Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
File: D9zw7HuvNJ6JLVERXCLA29Q1C44.mft (raw, json)
Hash identifier: j3ajvKuEHdcGFQxkQThpvPoEUCVgnaBfSMFxKoeG+Qw=
Subject key identifier: 5C:DA:30:42:33:B3:47:CB:F0:78:15:08:CA:DF:E8:5C:0D:32:68:89
Authority key identifier: 0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
Certificate issuer: /CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Certificate serial: 019770E384E9789BE361A7FCC0F32F1D1CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
Manifest number: 0249
Signing time: Sun 15 Jun 2025 00:00:48 +0000
Manifest this update: Sun 15 Jun 2025 00:00:48 +0000
Manifest next update: Mon 16 Jun 2025 00:00:48 +0000
Files and hashes: 1: D9zw7HuvNJ6JLVERXCLA29Q1C44.crl (hash: Ia+Mrdu4qBqcTl/M6BRaEBDqI8PxEf4qoORgDGU0ehM=)
2: LkbZ9NbuqV8kVwW0R6t_W7E36SY.roa (hash: OFwtZ8nR+nHbeTcy4UO/g/3elRZlu1GMxchq0zT/W/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:84:e9:78:9b:e3:61:a7:fc:c0:f3:2f:1d:1c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Validity
Not Before: Jun 15 00:00:48 2025 GMT
Not After : Jun 16 00:00:48 2025 GMT
Subject: CN=5cda304233b347cbf0781508cadfe85c0d326889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:d0:da:20:41:52:ab:11:49:5e:80:00:d3:
27:f4:d5:38:0f:7e:4f:6d:3a:18:b5:61:4b:4a:5e:
c5:05:e1:18:8b:8d:ef:10:fa:ca:ec:bf:a8:93:12:
6b:83:4a:1a:c4:fd:33:6d:4a:e2:b2:31:b2:d3:cb:
df:88:6f:b7:f4:6a:5e:d1:7d:1b:6f:b5:38:a1:6b:
70:17:14:f4:c3:f2:10:94:e9:31:19:cd:8b:98:6d:
a2:78:a5:44:26:12:c4:cb:75:d1:72:78:fb:c1:51:
41:39:4e:9c:bf:e8:1a:0c:b8:a7:e1:9d:46:3d:1a:
63:b2:c2:2f:15:85:0c:35:9c:e6:a1:18:03:8f:a3:
99:5d:ae:41:e6:bc:72:44:39:08:2a:2b:b8:da:73:
af:04:00:a2:24:69:14:96:01:64:72:06:7b:fc:03:
a2:7c:42:4f:a1:6f:3c:7f:18:38:3a:87:2a:72:75:
ee:93:49:41:15:17:b1:6b:0c:1a:c5:30:38:f6:c3:
85:20:30:86:44:0f:66:54:50:31:7b:3a:32:3f:bf:
e2:53:ee:59:3f:7a:1c:8b:1b:ec:0d:56:80:05:4c:
4b:4e:74:60:9c:d9:35:e5:c5:f6:da:76:f8:f1:3b:
d7:12:a8:42:41:96:45:6e:a9:57:53:46:90:7e:57:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DA:30:42:33:B3:47:CB:F0:78:15:08:CA:DF:E8:5C:0D:32:68:89
X509v3 Authority Key Identifier:
keyid:0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:2e:b9:3c:20:63:b5:98:b3:b9:0b:aa:57:29:c7:74:5b:f4:
89:33:09:38:b2:1d:3a:bb:1a:1a:3a:56:49:92:7e:2e:44:92:
1c:e5:87:7b:b1:4c:55:aa:20:5f:31:37:4e:4d:d7:56:b9:e4:
d7:a5:5f:1a:97:2e:92:1d:95:9b:b8:bf:f5:a4:38:c9:03:3e:
92:85:33:6d:c6:10:b1:4f:76:33:55:3e:fa:b9:cd:1b:4c:64:
48:2c:4f:e1:e0:8e:b2:73:5e:09:93:d1:07:d0:cc:e8:10:6c:
64:e7:fa:9c:7f:53:c4:c7:37:b3:ad:51:c5:34:a2:a3:96:eb:
ba:b0:a0:c4:f0:fa:ca:23:a5:cb:c9:9a:d9:94:4f:c3:e2:18:
da:b2:d6:f5:0d:c3:1f:01:48:ab:85:f4:58:dc:47:d9:12:54:
1c:92:f7:5c:40:c0:c3:82:75:4f:c1:b9:8b:b1:65:37:6b:71:
51:f7:8b:a7:94:6e:a8:3a:8c:23:29:ac:f8:96:e5:56:60:9a:
74:4a:b8:0c:4d:a6:17:14:72:46:67:a5:05:d9:c7:bc:a9:49:
03:05:18:5d:92:60:3e:a2:36:26:4d:13:3c:43:fc:32:88:79:
d6:de:43:4e:c6:3f:15:52:e3:bd:09:9e:2c:af:77:75:a6:36:
b1:b3:8a:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdw44TpeJvjYaf8wPMvHRy1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGNmMGVjN2JhZjM0OWU4OTJkNTExMTVjMjJjMGRiZDQz
NTBiOGUwHhcNMjUwNjE1MDAwMDQ4WhcNMjUwNjE2MDAwMDQ4WjAzMTEwLwYDVQQD
Eyg1Y2RhMzA0MjMzYjM0N2NiZjA3ODE1MDhjYWRmZTg1YzBkMzI2ODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOLQ2iBBUqsRSV6AANMn9NU4D35P
bToYtWFLSl7FBeEYi43vEPrK7L+okxJrg0oaxP0zbUrisjGy08vfiG+39Gpe0X0b
b7U4oWtwFxT0w/IQlOkxGc2LmG2ieKVEJhLEy3XRcnj7wVFBOU6cv+gaDLin4Z1G
PRpjssIvFYUMNZzmoRgDj6OZXa5B5rxyRDkIKiu42nOvBACiJGkUlgFkcgZ7/AOi
fEJPoW88fxg4OocqcnXuk0lBFRexawwaxTA49sOFIDCGRA9mVFAxezoyP7/iU+5Z
P3ocixvsDVaABUxLTnRgnNk15cX22nb48TvXEqhCQZZFbqlXU0aQflcneQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzaMEIzs0fL8HgVCMrf6FwNMmiJMB8GA1UdIwQY
MBaAFA/c8Ox7rzSeiS1REVwiwNvUNQuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2Ut
YjI5NTgzOGFiYmQ5LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNDgyYmEtNDFjZS00MDlhLThlN2UtYjI5NTgzOGFiYmQ5
LzEvRDl6dzdIdXZOSjZKTFZFUlhDTEEyOVExQzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0y65PCBj
tZizuQuqVynHdFv0iTMJOLIdOrsaGjpWSZJ+LkSSHOWHe7FMVaogXzE3Tk3XVrnk
16VfGpcukh2Vm7i/9aQ4yQM+koUzbcYQsU92M1U++rnNG0xkSCxP4eCOsnNeCZPR
B9DM6BBsZOf6nH9TxMc3s61RxTSio5brurCgxPD6yiOly8ma2ZRPw+IY2rLW9Q3D
HwFIq4X0WNxH2RJUHJL3XEDAw4J1T8G5i7FlN2txUfeLp5RuqDqMIyms+JblVmCa
dEq4DE2mFxRyRmelBdnHvKlJAwUYXZJgPqI2Jk0TPEP8Moh51t5DTsY/FVLjvQme
LK93daY2sbOKRg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:56:39 2025 by rpki-client