Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
File: d88I7pookZe3EQCl8AsZUB2UwJM.mft (raw, json)
Hash identifier: Nq2bxA/R0gb0it5EbDCwBUY6ih+wqHDmSQWfflYLN2Q=
Subject key identifier: 0B:76:6F:35:02:38:8A:04:18:33:B4:E4:0C:EB:7B:FA:25:5B:8B:5D
Authority key identifier: 77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
Certificate issuer: /CN=77cf08ee9a289197b71100a5f00b19501d94c093
Certificate serial: 01976DAB66991C135ED38AC99685B889D689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
Manifest number: 0197
Signing time: Sat 14 Jun 2025 09:00:38 +0000
Manifest this update: Sat 14 Jun 2025 09:00:38 +0000
Manifest next update: Sun 15 Jun 2025 09:00:38 +0000
Files and hashes: 1: WecqEhgOSAbXZ3Im_QJkisWYch0.roa (hash: yP0d2DYh05Kav8sMdEFhk832MGjVh6BaMrRs10W9wIw=)
2: d88I7pookZe3EQCl8AsZUB2UwJM.crl (hash: WODUKks7trczCcr70/MdDYRmwb6NW2mB40yefluhnUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:66:99:1c:13:5e:d3:8a:c9:96:85:b8:89:d6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cf08ee9a289197b71100a5f00b19501d94c093
Validity
Not Before: Jun 14 09:00:38 2025 GMT
Not After : Jun 15 09:00:38 2025 GMT
Subject: CN=0b766f3502388a041833b4e40ceb7bfa255b8b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a0:f6:3b:0f:69:14:a3:a9:1f:4b:ad:2a:cc:
ee:99:38:10:63:6b:c2:d6:97:8c:3a:e4:9f:bf:f8:
8f:aa:35:be:a1:c8:b0:77:98:24:77:ad:f3:0f:75:
cc:2f:ed:a8:10:5f:0d:96:ce:8c:33:ac:68:ef:59:
0c:80:bb:b3:9d:41:22:72:7a:1e:69:6a:96:30:ca:
63:53:88:f1:04:09:fa:50:9c:d0:9a:68:10:42:d2:
92:08:61:fd:ed:92:97:b4:8f:f6:f4:ca:46:15:8e:
ba:3a:71:1a:e9:04:78:c7:73:6b:39:e5:8f:9f:f7:
f1:a5:2e:d0:94:d9:3b:2e:87:1e:a5:43:2d:c9:a1:
08:31:9c:89:75:96:d7:91:e8:9b:ea:c5:de:b2:be:
c6:dd:05:18:22:b3:93:ab:97:67:1a:3b:85:38:28:
c4:e1:bc:60:89:dc:4d:7c:a7:0a:b4:bd:3f:3d:b4:
77:9a:58:2a:25:cf:44:20:d1:a2:ab:7a:db:6e:06:
29:6b:16:fe:58:a8:69:4c:71:37:e8:1c:af:24:5b:
96:12:8c:e6:2b:19:eb:20:6c:8e:e1:51:e2:00:6d:
19:1b:92:9e:04:6a:d5:c9:48:34:db:ec:16:b7:d5:
d2:ce:f9:96:8b:f4:c7:b4:eb:e6:d6:ad:a7:35:29:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:76:6F:35:02:38:8A:04:18:33:B4:E4:0C:EB:7B:FA:25:5B:8B:5D
X509v3 Authority Key Identifier:
keyid:77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:08:06:58:9f:6f:1e:06:b4:d3:51:ad:dd:9f:9b:ee:b2:e1:
