Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier: R+GNJqLTNJWTqJ4CO/63qNySQ+NJWJSYAi4Fl/4tyWc=
Subject key identifier: 60:9B:E8:73:55:69:3C:2A:36:C5:CE:BB:D5:54:93:4E:09:28:DE:2D
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial: 019893A414687428D477618F1D54CADBBCCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number: 0FEF
Signing time: Sun 10 Aug 2025 11:01:00 +0000
Manifest this update: Sun 10 Aug 2025 11:01:00 +0000
Manifest next update: Mon 11 Aug 2025 11:01:00 +0000
Files and hashes: 1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: EJCe+YICbJUr+GVNqYGcE6I66hni2sqHASUlat7VIgo=)
2: Ut4z4tImR83ncGrwpXNPaCBz4dc.roa (hash: x3Tb8uXmHgRhBdCjWUywrl5EoWV8hOlCverEGcV2UXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:14:68:74:28:d4:77:61:8f:1d:54:ca:db:bc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Validity
Not Before: Aug 10 11:01:00 2025 GMT
Not After : Aug 11 11:01:00 2025 GMT
Subject: CN=609be87355693c2a36c5cebbd554934e0928de2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:3c:34:1d:d5:61:ff:b8:bb:4c:d9:20:d6:
a2:55:98:7b:80:d9:7f:43:b3:41:1d:fd:b1:d1:a0:
9d:f1:48:72:d4:e6:cf:2a:70:ed:20:52:11:fd:53:
e6:88:2a:0c:24:29:4b:d3:d4:27:14:97:05:29:b1:
b1:13:2f:b2:12:56:49:c5:c6:e0:c5:23:49:30:08:
fa:73:d8:aa:c0:52:d7:53:29:ff:2d:fa:59:9c:ec:
ae:e7:26:a8:f7:53:ee:ce:92:a5:f0:cb:ef:32:32:
de:d8:2b:6e:71:2b:76:aa:57:53:d1:5b:54:66:d6:
6a:de:13:f0:92:7d:aa:37:b5:35:ef:77:28:47:01:
56:f3:b2:01:a4:9a:21:6b:9d:98:ee:15:58:bb:91:
52:8d:90:01:d7:af:4c:56:68:33:22:2b:c0:0d:13:
9c:a5:23:7e:5f:6b:80:0e:18:a2:11:a1:73:28:4e:
44:bf:56:ca:10:0a:4b:61:3d:54:2e:27:dd:b6:e2:
89:d0:35:c8:74:f6:dd:c2:bd:eb:ca:38:c5:97:e0:
57:48:4f:8b:91:c3:ee:44:bc:e3:25:0f:3c:9e:c8:
7c:07:0d:44:0d:f1:6f:ae:67:12:7d:6f:bb:8c:db:
76:96:22:45:f9:4d:83:94:4b:f6:d4:d8:cb:02:ac:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9B:E8:73:55:69:3C:2A:36:C5:CE:BB:D5:54:93:4E:09:28:DE:2D
X509v3 Authority Key Identifier:
keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:30:d9:c5:29:70:d7:b6:d2:38:78:98:d5:09:82:82:1b:d3:
ff:b4:f9:41:26:b8:c0:5c:30:86:18:72:bd:84:55:d1:a8:02:
96:47:15:39:2a:36:ce:33:87:b7:4d:e7:a8:b9:71:87:62:d9:
c8:a1:80:a1:ec:8f:b9:ed:96:cc:c5:f3:c8:79:07:0c:5e:83:
9b:c6:93:db:51:79:3f:fe:fc:07:11:28:14:b7:6d:fe:ac:0b:
21:82:f8:76:69:fc:6c:8b:36:a9:79:92:44:ed:54:4b:81:0e:
d1:3c:9e:47:a0:ab:fe:53:e0:5d:c3:b4:82:d1:f8:67:02:a8:
88:90:82:24:d2:c5:13:7c:9e:9e:65:b0:08:e3:94:ad:15:d2:
31:98:8e:5a:7f:c4:a3:e8:3a:49:d6:5d:9f:ec:67:54:38:03:
11:9e:ff:16:df:3c:5d:44:d4:cc:0a:89:c8:dd:bf:44:14:68:
c3:88:ed:16:e3:40:02:ac:2e:40:41:87:85:d5:88:19:e7:3b:
32:31:43:01:7d:0d:6f:1c:32:8f:57:a0:ba:53:b0:58:34:b2:
41:15:2c:36:dc:2f:f9:d8:dc:f1:89:d5:67:94:8c:10:7e:02:
f3:93:85:82:3a:14:d4:c0:03:df:99:ee:b0:b6:c8:c8:f1:2e:
cc:43:96:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTpBRodCjUd2GPHVTK27zOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYTNjOGNjNjNkMGU3ZTA2OWNhNTIzZjM0ZWZiMzk1M2Vl
MjFiNjUwHhcNMjUwODEwMTEwMTAwWhcNMjUwODExMTEwMTAwWjAzMTEwLwYDVQQD
Eyg2MDliZTg3MzU1NjkzYzJhMzZjNWNlYmJkNTU0OTM0ZTA5MjhkZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrs8NB3VYf+4u0zZINaiVZh7gNl/
Q7NBHf2x0aCd8Uhy1ObPKnDtIFIR/VPmiCoMJClL09QnFJcFKbGxEy+yElZJxcbg
xSNJMAj6c9iqwFLXUyn/LfpZnOyu5yao91PuzpKl8MvvMjLe2CtucSt2qldT0VtU
ZtZq3hPwkn2qN7U173coRwFW87IBpJoha52Y7hVYu5FSjZAB169MVmgzIivADROc
pSN+X2uADhiiEaFzKE5Ev1bKEApLYT1ULifdtuKJ0DXIdPbdwr3ryjjFl+BXSE+L
kcPuRLzjJQ88nsh8Bw1EDfFvrmcSfW+7jNt2liJF+U2DlEv21NjLAqyHgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCb6HNVaTwqNsXOu9VUk04JKN4tMB8GA1UdIwQY
MBaAFNKjyMxj0OfgacpSPzTvs5U+4htlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHFQSXpHUFE1LUJweWxJX05PLXpsVDdpRzJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kMGExZmUtMGI2NS00ZDUwLWFlMmYt
MTI4OTg2OTdhODYyLzEvMHFQSXpHUFE1LUJweWxJX05PLXpsVDdpRzJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kMGExZmUtMGI2NS00ZDUwLWFlMmYtMTI4OTg2OTdhODYy
LzEvMHFQSXpHUFE1LUJweWxJX05PLXpsVDdpRzJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTDZxSlw
17bSOHiY1QmCghvT/7T5QSa4wFwwhhhyvYRV0agClkcVOSo2zjOHt03nqLlxh2LZ
yKGAoeyPue2WzMXzyHkHDF6Dm8aT21F5P/78BxEoFLdt/qwLIYL4dmn8bIs2qXmS
RO1US4EO0TyeR6Cr/lPgXcO0gtH4ZwKoiJCCJNLFE3yenmWwCOOUrRXSMZiOWn/E
o+g6SdZdn+xnVDgDEZ7/Ft88XUTUzAqJyN2/RBRow4jtFuNAAqwuQEGHhdWIGec7
MjFDAX0Nbxwyj1egulOwWDSyQRUsNtwv+djc8YnVZ5SMEH4C85OFgjoU1MAD35nu
sLbIyPEuzEOWlQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 19:48:36 2025 by rpki-client