Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: Kf3yFnTlIEKk6yfMIxiZR3n6PUDwunMejYjD0d7fE7w=
Subject key identifier: 9D:32:5A:78:35:EC:1E:AC:3E:CF:F0:F8:0B:9E:4D:6B:C2:E7:70:08
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 01987418F37B9583D133498771BDD83103AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 10BB
Signing time: Mon 04 Aug 2025 08:00:48 +0000
Manifest this update: Mon 04 Aug 2025 08:00:48 +0000
Manifest next update: Tue 05 Aug 2025 08:00:48 +0000
Files and hashes: 1: KzHfiiDg2EcCwKAmppKJC7QdUFA.roa (hash: QZ0RWt1gfijBZB5RL8yUAfB/DWbprl5d1kxp7e8kc3g=)
2: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: O1VzRUh7SiBaIutxyrq3LvMvPUdyrBuydDrbtnksnZA=)
3: kuAnd9NqWnoBzCTnx0XxXmRi7Z4.roa (hash: gmNwgm6wcIRoGUSbEH7MItCnGX2M/c/Toez7Z0Fqses=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f3:7b:95:83:d1:33:49:87:71:bd:d8:31:03:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Aug 4 08:00:48 2025 GMT
Not After : Aug 5 08:00:48 2025 GMT
Subject: CN=9d325a7835ec1eac3ecff0f80b9e4d6bc2e77008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:c8:a3:2c:28:98:ae:9b:10:d7:7d:b1:2e:
ce:69:e0:03:54:de:51:22:99:0d:eb:42:ce:f2:ef:
e1:e1:40:12:88:e0:18:b1:5c:f4:9a:b1:9b:d7:80:
66:e8:0b:e9:65:8c:db:a3:9e:d6:15:e0:4f:03:0a:
35:bd:14:30:a6:f1:f7:c5:6b:20:10:4f:2f:c9:d1:
59:fe:f5:40:41:05:37:37:fc:dc:5a:43:3a:d7:02:
21:b7:8c:52:91:c6:a3:b0:d1:71:e4:28:0d:9f:54:
b8:93:5b:3c:82:27:43:a0:88:0b:ab:b5:61:10:a1:
4e:86:61:df:69:02:59:92:c5:da:97:0b:59:c6:62:
a4:df:2e:92:62:69:fb:0f:d4:92:4d:bf:ac:1a:9d:
82:dc:05:a7:40:3f:ff:0a:ee:9f:c1:61:52:a1:7d:
f2:b8:1c:9a:18:de:ba:e0:fe:e1:94:45:ec:1a:62:
51:52:58:80:58:88:29:20:1e:2d:09:bc:7f:93:d7:
87:49:ce:33:d9:93:1d:da:66:49:b5:5e:64:3e:7c:
29:ce:b9:2a:d9:f8:4e:36:98:f3:b5:76:35:ae:a6:
81:21:88:57:2e:45:82:54:1b:40:15:48:9f:04:50:
bd:56:48:01:f0:76:0d:8d:49:ca:a8:1f:0e:8e:97:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:32:5A:78:35:EC:1E:AC:3E:CF:F0:F8:0B:9E:4D:6B:C2:E7:70:08
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5c:d0:83:5a:a2:91:f7:62:7e:3d:17:ed:2f:7d:f2:db:27:
ea:20:b5:2b:73:9a:52:e3:99:bc:5d:30:c6:b3:8a:f0:70:42:
6f:69:76:7b:5c:10:f6:9d:d8:02:88:25:b5:85:a4:68:72:cc:
08:b2:e2:c9:ef:c3:f6:0f:9d:f8:0f:4d:45:06:1f:4d:d0:6f:
d9:2b:90:f9:be:23:b8:a8:ea:d2:00:48:2c:48:0e:c2:e0:ae:
1b:f8:dc:55:74:d7:62:c4:31:28:81:6b:56:6b:df:21:8f:5b:
44:ea:94:eb:ef:14:15:db:3f:fb:9b:e1:5c:02:68:af:50:c2:
ce:fd:81:31:bc:36:20:0e:9e:50:4b:69:3b:24:ad:27:50:e8:
3c:15:ea:95:ca:2a:e7:3f:46:72:98:34:73:f2:9e:a2:7b:7b:
84:4b:78:2d:e1:27:95:3c:82:e8:72:6a:ce:5e:db:46:32:91:
9e:1b:99:2f:68:6b:86:06:c3:f9:92:3e:2a:35:87:c2:89:df:
e4:64:01:f4:43:65:21:a1:82:b0:79:28:0d:61:9d:cc:e1:1b:
fb:63:f9:8a:8d:0f:11:18:9f:d2:9c:36:9c:7f:9f:54:27:84:
0f:d4:cf:ea:a0:42:8e:b3:71:b4:a9:3d:bb:d1:2f:ad:52:a1:
8e:22:84:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GPN7lYPRM0mHcb3YMQOtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzZmYjY1NTQ2MWQ3M2ZjZjIxZTg2MTJjMzE4NzA2YTA4
OWE1YzIwHhcNMjUwODA0MDgwMDQ4WhcNMjUwODA1MDgwMDQ4WjAzMTEwLwYDVQQD
Eyg5ZDMyNWE3ODM1ZWMxZWFjM2VjZmYwZjgwYjllNGQ2YmMyZTc3MDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPLIoywomK6bENd9sS7OaeADVN5R
IpkN60LO8u/h4UASiOAYsVz0mrGb14Bm6AvpZYzbo57WFeBPAwo1vRQwpvH3xWsg
EE8vydFZ/vVAQQU3N/zcWkM61wIht4xSkcajsNFx5CgNn1S4k1s8gidDoIgLq7Vh
EKFOhmHfaQJZksXalwtZxmKk3y6SYmn7D9SSTb+sGp2C3AWnQD//Cu6fwWFSoX3y
uByaGN664P7hlEXsGmJRUliAWIgpIB4tCbx/k9eHSc4z2ZMd2mZJtV5kPnwpzrkq
2fhONpjztXY1rqaBIYhXLkWCVBtAFUifBFC9VkgB8HYNjUnKqB8OjpdNiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0yWng17B6sPs/w+AueTWvC53AIMB8GA1UdIwQY
MBaAFHfG+2VUYdc/zyHoYSwxhwagiaXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2Yt
YWIzMDgxYjJhYmE0LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZjBlMTEtNTkzYS00ZWU0LThkY2YtYWIzMDgxYjJhYmE0
LzEvZDhiN1pWUmgxel9QSWVoaExER0hCcUNKcGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFzQg1qi
kfdifj0X7S998tsn6iC1K3OaUuOZvF0wxrOK8HBCb2l2e1wQ9p3YAogltYWkaHLM
CLLiye/D9g+d+A9NRQYfTdBv2SuQ+b4juKjq0gBILEgOwuCuG/jcVXTXYsQxKIFr
VmvfIY9bROqU6+8UFds/+5vhXAJor1DCzv2BMbw2IA6eUEtpOyStJ1DoPBXqlcoq
5z9Gcpg0c/Keont7hEt4LeEnlTyC6HJqzl7bRjKRnhuZL2hrhgbD+ZI+KjWHwonf
5GQB9ENlIaGCsHkoDWGdzOEb+2P5io0PERif0pw2nH+fVCeED9TP6qBCjrNxtKk9
u9EvrVKhjiKELw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:33 2025 by rpki-client