Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: f85QPA4t50lJkkSky+seNxIv/tjI1fu+A/wKqkOQeuQ=
Subject key identifier: AB:DC:A9:5E:89:8C:F0:5C:FC:14:3B:08:04:36:8F:F6:54:12:9B:29
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 01987CE58C913CF70D0FF852C0FF380E26C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1625
Signing time: Wed 06 Aug 2025 01:01:14 +0000
Manifest this update: Wed 06 Aug 2025 01:01:14 +0000
Manifest next update: Thu 07 Aug 2025 01:01:14 +0000
Files and hashes: 1: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: 0ny9DJxqpUkaz5eAoBrdx+Vlt0YLnDBYuECE4AhRuJI=)
2: y2IPmXUvA-hOkWs492ksc-DWCKQ.roa (hash: qKtRuRd69clPPsqawIh09HUba2GRDePDsao1bLap4SI=)
3: zrX35UZIaDQ7gsBizHdrkf-Nup0.roa (hash: YG/4j+fW6PNSItLJkk/6gbwhIYXjKk9jfgVFuX7jzdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:8c:91:3c:f7:0d:0f:f8:52:c0:ff:38:0e:26:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Aug 6 01:01:14 2025 GMT
Not After : Aug 7 01:01:14 2025 GMT
Subject: CN=abdca95e898cf05cfc143b0804368ff654129b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ca:d0:7d:76:90:3e:f2:99:92:c9:80:3f:40:
d7:03:ef:30:02:01:52:2c:00:d5:6d:c1:57:45:fb:
55:e7:fc:6d:95:58:33:f0:04:d1:14:0e:6b:48:95:
b6:65:24:dc:59:a7:a1:5a:1e:ec:87:17:a9:0f:ff:
0b:c5:0b:04:89:95:c8:0d:03:a6:c8:f3:74:c9:d7:
f3:75:c0:6e:1a:3e:d3:d4:29:a3:7d:bc:06:0c:eb:
75:10:6d:08:ca:fd:d4:28:a1:e4:18:67:ae:16:85:
26:e8:7c:17:16:cc:b1:02:8c:52:a6:1d:f7:44:3f:
33:03:bc:75:a5:b3:f5:e4:5b:28:d8:71:d3:f3:21:
3b:6c:c9:0f:71:da:3d:14:2f:88:f1:93:29:68:21:
14:c0:c2:6b:1d:96:57:a2:c9:1f:5e:2d:0e:2f:94:
30:fa:96:e0:87:53:79:f5:af:93:bc:bd:8c:68:cf:
77:6e:9b:74:b8:58:2c:6d:de:68:9f:13:1e:b2:fb:
1a:ba:5a:3c:93:38:1d:b0:bc:13:c3:c6:d8:24:58:
6d:f6:73:be:04:b1:ff:7f:2d:df:6d:78:56:7f:33:
3b:34:33:06:ed:ad:86:93:50:b4:a6:c3:f3:24:e5:
02:f3:c5:7b:99:c0:f9:d0:55:c0:c9:54:c4:f4:c0:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DC:A9:5E:89:8C:F0:5C:FC:14:3B:08:04:36:8F:F6:54:12:9B:29
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5e:1d:5e:c3:51:44:f5:da:46:58:eb:5c:56:ef:af:57:58:
4e:f2:51:10:ec:46:68:88:22:ef:10:b5:c6:65:e0:f5:94:bb:
e3:7e:2f:d6:b5:fc:33:1b:55:27:32:0b:6c:37:b6:0c:a0:8c:
78:0b:5b:75:61:73:95:a1:9f:e1:1e:2e:63:ae:35:e3:c3:25:
d5:de:66:df:0a:5a:4b:84:cc:db:ad:d8:90:50:95:49:4e:92:
7b:b0:90:39:33:34:02:53:2e:6b:b4:42:6c:7c:7c:f2:d6:3f:
c3:59:08:07:6d:94:66:02:8c:36:c9:3d:28:8c:b4:b9:7e:44:
33:56:89:2a:8e:20:87:40:80:49:4c:c7:d9:03:25:29:73:43:
84:3e:83:09:2e:91:16:6e:c6:81:61:c9:a5:74:d2:16:9e:3d:
f5:53:58:51:f7:a0:13:d7:dc:54:82:40:e8:6f:e0:d0:da:be:
35:4e:c3:09:0d:65:8e:5a:ac:2f:9d:df:ac:01:4d:60:a2:0b:
b7:91:2d:f2:3c:85:67:f2:49:d0:1d:94:93:f6:fe:95:63:d7:
68:c2:a5:7b:ee:e8:ec:d3:30:86:3a:0b:02:6b:d4:70:cb:1b:
7e:76:42:59:fc:e8:41:e2:26:61:9f:2a:b9:e7:16:b7:62:d9:
e0:3f:ae:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh85YyRPPcND/hSwP84DibCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YjAyMDMwODg2NWMzMzYwZGFiMTlmM2E1NzAzMzQxODY0
ZTlmNTAwHhcNMjUwODA2MDEwMTE0WhcNMjUwODA3MDEwMTE0WjAzMTEwLwYDVQQD
EyhhYmRjYTk1ZTg5OGNmMDVjZmMxNDNiMDgwNDM2OGZmNjU0MTI5YjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksrQfXaQPvKZksmAP0DXA+8wAgFS
LADVbcFXRftV5/xtlVgz8ATRFA5rSJW2ZSTcWaehWh7shxepD/8LxQsEiZXIDQOm
yPN0ydfzdcBuGj7T1CmjfbwGDOt1EG0Iyv3UKKHkGGeuFoUm6HwXFsyxAoxSph33
RD8zA7x1pbP15Fso2HHT8yE7bMkPcdo9FC+I8ZMpaCEUwMJrHZZXoskfXi0OL5Qw
+pbgh1N59a+TvL2MaM93bpt0uFgsbd5onxMesvsaulo8kzgdsLwTw8bYJFht9nO+
BLH/fy3fbXhWfzM7NDMG7a2Gk1C0psPzJOUC88V7mcD50FXAyVTE9MDQwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvcqV6JjPBc/BQ7CAQ2j/ZUEpspMB8GA1UdIwQY
MBaAFHewIDCIZcM2DasZ86VwM0GGTp9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzIt
YzhiYjhlYTM5ODA0LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzItYzhiYjhlYTM5ODA0
LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS14dXsNR
RPXaRljrXFbvr1dYTvJREOxGaIgi7xC1xmXg9ZS7434v1rX8MxtVJzILbDe2DKCM
eAtbdWFzlaGf4R4uY64148Ml1d5m3wpaS4TM263YkFCVSU6Se7CQOTM0AlMua7RC
bHx88tY/w1kIB22UZgKMNsk9KIy0uX5EM1aJKo4gh0CASUzH2QMlKXNDhD6DCS6R
Fm7GgWHJpXTSFp499VNYUfegE9fcVIJA6G/g0Nq+NU7DCQ1ljlqsL53frAFNYKIL
t5Et8jyFZ/JJ0B2Uk/b+lWPXaMKle+7o7NMwhjoLAmvUcMsbfnZCWfzoQeImYZ8q
uecWt2LZ4D+uMg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:50:44 2025 by rpki-client