Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
File: Jo0Q0QndkSVchN1iMHZBACN0_Do.mft (raw, json)
Hash identifier: uN0/yZT65JuozJZQoAXxZYFJLRN2L+5gqNBpu2WiDHI=
Subject key identifier: B4:1D:5D:1C:CB:0D:EC:2E:13:5B:FC:3A:73:2A:68:B8:2D:CF:25:AE
Authority key identifier: 26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
Certificate issuer: /CN=268d10d109dd91255c84dd62307641002374fc3a
Certificate serial: 019922C34FE195F23A71A15EB603BDB778EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
Manifest number: 0D67
Signing time: Sun 07 Sep 2025 06:00:49 +0000
Manifest this update: Sun 07 Sep 2025 06:00:49 +0000
Manifest next update: Mon 08 Sep 2025 06:00:49 +0000
Files and hashes: 1: Jo0Q0QndkSVchN1iMHZBACN0_Do.crl (hash: Or96p75KyvphQumUd1vsgHW3L47GSybAWZVowH0YMlc=)
2: vRZENosVd-UpUXAI72NxZZVntJk.roa (hash: 3gCkbj38/RbRsH9RtMq+iOGtDMN5uG57O65jx7at2bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:4f:e1:95:f2:3a:71:a1:5e:b6:03:bd:b7:78:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268d10d109dd91255c84dd62307641002374fc3a
Validity
Not Before: Sep 7 06:00:49 2025 GMT
Not After : Sep 8 06:00:49 2025 GMT
Subject: CN=b41d5d1ccb0dec2e135bfc3a732a68b82dcf25ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:c0:78:50:33:50:91:b6:9c:5b:0b:7a:42:
12:a9:74:c7:00:f2:90:bb:0f:0f:ff:8a:3e:44:75:
77:5c:f0:f6:1a:ac:22:7c:fe:f7:d2:96:a1:7b:63:
b8:08:42:cc:73:96:ff:b9:40:0a:a8:14:2a:0d:b3:
66:d9:49:dc:df:81:12:77:e9:50:b9:5f:7c:41:61:
7e:c3:93:3b:7a:00:f4:8d:27:3e:50:a5:23:7a:8e:
87:9e:12:fd:23:a4:77:1f:3b:40:5a:94:dd:e0:cf:
77:69:ce:18:82:48:ef:63:70:fc:89:75:a1:e5:9f:
aa:00:6f:8d:3e:88:dc:a9:e8:b9:40:c9:e4:8d:1b:
84:8c:1d:9f:cb:70:f3:8c:9c:1a:8f:10:07:89:99:
6b:72:66:ec:7d:a1:a6:7a:a0:ba:37:8e:9d:c9:8d:
7a:db:0e:9f:99:09:0b:d6:65:ea:0d:1b:25:eb:5c:
54:e0:22:70:6c:6f:44:a1:47:66:90:df:2d:a6:49:
e4:d4:f6:23:70:ed:94:03:81:24:dd:fe:c9:85:6a:
cb:b6:99:56:41:ba:92:ef:1c:57:1b:aa:d1:3a:b2:
4e:67:5d:9c:c8:82:89:61:5b:d1:dd:7c:7e:67:4a:
31:80:df:10:b9:42:70:cd:59:aa:a9:f7:0d:66:18:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1D:5D:1C:CB:0D:EC:2E:13:5B:FC:3A:73:2A:68:B8:2D:CF:25:AE
X509v3 Authority Key Identifier:
keyid:26:8D:10:D1:09:DD:91:25:5C:84:DD:62:30:76:41:00:23:74:FC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo0Q0QndkSVchN1iMHZBACN0_Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7fb7a0-2eb8-47c6-86e4-9ea286bd55fb/1/Jo0Q0QndkSVchN1iMHZBACN0_Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1e:ef:5f:3d:ef:4e:3c:a3:d3:0c:7f:91:9d:4f:d8:2f:74:
