Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: HwsGkguci3teI9LIbKwkznFY13fFSZ9hJSZhfKjcYSQ=
Subject key identifier: 76:EF:D3:9E:E8:66:C7:BF:74:90:92:24:13:58:0A:E7:E3:96:E4:57
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 0197B821583938E40678A3886CB47F7666EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 20:01:22 +0000
Manifest this update: Sat 28 Jun 2025 20:01:22 +0000
Manifest next update: Sun 29 Jun 2025 20:01:22 +0000
Files and hashes: 1: 5yD7BMGOx_QxkEbApVWEDtAyJTc.roa (hash: 7HUgyfi698gsVlFHfeKtkaA7m5SlO3zRzjiuZrYZF5I=)
2: RqGemHASq4a3yEktWB8WjU_L-0c.roa (hash: vaorPMqPLbSGClI0kn7HOZCELp91/Z7k6rtXVGnH8yc=)
3: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: KSGSf8mSfM+7QFU+bXNOm/WZ7Ap3hDARcNbgGdSXRWo=)
4: ryABSBgMLByw-XFfZ_8SVzjoEH4.roa (hash: Qmf/YZ6xzpzD9CwzHR2N62ZnpRrAxDW7s9aRsiehW1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:58:39:38:e4:06:78:a3:88:6c:b4:7f:76:66:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Jun 28 20:01:22 2025 GMT
Not After : Jun 29 20:01:22 2025 GMT
Subject: CN=76efd39ee866c7bf7490922413580ae7e396e457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:c0:d9:42:e5:38:3f:97:29:30:01:3e:ae:
a3:49:7f:fa:a8:ca:af:9b:c3:46:f9:9c:dd:34:05:
ac:0c:d4:6b:f0:c4:e5:ec:6d:4d:38:02:17:3b:a7:
a4:3a:bd:74:0e:89:74:7e:69:d6:ce:59:59:d5:c1:
14:78:27:fb:f3:e5:ce:5c:dc:3c:89:91:92:18:d5:
7f:03:8d:10:66:1b:8f:6f:58:b6:d8:a7:24:85:2d:
6c:e5:2c:b3:d6:cc:a5:ab:e7:39:29:7b:c7:fa:9d:
77:64:b0:24:b5:95:0f:ac:99:e6:21:5e:0b:8c:da:
09:11:df:c9:9f:02:68:49:bf:8c:f3:56:ed:27:5f:
dc:fd:a4:13:ed:ec:23:dc:56:9c:5b:33:84:7d:4f:
34:96:c3:07:cc:63:44:59:97:29:22:51:99:9c:8b:
54:e7:ff:bd:62:1c:cd:a5:db:ac:ff:be:6e:18:5b:
29:20:7e:8b:a3:d6:61:cc:bd:7c:6c:43:5f:fe:40:
f7:bb:93:e7:39:f5:5c:c9:d2:40:53:d9:16:92:07:
f6:4b:4e:a2:6d:4d:76:fc:a1:27:8c:f5:29:67:cb:
c3:5b:49:ad:44:ae:b2:65:9f:87:18:fa:61:77:12:
fe:8f:85:7d:c1:a7:15:74:f1:71:c2:a8:8e:e2:57:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EF:D3:9E:E8:66:C7:BF:74:90:92:24:13:58:0A:E7:E3:96:E4:57
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ca:65:8f:38:d9:98:41:12:d5:a7:bc:fd:d7:62:2d:e3:71:
07:54:2b:82:4b:c1:7a:9a:03:e3:83:63:95:74:50:4e:6e:6e:
91:18:66:5f:6b:a7:09:f6:50:93:96:a6:3c:d5:a0:d1:f5:03:
c4:44:e0:80:80:17:50:bb:85:63:6e:27:36:e1:08:04:9c:06:
1d:2e:bf:5a:69:6e:1a:3a:14:17:04:df:04:ca:88:8b:8f:d9:
24:53:e1:d4:cf:f3:1c:d8:b8:2d:c0:05:28:e0:52:be:b7:7c:
75:c9:c0:31:a8:0b:74:95:f3:3d:48:ce:d2:3c:72:cc:65:26:
5b:f0:1e:07:43:c6:bb:87:cf:20:c5:e5:1d:82:b9:47:95:1a:
61:47:13:f0:5f:7b:17:4b:5e:56:32:ab:6f:58:27:26:4a:5b:
99:21:0c:9c:4c:db:0a:d7:4c:48:e2:01:d6:da:03:07:ca:68:
65:16:69:d6:67:db:c9:fc:fd:43:62:35:46:35:7f:a8:6b:2f:
04:d8:a6:4b:77:ea:e7:ac:c6:b8:a3:21:f3:73:17:ab:f2:2e:
68:f6:d9:f8:8f:22:2b:48:b9:8a:53:23:34:51:68:f0:b5:a8:
59:c7:d6:c4:60:10:c5:f8:1f:71:6b:fc:77:14:18:19:65:59:
4e:98:87:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IVg5OOQGeKOIbLR/dmbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YjAyMDMwODg2NWMzMzYwZGFiMTlmM2E1NzAzMzQxODY0
ZTlmNTAwHhcNMjUwNjI4MjAwMTIyWhcNMjUwNjI5MjAwMTIyWjAzMTEwLwYDVQQD
Eyg3NmVmZDM5ZWU4NjZjN2JmNzQ5MDkyMjQxMzU4MGFlN2UzOTZlNDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko3A2ULlOD+XKTABPq6jSX/6qMqv
m8NG+ZzdNAWsDNRr8MTl7G1NOAIXO6ekOr10Dol0fmnWzllZ1cEUeCf78+XOXNw8
iZGSGNV/A40QZhuPb1i22KckhS1s5Syz1sylq+c5KXvH+p13ZLAktZUPrJnmIV4L
jNoJEd/JnwJoSb+M81btJ1/c/aQT7ewj3FacWzOEfU80lsMHzGNEWZcpIlGZnItU
5/+9YhzNpdus/75uGFspIH6Lo9ZhzL18bENf/kD3u5PnOfVcydJAU9kWkgf2S06i
bU12/KEnjPUpZ8vDW0mtRK6yZZ+HGPphdxL+j4V9wacVdPFxwqiO4lewXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbv057oZse/dJCSJBNYCufjluRXMB8GA1UdIwQY
MBaAFHewIDCIZcM2DasZ86VwM0GGTp9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzIt
YzhiYjhlYTM5ODA0LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzItYzhiYjhlYTM5ODA0
LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArspljzjZ
mEES1ae8/ddiLeNxB1QrgkvBepoD44NjlXRQTm5ukRhmX2unCfZQk5amPNWg0fUD
xETggIAXULuFY24nNuEIBJwGHS6/WmluGjoUFwTfBMqIi4/ZJFPh1M/zHNi4LcAF
KOBSvrd8dcnAMagLdJXzPUjO0jxyzGUmW/AeB0PGu4fPIMXlHYK5R5UaYUcT8F97
F0teVjKrb1gnJkpbmSEMnEzbCtdMSOIB1toDB8poZRZp1mfbyfz9Q2I1RjV/qGsv
BNimS3fq56zGuKMh83MXq/IuaPbZ+I8iK0i5ilMjNFFo8LWoWcfWxGAQxfgfcWv8
dxQYGWVZTpiHOQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:03:50 2025 by rpki-client