Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
File: d88I7pookZe3EQCl8AsZUB2UwJM.mft (raw, json)
Hash identifier: Qn9l8p4563OPOYn6RMlh4Nk6Votegm+GqfXiIYXmVoI=
Subject key identifier: 75:D4:DA:E6:8F:5E:11:07:6D:AB:6E:42:54:7C:C0:FC:BC:0A:71:DC
Authority key identifier: 77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
Certificate issuer: /CN=77cf08ee9a289197b71100a5f00b19501d94c093
Certificate serial: 01987450B776BF613338A8F2E4924A3CF1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
Manifest number: 021F
Signing time: Mon 04 Aug 2025 09:01:43 +0000
Manifest this update: Mon 04 Aug 2025 09:01:43 +0000
Manifest next update: Tue 05 Aug 2025 09:01:43 +0000
Files and hashes: 1: WecqEhgOSAbXZ3Im_QJkisWYch0.roa (hash: yP0d2DYh05Kav8sMdEFhk832MGjVh6BaMrRs10W9wIw=)
2: d88I7pookZe3EQCl8AsZUB2UwJM.crl (hash: RpxXDzw2KQyoklmS7oJYCipci6IX7+J18SNrV/fpEJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:b7:76:bf:61:33:38:a8:f2:e4:92:4a:3c:f1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cf08ee9a289197b71100a5f00b19501d94c093
Validity
Not Before: Aug 4 09:01:43 2025 GMT
Not After : Aug 5 09:01:43 2025 GMT
Subject: CN=75d4dae68f5e11076dab6e42547cc0fcbc0a71dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:8f:61:5f:16:48:f4:98:57:07:3b:b2:53:
46:dd:cf:9e:80:ab:81:62:cb:71:0d:25:91:16:2c:
22:3b:fc:5d:ab:85:55:31:9b:23:f5:26:13:3f:db:
49:82:35:4a:56:b1:b0:5e:7f:d8:45:aa:61:f5:b4:
f0:4f:40:79:d6:65:9d:48:a5:b5:0f:55:72:c9:e5:
75:8e:11:f8:e9:6e:b4:7f:99:5e:1a:0f:d2:ec:24:
e8:05:ec:f5:e9:45:28:2e:5d:6d:6e:57:2e:be:ad:
d8:dd:62:07:92:ed:f6:f6:4b:1b:38:48:3d:ef:3f:
16:6f:31:f8:22:e1:48:3f:ff:c5:3f:da:22:49:eb:
3c:4e:38:66:13:ab:db:1c:13:8d:61:ea:fa:80:cb:
7d:7c:5f:cc:7c:31:6e:0c:26:22:45:51:94:4e:0d:
5a:e0:3a:d2:30:b1:98:5e:0b:94:b6:3c:58:f6:2b:
73:db:3f:74:d8:a0:09:b6:f7:71:70:2b:97:d4:db:
30:4f:12:10:81:6e:de:75:09:13:00:8b:f9:6d:7e:
9e:e3:4b:f3:35:5f:c8:5b:62:1c:1e:b4:fb:f7:df:
13:c8:97:19:8f:ec:61:06:af:08:0a:62:bf:59:39:
57:e3:cb:1a:ea:5c:ae:f2:cd:4f:e0:96:ab:c4:75:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D4:DA:E6:8F:5E:11:07:6D:AB:6E:42:54:7C:C0:FC:BC:0A:71:DC
X509v3 Authority Key Identifier:
keyid:77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e2:39:e7:b5:b2:27:97:10:d5:99:49:32:a7:39:40:af:8e:
3a:91:3c:67:a8:b8:af:7f:f0:ee:d4:0a:cc:c8:39:12:94:d2:
97:82:c9:81:3e:41:7b:37:44:84:24:31:9b:ff:73:01:0b:3a:
33:19:80:93:e2:fe:d7:f3:0d:5d:bc:99:f9:58:8f:fa:00:8b:
b9:f4:5a:45:9a:71:4c:ae:0a:ae:3a:6c:ec:ed:99:0f:dc:ef:
ff:61:ee:c9:82:9a:94:f8:31:06:a7:e9:9b:80:35:76:37:b3:
46:eb:c2:b8:72:f4:ab:58:b7:38:80:04:2b:69:ed:42:c6:37:
6f:9e:5d:f7:47:f9:b5:06:1a:7d:1d:37:38:a0:2f:88:ed:4b:
c8:de:07:b9:55:12:df:69:9d:d1:7c:bb:02:49:e0:c7:6b:d7:
c8:4e:73:61:ea:4b:64:89:af:7b:88:68:a0:ff:b8:bd:d9:af:
81:33:41:d5:55:f0:3f:5e:d4:0a:40:f3:f1:b2:64:24:09:48:
47:b9:0c:99:7d:ca:58:d2:39:1a:3b:11:9d:b5:57:59:19:58:
ff:c2:0a:46:29:83:5e:7b:47:1a:aa:90:eb:d0:a1:44:9e:6a:
44:19:46:92:6f:ed:e2:27:c3:72:5d:87:6d:2d:c0:04:55:16:
fa:88:ec:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0ULd2v2EzOKjy5JJKPPHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3Y2YwOGVlOWEyODkxOTdiNzExMDBhNWYwMGIxOTUwMWQ5
NGMwOTMwHhcNMjUwODA0MDkwMTQzWhcNMjUwODA1MDkwMTQzWjAzMTEwLwYDVQQD
Eyg3NWQ0ZGFlNjhmNWUxMTA3NmRhYjZlNDI1NDdjYzBmY2JjMGE3MWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6GPYV8WSPSYVwc7slNG3c+egKuB
YstxDSWRFiwiO/xdq4VVMZsj9SYTP9tJgjVKVrGwXn/YRaph9bTwT0B51mWdSKW1
D1VyyeV1jhH46W60f5leGg/S7CToBez16UUoLl1tblcuvq3Y3WIHku329ksbOEg9
7z8WbzH4IuFIP//FP9oiSes8TjhmE6vbHBONYer6gMt9fF/MfDFuDCYiRVGUTg1a
4DrSMLGYXguUtjxY9itz2z902KAJtvdxcCuX1NswTxIQgW7edQkTAIv5bX6e40vz
NV/IW2IcHrT7998TyJcZj+xhBq8ICmK/WTlX48sa6lyu8s1P4JarxHWhwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXU2uaPXhEHbatuQlR8wPy8CnHcMB8GA1UdIwQY
MBaAFHfPCO6aKJGXtxEApfALGVAdlMCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85Y2VlYTYtMzIxOC00YjM5LTk3YTct
Y2ZhZjZlZjg0OWQ2LzEvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85Y2VlYTYtMzIxOC00YjM5LTk3YTctY2ZhZjZlZjg0OWQ2
LzEvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASeI557Wy
J5cQ1ZlJMqc5QK+OOpE8Z6i4r3/w7tQKzMg5EpTSl4LJgT5BezdEhCQxm/9zAQs6
MxmAk+L+1/MNXbyZ+ViP+gCLufRaRZpxTK4Krjps7O2ZD9zv/2HuyYKalPgxBqfp
m4A1djezRuvCuHL0q1i3OIAEK2ntQsY3b55d90f5tQYafR03OKAviO1LyN4HuVUS
32md0Xy7Akngx2vXyE5zYepLZImve4hooP+4vdmvgTNB1VXwP17UCkDz8bJkJAlI
R7kMmX3KWNI5GjsRnbVXWRlY/8IKRimDXntHGqqQ69ChRJ5qRBlGkm/t4ifDcl2H
bS3ABFUW+ojs7A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:38 2025 by rpki-client