Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: LQGgflAxIkXWAM+0/J47KIfp5xbcYJoHtVRK78dJ7TI=
Subject key identifier: CC:23:BE:C4:89:14:07:70:1C:B7:A9:29:D8:BC:B0:91:11:8D:8E:6A
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 01976F99DEA5B9331077E4FA7A7976BCADC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0B9A
Signing time: Sat 14 Jun 2025 18:00:44 +0000
Manifest this update: Sat 14 Jun 2025 18:00:44 +0000
Manifest next update: Sun 15 Jun 2025 18:00:44 +0000
Files and hashes: 1: 1-KvMzZmip20mq_6TE6zao4jxRAY.roa (hash: +e++mFx5okLj8UNvWINUv13IrPw1m2hTZhWWjifAWCI=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: tCb0/DolWDhJ/yYPK6dkv+Waiy6eEXh+53GrluaemBI=)
3: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (hash: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:de:a5:b9:33:10:77:e4:fa:7a:79:76:bc:ad:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Jun 14 18:00:44 2025 GMT
Not After : Jun 15 18:00:44 2025 GMT
Subject: CN=cc23bec4891407701cb7a929d8bcb091118d8e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:50:53:6a:a4:85:d1:bc:8a:4d:aa:10:9a:
a0:bd:fe:b8:2b:6f:54:11:9d:2a:78:63:30:ca:ad:
b3:d2:44:23:1c:47:55:de:44:99:8a:5b:07:8d:39:
9b:35:52:86:3b:60:0c:6e:e7:a9:ad:ce:8a:52:7f:
f7:b5:fa:51:0f:fb:17:8d:b7:af:6c:b8:a3:07:1c:
d6:40:72:06:6f:7f:c1:7b:1a:df:28:39:56:d6:75:
4e:26:22:ff:81:10:a4:32:b8:47:da:8f:27:65:4e:
3b:e8:85:9c:5a:44:55:35:28:7a:c7:18:3a:46:29:
db:b5:52:26:f5:8b:1e:2b:f7:32:d1:9e:05:ee:f5:
46:7f:04:ba:c6:ed:7e:fc:90:41:b4:b3:97:43:8a:
dd:2f:df:62:79:48:83:0d:70:5f:fa:86:0c:47:ca:
0b:0c:d4:a7:e6:78:00:2f:28:41:2a:fb:85:72:6e:
0e:1f:46:0c:72:ae:e2:43:28:5f:7a:4d:26:eb:f8:
89:ba:f8:1f:ad:47:82:50:b2:e2:47:97:96:20:4b:
78:b6:02:9f:6f:63:61:a3:4f:4b:2c:cc:92:5c:7d:
94:97:2f:47:63:b7:af:9a:0f:6c:35:d1:06:0d:82:
4d:dc:63:f9:6f:db:f5:2f:42:6e:ab:34:e1:ae:f3:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:23:BE:C4:89:14:07:70:1C:B7:A9:29:D8:BC:B0:91:11:8D:8E:6A
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:75:f3:6c:7a:45:33:c2:5e:cd:07:73:e3:90:86:49:e4:10:
65:4b:47:58:88:96:7c:12:2e:18:4a:ad:e8:8c:2d:d4:35:3e:
bc:84:54:46:e5:49:47:db:64:4b:f1:8c:2a:61:21:20:46:0f:
4c:20:7c:b1:19:6a:50:67:57:59:e7:cc:c4:8e:1c:ed:07:d1:
e7:fd:cf:79:fc:ae:21:a4:e8:b8:d0:f2:b1:a7:74:89:f4:ba:
db:6c:96:5e:4a:6c:71:95:93:65:01:4d:bf:e2:6e:ec:1b:bc:
d3:b6:05:44:e1:3a:69:de:b3:2e:bb:a4:55:a8:79:75:8e:d4:
58:f8:28:a7:8c:e5:89:35:77:43:81:5d:5c:b8:e1:d1:a1:7f:
55:8a:87:4e:ee:50:06:d6:3e:8b:4a:88:11:19:f4:95:bd:23:
91:ec:4b:6c:67:9c:ee:c3:2f:e2:71:69:c7:a5:c6:44:d1:ba:
a3:76:13:e3:01:43:d5:93:54:d5:21:7d:87:86:82:95:d4:cd:
c5:2b:0f:59:79:cc:93:d6:85:7e:88:28:3d:58:03:d0:a1:62:
e0:2e:a6:96:d5:19:ce:96:48:92:ef:5d:49:0a:45:a3:0f:60:
aa:7e:dc:21:bb:e1:11:0c:62:b9:f2:0a:02:74:7c:99:6c:e5:
a1:70:21:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmd6luTMQd+T6enl2vK3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkN2E5MTI1NjliNzg3ZDkyZTUzNTVmZmZhZWQ1ODFmZTUw
YTI5YzAwHhcNMjUwNjE0MTgwMDQ0WhcNMjUwNjE1MTgwMDQ0WjAzMTEwLwYDVQQD
EyhjYzIzYmVjNDg5MTQwNzcwMWNiN2E5MjlkOGJjYjA5MTExOGQ4ZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L1QU2qkhdG8ik2qEJqgvf64K29U
EZ0qeGMwyq2z0kQjHEdV3kSZilsHjTmbNVKGO2AMbueprc6KUn/3tfpRD/sXjbev
bLijBxzWQHIGb3/BexrfKDlW1nVOJiL/gRCkMrhH2o8nZU476IWcWkRVNSh6xxg6
RinbtVIm9YseK/cy0Z4F7vVGfwS6xu1+/JBBtLOXQ4rdL99ieUiDDXBf+oYMR8oL
DNSn5ngALyhBKvuFcm4OH0YMcq7iQyhfek0m6/iJuvgfrUeCULLiR5eWIEt4tgKf
b2Nho09LLMySXH2Uly9HY7evmg9sNdEGDYJN3GP5b9v1L0JuqzThrvMBnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwjvsSJFAdwHLepKdi8sJERjY5qMB8GA1UdIwQY
MBaAFA16kSVpt4fZLlNV//rtWB/lCinAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQt
NDJhZTc1Yjc5NTdkLzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQtNDJhZTc1Yjc5NTdk
LzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHXzbHpF
M8JezQdz45CGSeQQZUtHWIiWfBIuGEqt6Iwt1DU+vIRURuVJR9tkS/GMKmEhIEYP
TCB8sRlqUGdXWefMxI4c7QfR5/3PefyuIaTouNDysad0ifS622yWXkpscZWTZQFN
v+Ju7Bu807YFROE6ad6zLrukVah5dY7UWPgop4zliTV3Q4FdXLjh0aF/VYqHTu5Q
BtY+i0qIERn0lb0jkexLbGec7sMv4nFpx6XGRNG6o3YT4wFD1ZNU1SF9h4aCldTN
xSsPWXnMk9aFfogoPVgD0KFi4C6mltUZzpZIku9dSQpFow9gqn7cIbvhEQxiufIK
AnR8mWzloXAhfQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:53:50 2025 by rpki-client