Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File: 0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier: 1L6NZSLctTMfMi8RhMRqOpefQ1Rv+OCtrgD/y3TsYao=
Subject key identifier: 50:8A:F8:9D:C8:BC:D1:CB:4E:48:55:F4:02:B5:75:D8:A9:E3:15:81
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial: 019873E21084FEE11032E6D19A28C7DC8D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number: 1612
Signing time: Mon 04 Aug 2025 07:00:51 +0000
Manifest this update: Mon 04 Aug 2025 07:00:51 +0000
Manifest next update: Tue 05 Aug 2025 07:00:51 +0000
Files and hashes: 1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: vwyEic+rTMNW7Sldcu+xMiB0uTGeB/d127cUdUprYrg=)
2: j-Iupp3EcWQfbMD2aDvdXh5buVM.roa (hash: vNF4TPFh0oVURLAenwqLDdq2RvvuTpEILFtX5lE+Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:10:84:fe:e1:10:32:e6:d1:9a:28:c7:dc:8d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Validity
Not Before: Aug 4 07:00:51 2025 GMT
Not After : Aug 5 07:00:51 2025 GMT
Subject: CN=508af89dc8bcd1cb4e4855f402b575d8a9e31581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:95:15:a4:fb:ab:95:14:20:d8:2b:fd:da:
1b:d7:9e:d9:78:30:ff:20:72:a9:8d:82:d4:42:ed:
48:77:39:02:4f:75:5d:1d:b2:ed:ed:0b:58:ae:99:
0d:95:af:a0:4a:82:5c:27:07:2b:33:18:d3:cd:65:
4d:d3:e0:f1:e5:f9:94:a6:54:87:cb:f6:3d:53:04:
a1:ec:86:9b:e4:da:e2:56:6d:a9:dc:1f:ca:fb:ff:
0e:c4:ed:20:95:b3:98:9c:5f:7c:e4:f8:a9:24:eb:
c6:3b:03:20:e3:0d:6d:6d:5a:81:72:28:da:06:d9:
75:e2:ec:1d:02:e2:4b:92:d1:07:d4:55:10:4f:5f:
d2:ca:0f:9e:5f:e2:2f:10:ef:c5:73:28:df:93:07:
ea:1a:8d:bc:04:51:1f:14:48:19:88:2b:2d:b9:70:
18:1f:41:27:f0:ad:6f:31:d2:32:3e:1b:27:33:9e:
94:ab:24:54:a9:eb:04:75:eb:79:af:10:a3:fd:a7:
da:f1:a8:ea:e1:e1:f2:1d:d2:5f:f2:3a:85:59:5b:
fc:21:7f:dd:b9:9b:b1:e1:94:5a:9b:39:6e:cc:b3:
c5:c8:fb:bd:44:d8:30:37:bf:95:02:36:ce:95:ba:
27:e4:08:db:cf:69:b2:85:ec:73:fc:26:0e:ae:a8:
0d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8A:F8:9D:C8:BC:D1:CB:4E:48:55:F4:02:B5:75:D8:A9:E3:15:81
X509v3 Authority Key Identifier:
keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:82:8d:15:01:30:40:2b:5c:20:42:bd:d7:61:5c:2c:d8:4d:
3a:db:78:a9:17:c8:a6:fa:09:3f:63:20:0d:ce:16:cd:9e:2f:
df:87:4a:25:b4:83:22:cb:00:c8:a4:74:7c:c4:18:0f:10:48:
1c:c1:74:8f:f0:05:37:e3:66:6e:ae:14:cc:29:aa:2d:4f:9e:
c4:a1:19:b2:6c:7f:bf:23:0b:40:42:a4:70:c0:2d:40:b1:a0:
1f:f8:8b:3b:f6:9c:02:0d:35:52:a6:65:7c:39:5e:07:8e:69:
c3:70:be:d2:a2:9d:93:11:e2:05:40:30:21:f8:de:b8:8b:bf:
1e:9e:2d:a8:39:33:08:a6:36:30:89:05:fe:bb:59:11:b5:4a:
9e:79:2d:f0:ae:e3:4f:1c:18:aa:7f:aa:b4:3b:67:6e:15:5c:
ff:51:f0:e2:9b:ad:a7:1a:73:a7:bf:54:2b:41:30:eb:b2:0d:
63:81:ab:44:c8:fa:6c:5c:3a:cb:d7:31:fb:99:c0:4a:81:57:
d1:04:c6:55:e7:2e:f7:7c:29:d9:17:50:ea:4c:4b:c2:99:fd:
b6:aa:78:8c:36:28:e2:e1:f9:ab:d1:56:c4:93:37:bd:03:7f:
e8:cc:99:ec:f0:1f:98:77:e2:cb:0f:8a:7c:3e:fc:a1:70:8c:
4f:d6:26:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4hCE/uEQMubRmijH3I0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjE3ZDE1ZGI1OGZlMzA2MmQxYmFkYmUwNGQzMGMxOTQ5
ZGQ1ZmYwHhcNMjUwODA0MDcwMDUxWhcNMjUwODA1MDcwMDUxWjAzMTEwLwYDVQQD
Eyg1MDhhZjg5ZGM4YmNkMWNiNGU0ODU1ZjQwMmI1NzVkOGE5ZTMxNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJWVFaT7q5UUINgr/dob157ZeDD/
IHKpjYLUQu1IdzkCT3VdHbLt7QtYrpkNla+gSoJcJwcrMxjTzWVN0+Dx5fmUplSH
y/Y9UwSh7Iab5NriVm2p3B/K+/8OxO0glbOYnF985PipJOvGOwMg4w1tbVqBcija
Btl14uwdAuJLktEH1FUQT1/Syg+eX+IvEO/FcyjfkwfqGo28BFEfFEgZiCstuXAY
H0En8K1vMdIyPhsnM56UqyRUqesEdet5rxCj/afa8ajq4eHyHdJf8jqFWVv8IX/d
uZux4ZRamzluzLPFyPu9RNgwN7+VAjbOlbon5Ajbz2myhexz/CYOrqgNhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCK+J3IvNHLTkhV9AK1ddip4xWBMB8GA1UdIwQY
MBaAFNJhfRXbWP4wYtG62+BNMMGUndX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3Mjct
NTdlMDhmNjFmMmVjLzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3MjctNTdlMDhmNjFmMmVj
LzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4KNFQEw
QCtcIEK912FcLNhNOtt4qRfIpvoJP2MgDc4WzZ4v34dKJbSDIssAyKR0fMQYDxBI
HMF0j/AFN+Nmbq4UzCmqLU+exKEZsmx/vyMLQEKkcMAtQLGgH/iLO/acAg01UqZl
fDleB45pw3C+0qKdkxHiBUAwIfjeuIu/Hp4tqDkzCKY2MIkF/rtZEbVKnnkt8K7j
TxwYqn+qtDtnbhVc/1Hw4putpxpzp79UK0Ew67INY4GrRMj6bFw6y9cx+5nASoFX
0QTGVecu93wp2RdQ6kxLwpn9tqp4jDYo4uH5q9FWxJM3vQN/6MyZ7PAfmHfiyw+K
fD78oXCMT9Ymog==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:16 2025 by rpki-client