDViczRFYi+agOcnd/csDL
aTpndYO5ac8PFrgv8yxZK40T5LlC1FL7O0pLhDl6Lihwy2dzp/PclxlFCKyz53Gm
jbdF3nHnSBQXdf6dk8oYReJnQfp1smdkeRJ9hR9d4TSP2Tx+nO8yKz7Jp2apcc8l
TYLbY1EYCkjRWP1TNUXTpf73BTgQNf9fQg5hZweBVcfzZUt6a8cslJP65jG/jVZ6
lR4nSfAGSZ4XbQ==
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:28:04 2025 by rpki-client