Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: 8GxKKkCL0S4bYndFd2sIXCsw0ZClqjSdNVuC8tYqN40=
Subject key identifier: 73:C9:05:3C:F7:45:8A:11:30:3F:B5:38:00:AF:AA:60:E2:4F:3C:7D
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 019774F6E7CC1DE6D48A2D088EE4F6098C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 0C2E
Signing time: Sun 15 Jun 2025 19:00:27 +0000
Manifest this update: Sun 15 Jun 2025 19:00:27 +0000
Manifest next update: Mon 16 Jun 2025 19:00:27 +0000
Files and hashes: 1: DLstc3U0rg1XJMzpW3kLJk6bWww.roa (hash: aRJQLolF5fKnY48Uu+tEP6pfOTPeicajt7bpyIpZajQ=)
2: hw5zWhZ37cy3fl-F4c6L7KinXWA.roa (hash: JVVK2E4Q0U9kLmKrr7lDfe4ry5wJQg7f4zL2c9LIRlo=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: rayD23ROd3qO9I2h2DAhhK5XQxEYMHP7nEkMGkUD0SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f6:e7:cc:1d:e6:d4:8a:2d:08:8e:e4:f6:09:8c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Jun 15 19:00:27 2025 GMT
Not After : Jun 16 19:00:27 2025 GMT
Subject: CN=73c9053cf7458a11303fb53800afaa60e24f3c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:ca:43:7e:a5:e6:b3:8f:90:a0:3c:32:dc:
4e:1d:05:15:ae:b2:9e:a5:5b:ac:cc:24:1b:cb:f9:
a5:ba:26:9a:f3:7e:12:ca:77:20:57:22:e6:6c:c2:
21:24:a4:24:75:65:ab:7f:1b:75:d2:a9:76:92:f5:
74:d2:52:97:60:8e:06:10:01:50:36:98:cb:fd:05:
c9:6b:6e:66:73:41:33:a4:10:53:25:84:62:49:19:
d6:bd:0f:a2:c4:90:8d:4d:c2:b6:62:95:03:bf:3c:
76:c8:f9:55:f6:ff:ee:bd:66:a8:3a:cb:c3:a8:5d:
a1:ca:0f:d7:d2:cb:5d:ae:7d:4b:2e:fe:47:8e:e1:
06:2b:33:b5:cb:94:75:ee:72:bd:dc:47:f4:c9:af:
b8:b1:ad:4f:95:40:bb:76:41:5e:ec:47:c7:6a:b5:
8d:01:e7:2e:9f:e1:99:53:f9:49:1a:32:cd:38:ac:
21:35:81:75:b1:78:28:b6:93:c2:1d:a9:5a:fa:0c:
44:2f:bf:c3:04:c5:69:d1:00:a2:51:4d:26:fe:fd:
43:03:e1:2c:61:e0:58:c1:e1:35:9e:f7:a2:4e:27:
17:88:ba:9f:f4:b2:a5:40:e8:bb:93:b1:b8:1e:52:
c1:16:0b:77:ba:82:c7:36:63:c9:18:5a:af:56:6f:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C9:05:3C:F7:45:8A:11:30:3F:B5:38:00:AF:AA:60:E2:4F:3C:7D
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:45:f0:ac:ed:9a:3d:44:13:cb:21:47:8e:9f:3a:7f:23:65:
e9:dc:db:9f:1b:97:6d:33:0f:75:d4:f5:da:86:86:46:fb:e8:
30:a3:ff:a1:e4:34:67:4c:68:2f:e7:d7:23:d9:cb:16:db:c6:
82:20:d6:25:e0:67:91:2e:df:9a:57:29:77:2d:a7:b6:2b:83:
8b:b6:c6:c2:d5:0a:8c:2d:00:51:4e:17:1f:52:f5:8c:9a:0e:
e9:9d:9a:a4:8a:d1:27:e5:7b:26:30:97:6f:23:63:72:cd:7a:
7d:f8:bc:22:a6:34:35:32:e4:a6:ff:0d:64:54:b3:d6:0a:2a:
38:06:77:1b:a3:34:ca:34:78:83:0a:bb:5d:02:af:82:63:6b:
77:d5:87:39:72:92:94:0a:49:24:af:33:2f:b2:32:8d:e6:9e:
ca:7f:64:2a:bc:bd:95:09:23:0b:c9:92:e0:ee:96:e8:8e:47:
01:7f:0d:5a:49:68:57:63:0f:bd:e3:02:b7:f2:4d:75:a2:7e:
4c:a1:2c:2f:74:b9:57:0d:6f:a2:99:7f:c5:3f:a9:90:56:5b:
42:42:2a:1d:c8:2b:45:04:6c:52:38:34:71:dd:e7:be:9a:f4:
fa:c0:d0:b2:2b:17:90:3f:03:fd:e1:ad:0b:01:4a:ff:9d:be:
92:d8:84:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd09ufMHebUii0IjuT2CYwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzM4MTY4Y2Q5ZDVhZjA2MDQwMTNmYzQyNzQxMjZmYzU4
MWYzY2IwHhcNMjUwNjE1MTkwMDI3WhcNMjUwNjE2MTkwMDI3WjAzMTEwLwYDVQQD
Eyg3M2M5MDUzY2Y3NDU4YTExMzAzZmI1MzgwMGFmYWE2MGUyNGYzYzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgDKQ36l5rOPkKA8MtxOHQUVrrKe
pVuszCQby/mluiaa834SyncgVyLmbMIhJKQkdWWrfxt10ql2kvV00lKXYI4GEAFQ
NpjL/QXJa25mc0EzpBBTJYRiSRnWvQ+ixJCNTcK2YpUDvzx2yPlV9v/uvWaoOsvD
qF2hyg/X0stdrn1LLv5HjuEGKzO1y5R17nK93Ef0ya+4sa1PlUC7dkFe7EfHarWN
Aecun+GZU/lJGjLNOKwhNYF1sXgotpPCHala+gxEL7/DBMVp0QCiUU0m/v1DA+Es
YeBYweE1nveiTicXiLqf9LKlQOi7k7G4HlLBFgt3uoLHNmPJGFqvVm8a4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPJBTz3RYoRMD+1OACvqmDiTzx9MB8GA1UdIwQY
MBaAFKQzgWjNnVrwYEAT/EJ0Em/FgfPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjIt
YzlkYjk4MWEyYTJmLzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xNzZmN2QtNmYwZi00NWU1LTk3ZjItYzlkYjk4MWEyYTJm
LzEvcERPQmFNMmRXdkJnUUJQOFFuUVNiOFdCODhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0XwrO2a
PUQTyyFHjp86fyNl6dzbnxuXbTMPddT12oaGRvvoMKP/oeQ0Z0xoL+fXI9nLFtvG
giDWJeBnkS7fmlcpdy2ntiuDi7bGwtUKjC0AUU4XH1L1jJoO6Z2apIrRJ+V7JjCX
byNjcs16ffi8IqY0NTLkpv8NZFSz1goqOAZ3G6M0yjR4gwq7XQKvgmNrd9WHOXKS
lApJJK8zL7Iyjeaeyn9kKry9lQkjC8mS4O6W6I5HAX8NWkloV2MPveMCt/JNdaJ+
TKEsL3S5Vw1vopl/xT+pkFZbQkIqHcgrRQRsUjg0cd3nvpr0+sDQsisXkD8D/eGt
CwFK/52+ktiEPA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:28:47 2025 by rpki-client