Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: E79/SdXI3jJPl97FX44Zwmu70U4xxNGUHB61kI1eA4M=
Subject key identifier: D1:D6:1E:9C:E1:DD:73:51:55:DB:21:D9:B4:BB:FF:FB:19:29:2D:DF
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 019773E462B7403DBD6BB0977DA511847051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 0CB0
Signing time: Sun 15 Jun 2025 14:00:36 +0000
Manifest this update: Sun 15 Jun 2025 14:00:36 +0000
Manifest next update: Mon 16 Jun 2025 14:00:36 +0000
Files and hashes: 1: 0CytvhJudNwvmE_qIywCHCo6NeE.roa (hash: 88aZ7TRUqfxW9sX6erHIjwQ5v2GdVw5BH0X6fcp/TYs=)
2: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: v4RvCtQqWXQ9jCp63lJ5HOebVFcd52y0P2fAY7Z2/gM=)
3: KrKK6KlWrbwro0xZGJbZRZAIMbY.roa (hash: mLgmMH2GpuH6gYsfQafOR8wiybY64hDgIvWRNRviit8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:62:b7:40:3d:bd:6b:b0:97:7d:a5:11:84:70:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Jun 15 14:00:36 2025 GMT
Not After : Jun 16 14:00:36 2025 GMT
Subject: CN=d1d61e9ce1dd735155db21d9b4bbfffb19292ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:e0:21:0d:9e:6a:24:59:61:e5:fd:55:ca:
32:3d:7d:ca:24:f2:d6:16:ce:5a:65:8b:20:08:98:
c4:7f:22:6d:3a:9f:c9:f0:bc:51:3f:0c:05:a2:dd:
ae:0f:d1:17:79:0b:3d:2f:d7:8b:3f:d5:6c:09:3f:
39:fc:a4:8a:9b:05:4a:71:22:1f:06:ef:86:ef:ac:
16:ee:4c:66:ce:02:4d:a0:ff:b7:45:3f:0d:ab:a6:
d2:e5:d4:e7:a2:48:34:cd:e3:21:be:00:26:34:a4:
52:26:59:8d:4b:f2:c3:30:68:41:b3:3a:9b:ce:57:
aa:e4:22:ca:46:1d:8d:ba:48:7d:67:c8:96:f6:45:
04:95:d2:8f:76:61:68:21:e3:42:83:3c:3b:eb:6f:
5d:8d:20:84:be:9a:8c:52:8e:0d:c4:b8:89:64:1e:
bc:ed:ad:31:55:6d:a4:ae:89:ce:2f:eb:66:df:66:
6b:e6:2e:d1:17:fe:53:32:b2:3e:87:36:d9:23:5c:
2b:a0:6f:6c:f3:63:89:de:47:e6:5f:d4:e4:fd:dd:
b3:69:b6:19:bd:cc:34:67:5e:26:f9:eb:1b:f7:a2:
3b:20:48:9b:64:ff:c9:d8:0a:de:46:60:1a:cb:b1:
43:0c:15:2d:f7:be:91:8f:ef:0a:d9:c9:67:96:8f:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D6:1E:9C:E1:DD:73:51:55:DB:21:D9:B4:BB:FF:FB:19:29:2D:DF
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ef:07:62:e1:37:38:fc:7a:14:35:1a:88:20:0b:88:f4:9b:
27:89:c2:93:e1:f1:08:4b:3e:23:79:a7:df:35:ca:a2:15:01:
d5:48:85:6f:75:d2:c3:bb:ea:5d:89:73:fd:35:2a:73:be:28:
88:8d:c0:42:5c:22:1a:65:1b:c3:a5:24:c9:1b:ee:18:cc:c4:
