Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
File: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft (raw, json)
Hash identifier: hY0h17ojxWQoc8Du5j0YCEeNwTR4ea8wV3MGAuISUJk=
Subject key identifier: F6:C7:6B:4D:6F:DA:74:19:52:CA:38:7E:14:DC:6A:98:2B:8A:C8:15
Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
Certificate issuer: /CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Certificate serial: 01984778682E012DE3F85344DF528FD7104A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
Manifest number: 096A
Signing time: Sat 26 Jul 2025 16:02:09 +0000
Manifest this update: Sat 26 Jul 2025 16:02:09 +0000
Manifest next update: Sun 27 Jul 2025 16:02:09 +0000
Files and hashes: 1: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl (hash: mo25LNPE9/vbQ5gqLJXl9H7LsSmxkaxeYhngotyJkss=)
2: FAudlpGk_kDfTVYbbohSs3--fwY.roa (hash: s6Wsa14pBQYCdq/M2UXC/KMh/WJZHtqOr4iUBFGtM4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:68:2e:01:2d:e3:f8:53:44:df:52:8f:d7:10:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Validity
Not Before: Jul 26 16:02:09 2025 GMT
Not After : Jul 27 16:02:09 2025 GMT
Subject: CN=f6c76b4d6fda741952ca387e14dc6a982b8ac815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8b:e9:c2:37:f0:ef:64:73:d9:dc:45:22:fd:
d5:c5:2d:0d:b7:a7:b2:d5:4d:e1:70:ba:d7:d6:a3:
d5:91:7c:8b:72:54:2c:36:7e:7b:3d:11:13:3f:59:
c2:38:02:25:c0:56:70:e1:26:c5:ae:0b:29:2d:2e:
3d:8b:c1:18:1a:6f:28:c6:17:65:c3:d9:00:3b:b5:
84:bb:49:39:fc:b8:83:96:c1:63:85:6c:63:81:fa:
12:0d:5a:8f:5f:b6:df:d7:ad:66:e6:5c:a5:d6:6e:
48:82:36:92:66:b9:90:0b:0d:4e:ff:f9:c8:c8:67:
0b:74:18:19:f6:02:ac:a2:b4:84:35:e5:a8:a0:3a:
59:0c:1d:c4:96:28:7e:f9:9c:24:ab:0f:4b:e4:96:
45:f6:e9:aa:50:e4:0c:52:7d:9a:4b:a9:ca:ba:b9:
a7:04:c9:47:ae:1b:86:75:9f:0b:60:89:2f:12:5d:
44:04:f7:e5:fa:8d:fb:5f:12:62:a9:b3:bc:0a:12:
d1:6b:47:3a:32:8e:35:b3:f4:ae:b5:26:af:3d:62:
52:80:b1:84:eb:78:71:9f:12:56:68:30:8e:e6:38:
8e:ae:fd:f6:f8:53:ce:ab:c1:ef:9f:c2:67:ba:6b:
43:7e:e5:58:19:e7:55:df:09:46:48:e5:2e:a4:a7:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C7:6B:4D:6F:DA:74:19:52:CA:38:7E:14:DC:6A:98:2B:8A:C8:15
X509v3 Authority Key Identifier:
keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:69:68:5a:47:ac:72:61:f3:a8:9d:7e:f7:02:d0:07:73:28:
a3:78:48:76:70:b1:bd:c1:eb:e6:58:99:74:af:cf:4d:74:c7:
5b:f8:2c:a7:4e:00:c1:a1:e2:69:fa:e5:96:73:e9:25:b5:73:
c2:d1:42:2c:a1:b6:ad:99:dc:71:5f:0f:45:4f:b2:d5:03:fa:
e3:27:64:0e:43:95:4c:88:dd:68:b5:a1:94:3b:04:90:d5:91:
74:49:a5:04:7f:1a:a9:47:df:91:7a:36:0d:6a:c3:1f:0c:6f:
e4:a9:c7:d9:22:13:41:07:29:80:57:8f:14:8c:f7:7b:2e:d3:
b9:79:9c:83:f9:16:12:01:6d:e1:cf:9e:9c:d1:73:4a:64:26:
f8:19:51:60:5e:1b:24:48:11:86:f8:27:e5:df:5f:63:90:98:
34:ba:d4:4e:ce:b9:74:e7:bf:df:98:e9:d0:ac:fd:f5:75:01:
bd:ee:0e:56:be:ec:5a:6b:45:ab:df:78:e8:e9:bd:bd:52:00:
90:d6:58:a0:29:a6:a2:cc:8a:a7:a8:64:f3:0f:54:54:80:d6:
43:89:56:f5:de:44:d4:fe:c8:ed:68:fe:6a:07:71:bc:db:3b:
26:71:ed:f8:05:e8:e8:8b:82:a3:14:7c:ae:7f:cb:4f:30:ff:
e6:33:c8:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeGguAS3j+FNE31KP1xBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMjU2M2VkOTk2NGU0MjY4MWExYzVkMjk1YjBjNjE0ODYw
NmU3M2QwHhcNMjUwNzI2MTYwMjA5WhcNMjUwNzI3MTYwMjA5WjAzMTEwLwYDVQQD
EyhmNmM3NmI0ZDZmZGE3NDE5NTJjYTM4N2UxNGRjNmE5ODJiOGFjODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54vpwjfw72Rz2dxFIv3VxS0Nt6ey
1U3hcLrX1qPVkXyLclQsNn57PRETP1nCOAIlwFZw4SbFrgspLS49i8EYGm8oxhdl
w9kAO7WEu0k5/LiDlsFjhWxjgfoSDVqPX7bf161m5lyl1m5IgjaSZrmQCw1O//nI
yGcLdBgZ9gKsorSENeWooDpZDB3Elih++Zwkqw9L5JZF9umqUOQMUn2aS6nKurmn
BMlHrhuGdZ8LYIkvEl1EBPfl+o37XxJiqbO8ChLRa0c6Mo41s/SutSavPWJSgLGE
63hxnxJWaDCO5jiOrv32+FPOq8Hvn8JnumtDfuVYGedV3wlGSOUupKfa/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbHa01v2nQZUso4fhTcapgrisgVMB8GA1UdIwQY
MBaAFNMlY+2ZZOQmgaHF0pWwxhSGBuc9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHlWajdabGs1Q2FCb2NYU2xiREdGSVlHNXowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82YmY1ZWQtNmZlNi00NTYyLWI4NTMt
OWE0ZWMxMDYwN2M1LzEvMHlWajdabGs1Q2FCb2NYU2xiREdGSVlHNXowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82YmY1ZWQtNmZlNi00NTYyLWI4NTMtOWE0ZWMxMDYwN2M1
LzEvMHlWajdabGs1Q2FCb2NYU2xiREdGSVlHNXowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWloWkes
cmHzqJ1+9wLQB3Moo3hIdnCxvcHr5liZdK/PTXTHW/gsp04AwaHiafrllnPpJbVz
wtFCLKG2rZnccV8PRU+y1QP64ydkDkOVTIjdaLWhlDsEkNWRdEmlBH8aqUffkXo2
DWrDHwxv5KnH2SITQQcpgFePFIz3ey7TuXmcg/kWEgFt4c+enNFzSmQm+BlRYF4b
JEgRhvgn5d9fY5CYNLrUTs65dOe/35jp0Kz99XUBve4OVr7sWmtFq9946Om9vVIA
kNZYoCmmosyKp6hk8w9UVIDWQ4lW9d5E1P7I7Wj+agdxvNs7JnHt+AXo6IuCoxR8
rn/LTzD/5jPIkw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:45:26 2025 by rpki-client