Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: VXTTHAi3kdCG+sFx7p68Hmx2amVqyE239bTYRcSLHZ4=
Subject key identifier: DB:5E:19:56:D7:10:BF:29:D1:34:95:DA:45:E3:FE:3A:7A:E5:08:85
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 01976E8712E087D932B54C57D8111E2259E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 065F
Signing time: Sat 14 Jun 2025 13:00:35 +0000
Manifest this update: Sat 14 Jun 2025 13:00:35 +0000
Manifest next update: Sun 15 Jun 2025 13:00:35 +0000
Files and hashes: 1: 1-AKJmO9q5axmG2bLlo_CKWpT7rI.roa (hash: IzbOHhtlqnCQLwohTNVhlpmomMZIZO83L4rK6yCvODA=)
2: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: 8U4IcrYDFaNwharwBcYo1uY57ciWOmoZMRjh5oq8Wrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:12:e0:87:d9:32:b5:4c:57:d8:11:1e:22:59:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Jun 14 13:00:35 2025 GMT
Not After : Jun 15 13:00:35 2025 GMT
Subject: CN=db5e1956d710bf29d13495da45e3fe3a7ae50885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:4a:76:9d:d1:87:76:45:3a:95:df:16:96:
f9:ef:9a:8d:72:51:6a:27:13:85:19:72:9e:e3:84:
c5:94:73:40:5c:23:e9:41:4a:3b:23:5a:70:2c:0f:
d3:ac:aa:88:e7:fa:4e:e3:97:80:a0:10:02:f2:4c:
7d:e2:ee:be:e9:8e:8c:4e:c6:59:4c:45:16:ee:62:
50:02:e1:d9:5c:d9:d5:d1:aa:c4:96:66:85:ba:e6:
c2:05:46:90:7c:46:28:02:24:99:11:f2:f4:81:f4:
d6:0b:e7:ec:e9:8d:ea:58:62:4e:fb:49:41:5a:26:
99:9b:b7:0a:24:07:52:a2:f0:63:4f:15:e9:bb:7f:
a3:fc:03:ab:30:f9:61:5b:10:af:b9:73:ab:78:7f:
5a:f7:f2:b2:65:b9:36:22:f9:95:3a:97:4e:be:a3:
ab:53:da:be:a6:f2:40:03:58:f1:9b:5b:cd:d8:c8:
f1:e6:93:90:75:74:4b:85:d8:52:0c:4b:42:1f:6f:
3e:1d:d6:a8:ab:a9:84:9c:20:43:c8:1e:6c:24:32:
43:4f:90:bc:87:f2:42:14:db:3f:be:06:55:52:89:
14:e1:c2:5f:b7:76:a0:f8:68:68:2b:14:fe:a3:e9:
29:18:70:51:ef:11:01:e6:53:a0:20:1e:6b:a7:86:
ac:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5E:19:56:D7:10:BF:29:D1:34:95:DA:45:E3:FE:3A:7A:E5:08:85
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a8:96:71:1c:16:a2:a1:a4:39:f9:55:51:44:de:d4:06:b7:
c8:b6:57:82:03:f1:ba:0c:45:e7:2c:24:d7:3f:77:ed:36:2f:
42:42:6e:71:35:95:e5:af:cb:bc:f2:01:67:f2:cd:f2:e8:af:
5e:b5:43:57:b2:86:26:cc:2b:f0:8e:16:96:ab:7b:1a:33:b1:
1a:b9:57:73:09:25:64:9a:84:95:f9:86:2d:d7:e7:56:c1:a5:
d9:10:15:ea:3f:b8:c0:8b:b2:59:79:dc:62:32:bb:e5:29:6a:
0d:a1:7c:15:d2:34:be:97:b5:a9:91:3e:14:36:8f:4b:55:73:
02:1d:4c:b8:75:00:29:b0:60:4b:21:9b:64:82:4f:96:7f:78:
04:a5:e7:0e:3b:02:66:7f:94:1b:83:87:6b:e9:35:d6:42:0d:
fe:81:50:ca:47:58:15:67:59:7e:72:89:87:92:78:4b:97:98:
20:2d:db:ed:48:12:66:ef:45:42:fa:07:92:4e:ae:81:f8:69:
f8:b2:da:ff:a6:a0:29:8b:38:8a:a2:72:57:87:75:95:d0:c6:
19:04:32:53:b5:81:48:49:3c:42:24:0a:0d:f3:53:fb:62:be:
c3:e5:b1:5a:33:10:ab:18:d0:32:55:4a:eb:fc:a7:68:d0:4b:
8e:27:13:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduhxLgh9kytUxX2BEeIlnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzNiY2QzMjU1YTBkYWQ1ZjRhMzUwZDExZGM4OTFmYTBi
ZTA0MzcwHhcNMjUwNjE0MTMwMDM1WhcNMjUwNjE1MTMwMDM1WjAzMTEwLwYDVQQD
EyhkYjVlMTk1NmQ3MTBiZjI5ZDEzNDk1ZGE0NWUzZmUzYTdhZTUwODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4NKdp3Rh3ZFOpXfFpb575qNclFq
JxOFGXKe44TFlHNAXCPpQUo7I1pwLA/TrKqI5/pO45eAoBAC8kx94u6+6Y6MTsZZ
TEUW7mJQAuHZXNnV0arElmaFuubCBUaQfEYoAiSZEfL0gfTWC+fs6Y3qWGJO+0lB
WiaZm7cKJAdSovBjTxXpu3+j/AOrMPlhWxCvuXOreH9a9/KyZbk2IvmVOpdOvqOr
U9q+pvJAA1jxm1vN2Mjx5pOQdXRLhdhSDEtCH28+Hdaoq6mEnCBDyB5sJDJDT5C8
h/JCFNs/vgZVUokU4cJft3ag+GhoKxT+o+kpGHBR7xEB5lOgIB5rp4asQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNteGVbXEL8p0TSV2kXj/jp65QiFMB8GA1UdIwQY
MBaAFONzvNMlWg2tX0o1DRHciR+gvgQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMjBkYmMtMmFiNC00M2ZiLTgwYTIt
MDRlN2IxYThjZTE4LzEvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kMjBkYmMtMmFiNC00M2ZiLTgwYTItMDRlN2IxYThjZTE4
LzEvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6iWcRwW
oqGkOflVUUTe1Aa3yLZXggPxugxF5ywk1z937TYvQkJucTWV5a/LvPIBZ/LN8uiv
XrVDV7KGJswr8I4Wlqt7GjOxGrlXcwklZJqElfmGLdfnVsGl2RAV6j+4wIuyWXnc
YjK75SlqDaF8FdI0vpe1qZE+FDaPS1VzAh1MuHUAKbBgSyGbZIJPln94BKXnDjsC
Zn+UG4OHa+k11kIN/oFQykdYFWdZfnKJh5J4S5eYIC3b7UgSZu9FQvoHkk6ugfhp
+LLa/6agKYs4iqJyV4d1ldDGGQQyU7WBSEk8QiQKDfNT+2K+w+WxWjMQqxjQMlVK
6/ynaNBLjicT/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:45:00 2025 by rpki-client