Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
File: DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft (raw, json)
Hash identifier: 4qYaulLoxymCfjkEvxXzSzjk9HqmCAO50pGpmAzOFM8=
Subject key identifier: 32:D9:0B:65:5B:C0:79:71:CA:B5:F1:55:25:5D:1B:45:77:4A:EC:49
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Certificate issuer: /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial: 0197789D4357E89C19F38C251A6BE2A26CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
Manifest number: 07AA
Signing time: Mon 16 Jun 2025 12:01:01 +0000
Manifest this update: Mon 16 Jun 2025 12:01:01 +0000
Manifest next update: Tue 17 Jun 2025 12:01:01 +0000
Files and hashes: 1: DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl (hash: QX6RNg/Ja68hhX6DQ6HFqr1W0yhip9Paxo/Pb+F3IV0=)
2: MkhY8Wq6vpbqUA8JYFIfnWPN1Xc.roa (hash: P1izD/bPbpYCMheG0o/h8Q5qxusjF76rS35X5Ps2VoI=)
3: lN3w_CQ-pmg0o8Uv6v-3uj3yMXY.roa (hash: yR0ABww6qrzdgsxlfyOghUNrgq+qwWXZtqgAtOQG9ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9d:43:57:e8:9c:19:f3:8c:25:1a:6b:e2:a2:6c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Validity
Not Before: Jun 16 12:01:01 2025 GMT
Not After : Jun 17 12:01:01 2025 GMT
Subject: CN=32d90b655bc07971cab5f155255d1b45774aec49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:88:09:e6:07:27:5a:59:21:64:29:c7:9c:
36:ee:c3:91:f8:9c:30:96:93:21:52:30:ac:cc:c2:
cd:83:4a:6e:a7:d8:e1:db:53:9f:8d:be:70:3c:b6:
6a:7d:47:e1:54:4c:3e:a9:13:cf:92:10:5a:2d:d5:
00:76:95:aa:e4:95:10:8f:b7:50:5d:26:26:bd:c4:
6c:67:f1:c2:8d:be:3b:89:df:d5:79:15:46:40:54:
86:12:18:dd:78:6a:0e:a1:c9:42:e4:d0:b7:54:08:
9a:d0:95:a2:b2:6d:20:32:30:a0:ce:5c:0b:17:3c:
be:ca:25:ca:d7:e7:3c:a7:75:89:0d:6a:14:ff:83:
cc:4b:6b:6f:85:e7:13:36:69:ce:7c:46:3c:bc:96:
0f:b2:63:1a:23:d1:61:ee:ee:8b:e0:95:be:0e:ce:
32:cb:6e:5c:69:48:bf:6c:36:74:ca:df:6b:a2:ce:
89:14:52:ce:93:3d:92:e2:77:14:4d:fd:0b:19:08:
cc:92:89:10:cd:ff:10:8c:5a:9a:aa:9e:df:29:ec:
a7:ca:b8:e4:08:21:3e:32:19:76:0e:4c:ca:01:f7:
52:cc:fc:d5:e8:65:ae:2b:db:62:ec:63:3a:6a:6e:
42:ac:62:64:70:e8:c8:ba:16:c6:5d:02:20:12:4e:
cc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D9:0B:65:5B:C0:79:71:CA:B5:F1:55:25:5D:1B:45:77:4A:EC:49
X509v3 Authority Key Identifier:
keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:38:8c:78:36:0c:1d:89:33:95:df:6e:d6:a6:e1:26:3a:67:
a0:8c:2d:37:3f:52:61:81:64:b7:6d:2e:85:d6:2f:2b:a7:46:
3a:16:16:c9:24:e0:b9:14:52:e1:54:06:31:38:cc:5b:49:63:
6a:ec:31:fa:fa:8d:9a:62:63:ee:95:4f:92:67:3d:77:03:05:
03:c2:c5:46:4e:20:f5:56:c9:0b:53:c6:81:f2:d8:2a:16:43:
39:c4:32:00:83:f2:ae:dd:54:38:30:da:39:3b:14:7f:82:f5:
4a:c3:dc:6f:e7:9c:7a:6d:ad:08:88:ea:2c:de:30:82:10:e9:
0a:78:7a:9e:b7:9c:d5:61:30:fe:9d:6e:d9:59:c0:f6:25:7a:
5f:2a:f1:6d:19:96:1f:85:46:77:c1:de:5a:0b:98:6a:dc:88:
f3:5a:ea:25:4e:62:18:9f:d3:7b:cd:dd:8f:c2:64:d7:42:f7:
f3:01:ff:21:97:a1:84:90:14:9a:db:bf:04:e8:97:6c:a1:27:
98:bb:c1:0d:52:0a:f2:d3:b8:02:4c:ce:e4:93:9e:99:7c:a8:
8a:b8:67:a5:9c:b4:01:39:4f:a9:d7:89:f1:d3:ed:69:da:1b:
79:91:96:50:fb:aa:4d:c2:46:7d:35:e5:f4:cc:c8:94:20:d1:
00:b7:84:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd4nUNX6JwZ84wlGmviomyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNjllM2VlNTVkZDg2MjY3NGQ0NTg2NjFiYTM0OTA4YjA2
MTdmYTEwHhcNMjUwNjE2MTIwMTAxWhcNMjUwNjE3MTIwMTAxWjAzMTEwLwYDVQQD
EygzMmQ5MGI2NTViYzA3OTcxY2FiNWYxNTUyNTVkMWI0NTc3NGFlYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H+ICeYHJ1pZIWQpx5w27sOR+Jww
lpMhUjCszMLNg0pup9jh21Ofjb5wPLZqfUfhVEw+qRPPkhBaLdUAdpWq5JUQj7dQ
XSYmvcRsZ/HCjb47id/VeRVGQFSGEhjdeGoOoclC5NC3VAia0JWism0gMjCgzlwL
Fzy+yiXK1+c8p3WJDWoU/4PMS2tvhecTNmnOfEY8vJYPsmMaI9Fh7u6L4JW+Ds4y
y25caUi/bDZ0yt9ros6JFFLOkz2S4ncUTf0LGQjMkokQzf8QjFqaqp7fKeynyrjk
CCE+Mhl2DkzKAfdSzPzV6GWuK9ti7GM6am5CrGJkcOjIuhbGXQIgEk7MqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLZC2VbwHlxyrXxVSVdG0V3SuxJMB8GA1UdIwQY
MBaAFA1p4+5V3YYmdNRYZhujSQiwYX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUt
YjgzM2JkOWUwYjNhLzEvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUtYjgzM2JkOWUwYjNh
LzEvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFziMeDYM
HYkzld9u1qbhJjpnoIwtNz9SYYFkt20uhdYvK6dGOhYWySTguRRS4VQGMTjMW0lj
auwx+vqNmmJj7pVPkmc9dwMFA8LFRk4g9VbJC1PGgfLYKhZDOcQyAIPyrt1UODDa
OTsUf4L1SsPcb+ecem2tCIjqLN4wghDpCnh6nrec1WEw/p1u2VnA9iV6XyrxbRmW
H4VGd8HeWguYatyI81rqJU5iGJ/Te83dj8Jk10L38wH/IZehhJAUmtu/BOiXbKEn
mLvBDVIK8tO4AkzO5JOemXyoirhnpZy0ATlPqdeJ8dPtadobeZGWUPuqTcJGfTXl
9MzIlCDRALeEww==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:52:51 2025 by rpki-client