Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
File: D5otI3SqascUtfim7duA3GlnnMY.mft (raw, json)
Hash identifier: Q8ueoy4yURDZOw/yvUoUT8ZsAYEOni/hCdVUQnOZC1I=
Subject key identifier: 26:3C:90:27:22:98:CD:02:5A:96:81:6A:F8:8F:64:30:2E:DE:43:D7
Authority key identifier: 0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6
Certificate issuer: /CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6
Certificate serial: 01977AC2839235A268CC6CAF94BF59CA6781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
Manifest number: 0BFA
Signing time: Mon 16 Jun 2025 22:00:57 +0000
Manifest this update: Mon 16 Jun 2025 22:00:57 +0000
Manifest next update: Tue 17 Jun 2025 22:00:57 +0000
Files and hashes: 1: D5otI3SqascUtfim7duA3GlnnMY.crl (hash: ECBT9WeCU5ZrSGDmCWje6KlglBLEtPvKstGGBipPGt8=)
2: RNk_0Bt2Bdlaf0Pdd2eUPaMyW8E.roa (hash: m6J+0888VMRpST0J5iXwVh9t9K8LOLn/EV2xZ10pPjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:83:92:35:a2:68:cc:6c:af:94:bf:59:ca:67:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6
Validity
Not Before: Jun 16 22:00:57 2025 GMT
Not After : Jun 17 22:00:57 2025 GMT
Subject: CN=263c90272298cd025a96816af88f64302ede43d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:bf:81:31:3f:59:6f:51:40:a5:6c:cb:64:
11:8b:60:2d:c2:6e:be:27:ea:48:f7:a2:e0:a6:3e:
b9:5e:b0:ef:39:82:2e:c7:ff:5e:a5:7e:f1:f0:ee:
1c:48:5e:5b:b1:b0:2c:c6:86:38:4c:21:35:f4:20:
24:3a:86:be:93:fa:18:f6:d2:20:e0:67:c5:c5:29:
67:e4:d8:2f:e4:07:ad:0d:28:cb:34:2c:76:e5:33:
2b:7a:1a:f7:49:39:eb:69:4e:38:ad:56:f4:a6:1f:
ca:2e:40:57:5b:df:99:34:9b:53:da:d6:ac:c5:e3:
2b:ad:1b:00:e0:f0:19:44:0f:ba:91:8b:e9:7a:4d:
b7:71:b5:c1:0e:98:c2:2a:e0:f1:88:1f:37:c7:df:
73:42:96:28:1f:93:23:bd:b4:23:ea:f2:53:2d:45:
5e:40:28:47:1b:98:b8:61:69:cd:0b:ae:9a:97:b2:
aa:2c:6b:c1:30:70:c0:55:6c:a1:c9:95:b0:71:ce:
ed:c2:d1:cc:b2:da:dc:d9:9f:6c:3e:29:bf:f9:51:
db:88:b1:3c:23:65:b2:03:62:97:01:f6:28:69:25:
7d:95:bc:df:99:6f:3b:54:fb:24:09:e8:50:70:ab:
31:9b:0d:28:ea:ae:f4:25:36:c3:1c:39:b7:46:bc:
0f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3C:90:27:22:98:CD:02:5A:96:81:6A:F8:8F:64:30:2E:DE:43:D7
X509v3 Authority Key Identifier:
keyid:0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e1:9d:e3:59:b2:7f:79:43:34:7d:c0:4b:30:63:d8:28:4e:
67:d4:8a:91:81:ee:2d:c9:61:24:f2:cf:60:8a:19:26:39:74:
