Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
File: 0cpnYQKGq3OPhs6TX99e1iDwLZY.mft (raw, json)
Hash identifier: odi7UtJOSNu3RdCPnpAsF75UW9CAzxozqpLcqMY3igY=
Subject key identifier: 2E:60:4C:A4:F7:28:35:15:7C:20:07:30:09:25:4A:17:71:B2:10:34
Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Certificate serial: 0198819DA8026752D847B876E2B2EC972052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
Manifest number: 0515
Signing time: Wed 06 Aug 2025 23:00:49 +0000
Manifest this update: Wed 06 Aug 2025 23:00:49 +0000
Manifest next update: Thu 07 Aug 2025 23:00:49 +0000
Files and hashes: 1: 0cpnYQKGq3OPhs6TX99e1iDwLZY.crl (hash: GM/U+FX0igA5/W79WN7J9jWMQ3pwvNReywdAZjtdvWM=)
2: _dBsBWq_R_HniB_oYd_SwrrifoY.roa (hash: lvPRkYEC7iItDLaOxgMbuIXZsy0MYwbc8HCCgTE8KuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:a8:02:67:52:d8:47:b8:76:e2:b2:ec:97:20:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Validity
Not Before: Aug 6 23:00:49 2025 GMT
Not After : Aug 7 23:00:49 2025 GMT
Subject: CN=2e604ca4f72835157c20073009254a1771b21034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:b6:75:cd:a9:02:04:5d:64:53:b3:6c:89:
ca:71:1f:e1:56:74:c3:4f:da:8f:67:fd:2f:e2:59:
fd:60:5f:fb:47:34:ac:5a:ee:5f:4c:2e:51:ba:ac:
3e:dd:38:92:d0:3e:49:07:28:15:11:a1:a9:1c:f9:
9b:e1:61:b5:b6:99:88:0b:83:2c:3a:88:e7:f8:66:
85:b0:3b:a9:29:42:ca:e8:cf:fd:e0:06:9b:13:b7:
01:a0:2a:02:83:33:35:fe:57:83:f1:d4:e7:9f:19:
4e:27:c2:68:87:38:d0:8c:a6:d4:ba:05:f3:52:3e:
c1:c3:c7:ac:ef:75:40:6e:d4:cb:74:3c:af:c7:73:
6b:34:ed:82:3c:54:a5:f9:c1:d3:15:d7:f8:ab:6f:
82:6d:fc:10:43:9a:2f:a0:24:8a:b2:88:22:4d:c9:
ed:34:9c:bf:4c:ef:9a:db:cf:e0:60:d6:fa:5f:08:
f8:a8:10:41:62:7c:54:8d:e4:0c:cb:86:2f:da:5c:
5b:c2:a7:55:e3:b9:82:cf:df:e2:2d:d1:d7:47:db:
17:5d:fe:af:d7:e0:fe:0d:b5:db:73:63:59:c7:a8:
74:93:cb:56:6b:69:78:93:db:9e:01:db:8c:72:1b:
e2:3e:e6:8e:8c:6d:1d:98:ba:61:7b:9e:61:3a:de:
8f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:60:4C:A4:F7:28:35:15:7C:20:07:30:09:25:4A:17:71:B2:10:34
X509v3 Authority Key Identifier:
keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:82:86:fb:ce:65:ca:21:a0:3f:11:8e:9d:a2:47:7e:08:fb:
ab:0b:52:b5:2d:92:56:d6:a5:a4:03:7f:8b:41:17:cd:c9:1f:
df:70:51:60:ea:b9:60:71:42:4c:7b:3b:bc:78:01:e1:88:d7:
80:d4:38:a5:93:8d:ab:1b:f1:33:94:bc:6e:74:fa:9d:b0:a4:
db:33:77:e2:8e:0e:51:11:e8:65:49:fd:ae:55:19:b2:a5:9f:
ca:c4:cf:f1:4a:17:6a:65:9d:00:0f:d3:2b:eb:58:c0:8e:25:
a8:86:2b:4c:6b:15:37:2d:45:00:b5:74:fd:66:16:38:10:2a:
80:6a:9a:b7:e4:9f:0d:b1:32:92:9c:fd:6f:4c:ef:17:d8:3f:
ce:89:36:91:e3:43:21:2e:7b:21:fb:26:1d:1c:e9:c2:71:97:
09:7b:19:6f:fd:1f:05:44:b3:ed:a0:88:31:51:19:2b:dd:23:
60:f2:f5:18:0a:b0:69:83:e0:40:7d:fa:47:bd:31:2e:24:9e:
98:46:46:7c:2a:5f:14:a8:12:17:cc:5a:91:5f:88:d0:1c:54:
e0:a0:74:a3:fc:43:65:ae:ae:85:59:a9:f9:8f:b2:c7:ee:5b:
06:92:e2:3d:e4:b4:10:c1:55:07:0c:be:1d:02:aa:40:5b:0f:
b9:df:59:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBnagCZ1LYR7h24rLslyBSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxY2E2NzYxMDI4NmFiNzM4Zjg2Y2U5MzVmZGY1ZWQ2MjBm
MDJkOTYwHhcNMjUwODA2MjMwMDQ5WhcNMjUwODA3MjMwMDQ5WjAzMTEwLwYDVQQD
EygyZTYwNGNhNGY3MjgzNTE1N2MyMDA3MzAwOTI1NGExNzcxYjIxMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodK2dc2pAgRdZFOzbInKcR/hVnTD
T9qPZ/0v4ln9YF/7RzSsWu5fTC5Ruqw+3TiS0D5JBygVEaGpHPmb4WG1tpmIC4Ms
Oojn+GaFsDupKULK6M/94AabE7cBoCoCgzM1/leD8dTnnxlOJ8JohzjQjKbUugXz
Uj7Bw8es73VAbtTLdDyvx3NrNO2CPFSl+cHTFdf4q2+CbfwQQ5ovoCSKsogiTcnt
NJy/TO+a28/gYNb6Xwj4qBBBYnxUjeQMy4Yv2lxbwqdV47mCz9/iLdHXR9sXXf6v
1+D+DbXbc2NZx6h0k8tWa2l4k9ueAduMchviPuaOjG0dmLphe55hOt6PLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5gTKT3KDUVfCAHMAklShdxshA0MB8GA1UdIwQY
MBaAFNHKZ2EChqtzj4bOk1/fXtYg8C2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUt
MzViZmY5NmRhNGM1LzEvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUtMzViZmY5NmRhNGM1
LzEvMGNwbllRS0dxM09QaHM2VFg5OWUxaUR3TFpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4KG+85l
yiGgPxGOnaJHfgj7qwtStS2SVtalpAN/i0EXzckf33BRYOq5YHFCTHs7vHgB4YjX
gNQ4pZONqxvxM5S8bnT6nbCk2zN34o4OURHoZUn9rlUZsqWfysTP8UoXamWdAA/T
K+tYwI4lqIYrTGsVNy1FALV0/WYWOBAqgGqat+SfDbEykpz9b0zvF9g/zok2keND
IS57IfsmHRzpwnGXCXsZb/0fBUSz7aCIMVEZK90jYPL1GAqwaYPgQH36R70xLiSe
mEZGfCpfFKgSF8xakV+I0BxU4KB0o/xDZa6uhVmp+Y+yx+5bBpLiPeS0EMFVBwy+
HQKqQFsPud9ZJw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:46:46 2025 by rpki-client