29:3d:40:37:f3:35:c9:24:55:77:44:31:f9:bd:d3:fc:4d:1e:
fc:ed:34:3e:3d:1f:51:ee:e7:46:28:5f:04:fc:ff:05:79:8a:
6b:43:a3:37:87:3f:9b:e8:80:7e:78:65:b8:7a:61:a9:2c:5d:
98:22:6d:eb:79:e2:d4:85:0a:d9:58:6a:05:6f:44:cb:ee:7d:
c4:7a:01:23:72:43:33:90:c2:75:ab:43:df:46:cf:4f:2c:1c:
ca:ed:d5:d4:dd:23:0b:d3:6f:51:53:79:57:7f:a6:de:05:1d:
75:4e:97:44:c3:12:83:6e:49:2b:0e:75:2a:f6:e2:08:c0:e8:
26:83:46:d2:59:6d:19:9b:c8:cb:29:34:86:d4:2b:0a:30:2a:
e0:c0:9e:ab:d4:47:b4:ce:cc:e5:50:00:f2:c3:e7:11:3c:3c:
5d:49:9b:0a:1c:c1:0f:04:ca:45:e7:b9:3c:29:6b:22:a3:44:
93:ad:63:e3:f4:c7:a8:69:6d:e1:7a:d9:66:34:70:1d:19:3c:
41:29:c6:15:54:80:f8:8b:e4:a2:cd:0a:c8:98:90:ef:6d:ce:
86:3f:91:f3:dc:aa:5c:b7:27:d3:ef:5d:f2:1f:cb:45:fa:10:
cb:73:bd:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw0/hlfI6caFetgO9t3jrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OGQxMGQxMDlkZDkxMjU1Yzg0ZGQ2MjMwNzY0MTAwMjM3
NGZjM2EwHhcNMjUwOTA3MDYwMDQ5WhcNMjUwOTA4MDYwMDQ5WjAzMTEwLwYDVQQD
EyhiNDFkNWQxY2NiMGRlYzJlMTM1YmZjM2E3MzJhNjhiODJkY2YyNWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiLAeFAzUJG2nFsLekISqXTHAPKQ
uw8P/4o+RHV3XPD2GqwifP730pahe2O4CELMc5b/uUAKqBQqDbNm2Unc34ESd+lQ
uV98QWF+w5M7egD0jSc+UKUjeo6HnhL9I6R3HztAWpTd4M93ac4YgkjvY3D8iXWh
5Z+qAG+NPojcqei5QMnkjRuEjB2fy3DzjJwajxAHiZlrcmbsfaGmeqC6N46dyY16
2w6fmQkL1mXqDRsl61xU4CJwbG9EoUdmkN8tpknk1PYjcO2UA4Ek3f7JhWrLtplW
QbqS7xxXG6rROrJOZ12cyIKJYVvR3Xx+Z0oxgN8QuUJwzVmqqfcNZhiHewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQdXRzLDewuE1v8OnMqaLgtzyWuMB8GA1UdIwQY
MBaAFCaNENEJ3ZElXITdYjB2QQAjdPw6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm8wUTBRbmRrU1ZjaE4xaU1IWkJBQ04wX0RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83ZmI3YTAtMmViOC00N2M2LTg2ZTQt
OWVhMjg2YmQ1NWZiLzEvSm8wUTBRbmRrU1ZjaE4xaU1IWkJBQ04wX0RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy83ZmI3YTAtMmViOC00N2M2LTg2ZTQtOWVhMjg2YmQ1NWZi
LzEvSm8wUTBRbmRrU1ZjaE4xaU1IWkJBQ04wX0RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcR7vXz3v
Tjyj0wx/kZ1P2C90KT1AN/M1ySRVd0Qx+b3T/E0e/O00Pj0fUe7nRihfBPz/BXmK
a0OjN4c/m+iAfnhluHphqSxdmCJt63ni1IUK2VhqBW9Ey+59xHoBI3JDM5DCdatD
30bPTywcyu3V1N0jC9NvUVN5V3+m3gUddU6XRMMSg25JKw51KvbiCMDoJoNG0llt
GZvIyyk0htQrCjAq4MCeq9RHtM7M5VAA8sPnETw8XUmbChzBDwTKRee5PClrIqNE
k61j4/THqGlt4XrZZjRwHRk8QSnGFVSA+Ivkos0KyJiQ723Ohj+R89yqXLcn0+9d
8h/LRfoQy3O9QA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:21 2025 by rpki-client