ba:a4:38:eb:3b:87:91:63:b0:0e:c4:f3:9c:01:6b:cc:8d:bc:
f1:c2:29:73:40:4d:54:f8:b2:c8:9a:41:4b:4a:69:1e:38:1c:
1d:1c:b8:f8:2f:0e:e0:d2:a1:35:85:ab:82:59:16:fb:78:77:
44:56:c3:56:c2:f8:3e:13:c5:d7:18:4c:d1:a0:02:e4:17:62:
c6:c6:76:fc:7d:cb:3e:f7:a2:bf:ac:b1:c5:76:b7:29:65:26:
0e:a9:66:01:90:e0:b3:35:53:1f:5e:15:bd:df:b2:df:e3:28:
5f:cf:7f:a9:f6:c8:ff:65:54:eb:7d:f6:95:22:b3:09:09:f2:
ce:97:e2:31:f9:0c:b2:f0:fb:17:1f:0b:32:4b:9e:0a:ca:6a:
4b:7a:34:01:bc:ed:51:70:0f:88:ce:20:63:d4:30:c2:e6:ba:
a9:1a:5e:2b:b9:08:3e:0c:16:7c:8d:9c:9a:06:5b:99:78:99:
ee:7f:cb:50:2f:f9:91:2c:af:f3:32:29:46:39:bd:a0:31:da:
f0:ee:ef:43:09:b3:c5:5b:b5:10:d1:9a:7f:60:76:76:af:c6:
90:a8:ec:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6woOSNaJozGyvlL9ZymeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWEyZDIzNzRhYTZhYzcxNGI1ZjhhNmVkZGI4MGRjNjk2
NzljYzYwHhcNMjUwNjE2MjIwMDU3WhcNMjUwNjE3MjIwMDU3WjAzMTEwLwYDVQQD
EygyNjNjOTAyNzIyOThjZDAyNWE5NjgxNmFmODhmNjQzMDJlZGU0M2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Cy/gTE/WW9RQKVsy2QRi2Atwm6+
J+pI96Lgpj65XrDvOYIux/9epX7x8O4cSF5bsbAsxoY4TCE19CAkOoa+k/oY9tIg
4GfFxSln5Ngv5AetDSjLNCx25TMrehr3STnraU44rVb0ph/KLkBXW9+ZNJtT2tas
xeMrrRsA4PAZRA+6kYvpek23cbXBDpjCKuDxiB83x99zQpYoH5MjvbQj6vJTLUVe
QChHG5i4YWnNC66al7KqLGvBMHDAVWyhyZWwcc7twtHMstrc2Z9sPim/+VHbiLE8
I2WyA2KXAfYoaSV9lbzfmW87VPskCehQcKsxmw0o6q70JTbDHDm3RrwPyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY8kCcimM0CWpaBaviPZDAu3kPXMB8GA1UdIwQY
MBaAFA+aLSN0qmrHFLX4pu3bgNxpZ5zGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVvdEkzU3Fhc2NVdGZpbTdkdUEzR2xubk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wMDI0OGMtMzc5MS00NjI5LWE2YzYt
NmQ5NzE5OTJjMzQ5LzEvRDVvdEkzU3Fhc2NVdGZpbTdkdUEzR2xubk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8wMDI0OGMtMzc5MS00NjI5LWE2YzYtNmQ5NzE5OTJjMzQ5
LzEvRDVvdEkzU3Fhc2NVdGZpbTdkdUEzR2xubk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+Gd41my
f3lDNH3ASzBj2ChOZ9SKkYHuLclhJPLPYIoZJjl0uqQ46zuHkWOwDsTznAFrzI28
8cIpc0BNVPiyyJpBS0ppHjgcHRy4+C8O4NKhNYWrglkW+3h3RFbDVsL4PhPF1xhM
0aAC5BdixsZ2/H3LPveiv6yxxXa3KWUmDqlmAZDgszVTH14Vvd+y3+MoX89/qfbI
/2VU6332lSKzCQnyzpfiMfkMsvD7Fx8LMkueCspqS3o0AbztUXAPiM4gY9Qwwua6
qRpeK7kIPgwWfI2cmgZbmXiZ7n/LUC/5kSyv8zIpRjm9oDHa8O7vQwmzxVu1ENGa
f2B2dq/GkKjsJw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:14:34 2025 by rpki-client