Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
File: dIisPOfpHiQMr_IZy-OPzwI78rY.mft (raw, json)
Hash identifier: DAOoI17nwfeOhlOQ1UY9beGZ0VdcDTFoNbNuYOICbmE=
Subject key identifier: E9:74:D1:88:BA:DB:01:79:98:20:4E:F1:6B:9F:9F:59:8E:5F:E2:A3
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Certificate issuer: /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial: 019922C3A10B5958B5DBC71D0C79FCA40129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
Manifest number: 0B8E
Signing time: Sun 07 Sep 2025 06:01:10 +0000
Manifest this update: Sun 07 Sep 2025 06:01:10 +0000
Manifest next update: Mon 08 Sep 2025 06:01:10 +0000
Files and hashes: 1: WUxc8OaDvlLuIRaGhHw99-2pQV8.roa (hash: pHL2ka3zZ/EpxZTpD28h5nmQm9ygfk2G3CW5wJONDzE=)
2: dIisPOfpHiQMr_IZy-OPzwI78rY.crl (hash: SfPpAc/pzBwfjx1jfmkRME10quhGbJrGFqJMcJayeIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a1:0b:59:58:b5:db:c7:1d:0c:79:fc:a4:01:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Validity
Not Before: Sep 7 06:01:10 2025 GMT
Not After : Sep 8 06:01:10 2025 GMT
Subject: CN=e974d188badb017998204ef16b9f9f598e5fe2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b5:c1:83:76:f2:d9:fc:7f:a6:21:60:ee:28:
8c:bf:66:d0:88:4e:1e:36:58:65:1c:5d:32:f6:16:
69:e3:65:7c:40:ac:53:c3:8e:7d:da:97:1d:c6:97:
8b:75:37:c2:b7:ef:25:76:c4:39:bb:c1:0e:56:30:
04:0d:45:72:d8:63:aa:e2:bb:55:be:47:47:0e:26:
de:4e:f3:07:b9:f8:67:0a:1f:1b:fc:b5:2a:3f:c0:
73:ce:66:af:90:05:c6:fc:b2:3b:70:3c:78:0a:72:
11:6b:d7:b0:86:fe:df:9f:1f:79:cf:d9:f0:3a:e5:
85:14:56:29:e3:44:0a:da:20:9e:a6:6a:e4:91:66:
90:8f:11:27:f5:49:1c:95:40:91:3d:05:13:e7:eb:
f8:4d:c6:26:eb:d3:27:d6:2c:b1:1a:64:51:9c:47:
cb:42:5c:b9:78:f1:5c:5b:e2:27:4f:fd:83:18:fe:
c1:dd:eb:7b:11:32:b7:b1:20:88:7e:b4:ad:e9:ec:
0f:12:8b:6f:e2:20:7f:f1:79:91:78:b7:b7:f1:4b:
72:0f:76:27:3a:cd:2e:36:0e:ad:c4:db:b0:ab:7d:
76:f2:52:1e:77:87:93:e2:b4:a7:ec:f0:02:76:b6:
31:d5:06:d5:29:e7:cb:ca:e9:f1:85:25:8f:73:47:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:74:D1:88:BA:DB:01:79:98:20:4E:F1:6B:9F:9F:59:8E:5F:E2:A3
X509v3 Authority Key Identifier:
keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9a:e8:28:9c:b4:09:47:b7:e2:3b:5d:c2:a2:13:50:36:3a:
a2:c8:ba:4a:93:48:e3:f0:9a:5f:cb:a4:52:a5:84:1e:03:63:
db:44:a2:f6:c5:f7:16:d4:21:74:07:10:75:01:20:a1:33:1a:
ff:e2:92:26:97:b6:cb:56:ae:4f:27:a5:07:4c:53:33:89:ac:
10:55:16:5a:86:bd:1d:72:95:75:47:ff:aa:3c:3a:52:b7:10:
34:b3:31:2f:eb:b1:08:2d:50:d1:0a:21:09:0d:1d:b6:5f:ab:
c3:0e:84:42:f9:e2:0f:c5:fb:98:75:ab:fb:2a:f6:e4:8f:64:
e0:19:02:15:f3:84:15:79:87:bf:cc:10:9f:f3:08:f2:ac:4c:
1b:d7:94:36:74:f9:c1:6b:62:9b:76:47:2f:eb:8e:58:40:78:
55:2f:4a:27:f2:fc:aa:6f:93:67:9b:03:f5:c5:fa:1f:ab:2e:
b3:02:4f:8a:54:6d:d9:2f:17:df:dc:63:89:47:74:83:7d:27:
93:24:c0:73:d4:38:83:2f:e9:f0:8f:a8:d1:58:b7:2f:df:7e:
f1:40:6c:9d:73:72:d4:ca:e3:b6:81:ea:84:3e:26:e9:f2:e8:
6a:61:25:87:7c:81:19:5b:47:ba:ee:a8:27:aa:a1:70:d8:af:
2a:91:d7:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw6ELWVi128cdDHn8pAEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODhhYzNjZTdlOTFlMjQwY2FmZjIxOWNiZTM4ZmNmMDIz
YmYyYjYwHhcNMjUwOTA3MDYwMTEwWhcNMjUwOTA4MDYwMTEwWjAzMTEwLwYDVQQD
EyhlOTc0ZDE4OGJhZGIwMTc5OTgyMDRlZjE2YjlmOWY1OThlNWZlMmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbXBg3by2fx/piFg7iiMv2bQiE4e
NlhlHF0y9hZp42V8QKxTw4592pcdxpeLdTfCt+8ldsQ5u8EOVjAEDUVy2GOq4rtV
vkdHDibeTvMHufhnCh8b/LUqP8BzzmavkAXG/LI7cDx4CnIRa9ewhv7fnx95z9nw
OuWFFFYp40QK2iCepmrkkWaQjxEn9UkclUCRPQUT5+v4TcYm69Mn1iyxGmRRnEfL
Qly5ePFcW+InT/2DGP7B3et7ETK3sSCIfrSt6ewPEotv4iB/8XmReLe38UtyD3Yn
Os0uNg6txNuwq3128lIed4eT4rSn7PACdrYx1QbVKefLyunxhSWPc0fsZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOl00Yi62wF5mCBO8Wufn1mOX+KjMB8GA1UdIwQY
MBaAFHSIrDzn6R4kDK/yGcvjj88CO/K2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMmUzZDYtZjIyNi00YTdlLTg0MGQt
ZDU3NjNmZWNkNjA1LzEvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMmUzZDYtZjIyNi00YTdlLTg0MGQtZDU3NjNmZWNkNjA1
LzEvZElpc1BPZnBIaVFNcl9JWnktT1B6d0k3OHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5roKJy0
CUe34jtdwqITUDY6osi6SpNI4/CaX8ukUqWEHgNj20Si9sX3FtQhdAcQdQEgoTMa
/+KSJpe2y1auTyelB0xTM4msEFUWWoa9HXKVdUf/qjw6UrcQNLMxL+uxCC1Q0Qoh
CQ0dtl+rww6EQvniD8X7mHWr+yr25I9k4BkCFfOEFXmHv8wQn/MI8qxMG9eUNnT5
wWtim3ZHL+uOWEB4VS9KJ/L8qm+TZ5sD9cX6H6suswJPilRt2S8X39xjiUd0g30n
kyTAc9Q4gy/p8I+o0Vi3L99+8UBsnXNy1MrjtoHqhD4m6fLoamElh3yBGVtHuu6o
J6qhcNivKpHXeg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:48 2025 by rpki-client