
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
File: dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json)
Hash identifier: 0qOQ2ansEK6D+kZNDnqyLeUIf+YVIfduhn+dOi5zEBw=
Subject key identifier: 8E:8F:E0:22:1F:77:43:89:72:BD:E6:B4:66:0C:59:C2:5F:C4:5F:F9
Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Certificate issuer: /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Certificate serial: 01974E8E63DDBF96E4D3629C1B9E5E63D3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
Manifest number: 010B
Signing time: Sun 08 Jun 2025 08:00:43 +0000
Manifest this update: Sun 08 Jun 2025 08:00:43 +0000
Manifest next update: Mon 09 Jun 2025 08:00:43 +0000
Files and hashes: 1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: m9XbfMpmsr3ZU4fN9XXXfKaG5WS1ad2IIrkm/sM+zls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:63:dd:bf:96:e4:d3:62:9c:1b:9e:5e:63:d3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Validity
Not Before: Jun 8 08:00:43 2025 GMT
Not After : Jun 9 08:00:43 2025 GMT
Subject: CN=8e8fe0221f77438972bde6b4660c59c25fc45ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:82:97:df:d3:5c:fa:6d:5b:47:4a:d7:ef:
5b:9d:86:77:55:a3:72:ec:11:4b:0a:ed:e8:4e:7d:
77:9a:a8:4d:e0:ad:99:e6:19:cc:25:04:13:02:d8:
b1:92:55:c4:07:e1:62:84:59:5a:65:7d:8f:4b:dc:
ad:54:89:ea:e5:31:f0:bd:45:67:da:b2:bb:b3:f9:
60:4c:2e:b9:c0:b1:72:be:34:93:e0:e1:0d:55:e6:
57:22:11:48:10:59:b6:2b:1a:d6:39:7e:bb:a6:9c:
29:25:9e:25:13:72:d0:f3:a6:f9:c5:5f:d2:55:14:
f1:d0:c8:25:34:b8:f3:e6:e7:91:fd:fa:1e:3c:90:
be:59:9e:38:1b:eb:c3:21:ad:89:45:d0:1a:4d:08:
64:3d:4b:ef:c7:fb:91:53:c4:0a:dd:82:a7:04:c3:
d7:8d:15:fe:38:db:c6:5e:be:49:84:ec:52:fb:8f:
5a:3a:49:a6:8f:a2:df:3a:01:49:7f:c9:03:4c:32:
d2:2a:e6:a7:2b:be:22:0c:06:82:07:a2:0f:50:c6:
ba:87:e9:72:fb:61:fc:68:20:85:e5:3e:d0:d0:ea:
df:ba:fe:f0:88:2c:22:54:92:01:fd:e3:09:fc:5e:
24:2c:ee:b2:fb:a6:13:d8:3e:b5:55:f4:a1:0d:36:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8F:E0:22:1F:77:43:89:72:BD:E6:B4:66:0C:59:C2:5F:C4:5F:F9
X509v3 Authority Key Identifier:
keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:81:22:37:44:18:17:14:36:a7:23:60:95:42:1a:ef:be:bb:
93:8f:2f:61:95:b3:94:18:89:8e:8d:db:af:46:21:8a:61:04:
eb:36:64:4b:81:62:7c:96:73:af:af:b4:b0:6c:39:7f:f7:46:
b0:e5:cb:6b:9e:98:a5:b0:9f:b4:bd:8d:df:91:b8:f3:92:9b:
21:a1:a2:c9:b1:8d:41:f6:0e:56:6f:2e:bf:10:92:80:00:a0:
1e:5f:b4:89:73:8a:99:a1:13:86:72:ac:3f:8f:24:42:d8:12:
13:7c:33:35:a6:38:e7:b4:dc:60:23:5e:fc:f3:2b:96:45:77:
49:f2:f7:f9:91:cf:24:6f:9f:a0:72:bb:09:33:fd:3c:46:08:
0c:85:85:dc:53:89:56:f8:c3:6e:3d:32:98:02:53:21:d8:10:
76:7f:05:ad:26:54:12:64:f5:fd:51:35:5f:24:ff:70:21:6d:
df:58:3f:03:a1:df:1e:bd:0f:7e:db:59:b2:a1:75:79:03:79:
a2:a0:12:bb:27:c1:16:c2:2d:0f:4f:75:aa:f4:26:ce:30:6a:
4b:a5:9a:60:17:91:fb:44:c4:70:3f:89:7f:00:40:45:07:92:
39:04:9e:ff:1d:f9:e6:c6:41:3d:8f:dd:77:7a:c0:df:87:a4:
0f:2f:c1:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjmPdv5bk02KcG55eY9OjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTIwZWZmMWVlMWUyOGUzZGRjZmI4OWU3Y2I2ZjdkODlh
NzdjOWMwHhcNMjUwNjA4MDgwMDQzWhcNMjUwNjA5MDgwMDQzWjAzMTEwLwYDVQQD
Eyg4ZThmZTAyMjFmNzc0Mzg5NzJiZGU2YjQ2NjBjNTljMjVmYzQ1ZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCSCl9/TXPptW0dK1+9bnYZ3VaNy
7BFLCu3oTn13mqhN4K2Z5hnMJQQTAtixklXEB+FihFlaZX2PS9ytVInq5THwvUVn
2rK7s/lgTC65wLFyvjST4OENVeZXIhFIEFm2KxrWOX67ppwpJZ4lE3LQ86b5xV/S
VRTx0MglNLjz5ueR/foePJC+WZ44G+vDIa2JRdAaTQhkPUvvx/uRU8QK3YKnBMPX
jRX+ONvGXr5JhOxS+49aOkmmj6LfOgFJf8kDTDLSKuanK74iDAaCB6IPUMa6h+ly
+2H8aCCF5T7Q0Orfuv7wiCwiVJIB/eMJ/F4kLO6y+6YT2D61VfShDTbjWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6P4CIfd0OJcr3mtGYMWcJfxF/5MB8GA1UdIwQY
MBaAFHZSDv8e4eKOPdz7iefLb32Jp3ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxJT194N2g0bzQ5M1B1SjU4dHZmWW1uZkp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kZWNlNjMtZjBjMC00NjViLWFkODIt
Yzg3NTFmOTU0NTI0LzEvZGxJT194N2g0bzQ5M1B1SjU4dHZmWW1uZkp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kZWNlNjMtZjBjMC00NjViLWFkODItYzg3NTFmOTU0NTI0
LzEvZGxJT194N2g0bzQ5M1B1SjU4dHZmWW1uZkp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIEiN0QY
FxQ2pyNglUIa7767k48vYZWzlBiJjo3br0YhimEE6zZkS4FifJZzr6+0sGw5f/dG
sOXLa56YpbCftL2N35G485KbIaGiybGNQfYOVm8uvxCSgACgHl+0iXOKmaEThnKs
P48kQtgSE3wzNaY457TcYCNe/PMrlkV3SfL3+ZHPJG+foHK7CTP9PEYIDIWF3FOJ
VvjDbj0ymAJTIdgQdn8FrSZUEmT1/VE1XyT/cCFt31g/A6HfHr0PfttZsqF1eQN5
oqASuyfBFsItD091qvQmzjBqS6WaYBeR+0TEcD+JfwBARQeSOQSe/x355sZBPY/d
d3rA34ekDy/BFA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:28:06 2025 by rpki-client