Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier: jM3xF2UwnPmUnpXO/HuPQekbIkepSJcAvXyQ6d3MWJ0=
Subject key identifier: 46:B8:9B:13:8C:32:26:46:1D:65:A4:09:1E:AE:D0:F0:5D:72:3F:F7
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 019771F5DB8629E4503A079E3DF7E9599403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 05:00:27 +0000
Manifest this update: Sun 15 Jun 2025 05:00:27 +0000
Manifest next update: Mon 16 Jun 2025 05:00:27 +0000
Files and hashes: 1: cx1g5onsIc-hAAu8dnSh1N5rp3U.roa (hash: CrKS5W6ytqqKToe/UhGDJrUzFXfuo+vTp+g8QhgmrYQ=)
2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: Z63Pgqk/LK2nCALuUDA7kO+sWAc6pPtLaSFz62F6Ou0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:db:86:29:e4:50:3a:07:9e:3d:f7:e9:59:94:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Jun 15 05:00:27 2025 GMT
Not After : Jun 16 05:00:27 2025 GMT
Subject: CN=46b89b138c3226461d65a4091eaed0f05d723ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:5f:f8:21:07:33:a4:56:ac:13:1d:15:c7:
dc:be:14:b0:45:fe:3e:c5:20:8a:e7:01:d6:f0:1d:
d3:9d:c4:d0:c5:a6:6d:38:70:8c:43:9f:d1:52:66:
9b:17:e8:9e:15:51:25:a4:d8:cb:86:c4:6c:c2:aa:
6b:32:2b:a3:81:cf:9f:2b:be:6c:74:fb:40:8c:05:
89:b9:4c:7b:c5:97:28:92:45:29:df:a7:aa:d3:3c:
86:ea:08:67:6c:38:58:f3:cf:fb:17:36:56:c4:f4:
c0:c0:f9:28:0c:39:67:ea:02:b2:e9:d8:58:b4:c2:
db:1d:66:43:f2:9f:d0:8d:7e:38:39:fc:79:77:7f:
9e:25:b6:28:0e:37:73:76:c9:c7:52:9c:48:70:c4:
0b:94:f8:81:de:9e:87:f3:2f:48:2f:de:72:1e:84:
1d:e8:ba:6f:69:4f:c2:1c:0f:88:b5:5f:f7:c7:2a:
38:ed:a7:f9:0a:ef:8c:08:97:d0:dc:96:a1:da:ad:
f6:3f:13:09:8e:74:b4:ae:7a:e4:02:08:80:7d:c7:
a0:89:40:b4:ed:c0:ac:f8:ad:a4:47:9a:4d:ca:2f:
dd:b3:d4:7c:ae:fd:1e:8e:62:c0:0e:8c:b5:40:41:
18:c1:9a:c8:28:c6:7a:1b:e5:02:2d:8c:5d:db:0a:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B8:9B:13:8C:32:26:46:1D:65:A4:09:1E:AE:D0:F0:5D:72:3F:F7
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4d:3b:c3:36:6a:71:ab:e5:3f:41:50:b7:62:17:47:ba:2e:
7f:1c:84:12:f6:53:83:98:57:a4:2b:ac:c4:fd:20:c4:6d:bf:
ca:19:8e:1a:41:8e:2e:b4:b3:d5:6e:73:d5:50:22:2c:56:e4:
4f:a7:32:a5:b5:19:f7:c8:9b:d4:9f:40:c3:70:85:5e:2d:76:
07:0e:bc:90:29:26:11:fb:0f:55:d0:80:19:74:62:6c:c9:d2:
7b:9b:7b:88:de:c5:a1:3d:37:1c:82:61:04:f5:54:17:7d:31:
94:35:b5:4f:28:46:a8:b0:61:92:da:42:fc:8e:15:66:ef:68:
81:16:2b:2c:2a:fc:00:a1:d9:a2:d2:a9:d7:4c:09:b4:e0:06:
77:25:40:40:43:29:a9:4f:d2:39:df:8b:59:76:84:1a:35:11:
02:b2:f8:40:12:8d:ad:40:bd:79:74:e6:1c:ae:97:75:ee:75:
1e:99:a8:ad:5e:ad:b6:52:92:b5:48:ad:5d:01:0e:f9:c0:65:
42:a4:e1:ca:b0:4b:38:76:0f:d2:04:35:b5:84:50:53:d2:6d:
d4:90:1c:57:a0:ab:57:3b:89:33:07:29:99:05:9b:b5:14:f2:
10:b2:00:2f:37:de:1a:e7:91:02:86:d8:88:a2:02:14:50:d4:
63:c1:eb:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9duGKeRQOgeePffpWZQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTkwMWI0MDJkNDgyZjNkNmRkMjkyOGVhOGNlZDJlZWI2
Y2U0MTIwHhcNMjUwNjE1MDUwMDI3WhcNMjUwNjE2MDUwMDI3WjAzMTEwLwYDVQQD
Eyg0NmI4OWIxMzhjMzIyNjQ2MWQ2NWE0MDkxZWFlZDBmMDVkNzIzZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY9f+CEHM6RWrBMdFcfcvhSwRf4+
xSCK5wHW8B3TncTQxaZtOHCMQ5/RUmabF+ieFVElpNjLhsRswqprMiujgc+fK75s
dPtAjAWJuUx7xZcokkUp36eq0zyG6ghnbDhY88/7FzZWxPTAwPkoDDln6gKy6dhY
tMLbHWZD8p/QjX44Ofx5d3+eJbYoDjdzdsnHUpxIcMQLlPiB3p6H8y9IL95yHoQd
6LpvaU/CHA+ItV/3xyo47af5Cu+MCJfQ3Jah2q32PxMJjnS0rnrkAgiAfcegiUC0
7cCs+K2kR5pNyi/ds9R8rv0ejmLADoy1QEEYwZrIKMZ6G+UCLYxd2wruUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa4mxOMMiZGHWWkCR6u0PBdcj/3MB8GA1UdIwQY
MBaAFHRZAbQC1ILz1t0pKOqM7S7rbOQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgt
ZDdjMzZlMTVjZjBlLzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgtZDdjMzZlMTVjZjBl
LzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZE07wzZq
cavlP0FQt2IXR7oufxyEEvZTg5hXpCusxP0gxG2/yhmOGkGOLrSz1W5z1VAiLFbk
T6cypbUZ98ib1J9Aw3CFXi12Bw68kCkmEfsPVdCAGXRibMnSe5t7iN7FoT03HIJh
BPVUF30xlDW1TyhGqLBhktpC/I4VZu9ogRYrLCr8AKHZotKp10wJtOAGdyVAQEMp
qU/SOd+LWXaEGjURArL4QBKNrUC9eXTmHK6Xde51HpmorV6ttlKStUitXQEO+cBl
QqThyrBLOHYP0gQ1tYRQU9Jt1JAcV6CrVzuJMwcpmQWbtRTyELIALzfeGueRAobY
iKICFFDUY8HrKw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:58:05 2025 by rpki-client