Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: 52SFpTpGrExtkBKM6QwVe1MIybCsvx2QcnKkBgWjFDM=
Subject key identifier: 72:21:CB:62:8E:2E:41:AC:D5:EC:FA:6C:CE:2C:71:FD:30:4C:D4:B6
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 019768F2A58A12F69DFC270950F87E16BF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 062B
Signing time: Fri 13 Jun 2025 11:00:21 +0000
Manifest this update: Fri 13 Jun 2025 11:00:21 +0000
Manifest next update: Sat 14 Jun 2025 11:00:21 +0000
Files and hashes: 1: RJIaPfw-lelsSYxBjknFr4Rt7oQ.roa (hash: a99rlpRHuLbwwwhP8DmXyZr4TiQSJ2/sdHfuj/shU7Y=)
2: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: 4MqXjJMLpqcu11T/cQ2R/Rj2uHdnMSBd+HmZThgBiLA=)
3: oH2IWQRozN1-75odpKh66sr4uwc.roa (hash: wPfO52+kbkGCq6+uVpP9AwZp/WGjoxj4/guIax27VIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:a5:8a:12:f6:9d:fc:27:09:50:f8:7e:16:bf:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Jun 13 11:00:21 2025 GMT
Not After : Jun 14 11:00:21 2025 GMT
Subject: CN=7221cb628e2e41acd5ecfa6cce2c71fd304cd4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:e5:66:05:97:28:07:0f:e9:dc:f3:b1:af:
9f:2e:89:ac:70:bd:b1:c3:dc:29:34:22:52:28:37:
df:27:e7:f4:1d:12:57:cd:3b:ca:53:14:6c:85:61:
00:6b:48:54:83:b8:d6:22:3f:b0:82:1d:2e:1f:79:
7e:4b:8f:fc:3b:03:41:69:9f:45:c2:bb:a5:f9:87:
d9:94:10:09:62:db:f3:6c:cb:35:18:38:f0:b9:df:
d8:1d:f4:40:b9:b7:4e:76:95:cc:46:aa:48:fd:11:
d6:56:0f:4a:0b:29:66:4a:f6:b0:71:41:ed:81:a8:
54:59:12:70:e6:c8:2d:7f:01:9c:60:a7:a6:c5:e3:
17:d0:82:66:9c:ad:eb:4e:6f:07:d8:9c:90:e1:36:
ca:f8:11:e3:1a:ce:77:02:84:44:d5:9e:b1:40:88:
0a:f9:92:cf:fd:61:9d:aa:3a:0a:91:25:30:36:20:
ac:49:04:a0:48:0b:0d:05:ce:7d:39:b9:c4:7c:7b:
60:66:73:a3:31:3e:f0:58:62:fd:3b:2c:28:30:8c:
9c:ef:b4:6d:a3:4d:e7:0a:42:8a:f2:24:47:db:8d:
4a:ee:d5:9e:9c:64:0d:bd:9f:c3:2f:f3:db:6f:ba:
6c:f8:8a:db:8a:5c:ac:6a:e4:c3:68:c4:b6:00:59:
79:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:21:CB:62:8E:2E:41:AC:D5:EC:FA:6C:CE:2C:71:FD:30:4C:D4:B6
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:dc:e7:eb:11:2c:f4:01:bd:00:af:db:1c:43:e4:d5:50:c4:
e5:59:76:67:9f:8b:bb:e5:20:7c:e6:15:2d:95:78:e4:a8:e9:
b3:bf:c6:8c:a4:e4:fd:3c:9f:cf:35:f3:d3:e3:4f:5b:13:7d:
61:9f:9a:52:44:a6:96:46:89:09:f6:33:63:2c:e9:04:84:29:
d8:7f:95:1f:63:14:45:22:31:e5:49:a3:d1:5f:23:fa:0c:85:
da:8e:0b:cd:95:36:5e:79:88:3d:46:b8:a7:40:40:8b:92:88:
96:a6:dc:5c:ef:74:16:e3:11:8f:d8:d2:4f:fc:9a:05:83:4d:
b3:b9:ba:d5:67:b5:22:4a:a0:2d:ff:f3:af:5b:af:b9:63:c6:
b1:f4:22:d1:aa:96:f8:1d:f5:a0:18:98:2a:cd:82:4c:ed:4b:
8e:78:65:41:48:d1:c3:24:6d:58:d1:a5:ce:97:2c:ea:7c:15:
2b:c2:b2:45:99:5b:4b:1f:fc:99:5f:31:9b:dc:62:70:09:1b:
ef:4c:76:9a:e4:b4:ae:f4:69:b0:f6:5d:db:80:09:fa:6a:91:
5e:7c:5d:3a:07:19:ff:b4:4d:90:c2:a1:71:75:c7:7f:82:6f:
7d:40:93:a6:84:87:d1:57:75:5e:62:9e:92:e1:37:2e:59:61:
8a:ac:96:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdo8qWKEvad/CcJUPh+Fr8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTgxNTlhMTZkNzJiM2Q2Y2RmYmFhMDk2ZDY5MTM5ZmRl
OWQyOTAwHhcNMjUwNjEzMTEwMDIxWhcNMjUwNjE0MTEwMDIxWjAzMTEwLwYDVQQD
Eyg3MjIxY2I2MjhlMmU0MWFjZDVlY2ZhNmNjZTJjNzFmZDMwNGNkNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdXlZgWXKAcP6dzzsa+fLomscL2x
w9wpNCJSKDffJ+f0HRJXzTvKUxRshWEAa0hUg7jWIj+wgh0uH3l+S4/8OwNBaZ9F
wrul+YfZlBAJYtvzbMs1GDjwud/YHfRAubdOdpXMRqpI/RHWVg9KCylmSvawcUHt
gahUWRJw5sgtfwGcYKemxeMX0IJmnK3rTm8H2JyQ4TbK+BHjGs53AoRE1Z6xQIgK
+ZLP/WGdqjoKkSUwNiCsSQSgSAsNBc59ObnEfHtgZnOjMT7wWGL9OywoMIyc77Rt
o03nCkKK8iRH241K7tWenGQNvZ/DL/Pbb7ps+IrbilysauTDaMS2AFl5kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIhy2KOLkGs1ez6bM4scf0wTNS2MB8GA1UdIwQY
MBaAFHToFZoW1ys9bN+6oJbWkTn96dKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgt
ODRjYmM4NWEyMzQzLzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgtODRjYmM4NWEyMzQz
LzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu9zn6xEs
9AG9AK/bHEPk1VDE5Vl2Z5+Lu+UgfOYVLZV45Kjps7/GjKTk/TyfzzXz0+NPWxN9
YZ+aUkSmlkaJCfYzYyzpBIQp2H+VH2MURSIx5Umj0V8j+gyF2o4LzZU2XnmIPUa4
p0BAi5KIlqbcXO90FuMRj9jST/yaBYNNs7m61We1IkqgLf/zr1uvuWPGsfQi0aqW
+B31oBiYKs2CTO1LjnhlQUjRwyRtWNGlzpcs6nwVK8KyRZlbSx/8mV8xm9xicAkb
70x2muS0rvRpsPZd24AJ+mqRXnxdOgcZ/7RNkMKhcXXHf4JvfUCTpoSH0Vd1XmKe
kuE3LllhiqyWjA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 20:07:43 2025 by rpki-client