Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File: 01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier: vSyAq7RATg+4s6Oz7BxLaRQlJlXLOVa5+8Y3sSR9qrA=
Subject key identifier: 36:E1:F8:99:F1:98:D9:78:8E:9C:BA:76:8F:D5:4A:49:8D:3B:3D:5D
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial: 01984A09C460FD856114F2821D6A1A477BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number: 050B
Signing time: Sun 27 Jul 2025 04:00:10 +0000
Manifest this update: Sun 27 Jul 2025 04:00:10 +0000
Manifest next update: Mon 28 Jul 2025 04:00:10 +0000
Files and hashes: 1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: PwrK0yrqPavAmOHlR3kUmE+L/fAgUqz4hVQ7WynAtDM=)
2: WJYo92ZVpAUd1BuZPEnAl356iuU.roa (hash: zcoBYroeH3hhjkU4dDCY2xfjvG2eq71PoTaXan33w2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:c4:60:fd:85:61:14:f2:82:1d:6a:1a:47:7b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Validity
Not Before: Jul 27 04:00:10 2025 GMT
Not After : Jul 28 04:00:10 2025 GMT
Subject: CN=36e1f899f198d9788e9cba768fd54a498d3b3d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:2f:53:69:25:06:d9:53:eb:dd:01:58:37:
e0:65:5d:13:93:99:8e:c0:05:e3:f7:a4:f7:e5:78:
dc:4e:16:da:1d:4b:bc:56:0d:1d:3d:8d:98:cc:84:
d7:0b:73:60:f8:d3:40:e9:7b:a2:a9:cf:48:a5:cf:
bb:64:bc:4a:2c:ae:25:fc:b4:78:83:5d:e4:9a:ae:
bb:35:f3:0a:54:ea:d0:9f:cd:a4:60:7d:81:f4:b9:
59:c5:73:5a:4d:3d:59:f6:47:63:99:08:24:c1:10:
c4:8f:cd:b6:0b:74:20:af:30:20:c9:50:2c:6c:89:
2b:45:f1:29:c1:c1:00:d8:ac:5f:4f:1e:b7:95:b7:
ac:ba:ca:c8:6a:b5:61:d4:f5:c6:18:3f:24:de:04:
e7:9a:b2:ba:38:46:6b:c9:95:26:13:f4:bd:f5:f7:
e1:30:fe:7d:86:2f:90:65:c2:1d:d0:b7:69:b0:ef:
30:e8:6f:30:b7:c5:f3:c5:dc:39:14:12:52:f6:2f:
f9:25:36:62:d3:5a:e1:55:66:51:0a:de:ab:af:e0:
d6:ce:05:72:ff:85:29:06:03:0f:fe:52:eb:e2:20:
ee:24:d2:3a:66:c6:13:ed:2d:57:93:df:77:bc:9a:
46:04:99:a4:c7:ca:57:f9:8c:0c:59:7f:59:99:58:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E1:F8:99:F1:98:D9:78:8E:9C:BA:76:8F:D5:4A:49:8D:3B:3D:5D
X509v3 Authority Key Identifier:
keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a2:fb:3b:9e:fb:4b:29:25:b0:58:39:3b:c2:31:48:65:b2:
b0:44:b5:e1:5f:05:06:48:13:11:1b:b8:76:64:c0:bf:43:dc:
a4:ad:43:ca:32:3d:c7:63:54:9d:a5:24:bb:32:ba:9a:38:41:
7e:d2:0e:8f:d5:59:9b:85:2b:b3:64:c4:48:12:26:17:a6:b8:
44:70:8e:e6:b7:98:80:29:c1:11:c0:e8:c0:da:6e:22:9a:f3:
09:c1:f6:c0:a6:78:03:9e:4d:d8:77:1c:f6:06:fc:03:35:02:
d0:c2:4e:df:82:64:a4:af:f3:e1:be:c3:dd:60:2d:1c:18:c0:
36:17:a6:1f:47:3d:ce:37:16:43:b6:b9:20:26:23:c5:d8:c9:
cf:33:05:0c:b3:53:a6:e7:17:1c:d6:c1:c6:a8:e6:18:af:33:
42:dc:eb:93:81:4b:43:c4:ea:94:c8:4c:d5:7f:3b:04:c9:bd:
57:3f:38:98:fa:72:ea:bd:a3:6a:7f:40:ee:af:ea:1f:fc:03:
e1:e7:1e:45:fa:3a:3a:91:9f:22:6f:fc:79:72:8d:a3:3a:bc:
66:b0:cb:1d:f5:13:8b:bb:a5:00:08:c6:ab:a2:c9:e7:af:9b:
a0:53:88:89:96:8d:93:c7:9e:76:5a:ec:a8:49:98:ed:61:50:
9c:2f:ba:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCcRg/YVhFPKCHWoaR3u4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTBiMzU3ZGNkZWU2OGZiZWJkYzU1NTNkYjMyNDljNmU4
Mjk2YzcwHhcNMjUwNzI3MDQwMDEwWhcNMjUwNzI4MDQwMDEwWjAzMTEwLwYDVQQD
EygzNmUxZjg5OWYxOThkOTc4OGU5Y2JhNzY4ZmQ1NGE0OThkM2IzZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZEvU2klBtlT690BWDfgZV0Tk5mO
wAXj96T35XjcThbaHUu8Vg0dPY2YzITXC3Ng+NNA6Xuiqc9Ipc+7ZLxKLK4l/LR4
g13kmq67NfMKVOrQn82kYH2B9LlZxXNaTT1Z9kdjmQgkwRDEj822C3QgrzAgyVAs
bIkrRfEpwcEA2KxfTx63lbesusrIarVh1PXGGD8k3gTnmrK6OEZryZUmE/S99ffh
MP59hi+QZcId0LdpsO8w6G8wt8Xzxdw5FBJS9i/5JTZi01rhVWZRCt6rr+DWzgVy
/4UpBgMP/lLr4iDuJNI6ZsYT7S1Xk993vJpGBJmkx8pX+YwMWX9ZmVgdKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbh+JnxmNl4jpy6do/VSkmNOz1dMB8GA1UdIwQY
MBaAFNNQs1fc3uaPvr3FVT2zJJxugpbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYt
ZmZlZDUzZjQ1ZGVkLzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYtZmZlZDUzZjQ1ZGVk
LzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKL7O577
SyklsFg5O8IxSGWysES14V8FBkgTERu4dmTAv0PcpK1DyjI9x2NUnaUkuzK6mjhB
ftIOj9VZm4Urs2TESBImF6a4RHCO5reYgCnBEcDowNpuIprzCcH2wKZ4A55N2Hcc
9gb8AzUC0MJO34JkpK/z4b7D3WAtHBjANhemH0c9zjcWQ7a5ICYjxdjJzzMFDLNT
pucXHNbBxqjmGK8zQtzrk4FLQ8TqlMhM1X87BMm9Vz84mPpy6r2jan9A7q/qH/wD
4eceRfo6OpGfIm/8eXKNozq8ZrDLHfUTi7ulAAjGq6LJ56+boFOIiZaNk8eedlrs
qEmY7WFQnC+6Pg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:27:37 2025 by rpki-client