95:8c:9d:66:52:0d:84:2f:c3:7b:3f:c8:09:45:53:22:01:d3:
3b:90:99:6f:fa:f9:2c:f7:dc:bf:7a:cb:b1:3c:a9:37:6e:54:
4d:99:59:71:09:34:54:55:87:ce:ea:5e:f5:56:d0:3d:8a:55:
38:a6:46:42:dc:93:59:07:42:dd:1c:95:d3:58:37:8b:eb:80:
dc:02:dd:63:6c:13:de:28:e0:50:b8:7a:ad:c5:bf:c3:cc:60:
db:a1:5b:77:3d:c3:4a:21:70:6b:ef:26:1f:b2:08:d5:37:c9:
e8:14:84:26:a2:be:8c:6d:c1:eb:3d:8a:eb:9d:ec:d3:b3:cd:
81:b3:c6:79:1b:7d:16:c4:1f:7e:db:5d:2c:8c:fc:c7:92:43:
4e:54:ab:b5:34:20:38:33:d5:a8:5e:71:4f:4e:4d:0f:db:b1:
3b:ba:dd:84:b1:b2:9b:ed:99:17:c6:42:91:07:50:7b:36:73:
5c:75:49:87:b8:5e:92:65:da:2b:5e:b2:94:f9:3f:ce:46:56:
af:65:a9:25:9f:46:25:2a:10:ae:e8:7a:6a:a2:b0:1a:ee:76:
63:91:0c:e2:40:c8:1c:e7:5c:21:cd:45:3a:e5:49:ec:ff:fc:
4e:f4:c2:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq2aZHBNe04rJloW4idaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3Y2YwOGVlOWEyODkxOTdiNzExMDBhNWYwMGIxOTUwMWQ5
NGMwOTMwHhcNMjUwNjE0MDkwMDM4WhcNMjUwNjE1MDkwMDM4WjAzMTEwLwYDVQQD
EygwYjc2NmYzNTAyMzg4YTA0MTgzM2I0ZTQwY2ViN2JmYTI1NWI4YjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqD2Ow9pFKOpH0utKszumTgQY2vC
1peMOuSfv/iPqjW+ociwd5gkd63zD3XML+2oEF8Nls6MM6xo71kMgLuznUEicnoe
aWqWMMpjU4jxBAn6UJzQmmgQQtKSCGH97ZKXtI/29MpGFY66OnEa6QR4x3NrOeWP
n/fxpS7QlNk7LocepUMtyaEIMZyJdZbXkeib6sXesr7G3QUYIrOTq5dnGjuFOCjE
4bxgidxNfKcKtL0/PbR3mlgqJc9EINGiq3rbbgYpaxb+WKhpTHE36ByvJFuWEozm
KxnrIGyO4VHiAG0ZG5KeBGrVyUg02+wWt9XSzvmWi/THtOvm1q2nNSnOdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAt2bzUCOIoEGDO05Azre/olW4tdMB8GA1UdIwQY
MBaAFHfPCO6aKJGXtxEApfALGVAdlMCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85Y2VlYTYtMzIxOC00YjM5LTk3YTct
Y2ZhZjZlZjg0OWQ2LzEvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85Y2VlYTYtMzIxOC00YjM5LTk3YTctY2ZhZjZlZjg0OWQ2
LzEvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAggGWJ9v
Hga001Gt3Z+b7rLhlYydZlINhC/Dez/ICUVTIgHTO5CZb/r5LPfcv3rLsTypN25U
TZlZcQk0VFWHzupe9VbQPYpVOKZGQtyTWQdC3RyV01g3i+uA3ALdY2wT3ijgULh6
rcW/w8xg26Fbdz3DSiFwa+8mH7II1TfJ6BSEJqK+jG3B6z2K653s07PNgbPGeRt9
FsQffttdLIz8x5JDTlSrtTQgODPVqF5xT05ND9uxO7rdhLGym+2ZF8ZCkQdQezZz
XHVJh7hekmXaK16ylPk/zkZWr2WpJZ9GJSoQruh6aqKwGu52Y5EM4kDIHOdcIc1F
OuVJ7P/8TvTCqA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:52:17 2025 by rpki-client