Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
File: 87qQxx60ywFpyUhD5ccv13dQGQY.mft (raw, json)
Hash identifier: E7h2ujXfhU4N/wr1ulK//UKGxuGX9zm6q/mo6GEx1VE=
Subject key identifier: 2F:75:48:F2:35:34:D1:CE:AE:3F:D2:E1:69:0C:8C:DE:24:34:E6:5B
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial: 01974F6A6B90A4A6E72BDF6C8EE534E0860B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
Manifest number: 13D7
Signing time: Sun 08 Jun 2025 12:01:03 +0000
Manifest this update: Sun 08 Jun 2025 12:01:03 +0000
Manifest next update: Mon 09 Jun 2025 12:01:03 +0000
Files and hashes: 1: 87qQxx60ywFpyUhD5ccv13dQGQY.crl (hash: szeqo7CoJrw9/ln8HADTi5Lk28We4axNTba9RBgM8Bk=)
2: JysSz_R1K3TNaznJ02DbQNBve_s.roa (hash: BaOSaAFh8MSaQI0AxI9H+YSRs1439Nfg5CR//S5kRHM=)
3: cPSt1cBK1yUkGNEnPd-jB0H0f98.roa (hash: 6XTiW18fxhFDL+0aNweHaTDamcOXmMJdNCPIYbjuHV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:6b:90:a4:a6:e7:2b:df:6c:8e:e5:34:e0:86:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Validity
Not Before: Jun 8 12:01:03 2025 GMT
Not After : Jun 9 12:01:03 2025 GMT
Subject: CN=2f7548f23534d1ceae3fd2e1690c8cde2434e65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cd:83:4f:5f:e0:ba:02:42:37:07:b7:86:22:
78:5f:40:d3:a3:a3:49:1e:5e:23:b9:4b:d2:f6:50:
1c:4a:0f:38:23:d4:41:a7:43:e9:3b:0d:7f:9e:17:
5e:09:a2:7a:2b:5a:ff:c8:9c:e5:1b:00:35:72:7f:
50:c0:75:da:ac:98:30:21:33:52:57:56:a5:9f:68:
3c:57:f1:58:80:29:27:c4:cc:23:39:91:61:c1:39:
13:4b:96:fd:e6:44:d3:4c:7e:27:af:f3:bd:1e:bc:
8c:05:d0:9d:aa:b3:a3:2a:41:99:d3:87:ba:ee:d9:
73:32:1f:90:42:c7:cc:b2:71:4e:31:aa:44:4e:e7:
30:0f:64:ef:16:f0:d7:e8:00:df:e2:32:9e:f4:b7:
c8:fb:b5:d1:92:3b:94:8d:cd:66:bb:7e:6a:6a:27:
78:5f:00:f0:1e:9f:3f:ff:85:31:dc:b3:ba:7a:0d:
7e:16:38:e1:93:45:dd:0e:8e:37:d9:bb:20:53:f3:
dc:20:ba:29:b7:00:ff:20:10:56:29:2a:67:87:86:
29:d7:14:ae:8d:bc:36:ce:dc:a2:2d:d9:ea:db:43:
d7:21:95:ba:40:13:24:6e:92:ac:68:c0:46:e9:5b:
42:6a:4d:70:c2:0b:06:da:9e:00:61:2c:e4:55:3c:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:75:48:F2:35:34:D1:CE:AE:3F:D2:E1:69:0C:8C:DE:24:34:E6:5B
X509v3 Authority Key Identifier:
keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d5:fa:6b:25:4e:e6:3e:c1:ad:68:7c:99:14:c4:b0:79:3c:
e6:3d:c7:5d:fb:ba:ea:69:7a:75:e7:74:90:1a:93:ca:e2:8c:
92:54:7c:0d:e7:ea:10:6c:e7:6e:8e:51:04:43:3b:f2:40:e6:
