Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: 39F9lwJKg/xZs+yZtQ26BrXaZsbyOUj5iXiJmepctvs=
Subject key identifier: 41:83:0B:08:D0:A6:F5:70:40:95:66:71:63:12:74:6F:F4:31:57:3F
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 019771516A20676A6271730B15CCE92787C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 159C
Signing time: Sun 15 Jun 2025 02:00:50 +0000
Manifest this update: Sun 15 Jun 2025 02:00:50 +0000
Manifest next update: Mon 16 Jun 2025 02:00:50 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: hGPuGim5lnvZ0rVvN6K7VuXUbp9HNc8J2RxxjD92AFI=)
2: EU9ZI9FwGK9Je2LIHv8oyryDbQ0.roa (hash: lg1hblUtV5bfdjAsYpP/FKql2pfxKFHlS2JkI4euny0=)
3: UttiV2rZhXbpiEroK90NOoWzeyo.roa (hash: clJAUfrgzlJXm2cn+fD7HIKwQaoQPkMOMFf6DpqSgo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:6a:20:67:6a:62:71:73:0b:15:cc:e9:27:87:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Jun 15 02:00:50 2025 GMT
Not After : Jun 16 02:00:50 2025 GMT
Subject: CN=41830b08d0a6f570409566716312746ff431573f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:87:0f:84:13:a5:b8:19:1a:76:cf:35:f3:
6f:83:da:21:c1:92:8c:c7:a4:80:6d:76:97:f0:43:
3a:af:fb:50:ef:ab:41:74:df:5f:2f:db:c9:67:c9:
0f:a5:d7:91:4e:fd:c4:59:9a:79:18:a1:42:11:2b:
ed:14:8c:a3:6a:fc:45:2c:8a:0f:94:da:b8:25:bc:
30:c7:75:1e:21:7f:1c:d8:87:4c:49:b2:25:d4:44:
56:6a:ee:da:1b:27:b2:8d:9b:eb:63:6a:44:66:6d:
61:ca:fa:1f:87:6f:52:b6:de:55:cc:bf:98:68:88:
0a:87:00:c2:fe:1b:90:ff:41:0c:42:c6:ad:91:e6:
1f:50:b9:3f:b7:9e:02:9e:25:fb:15:06:55:64:5f:
20:f1:52:85:37:83:69:0c:14:56:82:90:3f:8d:62:
d4:df:71:06:13:70:34:ca:73:d8:b0:c3:b0:55:bf:
bd:2f:ca:ff:8e:be:43:e7:79:23:52:d2:c4:ba:ef:
c3:5d:b5:f9:7d:9c:a0:da:aa:53:0f:42:16:45:17:
66:c8:0d:7f:5a:6d:54:ef:6e:57:50:6c:3a:67:94:
d2:5e:db:d1:34:cd:ee:69:7c:70:23:8a:15:3f:94:
e5:63:12:02:fc:7f:cf:c1:42:65:3a:8f:74:09:86:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:83:0B:08:D0:A6:F5:70:40:95:66:71:63:12:74:6F:F4:31:57:3F
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6a:75:8e:09:4e:68:62:58:5f:43:be:db:f8:fe:d7:80:21:
b1:51:98:21:2b:26:51:9f:09:e5:cc:96:6f:63:6d:24:58:8f:
70:38:f4:f8:75:5c:c7:dd:62:aa:3e:bf:c7:8e:ca:ac:ff:5b:
7e:45:24:14:3b:9c:a7:96:8a:fd:57:86:4e:73:d8:c5:0c:05:
9b:da:8a:71:95:7f:69:86:0e:88:01:f9:b3:64:13:23:fc:cd:
c1:b2:f6:e9:5d:4c:90:21:34:24:b5:0a:c1:37:39:84:4d:a9:
1c:9e:9a:cd:ee:95:fe:88:f2:90:d9:e2:f6:d6:07:c4:0a:f2:
6a:80:fe:6c:5d:47:e6:b0:34:e1:b3:d8:a5:09:7c:07:81:fc:
98:e7:f0:cf:fa:a5:97:30:76:8a:f9:59:f3:cc:67:fc:63:df:
e9:c1:71:dd:3f:61:15:f1:04:a8:1d:b7:6e:68:05:d6:e9:e5:
a9:9d:6e:49:e6:0c:57:4c:0d:18:5a:73:f2:6d:ae:6f:5b:23:
42:19:6d:c2:01:d7:99:b0:7e:b5:36:f1:12:5f:91:ee:9e:e3:
76:73:aa:b2:00:b8:2f:c0:ca:d7:0e:c7:60:af:10:86:b2:45:
c7:54:c5:81:35:32:75:d5:87:ab:60:cd:90:91:89:b7:a6:2b:
75:ab:b5:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxUWogZ2picXMLFczpJ4fGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWM3N2ExZGNkYjhlZWQ2MmNkM2NhODBhNTE0NGRjNGUy
NDNmNGUwHhcNMjUwNjE1MDIwMDUwWhcNMjUwNjE2MDIwMDUwWjAzMTEwLwYDVQQD
Eyg0MTgzMGIwOGQwYTZmNTcwNDA5NTY2NzE2MzEyNzQ2ZmY0MzE1NzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28KHD4QTpbgZGnbPNfNvg9ohwZKM
x6SAbXaX8EM6r/tQ76tBdN9fL9vJZ8kPpdeRTv3EWZp5GKFCESvtFIyjavxFLIoP
lNq4Jbwwx3UeIX8c2IdMSbIl1ERWau7aGyeyjZvrY2pEZm1hyvofh29Stt5VzL+Y
aIgKhwDC/huQ/0EMQsatkeYfULk/t54CniX7FQZVZF8g8VKFN4NpDBRWgpA/jWLU
33EGE3A0ynPYsMOwVb+9L8r/jr5D53kjUtLEuu/DXbX5fZyg2qpTD0IWRRdmyA1/
Wm1U725XUGw6Z5TSXtvRNM3uaXxwI4oVP5TlYxIC/H/PwUJlOo90CYbl9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGDCwjQpvVwQJVmcWMSdG/0MVc/MB8GA1UdIwQY
MBaAFA+cd6Hc247tYs08qApRRNxOJD9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgt
YWNjNTY5NzdiNmY0LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgtYWNjNTY5NzdiNmY0
LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmp1jglO
aGJYX0O+2/j+14AhsVGYISsmUZ8J5cyWb2NtJFiPcDj0+HVcx91iqj6/x47KrP9b
fkUkFDucp5aK/VeGTnPYxQwFm9qKcZV/aYYOiAH5s2QTI/zNwbL26V1MkCE0JLUK
wTc5hE2pHJ6aze6V/ojykNni9tYHxAryaoD+bF1H5rA04bPYpQl8B4H8mOfwz/ql
lzB2ivlZ88xn/GPf6cFx3T9hFfEEqB23bmgF1unlqZ1uSeYMV0wNGFpz8m2ub1sj
QhltwgHXmbB+tTbxEl+R7p7jdnOqsgC4L8DK1w7HYK8QhrJFx1TFgTUyddWHq2DN
kJGJt6Yrdau13Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:50:08 2025 by rpki-client