Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: R3gUBGv79zTo6Xo+BXw/UWzMVUCIOnx39zYkvPyHlW0=
Subject key identifier: 3F:87:EB:C8:F2:68:19:43:D1:29:D5:54:00:D8:82:26:70:D6:2A:4B
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 01988D34272208E47197075F1DD7FF1C4568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 05:01:01 +0000
Manifest this update: Sat 09 Aug 2025 05:01:01 +0000
Manifest next update: Sun 10 Aug 2025 05:01:01 +0000
Files and hashes: 1: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: kINo+MVQP4hwjgqmXIq7XerE+d5TXf6vxu4//FdA4Oo=)
2: x2Plj6HU813Gn6CnI6OWio0Ed3w.roa (hash: j+HdrBtXAtTZgu8aNGoL9Pn8S0MCOrlPhROCpWXQwvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:34:27:22:08:e4:71:97:07:5f:1d:d7:ff:1c:45:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Aug 9 05:01:01 2025 GMT
Not After : Aug 10 05:01:01 2025 GMT
Subject: CN=3f87ebc8f2681943d129d55400d8822670d62a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2d:47:bc:6d:28:0f:37:0d:bf:d6:77:09:ee:
c9:3c:1a:03:e0:af:b8:9f:c5:0a:c9:a9:ad:55:9d:
6d:17:47:c6:9d:bb:9f:29:7e:ef:9e:aa:98:fd:58:
13:c6:3c:68:b6:dc:57:e0:8c:ce:c3:4b:24:ec:51:
14:9f:c2:60:4c:33:93:6a:33:cf:b8:dc:2a:b4:9a:
a3:e6:b8:33:4b:ae:26:71:31:9a:61:62:d0:4c:2a:
8b:1a:04:68:1c:a6:9a:e5:eb:a6:94:ff:4f:be:48:
47:dd:38:ca:50:58:c3:2e:7d:d9:79:cb:1a:2b:43:
5f:5a:cf:8a:24:e8:2c:ee:de:62:1d:cc:ba:35:3e:
e5:ab:0e:7f:f5:ec:61:85:de:ed:98:d0:0d:76:93:
a8:25:f3:89:07:6e:c7:44:2f:2f:f6:52:2a:bb:67:
b6:34:1c:cb:e3:a7:9a:ac:51:66:ec:56:83:b1:02:
1d:74:40:c4:2b:fc:79:2c:b3:be:26:d2:62:b8:e1:
0c:c5:c3:11:29:8c:71:5b:b5:d0:b8:25:d7:27:08:
4a:e1:ad:a8:ed:47:2f:df:ea:74:68:9e:c9:db:ec:
c3:5a:a0:35:d3:74:21:df:81:55:b5:1d:7b:a5:61:
02:73:14:3b:5e:e1:0f:7e:ff:d9:7b:28:5c:10:c6:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:87:EB:C8:F2:68:19:43:D1:29:D5:54:00:D8:82:26:70:D6:2A:4B
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ed:ed:87:26:7f:7e:2f:87:21:d8:1b:ec:e5:eb:bd:1a:28:
67:f8:0a:6a:30:ea:70:92:12:e6:2e:55:f5:f5:bd:d0:8a:4c:
76:96:19:4c:52:43:47:52:18:2a:da:d9:dc:e1:be:2b:28:a9:
db:39:4c:98:04:19:c1:3e:74:9b:42:77:03:a2:b3:49:f1:e8:
a3:f2:2d:95:a7:7b:9d:6e:20:f3:73:09:5f:22:e6:0c:0f:9b:
1d:a7:cd:45:d6:25:31:5a:fc:a2:53:13:8d:1c:46:9f:5b:42:
a9:64:e3:ab:ec:bc:3e:fa:1c:68:47:8d:97:8b:dd:d6:4c:b5:
be:ef:a5:78:e8:e8:35:b1:1f:32:dc:ab:81:6b:a5:22:c4:61:
67:89:9f:75:f5:08:55:f6:81:db:bc:54:33:dc:40:6f:7d:71:
08:f8:04:0a:04:95:32:73:bb:7d:b3:9c:7a:d7:d1:18:fc:44:
b1:9a:1e:5c:16:6d:1e:74:09:4c:bd:e9:b5:68:07:9a:42:1c:
25:67:31:ca:ef:e5:43:28:36:80:4d:8f:b4:19:8c:7a:41:61:
d1:d4:41:8a:fc:b7:37:c3:8b:c6:d1:29:33:0a:b1:0b:a7:1c:
c9:4b:83:5d:e6:a6:e1:1a:56:01:00:df:ce:84:50:f9:9c:71:
53:04:71:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNNCciCORxlwdfHdf/HEVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzAwMGQ2N2M4ZGViNjI2MmUwMDlhOWFmZjQyMmExMDM4
ZjQ0ODkwHhcNMjUwODA5MDUwMTAxWhcNMjUwODEwMDUwMTAxWjAzMTEwLwYDVQQD
EygzZjg3ZWJjOGYyNjgxOTQzZDEyOWQ1NTQwMGQ4ODIyNjcwZDYyYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9S1HvG0oDzcNv9Z3Ce7JPBoD4K+4
n8UKyamtVZ1tF0fGnbufKX7vnqqY/VgTxjxottxX4IzOw0sk7FEUn8JgTDOTajPP
uNwqtJqj5rgzS64mcTGaYWLQTCqLGgRoHKaa5eumlP9PvkhH3TjKUFjDLn3Zecsa
K0NfWs+KJOgs7t5iHcy6NT7lqw5/9exhhd7tmNANdpOoJfOJB27HRC8v9lIqu2e2
NBzL46earFFm7FaDsQIddEDEK/x5LLO+JtJiuOEMxcMRKYxxW7XQuCXXJwhK4a2o
7Ucv3+p0aJ7J2+zDWqA103Qh34FVtR17pWECcxQ7XuEPfv/ZeyhcEMbGUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+H68jyaBlD0SnVVADYgiZw1ipLMB8GA1UdIwQY
MBaAFHlwANZ8jetiYuAJqa/0IqEDj0SJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lMmNkYWMtODkwMS00MDUyLTk1NTQt
YmFlOWQyYjI5NjAxLzEvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lMmNkYWMtODkwMS00MDUyLTk1NTQtYmFlOWQyYjI5NjAx
LzEvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+3thyZ/
fi+HIdgb7OXrvRooZ/gKajDqcJIS5i5V9fW90IpMdpYZTFJDR1IYKtrZ3OG+Kyip
2zlMmAQZwT50m0J3A6KzSfHoo/Itlad7nW4g83MJXyLmDA+bHafNRdYlMVr8olMT
jRxGn1tCqWTjq+y8PvocaEeNl4vd1ky1vu+leOjoNbEfMtyrgWulIsRhZ4mfdfUI
VfaB27xUM9xAb31xCPgECgSVMnO7fbOcetfRGPxEsZoeXBZtHnQJTL3ptWgHmkIc
JWcxyu/lQyg2gE2PtBmMekFh0dRBivy3N8OLxtEpMwqxC6ccyUuDXeam4RpWAQDf
zoRQ+ZxxUwRxhg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:13:22 2025 by rpki-client