68:ff:12:2e:af:a0:91:61:46:43:50:69:00:56:16:5d:b3:18:
39:d4:8d:a5:2d:33:86:66:4b:62:e6:ba:98:9b:75:8e:07:ce:
80:56:ba:96:ce:a4:d8:0a:97:83:bd:ef:29:c8:5a:8e:32:56:
5c:5e:a5:7d:76:f9:dd:aa:8e:70:b7:4e:b7:97:7b:fc:b9:6f:
82:dd:f5:2e:c3:d8:1a:44:4b:79:42:ec:d8:47:7c:c9:99:5e:
d7:e9:9a:89:92:c3:2f:8b:0f:fc:7d:a0:83:9d:77:12:3c:c7:
28:61:79:66:22:18:bd:d2:ec:65:1d:78:d6:82:a2:3a:6e:c0:
41:39:b0:c8:69:20:21:6e:32:65:26:15:9b:4b:90:14:0e:8b:
51:1d:48:f6:02:f4:f9:51:a4:31:17:16:09:20:ef:85:17:b5:
e0:d6:2d:b6:3c:26:fb:4e:14:6f:cd:ea:2c:9a:82:0c:e8:22:
9f:f3:bf:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdz5GK3QD29a7CXfaURhHBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjgxZDllODllMmM0NzEzMjFkOTY3ZjcwOTIwOTRkYWRm
ZTJhYTgwHhcNMjUwNjE1MTQwMDM2WhcNMjUwNjE2MTQwMDM2WjAzMTEwLwYDVQQD
EyhkMWQ2MWU5Y2UxZGQ3MzUxNTVkYjIxZDliNGJiZmZmYjE5MjkyZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxffgIQ2eaiRZYeX9VcoyPX3KJPLW
Fs5aZYsgCJjEfyJtOp/J8LxRPwwFot2uD9EXeQs9L9eLP9VsCT85/KSKmwVKcSIf
Bu+G76wW7kxmzgJNoP+3RT8Nq6bS5dTnokg0zeMhvgAmNKRSJlmNS/LDMGhBszqb
zleq5CLKRh2Nukh9Z8iW9kUEldKPdmFoIeNCgzw7629djSCEvpqMUo4NxLiJZB68
7a0xVW2kronOL+tm32Zr5i7RF/5TMrI+hzbZI1wroG9s82OJ3kfmX9Tk/d2zabYZ
vcw0Z14m+esb96I7IEibZP/J2AreRmAay7FDDBUt976Rj+8K2clnlo8tjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHWHpzh3XNRVdsh2bS7//sZKS3fMB8GA1UdIwQY
MBaAFA74HZ6J4sRxMh2Wf3CSCU2t/iqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZnZG5vbml4SEV5SFpaX2NKSUpUYTMtS3FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81ZDE1YTgtMjJhNy00MDFiLThjNWUt
MDc1ZjI0ZTRiZTcxLzEvRHZnZG5vbml4SEV5SFpaX2NKSUpUYTMtS3FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81ZDE1YTgtMjJhNy00MDFiLThjNWUtMDc1ZjI0ZTRiZTcx
LzEvRHZnZG5vbml4SEV5SFpaX2NKSUpUYTMtS3FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJu8HYuE3
OPx6FDUaiCALiPSbJ4nCk+HxCEs+I3mn3zXKohUB1UiFb3XSw7vqXYlz/TUqc74o
iI3AQlwiGmUbw6UkyRvuGMzEaP8SLq+gkWFGQ1BpAFYWXbMYOdSNpS0zhmZLYua6
mJt1jgfOgFa6ls6k2AqXg73vKchajjJWXF6lfXb53aqOcLdOt5d7/Llvgt31LsPY
GkRLeULs2Ed8yZle1+maiZLDL4sP/H2gg513EjzHKGF5ZiIYvdLsZR141oKiOm7A
QTmwyGkgIW4yZSYVm0uQFA6LUR1I9gL0+VGkMRcWCSDvhRe14NYttjwm+04Ub83q
LJqCDOgin/O/+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:37:36 2025 by rpki-client