Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
File: dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json)
Hash identifier: KC5jGu1xi3SHplLNl+9QGBSP2rcf/40SFmvbjGpkEmk=
Subject key identifier: F2:BB:99:55:11:FD:F1:D7:A3:92:1C:FE:DC:35:EB:D3:BF:2A:9A:11
Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Certificate serial: 01976F99AEEAB049908381735110408CF389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
Manifest number: 11E3
Signing time: Sat 14 Jun 2025 18:00:32 +0000
Manifest this update: Sat 14 Jun 2025 18:00:32 +0000
Manifest next update: Sun 15 Jun 2025 18:00:32 +0000
Files and hashes: 1: 6S1fN0Slf3Y95btQEfpy__y_tiw.roa (hash: 5FWi2gr8yiM3yt2DtW3oiI0p1G9KyA1KVfzD3/JWlJI=)
2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: g1k7wGAqjaOSSt7Y4jaP1LpWT6uWbnbo+UF2eZbj+mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:ae:ea:b0:49:90:83:81:73:51:10:40:8c:f3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Validity
Not Before: Jun 14 18:00:32 2025 GMT
Not After : Jun 15 18:00:32 2025 GMT
Subject: CN=f2bb995511fdf1d7a3921cfedc35ebd3bf2a9a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:9f:34:73:7d:7f:e0:51:ea:80:f7:90:00:
25:f5:2f:27:e8:a5:9b:a7:3c:19:f6:27:cc:2d:9d:
29:68:4b:8c:72:67:f8:d5:79:ee:64:7b:ab:43:fc:
d5:e7:bc:6f:91:e4:01:5b:93:02:13:06:e0:32:29:
94:37:2c:6f:21:3e:09:2a:ec:f2:c2:b9:3b:69:b6:
b2:90:3c:e2:d6:56:95:fa:b9:37:ee:a8:22:15:9b:
01:05:3f:0a:ae:33:24:d8:2a:2a:38:76:63:6d:d6:
56:4f:b4:9f:c5:d0:db:20:be:63:7f:ae:16:a5:9b:
df:a6:1d:9b:cf:4a:a9:b8:75:a0:53:ab:ed:d6:0d:
6b:d5:4b:35:2f:cb:0d:1e:df:61:79:be:65:63:7f:
65:b8:46:a5:a5:b6:ab:18:0b:67:fb:74:ee:df:bb:
c0:4b:8e:c3:66:6d:37:4b:3d:9b:b2:87:22:d8:36:
de:f2:5b:ef:4b:be:06:d3:cd:44:25:a8:55:9a:97:
47:7d:4b:ef:8e:86:ba:3d:d8:d3:90:20:87:eb:e0:
79:3a:df:e8:93:83:56:24:03:a7:1e:85:ad:93:b8:
67:8c:72:51:af:14:41:3f:05:f2:c9:88:e8:14:dd:
13:e5:f2:09:2d:1d:76:88:8b:b5:53:1d:3c:f2:16:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BB:99:55:11:FD:F1:D7:A3:92:1C:FE:DC:35:EB:D3:BF:2A:9A:11
X509v3 Authority Key Identifier:
keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c5:cf:35:96:41:42:3b:17:02:11:40:c1:cb:47:29:dd:6a:
ed:3b:96:ba:f9:52:6b:39:60:cd:b9:c8:f7:3f:5f:34:e5:3b:
47:71:5f:c5:c7:61:bb:97:2e:80:f9:97:51:39:35:2d:94:b0:
9f:04:b4:d9:89:f9:fe:3a:85:37:f2:46:38:05:68:8d:1d:0b:
82:63:a4:b1:e3:ed:d7:3e:32:8e:db:91:e4:69:bd:cc:b4:3f:
0a:49:e1:f4:89:c1:7d:89:d7:48:ee:43:7d:33:27:41:51:0d:
b7:5f:91:c4:1c:0c:e6:e1:4d:56:69:c0:fa:5d:30:ba:03:44:
de:dd:24:88:a0:54:c8:f0:a2:6f:e4:fd:69:62:51:5d:44:67:
e4:b1:69:64:bf:31:cd:27:46:4e:fc:6b:3b:df:bd:32:ec:56:
c2:9e:75:9f:c1:60:33:3c:5e:51:6b:06:7f:d5:41:d2:12:7e:
dd:5f:8f:4c:88:e8:5d:9f:cf:10:d7:39:c8:8e:70:bd:d3:e6:
25:de:5d:17:be:d4:e7:87:72:55:c2:e7:87:f5:9e:60:8f:fa:
ca:33:e5:82:09:1d:c8:6b:f6:79:73:3f:6d:0c:81:d4:4b:f4:
68:52:e5:c8:5c:de:cb:23:76:b6:d7:3a:cc:69:7f:0e:73:b9:
53:cb:4b:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvma7qsEmQg4FzURBAjPOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YTQ3ZTNhNjcxNjBhZTQ2NjJlMGViY2NlZDdhOTIzM2Nl
NDdhYmYwHhcNMjUwNjE0MTgwMDMyWhcNMjUwNjE1MTgwMDMyWjAzMTEwLwYDVQQD
EyhmMmJiOTk1NTExZmRmMWQ3YTM5MjFjZmVkYzM1ZWJkM2JmMmE5YTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo2fNHN9f+BR6oD3kAAl9S8n6KWb
pzwZ9ifMLZ0paEuMcmf41XnuZHurQ/zV57xvkeQBW5MCEwbgMimUNyxvIT4JKuzy
wrk7abaykDzi1laV+rk37qgiFZsBBT8KrjMk2CoqOHZjbdZWT7SfxdDbIL5jf64W
pZvfph2bz0qpuHWgU6vt1g1r1Us1L8sNHt9heb5lY39luEalpbarGAtn+3Tu37vA
S47DZm03Sz2bsoci2Dbe8lvvS74G081EJahVmpdHfUvvjoa6PdjTkCCH6+B5Ot/o
k4NWJAOnHoWtk7hnjHJRrxRBPwXyyYjoFN0T5fIJLR12iIu1Ux088hab/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPK7mVUR/fHXo5Ic/tw169O/KpoRMB8GA1UdIwQY
MBaAFHSkfjpnFgrkZi4OvM7XqSM85Hq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2Yt
OTJjN2Q0NmRkYjg5LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2YtOTJjN2Q0NmRkYjg5
LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsXPNZZB
QjsXAhFAwctHKd1q7TuWuvlSazlgzbnI9z9fNOU7R3Ffxcdhu5cugPmXUTk1LZSw
nwS02Yn5/jqFN/JGOAVojR0LgmOksePt1z4yjtuR5Gm9zLQ/Cknh9InBfYnXSO5D
fTMnQVENt1+RxBwM5uFNVmnA+l0wugNE3t0kiKBUyPCib+T9aWJRXURn5LFpZL8x
zSdGTvxrO9+9MuxWwp51n8FgMzxeUWsGf9VB0hJ+3V+PTIjoXZ/PENc5yI5wvdPm
Jd5dF77U54dyVcLnh/WeYI/6yjPlggkdyGv2eXM/bQyB1Ev0aFLlyFzeyyN2ttc6
zGl/DnO5U8tL5A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 02:49:54 2025 by rpki-client