Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: O5h42E9PNhrmkEF3culsnt6Yyms2Kkguy7ixd66zhaE=
Subject key identifier: 84:89:A3:5B:A8:D9:8E:AD:3A:A4:63:C1:0C:39:F5:40:DC:A5:F5:29
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 01976929CC36F323EA61419FF6D9650133E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 12:00:36 +0000
Manifest this update: Fri 13 Jun 2025 12:00:36 +0000
Manifest next update: Sat 14 Jun 2025 12:00:36 +0000
Files and hashes: 1: OcTgY_TxJBbWYUXl-r4CTTXUle0.roa (hash: 1c7PjEo1UgZPDis6XvL/mHlYibhzZZ7MfR0yuK8HcsA=)
2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: tgFX1Bsqnn3pEEBDtsxN/gcsJ0vaqzDP6DvZKvGgqBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:cc:36:f3:23:ea:61:41:9f:f6:d9:65:01:33:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Jun 13 12:00:36 2025 GMT
Not After : Jun 14 12:00:36 2025 GMT
Subject: CN=8489a35ba8d98ead3aa463c10c39f540dca5f529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:55:5a:97:e4:93:32:96:52:bb:f7:a7:8b:31:
3d:69:96:01:00:2c:52:a4:0f:95:5c:3c:94:4e:5f:
bc:96:ce:bb:80:59:34:82:b4:ec:0d:a7:13:1e:9e:
6b:c2:7d:1d:bd:56:31:dd:30:76:ae:04:85:a1:c4:
fd:ce:f4:2a:02:8c:57:a4:20:d7:89:ca:c1:9f:42:
10:3d:6c:07:62:42:15:3a:57:ca:c7:4e:2d:4c:d2:
30:a9:09:c3:74:e2:5d:da:1d:a3:83:79:c8:0d:66:
5a:6e:c3:1c:ee:84:60:e5:1b:c3:c6:96:6b:3d:07:
7e:00:fc:72:9e:ef:f1:da:14:3f:a7:dd:6f:52:ea:
fe:58:61:9b:ab:c0:0b:e6:7f:8c:08:60:93:53:74:
0e:e5:2e:36:f7:1e:20:d0:df:49:a5:c6:ec:a7:11:
07:05:15:bf:2e:47:c3:be:5a:22:7f:53:00:9a:88:
62:86:27:ad:30:ac:b5:7a:68:4d:12:00:19:02:7e:
9e:1b:8d:2d:24:29:16:38:1d:00:ac:93:0d:1f:b0:
9e:99:8b:ba:76:6a:fb:73:c0:69:02:a4:05:cb:6a:
a0:e6:8b:c0:c3:3e:61:f9:26:bb:21:92:cd:61:93:
95:c1:ad:51:1f:b1:6d:7a:bc:10:90:e4:83:ac:43:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:89:A3:5B:A8:D9:8E:AD:3A:A4:63:C1:0C:39:F5:40:DC:A5:F5:29
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d6:a6:d9:2b:9a:0f:e7:6f:03:0c:61:fd:9f:9e:55:b0:d8:
3c:9d:27:5b:72:35:4a:a5:01:f1:a7:14:90:60:5d:82:ef:a6:
a1:17:7a:4a:6a:03:96:a8:4c:3a:10:03:7c:67:54:bc:25:c5:
60:f5:b5:6b:05:5a:70:bf:fa:f6:f9:ef:bf:97:4e:35:8b:a3:
db:46:87:21:9e:1e:47:4b:00:3b:bc:1a:c9:e3:de:6c:47:18:
cc:00:e3:ea:c0:b2:12:3a:2f:65:44:93:6d:59:35:9c:01:79:
da:27:98:a6:bc:d1:79:9e:f6:7e:4d:bd:e3:f4:13:37:43:22:
93:13:6d:80:fd:30:c5:73:d1:34:2e:f3:03:d3:8c:28:9a:52:
5a:ee:8b:fc:12:59:65:00:2f:4a:a4:b8:b0:b3:7a:4e:97:92:
40:a4:d8:02:78:58:ab:99:62:a2:98:4d:5c:41:38:4f:05:01:
e6:42:1f:47:9b:56:05:10:f7:cf:27:9c:f2:69:0e:47:03:02:
0b:26:4f:c9:3d:3e:16:5e:59:96:18:da:20:55:1b:ce:3f:96:
ed:f5:25:76:cb:72:a3:c0:d2:3b:17:5d:4f:7c:b7:d9:4c:c9:
d1:8d:e2:76:29:34:3e:58:2a:fd:c9:e3:8b:46:b2:d1:9f:b7:
d9:71:16:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKcw28yPqYUGf9tllATPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGFlYTUzZWY2MGY4YThhOTM0NWU1ODI5ODJhOWE1OWJj
MTM3NjcwHhcNMjUwNjEzMTIwMDM2WhcNMjUwNjE0MTIwMDM2WjAzMTEwLwYDVQQD
Eyg4NDg5YTM1YmE4ZDk4ZWFkM2FhNDYzYzEwYzM5ZjU0MGRjYTVmNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VVal+STMpZSu/enizE9aZYBACxS
pA+VXDyUTl+8ls67gFk0grTsDacTHp5rwn0dvVYx3TB2rgSFocT9zvQqAoxXpCDX
icrBn0IQPWwHYkIVOlfKx04tTNIwqQnDdOJd2h2jg3nIDWZabsMc7oRg5RvDxpZr
PQd+APxynu/x2hQ/p91vUur+WGGbq8AL5n+MCGCTU3QO5S429x4g0N9JpcbspxEH
BRW/LkfDvloif1MAmohihietMKy1emhNEgAZAn6eG40tJCkWOB0ArJMNH7CemYu6
dmr7c8BpAqQFy2qg5ovAwz5h+Sa7IZLNYZOVwa1RH7FterwQkOSDrEMGWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISJo1uo2Y6tOqRjwQw59UDcpfUpMB8GA1UdIwQY
MBaAFHRK6lPvYPioqTReWCmCqaWbwTdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZDM4Y2MtYzBmNi00MDE4LWI5Mjkt
OWI2NGMyNTE1NmI5LzEvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82ZDM4Y2MtYzBmNi00MDE4LWI5MjktOWI2NGMyNTE1NmI5
LzEvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtam2Sua
D+dvAwxh/Z+eVbDYPJ0nW3I1SqUB8acUkGBdgu+moRd6SmoDlqhMOhADfGdUvCXF
YPW1awVacL/69vnvv5dONYuj20aHIZ4eR0sAO7wayePebEcYzADj6sCyEjovZUST
bVk1nAF52ieYprzReZ72fk294/QTN0MikxNtgP0wxXPRNC7zA9OMKJpSWu6L/BJZ
ZQAvSqS4sLN6TpeSQKTYAnhYq5liophNXEE4TwUB5kIfR5tWBRD3zyec8mkORwMC
CyZPyT0+Fl5ZlhjaIFUbzj+W7fUldstyo8DSOxddT3y32UzJ0Y3idik0Plgq/cnj
i0ay0Z+32XEWVQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:12 2025 by rpki-client