Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
File: d88I7pookZe3EQCl8AsZUB2UwJM.mft (raw, json)
Hash identifier: QUQddSMryrwax+l9XdU59UoVqFtPXm9zJPmFEw8rMlQ=
Subject key identifier: 1C:60:39:9D:AA:78:62:1C:29:88:25:20:C2:B9:A5:F2:16:B3:48:86
Authority key identifier: 77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
Certificate issuer: /CN=77cf08ee9a289197b71100a5f00b19501d94c093
Certificate serial: 019849D3738559783BC5B77A647FFE715466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
Manifest number: 0209
Signing time: Sun 27 Jul 2025 03:00:51 +0000
Manifest this update: Sun 27 Jul 2025 03:00:51 +0000
Manifest next update: Mon 28 Jul 2025 03:00:51 +0000
Files and hashes: 1: WecqEhgOSAbXZ3Im_QJkisWYch0.roa (hash: yP0d2DYh05Kav8sMdEFhk832MGjVh6BaMrRs10W9wIw=)
2: d88I7pookZe3EQCl8AsZUB2UwJM.crl (hash: I8f7Y7LdcCcFM1y77D8Psa7ioBpEeJanXtoRhKODppA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:73:85:59:78:3b:c5:b7:7a:64:7f:fe:71:54:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cf08ee9a289197b71100a5f00b19501d94c093
Validity
Not Before: Jul 27 03:00:51 2025 GMT
Not After : Jul 28 03:00:51 2025 GMT
Subject: CN=1c60399daa78621c29882520c2b9a5f216b34886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:e1:ed:d1:89:24:09:7d:30:07:d4:1d:a6:
89:2a:1b:83:06:57:48:e0:d5:f7:bc:a1:9e:a4:b2:
9d:ff:d3:75:a9:e8:31:94:88:5e:12:13:69:2e:78:
7a:7c:83:c4:22:1f:48:26:24:f5:e4:de:c5:17:93:
a9:b2:1e:b7:4b:0d:b2:83:d9:6c:22:d9:9b:a0:30:
e4:dd:32:5f:55:d7:df:e4:b1:3d:6d:e0:7b:33:97:
ea:ac:c1:2a:9e:fc:b3:4d:de:0a:f5:ed:32:cc:39:
08:a6:83:90:71:1b:9b:70:cf:f2:e3:ca:8c:d0:40:
26:22:20:02:70:67:08:98:a8:f8:4f:3c:1f:90:6b:
a7:c9:55:94:d6:2a:dd:da:3e:84:5e:68:74:31:1b:
df:c8:79:47:1a:e5:df:da:81:59:b3:6c:a7:08:c0:
1d:4d:21:c1:27:2c:59:a6:3d:2f:4a:79:4d:e1:94:
02:69:37:c0:a6:26:17:e4:3d:82:97:cb:fb:2c:7c:
e8:d2:8a:0f:d1:64:07:23:b3:22:6e:ae:20:69:fe:
e1:93:e3:50:6a:49:a8:ae:6d:3a:9f:47:69:2c:97:
bf:a4:29:90:62:21:d9:59:a2:01:07:d1:23:7a:36:
6a:8e:d6:89:e8:17:97:7b:cc:04:66:65:a4:28:36:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:60:39:9D:AA:78:62:1C:29:88:25:20:C2:B9:A5:F2:16:B3:48:86
X509v3 Authority Key Identifier:
keyid:77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4b:e3:a2:1e:22:14:ba:4e:85:7d:53:66:b0:8c:de:a7:5b:
e4:7c:be:7c:ad:81:43:bf:10:8f:07:ad:3d:4e:92:ce:dc:81:
7a:32:e2:99:b7:8d:0b:f5:99:7a:6a:ae:10:ff:ea:f2:e8:65:
02:19:f7:c3:ae:50:25:46:3c:64:d3:07:03:7d:07:f4:6c:e0:
8b:8e:e0:39:43:a2:78:68:ce:f9:70:cc:84:4a:c0:30:b4:a9:
8f:3d:94:31:be:96:68:c8:7a:fb:02:02:b7:e2:ed:1d:8a:e9:
37:e7:c8:58:d1:ef:15:d1:75:90:90:3a:36:f3:97:99:5b:fc:
f2:27:95:61:39:56:3a:73:11:8e:00:47:1f:dc:05:1a:c6:57:
e0:5f:be:2e:07:18:67:01:03:ba:f7:61:37:82:37:0a:85:9d:
89:df:90:2d:da:55:ff:a0:ac:fd:22:4f:1f:bf:77:82:5c:8b:
51:b3:79:a4:2b:78:fc:22:d9:9d:15:91:20:4b:78:b1:8b:2e:
35:e4:92:8f:02:7e:42:d2:7e:aa:5e:a8:3b:3a:d1:b2:a2:5d:
27:50:b5:05:78:24:89:7a:ea:92:76:de:42:64:5b:de:7d:0d:
1e:1e:9e:ea:b9:31:f6:98:d2:ea:d5:ca:e2:64:ce:91:dd:19:
a3:48:c3:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ03OFWXg7xbd6ZH/+cVRmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3Y2YwOGVlOWEyODkxOTdiNzExMDBhNWYwMGIxOTUwMWQ5
NGMwOTMwHhcNMjUwNzI3MDMwMDUxWhcNMjUwNzI4MDMwMDUxWjAzMTEwLwYDVQQD
EygxYzYwMzk5ZGFhNzg2MjFjMjk4ODI1MjBjMmI5YTVmMjE2YjM0ODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUjh7dGJJAl9MAfUHaaJKhuDBldI
4NX3vKGepLKd/9N1qegxlIheEhNpLnh6fIPEIh9IJiT15N7FF5Opsh63Sw2yg9ls
ItmboDDk3TJfVdff5LE9beB7M5fqrMEqnvyzTd4K9e0yzDkIpoOQcRubcM/y48qM
0EAmIiACcGcImKj4TzwfkGunyVWU1ird2j6EXmh0MRvfyHlHGuXf2oFZs2ynCMAd
TSHBJyxZpj0vSnlN4ZQCaTfApiYX5D2Cl8v7LHzo0ooP0WQHI7Mibq4gaf7hk+NQ
akmorm06n0dpLJe/pCmQYiHZWaIBB9EjejZqjtaJ6BeXe8wEZmWkKDbnpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxgOZ2qeGIcKYglIMK5pfIWs0iGMB8GA1UdIwQY
MBaAFHfPCO6aKJGXtxEApfALGVAdlMCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85Y2VlYTYtMzIxOC00YjM5LTk3YTct
Y2ZhZjZlZjg0OWQ2LzEvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85Y2VlYTYtMzIxOC00YjM5LTk3YTctY2ZhZjZlZjg0OWQ2
LzEvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0vjoh4i
FLpOhX1TZrCM3qdb5Hy+fK2BQ78QjwetPU6SztyBejLimbeNC/WZemquEP/q8uhl
Ahn3w65QJUY8ZNMHA30H9Gzgi47gOUOieGjO+XDMhErAMLSpjz2UMb6WaMh6+wIC
t+LtHYrpN+fIWNHvFdF1kJA6NvOXmVv88ieVYTlWOnMRjgBHH9wFGsZX4F++LgcY
ZwEDuvdhN4I3CoWdid+QLdpV/6Cs/SJPH793glyLUbN5pCt4/CLZnRWRIEt4sYsu
NeSSjwJ+QtJ+ql6oOzrRsqJdJ1C1BXgkiXrqknbeQmRb3n0NHh6e6rkx9pjS6tXK
4mTOkd0Zo0jDIw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:17 2025 by rpki-client