Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: XfUjl1ai3wizSeTjJJBKQ/v3sW2QxRs99Fe26evjVQ0=
Subject key identifier: 71:7A:1A:AE:A5:84:1F:6A:29:F4:E3:88:1E:CF:A5:EA:57:20:F5:69
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 01976F2CEC3767347AE4667FEE5AB2C7492D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 106A
Signing time: Sat 14 Jun 2025 16:01:44 +0000
Manifest this update: Sat 14 Jun 2025 16:01:44 +0000
Manifest next update: Sun 15 Jun 2025 16:01:44 +0000
Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: nRkoGJlQusby2hGYCSuM+Oga0Hx/SvddH8VSFbN3/+E=)
2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:ec:37:67:34:7a:e4:66:7f:ee:5a:b2:c7:49:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Jun 14 16:01:44 2025 GMT
Not After : Jun 15 16:01:44 2025 GMT
Subject: CN=717a1aaea5841f6a29f4e3881ecfa5ea5720f569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:89:b8:b1:6b:70:13:77:21:87:df:8d:57:
8e:02:22:59:c1:a1:b8:53:7b:b9:1a:f6:35:f0:3a:
47:86:c4:3b:ff:51:05:bc:72:a6:35:4e:8b:1f:4c:
fd:dc:e3:3e:4f:9f:5b:e7:33:2f:a8:a1:56:06:2c:
e0:6b:a4:84:8a:64:af:8a:a8:46:00:f6:04:6f:fc:
d7:df:4d:c3:6d:30:93:2f:b3:c5:c9:55:77:72:8b:
18:a3:d4:45:49:59:2b:05:7c:d9:92:9a:cd:3a:7e:
f8:30:54:fa:a7:c4:50:3c:7b:68:b7:b5:67:b2:d9:
10:10:d9:da:4c:ee:4a:a2:f5:80:2e:0a:36:4e:28:
d5:85:a1:e3:45:c2:6b:67:14:ac:c2:8c:a7:31:e4:
e6:04:b9:a2:d5:a5:98:23:8b:c4:bc:96:1d:5e:45:
2b:0d:56:05:e8:39:7b:6c:85:7e:a6:96:47:8d:60:
b2:57:38:bf:d5:c3:62:9a:b2:d0:e5:12:1a:9f:55:
ee:94:36:7e:76:eb:c8:9b:73:6e:d4:83:cc:26:fb:
b2:85:41:1c:95:b0:69:dc:e1:39:03:61:6c:9a:b9:
8b:db:89:79:ca:f1:e3:78:df:87:f0:87:a3:74:bc:
2b:94:de:d7:de:99:ad:66:88:38:d8:c9:9e:da:98:
ee:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7A:1A:AE:A5:84:1F:6A:29:F4:E3:88:1E:CF:A5:EA:57:20:F5:69
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:88:87:53:15:aa:9e:2c:15:bd:8b:99:85:12:89:a2:a6:f0:
ad:d7:56:80:a3:d9:a8:fc:13:d5:e0:eb:dc:25:7e:2d:d0:22:
a7:bf:4d:9a:ab:dd:7e:e6:0c:cc:5f:38:e1:99:27:3f:78:3c:
fa:e4:00:68:e0:fd:c0:c4:a5:13:ad:81:3d:05:8a:4b:a9:b5:
dc:8d:e0:31:89:6d:9c:9b:ab:9f:b6:07:8f:0e:20:e0:3c:78:
6a:71:d7:17:ce:26:77:c2:d6:e4:87:5d:2f:1b:ce:99:d2:d5:
fe:cb:f4:7f:ab:2f:f4:e8:63:ed:d2:87:b1:d2:ce:c0:83:f8:
91:81:04:79:61:72:e3:8e:87:2f:ff:56:c9:13:f3:bf:3d:83:
86:b7:8a:01:cb:ee:b8:2e:f4:e3:3c:a4:5f:d6:91:5a:a2:bd:
33:06:1a:8e:6e:21:35:b3:88:0b:20:0e:31:69:91:a2:94:6f:
13:a4:bd:0c:e1:1d:f6:5f:43:5e:f7:98:eb:b7:1e:a1:78:f5:
47:75:db:fc:8c:fa:56:24:5d:f4:a9:47:f5:f1:4a:be:bc:b6:
95:8e:fb:97:b1:9f:c6:69:e5:9d:a1:85:42:f3:dc:c1:70:f8:
9b:7f:8a:8a:0e:cf:25:d6:4c:4a:0a:e0:17:52:ff:9d:ee:f6:
32:da:c5:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLOw3ZzR65GZ/7lqyx0ktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx
ZDNkZjAwHhcNMjUwNjE0MTYwMTQ0WhcNMjUwNjE1MTYwMTQ0WjAzMTEwLwYDVQQD
Eyg3MTdhMWFhZWE1ODQxZjZhMjlmNGUzODgxZWNmYTVlYTU3MjBmNTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkiJuLFrcBN3IYffjVeOAiJZwaG4
U3u5GvY18DpHhsQ7/1EFvHKmNU6LH0z93OM+T59b5zMvqKFWBizga6SEimSviqhG
APYEb/zX303DbTCTL7PFyVV3cosYo9RFSVkrBXzZkprNOn74MFT6p8RQPHtot7Vn
stkQENnaTO5KovWALgo2TijVhaHjRcJrZxSswoynMeTmBLmi1aWYI4vEvJYdXkUr
DVYF6Dl7bIV+ppZHjWCyVzi/1cNimrLQ5RIan1XulDZ+duvIm3Nu1IPMJvuyhUEc
lbBp3OE5A2FsmrmL24l5yvHjeN+H8IejdLwrlN7X3pmtZog42Mme2pjumQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHF6Gq6lhB9qKfTjiB7PpepXIPVpMB8GA1UdIwQY
MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct
ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4
LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIiHUxWq
niwVvYuZhRKJoqbwrddWgKPZqPwT1eDr3CV+LdAip79NmqvdfuYMzF844ZknP3g8
+uQAaOD9wMSlE62BPQWKS6m13I3gMYltnJurn7YHjw4g4Dx4anHXF84md8LW5Idd
LxvOmdLV/sv0f6sv9Ohj7dKHsdLOwIP4kYEEeWFy446HL/9WyRPzvz2DhreKAcvu
uC704zykX9aRWqK9MwYajm4hNbOICyAOMWmRopRvE6S9DOEd9l9DXveY67ceoXj1
R3Xb/Iz6ViRd9KlH9fFKvry2lY77l7GfxmnlnaGFQvPcwXD4m3+Kig7PJdZMSgrg
F1L/ne72MtrFxQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:15:57 2025 by rpki-client