Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
File: d7yR94ozULrLv743b4gTIS0UmTE.mft (raw, json)
Hash identifier: 2rFaaINXGu/b79winsS0CH6VdVL+LCPKOd8/7c4hdEE=
Subject key identifier: F3:6E:DA:CA:A4:B2:8F:6C:D8:E2:82:E9:4B:9F:56:E2:F0:18:5D:7D
Authority key identifier: 77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
Certificate issuer: /CN=77bc91f78a3350bacbbfbe376f8813212d149931
Certificate serial: 01974BFB98CB2506AF9F840258E556F89F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 20:01:09 +0000
Manifest this update: Sat 07 Jun 2025 20:01:09 +0000
Manifest next update: Sun 08 Jun 2025 20:01:09 +0000
Files and hashes: 1: 1-1kKr9VJ8bw_SUqQcMUBecH1TKg.roa (hash: 3o6hb5np+9u5Gu9cp0jYxsJnhLz7Y1oIDpNf2dIi2oE=)
2: d7yR94ozULrLv743b4gTIS0UmTE.crl (hash: U4Qt4msX1z19bHgoylEUkEWu8WfZgog+EyHRNJg06r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:98:cb:25:06:af:9f:84:02:58:e5:56:f8:9f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc91f78a3350bacbbfbe376f8813212d149931
Validity
Not Before: Jun 7 20:01:09 2025 GMT
Not After : Jun 8 20:01:09 2025 GMT
Subject: CN=f36edacaa4b28f6cd8e282e94b9f56e2f0185d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:0c:de:f3:f3:d7:87:18:96:d2:7d:b8:dc:
d6:2c:a9:e4:30:19:94:e6:db:9a:87:21:95:78:49:
b1:7f:0e:4b:d8:11:08:73:93:38:b1:17:f3:4f:4e:
df:3d:be:d5:7e:4d:6b:a4:83:f5:41:49:62:c1:7a:
ce:46:69:a7:de:85:88:7e:16:db:8c:4a:d7:71:97:
ac:cc:e9:9b:3d:72:cd:30:a2:ca:9f:a3:10:06:fc:
47:2a:73:68:4e:09:5b:d7:26:29:1c:82:16:8c:98:
a2:4f:cc:26:bc:48:2b:f2:c1:8f:9b:b0:9b:16:d4:
6d:25:0f:6a:96:92:a3:29:d3:e3:71:02:14:5d:08:
41:d0:49:a5:41:b2:ee:ab:97:36:2e:62:bf:5b:15:
af:09:11:2f:25:20:19:ba:fc:92:9c:90:24:e1:22:
5e:5a:11:7a:15:c9:43:2c:3e:6d:4c:ae:44:95:b0:
79:e0:8d:d8:a8:85:64:bc:1e:4d:f6:22:98:c2:7b:
43:73:8d:4b:f5:06:60:a4:5d:a4:8d:ab:90:93:87:
f6:b0:46:96:17:05:36:29:c7:ae:fe:78:ec:0a:58:
99:12:f7:56:bb:c2:0d:cf:ce:d9:6b:49:71:c8:71:
f7:c8:f0:3d:37:43:81:78:c6:85:6c:93:8d:f5:cf:
7a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6E:DA:CA:A4:B2:8F:6C:D8:E2:82:E9:4B:9F:56:E2:F0:18:5D:7D
X509v3 Authority Key Identifier:
keyid:77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5a:4b:04:8d:db:c8:30:df:3d:6e:95:bb:06:10:63:ef:ab:
c0:da:6c:a3:6b:42:81:ae:c0:ad:79:9d:74:db:23:7f:4d:80:
8a:23:08:06:1f:76:06:03:de:3d:fd:b8:f9:bf:04:03:32:3c:
f2:27:de:09:05:f0:6f:5a:95:65:fa:e9:91:57:13:16:5b:59:
d3:3d:ac:be:2b:82:61:60:8a:b9:c4:e7:ac:99:cd:0c:5d:94:
b2:40:31:0b:5a:b4:59:c6:42:f1:ba:25:cf:59:cd:ef:61:d3:
58:54:75:5e:0a:af:ce:22:37:cc:bb:db:50:61:ea:c4:08:26:
eb:d6:f8:81:57:cb:00:18:a6:81:50:8d:ac:af:7c:b8:61:45:
56:5e:48:d7:fc:ba:67:9f:41:98:b4:64:e7:29:df:42:3e:10:
ef:0e:0c:2f:ee:2d:6c:aa:13:2c:43:a9:1f:fc:08:ea:65:07:
ff:39:2e:f2:1b:8c:f1:a3:ab:92:f0:aa:be:7d:1b:fa:c5:b4:
c4:23:bc:25:88:10:b0:21:93:8c:a7:c0:13:a9:ea:10:ea:a5:
28:43:89:a8:13:36:59:a8:cf:a8:26:a4:2f:53:b1:1a:ec:23:
36:8f:57:74:23:3b:fc:ae:af:52:51:d6:ed:c0:74:1b:ea:10:
a1:3d:86:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+5jLJQavn4QCWOVW+J8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmM5MWY3OGEzMzUwYmFjYmJmYmUzNzZmODgxMzIxMmQx
NDk5MzEwHhcNMjUwNjA3MjAwMTA5WhcNMjUwNjA4MjAwMTA5WjAzMTEwLwYDVQQD
EyhmMzZlZGFjYWE0YjI4ZjZjZDhlMjgyZTk0YjlmNTZlMmYwMTg1ZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdQM3vPz14cYltJ9uNzWLKnkMBmU
5tuahyGVeEmxfw5L2BEIc5M4sRfzT07fPb7Vfk1rpIP1QUliwXrORmmn3oWIfhbb
jErXcZeszOmbPXLNMKLKn6MQBvxHKnNoTglb1yYpHIIWjJiiT8wmvEgr8sGPm7Cb
FtRtJQ9qlpKjKdPjcQIUXQhB0EmlQbLuq5c2LmK/WxWvCREvJSAZuvySnJAk4SJe
WhF6FclDLD5tTK5ElbB54I3YqIVkvB5N9iKYwntDc41L9QZgpF2kjauQk4f2sEaW
FwU2Kceu/njsCliZEvdWu8INz87Za0lxyHH3yPA9N0OBeMaFbJON9c96hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNu2sqkso9s2OKC6UufVuLwGF19MB8GA1UdIwQY
MBaAFHe8kfeKM1C6y7++N2+IEyEtFJkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mOTJiOWYtNDc1OC00NDI4LWEyMmMt
OWRiNTdjM2ZlNDFkLzEvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mOTJiOWYtNDc1OC00NDI4LWEyMmMtOWRiNTdjM2ZlNDFk
LzEvZDd5Ujk0b3pVTHJMdjc0M2I0Z1RJUzBVbVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFpLBI3b
yDDfPW6VuwYQY++rwNpso2tCga7ArXmddNsjf02AiiMIBh92BgPePf24+b8EAzI8
8ifeCQXwb1qVZfrpkVcTFltZ0z2sviuCYWCKucTnrJnNDF2UskAxC1q0WcZC8bol
z1nN72HTWFR1XgqvziI3zLvbUGHqxAgm69b4gVfLABimgVCNrK98uGFFVl5I1/y6
Z59BmLRk5ynfQj4Q7w4ML+4tbKoTLEOpH/wI6mUH/zku8huM8aOrkvCqvn0b+sW0
xCO8JYgQsCGTjKfAE6nqEOqlKEOJqBM2WajPqCakL1OxGuwjNo9XdCM7/K6vUlHW
7cB0G+oQoT2GOA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:02:16 2025 by rpki-client