Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: dEEpBgXyu1Ys3ajmtjumRgJ9N1Lo7uTkYecAw8qh5rg=
Subject key identifier: A7:55:EC:0D:75:45:90:E4:22:FE:70:3D:6E:68:51:93:2E:1D:A4:7E
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 01976D3DBFC45FBB55764CF0BD46D7C19472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 0A4A
Signing time: Sat 14 Jun 2025 07:00:52 +0000
Manifest this update: Sat 14 Jun 2025 07:00:52 +0000
Manifest next update: Sun 15 Jun 2025 07:00:52 +0000
Files and hashes: 1: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (hash: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: Fo5rCKm5hXfL8QmBYqWFDxPo2WjF/KPwz9PzLZvshcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:bf:c4:5f:bb:55:76:4c:f0:bd:46:d7:c1:94:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Jun 14 07:00:52 2025 GMT
Not After : Jun 15 07:00:52 2025 GMT
Subject: CN=a755ec0d754590e422fe703d6e6851932e1da47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:c0:55:41:44:d2:dd:95:85:81:22:7e:41:
18:67:c6:1e:a0:4a:90:66:31:43:42:ab:83:d8:67:
b2:6e:e7:b4:8f:40:72:28:eb:14:f0:29:75:16:99:
7d:f5:f6:bd:bc:ae:c4:28:15:59:5c:83:e8:3b:71:
50:54:26:ad:eb:3d:37:5b:9f:bd:54:54:93:5d:83:
18:e2:e2:13:51:5d:34:25:e4:8d:04:06:8a:11:50:
b1:d9:18:bf:d0:c2:d1:7a:ec:36:d4:e8:5b:30:63:
99:0f:f3:aa:b2:a2:1b:6b:e7:c9:7a:d6:27:37:c8:
08:49:21:75:5b:43:27:05:f7:ab:ff:43:16:95:8a:
a9:71:2d:d4:4c:60:b8:7f:60:4a:5f:7a:75:12:c5:
18:a6:d3:e0:ee:fb:8e:ba:bc:c6:ad:fd:65:4d:c2:
0e:65:e4:72:22:be:56:ed:45:ef:4c:f4:9e:3e:78:
38:a7:4b:50:e4:b0:e8:ca:75:4e:02:c1:4a:6d:1e:
12:de:00:6f:de:ed:03:1b:e9:f3:3a:87:48:ab:11:
1e:48:ce:48:0f:b1:64:02:57:5a:88:93:55:d8:73:
e5:74:79:4b:77:a2:7a:a8:51:12:6b:2f:d2:64:17:
d1:c6:e8:6d:93:f7:e1:70:64:5f:b1:d6:12:72:5b:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:55:EC:0D:75:45:90:E4:22:FE:70:3D:6E:68:51:93:2E:1D:A4:7E
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3c:5d:81:ec:dc:42:fa:68:2c:3b:42:53:86:9b:4c:57:50:
7b:16:06:69:ce:e0:ad:f5:da:2e:29:74:b6:a2:2a:33:bc:6d:
22:d0:09:2a:8f:e8:80:26:36:ae:35:6f:a9:6a:88:8f:3f:b8:
a7:02:c9:6d:44:4b:8c:db:f7:59:2f:2b:bb:7b:19:d3:f9:88:
a6:8a:4f:c5:81:46:d9:7e:d0:10:97:f7:b8:70:16:8f:11:20:
96:54:97:7d:87:7d:82:83:3d:ea:eb:91:be:a7:ef:10:52:37:
7d:f9:c1:60:0a:54:53:53:90:13:2d:95:94:ec:db:20:de:6c:
00:f1:bc:f0:6f:f9:97:ec:22:a2:66:cd:d2:75:1f:4d:f3:a0:
73:37:f8:5d:8d:0c:51:ee:f3:25:c2:22:ca:92:71:e0:44:06:
28:cb:75:69:1c:ae:90:56:a3:d4:ae:51:78:bb:d0:97:40:7d:
4c:a4:b5:11:28:18:79:4b:98:b7:1d:d3:d4:dc:63:e1:80:19:
77:3a:66:70:e2:af:a8:ab:4e:45:50:57:a4:63:45:d5:cc:f9:
00:91:0a:a6:4a:d8:f2:40:69:db:77:39:67:78:50:71:a0:f4:
56:b8:c1:97:25:4d:ec:1b:46:22:a3:b5:ae:b9:2a:df:b3:72:
66:a7:91:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPb/EX7tVdkzwvUbXwZRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NmMwZTFhNzMzYWQ4MzNiY2JlNTBhODEyNDQ4YmY1ZTA5
OWU5NWYwHhcNMjUwNjE0MDcwMDUyWhcNMjUwNjE1MDcwMDUyWjAzMTEwLwYDVQQD
EyhhNzU1ZWMwZDc1NDU5MGU0MjJmZTcwM2Q2ZTY4NTE5MzJlMWRhNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaXAVUFE0t2VhYEifkEYZ8YeoEqQ
ZjFDQquD2Geybue0j0ByKOsU8Cl1Fpl99fa9vK7EKBVZXIPoO3FQVCat6z03W5+9
VFSTXYMY4uITUV00JeSNBAaKEVCx2Ri/0MLReuw21OhbMGOZD/OqsqIba+fJetYn
N8gISSF1W0MnBfer/0MWlYqpcS3UTGC4f2BKX3p1EsUYptPg7vuOurzGrf1lTcIO
ZeRyIr5W7UXvTPSePng4p0tQ5LDoynVOAsFKbR4S3gBv3u0DG+nzOodIqxEeSM5I
D7FkAldaiJNV2HPldHlLd6J6qFESay/SZBfRxuhtk/fhcGRfsdYSclsw5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdV7A11RZDkIv5wPW5oUZMuHaR+MB8GA1UdIwQY
MBaAFHRsDhpzOtgzvL5QqBJEi/XgmelfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEd3T0duTTYyRE84dmxDb0VrU0w5ZUNaNlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MWVhNDgtM2UzOS00MWU4LWIyMmEt
NmM5YTgyNTU4MWNiLzEvZEd3T0duTTYyRE84dmxDb0VrU0w5ZUNaNlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC82MWVhNDgtM2UzOS00MWU4LWIyMmEtNmM5YTgyNTU4MWNi
LzEvZEd3T0duTTYyRE84dmxDb0VrU0w5ZUNaNlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzxdgezc
QvpoLDtCU4abTFdQexYGac7grfXaLil0tqIqM7xtItAJKo/ogCY2rjVvqWqIjz+4
pwLJbURLjNv3WS8ru3sZ0/mIpopPxYFG2X7QEJf3uHAWjxEgllSXfYd9goM96uuR
vqfvEFI3ffnBYApUU1OQEy2VlOzbIN5sAPG88G/5l+wiombN0nUfTfOgczf4XY0M
Ue7zJcIiypJx4EQGKMt1aRyukFaj1K5ReLvQl0B9TKS1ESgYeUuYtx3T1Nxj4YAZ
dzpmcOKvqKtORVBXpGNF1cz5AJEKpkrY8kBp23c5Z3hQcaD0VrjBlyVN7BtGIqO1
rrkq37NyZqeRSA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:27:59 2025 by rpki-client