Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
File: dIisPOfpHiQMr_IZy-OPzwI78rY.mft (raw, json)
Hash identifier: BVysyTfGih74CSkm7ZpjV6Zdp7oCrdjfZTD1fB7rT+Q=
Subject key identifier: E8:B0:2B:B6:2B:52:ED:FD:22:B5:68:98:19:E5:79:F6:21:54:7F:EA
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Certificate issuer: /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial: 01976884C7E0EF4C887246D1BD5F7522B969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
Manifest number: 0AA9
Signing time: Fri 13 Jun 2025 09:00:21 +0000
Manifest this update: Fri 13 Jun 2025 09:00:21 +0000
Manifest next update: Sat 14 Jun 2025 09:00:21 +0000
Files and hashes: 1: WUxc8OaDvlLuIRaGhHw99-2pQV8.roa (hash: pHL2ka3zZ/EpxZTpD28h5nmQm9ygfk2G3CW5wJONDzE=)
2: dIisPOfpHiQMr_IZy-OPzwI78rY.crl (hash: kC+xJ6gYaJpmSa3pnEVhy2xIm1ty0L6zieRopLNO7/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:c7:e0:ef:4c:88:72:46:d1:bd:5f:75:22:b9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Validity
Not Before: Jun 13 09:00:21 2025 GMT
Not After : Jun 14 09:00:21 2025 GMT
Subject: CN=e8b02bb62b52edfd22b5689819e579f621547fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:48:79:98:b1:c8:97:f6:9a:aa:90:e9:1f:
61:99:3e:1f:a0:59:01:03:6e:10:7f:70:4a:7c:76:
83:16:3d:58:fe:c0:a1:91:c1:89:30:c4:e2:94:ca:
79:3e:b2:10:fb:a9:e6:72:f6:fe:55:cd:05:06:a3:
14:e2:cb:6e:4a:09:fc:9a:18:16:64:2a:3f:04:2a:
40:76:9e:5f:c4:e1:bb:3f:f3:56:ec:fd:ff:0b:b8:
bd:04:78:f9:5c:8d:05:b5:4d:25:4d:95:df:26:e9:
9f:23:0e:46:60:7a:ca:5a:56:7e:36:d5:f5:47:d8:
5d:a1:11:1f:1f:40:52:e7:cc:a0:fd:0c:72:ce:69:
18:5e:9b:5a:5e:5e:7c:4d:c5:ee:28:81:12:22:f8:
d8:95:08:a2:27:03:cc:20:7e:f0:d7:f0:66:95:18:
02:82:63:85:19:63:0f:44:0d:3c:f7:b6:b6:7d:e9:
40:4c:42:77:fb:a8:cc:bc:b7:db:b6:70:7b:93:41:
d7:e9:c8:2c:1f:4f:29:5e:5a:fd:e9:5b:d1:fc:34:
17:ad:e0:d7:d7:a5:47:07:a5:5b:98:c3:3e:8b:ed:
91:63:7a:0d:88:5d:a6:1d:ca:17:df:c9:9c:f4:79:
1b:92:de:68:eb:40:26:c7:02:ce:e3:11:1d:65:cf:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B0:2B:B6:2B:52:ED:FD:22:B5:68:98:19:E5:79:F6:21:54:7F:EA
X509v3 Authority Key Identifier:
keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e0:ea:ae:17:52:b8:4a:11:93:85:b7:21:fe:39:4a:72:ba:
34:85:60:05:a2:0c:40:42:2d:25:a7:82:f8:d0:31:28:e2:17:
22:37:16:5f:4f:60:24:a2:49:20:b0:d1:bb:a5:3f:02:8e:d5:
30:f2:80:43:7d:7f:d8:de:dd:a1:fa:f7:e6:25:22:a5:df:d7:
25:87:73:8c:c7:df:5f:c0:b9:70:32:cc:20:29:34:8a:89:85:
0d:cf:b5:12:fa:6a:35:f2:4a:de:2e:51:ad:80:33:87:1e:6f:
ef:6a:43:b6:f9:ed:cb:0e:91:d2:0e:4b:4b:08:c4:d3:6b:79:
45:74:88:b9:64:f3:47:49:84:fe:ea:e3:84:f6:e8:7d:d4:57:
96:f5:82:f5:86:58:f6:5d:37:82:a1:97:4a:8b:3d:17:a2:fc:
c2:83:c6:cc:36:aa:18:4f:01:49:11:69:c9:ae:55:32:91:4b:
e6:2b:57:a0:dc:c2:a9:de:7e:5d:16:fc:23:ff:69:cb:e6:a6:
ff:40:44:d5:b3:c9:cf:ab:0e:f7:6a:b5:3b:38:bf:e4:59:7e:
f7:c7:9d:53:dc:9b:0f:9e:60:55:a2:95:da:ee:a8:cf:25:12:
31:22:50:9b:ed:d7:ea:48:8a:47:7d:d3:2e:aa:94:5d:f6:4a:
fe:fe:5c:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohMfg70yIckbRvV91IrlpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODhhYzNjZTdlOTFlMjQwY2FmZjIxOWNiZTM4ZmNmMDIz
YmYyYjYwHhcNMjUwNjEzMDkwMDIxWhcNMjUwNjE0MDkwMDIxWjAzMTEwLwYDVQQD
EyhlOGIwMmJiNjJiNTJlZGZkMjJiNTY4OTgxOWU1NzlmNjIxNTQ3ZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFNIeZixyJf2mqqQ6R9hmT4foFkB
A24Qf3BKfHaDFj1Y/sChkcGJMMTilMp5PrIQ+6nmcvb+Vc0FBqMU4stuSgn8mhgW
ZCo/BCpAdp5fxOG7P/NW7P3/C7i9BHj5XI0FtU0lTZXfJumfIw5GYHrKWlZ+NtX1
R9hdoREfH0BS58yg/QxyzmkYXptaXl58TcXuKIESIvjYlQiiJwPMIH7w1/BmlRgC
gmOFGWMPRA0897a2felATEJ3+6jMvLfbtnB7k0HX6cgsH08pXlr96VvR/DQXreDX
16VHB6VbmMM+i+2RY3oNiF2mHcoX38mc9Hkbkt5o60AmxwLO4xEdZc/PaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiwK7YrUu39IrVomBnlefYhVH/qMB8GA1UdIwQY
MBaAFHSIrDzn6R4kDK/yGcvjj88CO/K2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMmUzZDYtZjIyNi00YTdlLTg0MGQt
ZDU3NjNmZWNkNjA1LzEvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMmUzZDYtZjIyNi00YTdlLTg0MGQtZDU3NjNmZWNkNjA1
LzEvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHODqrhdS
uEoRk4W3If45SnK6NIVgBaIMQEItJaeC+NAxKOIXIjcWX09gJKJJILDRu6U/Ao7V
MPKAQ31/2N7dofr35iUipd/XJYdzjMffX8C5cDLMICk0iomFDc+1EvpqNfJK3i5R
rYAzhx5v72pDtvntyw6R0g5LSwjE02t5RXSIuWTzR0mE/urjhPbofdRXlvWC9YZY
9l03gqGXSos9F6L8woPGzDaqGE8BSRFpya5VMpFL5itXoNzCqd5+XRb8I/9py+am
/0BE1bPJz6sO92q1Ozi/5Fl+98edU9ybD55gVaKV2u6ozyUSMSJQm+3X6kiKR33T
LqqUXfZK/v5ccw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:31 2025 by rpki-client