Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File: 987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier: VZHSIYgTkMxtjq/t7TUSrEE9XJ7Zr+Gz9fi2fVTeQ4w=
Subject key identifier: A4:32:E0:E4:F7:19:FF:11:83:00:57:37:E7:22:EC:76:3A:77:C0:D3
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer: /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial: 01984A41600895341D71CD1ACB268E61F760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number: 0DC2
Signing time: Sun 27 Jul 2025 05:00:55 +0000
Manifest this update: Sun 27 Jul 2025 05:00:55 +0000
Manifest next update: Mon 28 Jul 2025 05:00:55 +0000
Files and hashes: 1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: 2eDEXwC2W7+uFGzqGSJJyCdS1XFlZIMSQc1sOeot69k=)
2: AI1eVAvKdYB-fGkwuq_TIIbeidU.roa (hash: sKA1VCAma3ARvuIYZgQlGGFrTvogdspfkZ1qSCBQPg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:60:08:95:34:1d:71:cd:1a:cb:26:8e:61:f7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Validity
Not Before: Jul 27 05:00:55 2025 GMT
Not After : Jul 28 05:00:55 2025 GMT
Subject: CN=a432e0e4f719ff1183005737e722ec763a77c0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:94:96:fb:99:63:94:5e:7b:24:85:39:69:
70:5b:d2:db:17:70:8c:83:ef:bd:12:a0:1e:b0:b3:
ed:a9:8d:3d:f9:f2:49:7f:c4:3c:39:42:bb:84:d0:
49:80:db:a0:2f:25:6b:df:ec:84:ff:e9:07:ee:ab:
62:1a:d1:8d:11:91:9b:b3:b3:05:0d:6a:3e:dc:d0:
a4:f6:3b:32:23:01:0e:8c:d9:65:6a:1f:98:7b:9e:
0c:91:27:1e:ad:ad:49:88:ac:f5:83:be:1b:f3:c5:
97:fd:41:54:6d:c3:14:f2:08:f2:fd:b4:3f:80:85:
2b:1f:a7:1b:48:cd:4e:73:20:b3:72:8f:30:0b:77:
1c:f0:52:3c:c8:c9:03:35:5b:51:3f:d9:bf:59:99:
21:c9:ef:6a:ea:17:c6:73:25:21:2a:e7:37:bb:0f:
11:c1:38:3e:0d:e6:49:4b:b4:92:3e:3f:e2:3d:c2:
f7:39:cc:b5:0a:9c:9b:19:3c:de:45:84:37:f1:7c:
02:19:a5:9c:59:86:a2:67:88:79:27:52:f6:d7:5c:
ec:a0:f8:1c:ae:c8:9a:57:a8:42:fd:78:4e:74:ed:
1a:e1:2f:e8:30:6c:96:d1:95:e6:53:02:94:48:6b:
bc:a1:a4:40:f9:43:9b:ba:e1:97:8e:ca:5b:bc:c8:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:32:E0:E4:F7:19:FF:11:83:00:57:37:E7:22:EC:76:3A:77:C0:D3
X509v3 Authority Key Identifier:
keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c0:b4:a2:69:1a:6e:1c:48:c4:eb:d7:28:d1:8e:da:47:fb:
48:87:84:8c:3d:e4:b5:18:4b:1c:8d:73:dc:51:a4:ad:66:5f:
ac:42:42:2b:54:1e:7a:09:7c:8b:2b:e1:09:38:88:63:5c:00:
f6:79:e7:b5:39:7a:9d:d1:c1:b9:79:32:90:fa:29:32:48:44:
79:fa:5d:cc:43:90:48:11:ea:b2:1f:f5:5d:4c:0e:81:87:73:
2c:da:a3:6a:83:0e:b4:47:c9:89:de:d5:a6:81:b9:10:b1:98:
35:38:45:18:fd:84:ab:90:a5:ee:09:b1:c6:27:cf:a7:19:f0:
a9:4a:22:ac:c7:34:33:ff:4f:f8:c9:f8:b9:3d:eb:71:c8:e4:
4b:e4:ee:2f:87:3b:1d:98:fb:a0:8a:ed:e8:0a:fc:5d:f4:0b:
f2:74:96:66:3f:18:60:e4:4c:6f:ae:d1:fa:81:82:98:cb:dd:
c4:eb:4c:2a:8e:88:23:65:47:56:4f:0e:ed:6b:09:02:96:0b:
68:55:24:f6:25:17:97:51:0d:91:af:43:2c:41:dc:5f:ea:20:
ec:ac:fa:c7:41:d0:57:90:de:26:ce:a7:e8:f2:aa:90:87:88:
d9:8b:84:77:52:a6:42:6b:6c:fa:b7:ff:7d:f6:53:55:36:7c:
0b:31:02:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQWAIlTQdcc0ayyaOYfdgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3Y2VkMDIxZjk5MTRkMTJkNDE4ZDlhYTIzOGM5MzgyNWVh
NWY2MDUwHhcNMjUwNzI3MDUwMDU1WhcNMjUwNzI4MDUwMDU1WjAzMTEwLwYDVQQD
EyhhNDMyZTBlNGY3MTlmZjExODMwMDU3MzdlNzIyZWM3NjNhNzdjMGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUyUlvuZY5ReeySFOWlwW9LbF3CM
g++9EqAesLPtqY09+fJJf8Q8OUK7hNBJgNugLyVr3+yE/+kH7qtiGtGNEZGbs7MF
DWo+3NCk9jsyIwEOjNllah+Ye54MkScera1JiKz1g74b88WX/UFUbcMU8gjy/bQ/
gIUrH6cbSM1OcyCzco8wC3cc8FI8yMkDNVtRP9m/WZkhye9q6hfGcyUhKuc3uw8R
wTg+DeZJS7SSPj/iPcL3Ocy1CpybGTzeRYQ38XwCGaWcWYaiZ4h5J1L211zsoPgc
rsiaV6hC/XhOdO0a4S/oMGyW0ZXmUwKUSGu8oaRA+UObuuGXjspbvMji+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQy4OT3Gf8RgwBXN+ci7HY6d8DTMB8GA1UdIwQY
MBaAFPfO0CH5kU0S1BjZqiOMk4JepfYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83Nzg1YzMtNzk0My00YjdiLTkxOTQt
YzM4NjYxZmJmMjJhLzEvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83Nzg1YzMtNzk0My00YjdiLTkxOTQtYzM4NjYxZmJmMjJh
LzEvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8C0omka
bhxIxOvXKNGO2kf7SIeEjD3ktRhLHI1z3FGkrWZfrEJCK1Qeegl8iyvhCTiIY1wA
9nnntTl6ndHBuXkykPopMkhEefpdzEOQSBHqsh/1XUwOgYdzLNqjaoMOtEfJid7V
poG5ELGYNThFGP2Eq5Cl7gmxxifPpxnwqUoirMc0M/9P+Mn4uT3rccjkS+TuL4c7
HZj7oIrt6Ar8XfQL8nSWZj8YYORMb67R+oGCmMvdxOtMKo6II2VHVk8O7WsJApYL
aFUk9iUXl1ENka9DLEHcX+og7Kz6x0HQV5DeJs6n6PKqkIeI2YuEd1KmQmts+rf/
ffZTVTZ8CzECGA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:05 2025 by rpki-client