Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: MHJgrfz3jY3BhEO5xxCRv9RBGCmtfLpxk5ZUGOn6TZU=
Subject key identifier: 16:5F:CA:C0:9F:8C:C1:DC:DA:90:C5:33:77:8A:3D:93:19:CE:8C:38
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 01984B54B69075DFFBFDEAB2308551340196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 1422
Signing time: Sun 27 Jul 2025 10:01:39 +0000
Manifest this update: Sun 27 Jul 2025 10:01:39 +0000
Manifest next update: Mon 28 Jul 2025 10:01:39 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: 6TItROX8rooCP+fGVGRQS6b/Pai4vzbr7t64HcSKzIY=)
2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=)
3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:b6:90:75:df:fb:fd:ea:b2:30:85:51:34:01:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Jul 27 10:01:39 2025 GMT
Not After : Jul 28 10:01:39 2025 GMT
Subject: CN=165fcac09f8cc1dcda90c533778a3d9319ce8c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:a1:8f:d5:05:68:41:4f:a7:9e:85:ca:af:
61:83:6a:e1:39:da:b9:75:0e:86:eb:9f:fa:93:4a:
ac:79:28:06:dc:6a:35:b2:2a:7d:95:3f:eb:65:60:
8e:4b:7d:12:f3:d7:4f:82:69:e1:b6:6e:0c:f4:00:
f0:0d:21:c7:84:06:a0:0c:60:e2:80:36:d3:21:b7:
31:7f:04:4f:8e:14:a5:77:77:a1:37:20:99:a2:1a:
c8:93:41:8a:4f:67:67:7d:0c:16:67:b1:bc:c8:cf:
81:31:96:32:3c:57:2a:8d:fc:24:e5:19:37:57:e6:
9d:1b:4e:8c:e5:78:a1:f5:2b:8f:f6:03:1c:39:4c:
2b:18:63:42:cb:d6:14:1e:4b:65:f7:e8:de:ab:83:
de:06:a6:c3:41:36:c9:5a:8d:33:ec:0f:74:2f:f5:
b5:f3:97:b7:9f:23:b3:f8:98:ed:16:f8:18:87:5b:
2a:32:11:8c:1a:b1:a0:b9:6b:38:54:a5:45:df:1a:
29:c4:8d:68:07:16:26:27:34:c4:6d:33:d1:41:27:
61:0c:7b:6b:cf:4a:91:8b:af:d6:f0:0b:1e:f5:5b:
5c:d0:4a:a2:83:02:1e:28:6d:8f:58:87:9d:8d:a9:
ab:81:7f:7a:65:ba:8e:d9:cc:97:f4:ad:72:8d:4d:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5F:CA:C0:9F:8C:C1:DC:DA:90:C5:33:77:8A:3D:93:19:CE:8C:38
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ef:a8:26:01:63:30:56:b5:ae:8a:a9:12:22:70:2c:0a:c6:
1d:53:b0:4d:9e:bd:12:68:2d:4c:0e:d6:e0:bf:44:5c:d4:e8:
0a:66:f9:42:ef:2d:bf:d0:3d:b6:4e:fb:93:25:45:18:40:dc:
77:9b:fd:ce:52:da:c2:ab:5f:22:67:7e:6f:d5:db:9a:6d:ca:
66:93:bd:2f:da:79:0c:1c:8b:7a:3b:35:24:68:25:35:05:d5:
a8:6b:ab:15:c8:0c:93:b2:f0:87:7f:e5:6f:12:79:05:3c:c9:
27:27:65:d6:0e:54:81:ba:00:a6:b7:cc:14:57:c2:10:87:2b:
d1:74:fc:c2:11:e6:fc:9a:2d:57:93:18:be:24:81:2d:69:0b:
ce:4a:7d:88:46:5b:fa:92:f9:0b:ef:d1:dd:21:3d:e2:1a:a6:
ba:5f:38:4c:7f:00:a3:20:47:e1:bf:3c:d4:38:8d:66:3e:f7:
17:bd:6a:3c:3a:d2:e9:82:4d:63:21:51:3a:3c:e7:9e:92:07:
32:58:f0:99:42:bd:1b:4e:26:4a:66:84:ea:53:a4:50:e3:58:
08:1d:3b:6f:4b:dd:39:f3:bd:44:45:b7:47:f4:db:88:5a:a5:
ca:1a:12:18:96:25:65:de:9c:f6:e8:2b:0f:fe:d3:d1:19:2b:
dd:8b:a1:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVLaQdd/7/eqyMIVRNAGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYTdjM2JlMDZiYzQ1YzNmMTJiOTBiMTg1Mjc4YWQ0ZWM5
MTk3NTYwHhcNMjUwNzI3MTAwMTM5WhcNMjUwNzI4MTAwMTM5WjAzMTEwLwYDVQQD
EygxNjVmY2FjMDlmOGNjMWRjZGE5MGM1MzM3NzhhM2Q5MzE5Y2U4YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPGhj9UFaEFPp56Fyq9hg2rhOdq5
dQ6G65/6k0qseSgG3Go1sip9lT/rZWCOS30S89dPgmnhtm4M9ADwDSHHhAagDGDi
gDbTIbcxfwRPjhSld3ehNyCZohrIk0GKT2dnfQwWZ7G8yM+BMZYyPFcqjfwk5Rk3
V+adG06M5Xih9SuP9gMcOUwrGGNCy9YUHktl9+jeq4PeBqbDQTbJWo0z7A90L/W1
85e3nyOz+JjtFvgYh1sqMhGMGrGguWs4VKVF3xopxI1oBxYmJzTEbTPRQSdhDHtr
z0qRi6/W8Ase9Vtc0EqigwIeKG2PWIedjamrgX96ZbqO2cyX9K1yjU3ViwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZfysCfjMHc2pDFM3eKPZMZzow4MB8GA1UdIwQY
MBaAFNOnw74GvEXD8SuQsYUnitTskZdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEt
OGFhNTBkNjcwMzdjLzEvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jZWNmYjYtMDdmYi00Mjc1LWIwNmEtOGFhNTBkNjcwMzdj
LzEvMDZmRHZnYThSY1B4SzVDeGhTZUsxT3lSbDFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADu+oJgFj
MFa1roqpEiJwLArGHVOwTZ69EmgtTA7W4L9EXNToCmb5Qu8tv9A9tk77kyVFGEDc
d5v9zlLawqtfImd+b9Xbmm3KZpO9L9p5DByLejs1JGglNQXVqGurFcgMk7Lwh3/l
bxJ5BTzJJydl1g5UgboAprfMFFfCEIcr0XT8whHm/JotV5MYviSBLWkLzkp9iEZb
+pL5C+/R3SE94hqmul84TH8AoyBH4b881DiNZj73F71qPDrS6YJNYyFROjznnpIH
MljwmUK9G04mSmaE6lOkUONYCB07b0vdOfO9REW3R/TbiFqlyhoSGJYlZd6c9ugr
D/7T0Rkr3YuhlQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:26:00 2025 by rpki-client