Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json)
Hash identifier: un3XjJTKM1E+b3t/dcqL6oiXfZMvE1IaetYlCeLzv1o=
Subject key identifier: 79:A1:57:E7:A9:E7:9E:CE:43:C2:67:02:FC:FC:46:99:81:ED:C9:AB
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial: 01987A88E825273AB5E7FA03376992E77D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
Manifest number: 12CC
Signing time: Tue 05 Aug 2025 14:00:49 +0000
Manifest this update: Tue 05 Aug 2025 14:00:49 +0000
Manifest next update: Wed 06 Aug 2025 14:00:49 +0000
Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: 7cRrRfLXBjQ8BS9TTTMkecQ6uXVoXnrgMdQyTkHPxBc=)
2: J8hzJTM2uz7yXJSlk16QOqdb0iI.roa (hash: sPVr5eHmre5tC1ZjjWRY6ekKAEsqs3UiVYcFX3QHcj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:e8:25:27:3a:b5:e7:fa:03:37:69:92:e7:7d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Validity
Not Before: Aug 5 14:00:49 2025 GMT
Not After : Aug 6 14:00:49 2025 GMT
Subject: CN=79a157e7a9e79ece43c26702fcfc469981edc9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3b:83:de:e4:11:4d:09:a1:e1:56:5a:be:e7:
34:3c:0e:a7:54:99:db:c1:f6:9e:13:6e:7b:07:c9:
77:35:57:25:4e:c3:ea:b5:e8:16:2e:23:cb:47:b8:
f5:87:7b:30:87:d7:d2:16:e0:68:f7:38:4d:aa:8a:
b0:63:a8:50:ce:59:b5:82:c1:86:ea:cd:0c:d1:39:
da:bf:cb:ab:3c:fe:61:d8:f7:c5:0c:df:b8:ff:28:
24:1f:8a:5b:62:64:44:e2:ec:87:3d:f7:63:82:0d:
9a:d0:df:b6:a2:d3:cc:4a:78:72:ad:09:bc:40:4b:
69:5f:0c:9e:c7:fb:84:f9:a2:94:ee:2b:02:96:aa:
69:5a:1e:b0:b5:b5:3e:62:b6:6b:1c:6a:97:38:c7:
8b:c2:04:b5:a3:6c:bc:0e:cc:08:5b:12:67:a4:21:
e1:aa:2e:ce:83:db:da:c1:62:9f:7f:3e:2d:03:26:
9d:4d:de:e8:79:c2:96:3c:21:99:34:dd:de:52:27:
df:1d:d5:c7:1f:f5:2a:6d:06:53:61:8c:42:8b:9c:
2b:da:4e:c5:9d:e9:fa:99:f1:86:6e:3c:78:86:b0:
a2:29:d6:74:54:d5:ec:55:b9:75:03:ed:36:32:d4:
a3:e3:0c:fd:60:e0:cd:d7:c4:45:4c:46:7b:d7:03:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A1:57:E7:A9:E7:9E:CE:43:C2:67:02:FC:FC:46:99:81:ED:C9:AB
X509v3 Authority Key Identifier:
keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:aa:bf:9a:c7:72:4f:e9:9b:36:57:15:58:e9:06:42:84:40:
ce:80:af:d9:33:e4:1f:3f:96:d3:a6:82:5f:77:e2:3c:60:c4:
43:10:da:4b:61:00:20:fc:8a:4a:36:79:c4:17:bd:b4:b0:80:
d9:60:bd:c2:17:17:1f:63:3a:76:d4:e2:b1:24:a9:34:a8:55:
1b:e5:f3:57:d1:c5:1f:b1:dd:e6:b7:84:d7:67:3e:00:0d:b0:
96:62:c9:5d:74:d5:be:a4:ea:32:b1:8a:e4:bb:6d:51:7c:66:
bf:f5:8b:3d:5b:23:63:87:3a:fc:36:cf:71:13:28:37:23:eb:
29:60:c8:02:bd:a9:62:c9:cd:1d:cd:ea:4e:af:e4:44:b0:40:
2c:ba:64:2f:41:84:84:c8:44:5f:f0:45:77:75:ac:b2:06:ad:
24:0e:2f:e0:72:8c:21:a8:8b:08:d7:01:e4:bd:e4:bc:93:69:
87:24:b8:13:eb:f4:aa:d4:e0:04:28:1d:da:e9:6e:39:66:7f:
d2:5a:4c:be:71:f0:29:5a:cf:93:a8:71:91:85:78:a1:4d:0e:
fd:e7:48:f3:c9:ea:0e:08:07:75:b5:90:ea:ff:40:03:d4:ff:
84:e6:16:f0:38:0b:78:99:ef:8a:0e:8e:b2:23:f4:11:6c:18:
80:0f:b8:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iOglJzq15/oDN2mS5305MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiN2JhMmEyZjBiZmEzYTc2ZjVjOTkxYTQ3Y2Q5ODY4YzZk
MWViYmUwHhcNMjUwODA1MTQwMDQ5WhcNMjUwODA2MTQwMDQ5WjAzMTEwLwYDVQQD
Eyg3OWExNTdlN2E5ZTc5ZWNlNDNjMjY3MDJmY2ZjNDY5OTgxZWRjOWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTuD3uQRTQmh4VZavuc0PA6nVJnb
wfaeE257B8l3NVclTsPqtegWLiPLR7j1h3swh9fSFuBo9zhNqoqwY6hQzlm1gsGG
6s0M0Tnav8urPP5h2PfFDN+4/ygkH4pbYmRE4uyHPfdjgg2a0N+2otPMSnhyrQm8
QEtpXwyex/uE+aKU7isClqppWh6wtbU+YrZrHGqXOMeLwgS1o2y8DswIWxJnpCHh
qi7Og9vawWKffz4tAyadTd7oecKWPCGZNN3eUiffHdXHH/UqbQZTYYxCi5wr2k7F
nen6mfGGbjx4hrCiKdZ0VNXsVbl1A+02MtSj4wz9YODN18RFTEZ71wMofwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmhV+ep557OQ8JnAvz8RpmB7cmrMB8GA1UdIwQY
MBaAFNt7oqLwv6Onb1yZGkfNmGjG0eu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEt
ZjIyZWI2NWZjYzcyLzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEtZjIyZWI2NWZjYzcy
LzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6q/msdy
T+mbNlcVWOkGQoRAzoCv2TPkHz+W06aCX3fiPGDEQxDaS2EAIPyKSjZ5xBe9tLCA
2WC9whcXH2M6dtTisSSpNKhVG+XzV9HFH7Hd5reE12c+AA2wlmLJXXTVvqTqMrGK
5LttUXxmv/WLPVsjY4c6/DbPcRMoNyPrKWDIAr2pYsnNHc3qTq/kRLBALLpkL0GE
hMhEX/BFd3WssgatJA4v4HKMIaiLCNcB5L3kvJNphyS4E+v0qtTgBCgd2uluOWZ/
0lpMvnHwKVrPk6hxkYV4oU0O/edI88nqDggHdbWQ6v9AA9T/hOYW8DgLeJnvig6O
siP0EWwYgA+4Eg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:33:43 2025 by rpki-client