Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: UDjDUbunkL63cTG26NR/pCUAdT43F6RVxj8HCsBvesc=
Subject key identifier: 8D:F8:7A:08:A7:30:48:C0:C4:80:E7:CC:F2:72:BB:43:00:FD:9A:EB
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 01974AB17B41E8776A3C514462DF6E97A7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 0C00
Signing time: Sat 07 Jun 2025 14:00:34 +0000
Manifest this update: Sat 07 Jun 2025 14:00:34 +0000
Manifest next update: Sun 08 Jun 2025 14:00:34 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: Xaw9H39CLUlOBaomVc8I9nBo/zM+nwMAfxeLcEoAiyU=)
2: xNx96Q3CalEzxDDmWGhbb3xTorI.roa (hash: gvLi2++gvNdVJ+GZ37QZOorhQSEvCo36oQwUoZic47Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:7b:41:e8:77:6a:3c:51:44:62:df:6e:97:a7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Jun 7 14:00:34 2025 GMT
Not After : Jun 8 14:00:34 2025 GMT
Subject: CN=8df87a08a73048c0c480e7ccf272bb4300fd9aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:d0:94:1e:a0:c2:f9:ba:0b:05:cb:c8:ab:
33:0c:dc:3e:42:79:06:c6:fe:e9:ca:80:fb:c9:31:
c7:6d:d3:30:12:52:54:f6:8c:73:9c:95:ed:b1:ca:
28:36:f1:c8:04:f7:27:5b:14:a1:ed:1d:f5:46:c6:
c7:be:6d:ce:4b:78:50:6a:bb:40:59:3f:6d:6a:b4:
f9:ea:84:83:50:70:d8:0e:1a:d1:60:35:9e:1b:3c:
86:c1:6f:48:7f:67:2b:c9:f0:49:69:d8:b2:39:20:
a7:e0:73:66:6f:47:c3:40:19:d0:6a:1b:a7:9d:17:
06:bb:b4:4c:9e:48:c7:5f:73:81:a2:1a:c8:eb:f7:
c1:ac:fe:29:21:c8:7e:e0:38:5d:2d:42:2f:e4:d5:
aa:ad:fc:b5:68:6c:08:a5:ac:b9:30:66:b4:08:ca:
7d:28:0c:f7:04:06:e9:4b:64:b5:01:af:78:99:ac:
cc:1e:e0:ca:af:df:e9:d9:2d:fc:c5:3d:c5:d8:6f:
e9:6a:a5:7d:6a:d4:5b:19:1f:e3:fe:18:c2:9f:aa:
ad:81:9d:99:24:4e:9c:49:1a:00:e6:e5:7f:d4:d6:
49:97:1d:b7:da:22:ba:24:3d:84:2d:5d:49:fb:37:
2c:11:b3:59:41:8e:d5:61:b0:e3:60:b8:ea:da:35:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F8:7A:08:A7:30:48:C0:C4:80:E7:CC:F2:72:BB:43:00:FD:9A:EB
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f2:ba:f1:da:d7:cc:15:67:5c:ce:e5:2c:e1:e3:d3:0a:12:
c5:73:cd:51:7c:99:36:2c:e5:d1:9a:d8:4c:c5:42:99:20:99:
15:7f:6d:7f:20:84:0d:a3:d0:41:46:af:85:9c:d6:9e:e8:49:
b5:c6:89:41:5b:ad:cf:0b:d8:2a:e1:10:e6:84:c2:5e:06:31:
5b:98:42:c2:b0:47:04:62:c2:a4:e9:00:f8:39:6c:ff:7d:5f:
b1:2d:8e:5c:d8:17:20:12:9f:e4:72:8a:80:45:b7:a5:39:98:
32:bf:1f:94:b1:87:d2:d4:ad:5c:ad:05:4a:5c:81:59:d9:f4:
f6:a1:04:8d:ca:50:d7:d9:f7:d7:d9:f5:a3:7e:ed:ab:07:78:
9f:a2:25:8a:00:3d:0d:bb:44:c3:59:06:37:41:ef:70:9f:f8:
56:bc:26:12:82:2b:ce:fd:89:3d:b3:a2:75:01:93:8e:e6:41:
ab:b2:8e:ae:ae:b9:7d:78:1b:5c:83:01:ca:7c:9f:02:00:6a:
61:fa:7a:63:96:f7:40:c6:dc:87:8c:a9:ff:0a:aa:c0:38:f2:
1f:85:fb:9d:49:bd:68:29:68:6b:00:76:d8:b5:93:4f:ff:4a:
8a:1e:c3:8d:56:9f:d4:b7:48:e7:ec:e3:ea:f6:44:06:d8:f1:
a4:6c:75:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsXtB6HdqPFFEYt9ul6fNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OTc3YWY1ODBjODUwY2M4YmY5MDY0OWY5YmRhOGE2YTQ4
YmYzOTYwHhcNMjUwNjA3MTQwMDM0WhcNMjUwNjA4MTQwMDM0WjAzMTEwLwYDVQQD
Eyg4ZGY4N2EwOGE3MzA0OGMwYzQ4MGU3Y2NmMjcyYmI0MzAwZmQ5YWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4zQlB6gwvm6CwXLyKszDNw+QnkG
xv7pyoD7yTHHbdMwElJU9oxznJXtscooNvHIBPcnWxSh7R31RsbHvm3OS3hQartA
WT9tarT56oSDUHDYDhrRYDWeGzyGwW9If2cryfBJadiyOSCn4HNmb0fDQBnQahun
nRcGu7RMnkjHX3OBohrI6/fBrP4pIch+4DhdLUIv5NWqrfy1aGwIpay5MGa0CMp9
KAz3BAbpS2S1Aa94mazMHuDKr9/p2S38xT3F2G/paqV9atRbGR/j/hjCn6qtgZ2Z
JE6cSRoA5uV/1NZJlx232iK6JD2ELV1J+zcsEbNZQY7VYbDjYLjq2jUV+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI34eginMEjAxIDnzPJyu0MA/ZrrMB8GA1UdIwQY
MBaAFPeXevWAyFDMi/kGSfm9qKaki/OWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iMzYxZWYtNWY2OS00YmNiLTk4M2Mt
MjExMjgwMjcyNTVkLzEvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iMzYxZWYtNWY2OS00YmNiLTk4M2MtMjExMjgwMjcyNTVk
LzEvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvK68drX
zBVnXM7lLOHj0woSxXPNUXyZNizl0ZrYTMVCmSCZFX9tfyCEDaPQQUavhZzWnuhJ
tcaJQVutzwvYKuEQ5oTCXgYxW5hCwrBHBGLCpOkA+Dls/31fsS2OXNgXIBKf5HKK
gEW3pTmYMr8flLGH0tStXK0FSlyBWdn09qEEjcpQ19n319n1o37tqwd4n6IligA9
DbtEw1kGN0HvcJ/4VrwmEoIrzv2JPbOidQGTjuZBq7KOrq65fXgbXIMBynyfAgBq
Yfp6Y5b3QMbch4yp/wqqwDjyH4X7nUm9aCloawB22LWTT/9Kih7DjVaf1LdI5+zj
6vZEBtjxpGx1+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:06 2025 by rpki-client