Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: kUW6mR0XOQxnqk+P1oKAvvJpDcvdqJeZQFkKv6hgoQ4=
Subject key identifier: B7:AD:17:4A:64:67:B6:0D:9C:CF:1E:63:A0:C2:48:06:A3:93:26:71
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 0197B7B351A1CB72BCB5AD8F34B5937F3744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 05DC
Signing time: Sat 28 Jun 2025 18:01:11 +0000
Manifest this update: Sat 28 Jun 2025 18:01:11 +0000
Manifest next update: Sun 29 Jun 2025 18:01:11 +0000
Files and hashes: 1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: QI4nYBgekdlTDN3Mq5zzJgs0xseWo+0+JNlqUCzAdkw=)
2: pEP-pQhZiYbw0SOD31dKWiKIqmI.roa (hash: CfAhs6liLNKygVMpweyGMUtkUgPvkHCadlR7GSV9YRQ=)
3: ytXklMT7Qvg5G08MtY8lphgvXaw.roa (hash: r4Q3NQ10FfDyt/oO/SAMKogjYuHKvOwUOktQVJptRLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:51:a1:cb:72:bc:b5:ad:8f:34:b5:93:7f:37:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Jun 28 18:01:11 2025 GMT
Not After : Jun 29 18:01:11 2025 GMT
Subject: CN=b7ad174a6467b60d9ccf1e63a0c24806a3932671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:40:0c:d6:28:74:70:78:14:06:b2:7e:69:
4c:20:fc:6a:39:8f:d4:aa:21:64:8e:33:0e:cd:e8:
34:83:7f:b5:00:91:13:6c:19:c4:90:ce:76:76:d5:
f6:59:9e:e7:d3:71:23:d6:64:b6:70:1c:08:74:92:
ae:7e:83:d2:e1:68:44:e9:b4:b5:ec:16:cf:13:5e:
a5:0f:3f:5d:c3:e0:4c:a9:73:ba:66:de:7d:c8:fa:
74:2e:a1:85:4b:3a:8f:20:21:ab:ca:dc:1e:21:7d:
2d:59:cd:c7:92:b0:cc:52:f4:48:e5:99:2d:b4:af:
f7:48:91:09:f1:73:94:a7:ef:88:28:27:7d:f0:33:
4b:48:52:59:51:17:52:ac:73:f9:58:69:8f:3a:4d:
2b:f2:c7:93:ac:27:60:04:1a:05:e9:90:ef:49:58:
c3:52:3c:1b:40:7c:2a:86:12:e6:47:ee:1c:b7:41:
f7:19:31:17:b4:b1:71:ab:21:68:6a:d7:74:80:86:
c3:d2:45:f9:a9:ef:bd:25:98:65:52:c8:5e:13:b4:
2f:46:ed:4c:86:c8:7a:71:ad:49:5a:a1:e7:39:ed:
48:f5:e8:7e:22:a2:4f:a8:c3:48:0e:4c:09:15:5d:
ab:c5:8e:92:ef:2e:c5:11:02:5f:bc:0a:c1:43:92:
fc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AD:17:4A:64:67:B6:0D:9C:CF:1E:63:A0:C2:48:06:A3:93:26:71
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5e:62:d9:d9:33:4d:1b:08:1e:69:ef:c7:a7:f1:e6:3c:20:
8b:e1:c6:50:fa:8c:04:5c:56:7d:78:8e:c4:f6:9e:e7:03:26:
9e:bb:b2:02:5c:d1:26:01:fd:ed:9b:4f:00:32:91:f5:1f:c9:
8c:f4:1a:b4:99:a1:17:87:e7:4a:96:ca:78:09:cf:ce:43:86:
d4:ed:b8:c9:bf:a1:5e:03:4a:34:9b:4b:ce:1b:60:24:94:84:
50:07:c5:65:23:7c:87:33:1c:07:48:0d:70:b9:11:0f:ed:0b:
1b:cd:aa:e5:77:75:a0:11:a8:13:7e:7b:ac:e7:31:4c:ed:a5:
0b:3a:9f:f5:08:26:3b:aa:d2:05:71:5c:b1:5f:d0:78:61:7b:
90:04:be:99:89:63:cb:65:23:6d:71:d8:0f:e1:c0:40:05:80:
bd:ad:98:2d:58:6f:cf:d0:78:4c:14:79:be:d5:25:82:4c:c9:
5d:1e:2c:21:27:9a:7d:39:fc:c9:8a:29:f8:2a:e4:87:cc:05:
f5:5e:6d:53:4f:14:3d:a2:b7:3e:82:b0:37:b2:51:ef:25:3d:
a0:75:d8:9f:05:22:80:e9:4a:ee:fa:36:92:f3:01:f5:0a:64:
d0:e5:a5:7c:e1:5d:8a:b3:29:d1:63:ea:87:c1:be:48:de:27:
a4:1f:c2:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s1Ghy3K8ta2PNLWTfzdEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzNlNmNiMmViMDJmY2M3NDJiYWY5MWFiODY1YzliMjBk
NjQ4NGIwHhcNMjUwNjI4MTgwMTExWhcNMjUwNjI5MTgwMTExWjAzMTEwLwYDVQQD
EyhiN2FkMTc0YTY0NjdiNjBkOWNjZjFlNjNhMGMyNDgwNmEzOTMyNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGZADNYodHB4FAayfmlMIPxqOY/U
qiFkjjMOzeg0g3+1AJETbBnEkM52dtX2WZ7n03Ej1mS2cBwIdJKufoPS4WhE6bS1
7BbPE16lDz9dw+BMqXO6Zt59yPp0LqGFSzqPICGrytweIX0tWc3HkrDMUvRI5Zkt
tK/3SJEJ8XOUp++IKCd98DNLSFJZURdSrHP5WGmPOk0r8seTrCdgBBoF6ZDvSVjD
UjwbQHwqhhLmR+4ct0H3GTEXtLFxqyFoatd0gIbD0kX5qe+9JZhlUsheE7QvRu1M
hsh6ca1JWqHnOe1I9eh+IqJPqMNIDkwJFV2rxY6S7y7FEQJfvArBQ5L8uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLetF0pkZ7YNnM8eY6DCSAajkyZxMB8GA1UdIwQY
MBaAFGvD5ssusC/MdCuvkauGXJsg1khLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYt
MTEwOThhYTJlYmMzLzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYtMTEwOThhYTJlYmMz
LzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlF5i2dkz
TRsIHmnvx6fx5jwgi+HGUPqMBFxWfXiOxPae5wMmnruyAlzRJgH97ZtPADKR9R/J
jPQatJmhF4fnSpbKeAnPzkOG1O24yb+hXgNKNJtLzhtgJJSEUAfFZSN8hzMcB0gN
cLkRD+0LG82q5Xd1oBGoE357rOcxTO2lCzqf9QgmO6rSBXFcsV/QeGF7kAS+mYlj
y2UjbXHYD+HAQAWAva2YLVhvz9B4TBR5vtUlgkzJXR4sISeafTn8yYop+Crkh8wF
9V5tU08UPaK3PoKwN7JR7yU9oHXYnwUigOlK7vo2kvMB9Qpk0OWlfOFdirMp0WPq
h8G+SN4npB/C6w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:58 2025 by rpki-client