01:78:88:32:c2:8a:08:53:31:96:d4:a1:f3:ee:61:30:4b:55:
0b:8e:fe:27:e1:22:31:b1:28:7e:12:c7:dc:0b:1c:4c:07:42:
6b:0e:9a:a0:c5:71:fb:d9:9d:2a:d4:dd:d3:56:d2:3e:77:76:
2c:1e:ec:e7:e9:29:f3:e3:99:69:df:b7:af:f8:7d:97:18:e5:
71:12:5f:a6:b8:cd:fd:fd:f2:b5:87:e2:69:9b:73:4d:67:97:
60:ee:e6:08:09:42:e1:f4:92:cc:fd:8a:74:48:57:3e:a4:28:
08:ec:d0:5b:2a:3a:d9:66:4c:c7:47:f4:cb:32:09:38:dd:53:
af:a2:d1:c2:81:0b:b9:f1:5e:c6:de:3b:a7:4e:2a:37:41:f1:
48:19:8f:89:f3:da:5e:02:d0:a9:8e:3a:94:e8:50:c5:6f:ff:
3d:41:71:db:f9:2d:ab:e0:83:dc:0d:5c:45:2e:5b:07:f5:5d:
f9:82:e9:6e:1d:f0:a7:14:65:29:f9:1b:2d:d1:c3:ca:54:de:
b0:13:a7:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPamuQpKbnK99sjuU04IYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYmE5MGM3MWViNGNiMDE2OWM5NDg0M2U1YzcyZmQ3Nzc1
MDE5MDYwHhcNMjUwNjA4MTIwMTAzWhcNMjUwNjA5MTIwMTAzWjAzMTEwLwYDVQQD
EygyZjc1NDhmMjM1MzRkMWNlYWUzZmQyZTE2OTBjOGNkZTI0MzRlNjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc2DT1/gugJCNwe3hiJ4X0DTo6NJ
Hl4juUvS9lAcSg84I9RBp0PpOw1/nhdeCaJ6K1r/yJzlGwA1cn9QwHXarJgwITNS
V1aln2g8V/FYgCknxMwjOZFhwTkTS5b95kTTTH4nr/O9HryMBdCdqrOjKkGZ04e6
7tlzMh+QQsfMsnFOMapETucwD2TvFvDX6ADf4jKe9LfI+7XRkjuUjc1mu35qaid4
XwDwHp8//4Ux3LO6eg1+Fjjhk0XdDo432bsgU/PcILoptwD/IBBWKSpnh4Yp1xSu
jbw2ztyiLdnq20PXIZW6QBMkbpKsaMBG6VtCak1wwgsG2p4AYSzkVTyblQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC91SPI1NNHOrj/S4WkMjN4kNOZbMB8GA1UdIwQY
MBaAFPO6kMcetMsBaclIQ+XHL9d3UBkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdxUXh4NjB5d0ZweVVoRDVjY3YxM2RRR1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYmNjMDctOWE2MC00OWY2LWExZWYt
OGQ1MjkwMmFjODMwLzEvODdxUXh4NjB5d0ZweVVoRDVjY3YxM2RRR1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hYmNjMDctOWE2MC00OWY2LWExZWYtOGQ1MjkwMmFjODMw
LzEvODdxUXh4NjB5d0ZweVVoRDVjY3YxM2RRR1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9X6ayVO
5j7BrWh8mRTEsHk85j3HXfu66ml6ded0kBqTyuKMklR8DefqEGznbo5RBEM78kDm
AXiIMsKKCFMxltSh8+5hMEtVC47+J+EiMbEofhLH3AscTAdCaw6aoMVx+9mdKtTd
01bSPnd2LB7s5+kp8+OZad+3r/h9lxjlcRJfprjN/f3ytYfiaZtzTWeXYO7mCAlC
4fSSzP2KdEhXPqQoCOzQWyo62WZMx0f0yzIJON1Tr6LRwoELufFext47p04qN0Hx
SBmPifPaXgLQqY46lOhQxW//PUFx2/ktq+CD3A1cRS5bB/Vd+YLpbh3wpxRlKfkb
LdHDylTesBOnLA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:40:41 2025 by rpki-client