Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier: T8HvO9WhKDfg2YsM1p5woVV+6v1Q0GP9oQLvdtN+cSY=
Subject key identifier: 38:A5:74:1A:2A:4D:68:8C:B3:A9:74:D9:FB:25:82:35:70:26:3A:BE
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial: 01976D3DE99D5DCC9118CB83C09E724A187A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number: 07B8
Signing time: Sat 14 Jun 2025 07:01:03 +0000
Manifest this update: Sat 14 Jun 2025 07:01:03 +0000
Manifest next update: Sun 15 Jun 2025 07:01:03 +0000
Files and hashes: 1: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: YBC9yQVELynoIRjLaqKqpXFqfxonnDakSYBIzMWgHhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:e9:9d:5d:cc:91:18:cb:83:c0:9e:72:4a:18:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Validity
Not Before: Jun 14 07:01:03 2025 GMT
Not After : Jun 15 07:01:03 2025 GMT
Subject: CN=38a5741a2a4d688cb3a974d9fb25823570263abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:53:5e:43:3b:bd:9d:33:c6:b3:8a:49:b3:
8d:d9:16:65:c1:5c:dc:c2:65:0a:b6:f9:05:d5:91:
b4:9b:9a:30:fb:9d:3f:84:63:1a:73:31:ee:3f:74:
1f:03:5e:7f:6c:8c:de:93:94:05:08:72:ce:74:85:
aa:29:8d:24:0d:be:71:8c:c0:5d:bf:25:74:93:33:
fe:3b:11:76:f1:aa:6b:aa:83:48:5e:9e:07:bd:48:
63:80:ef:73:75:4f:e2:96:bd:9c:83:65:79:4a:6b:
a3:3a:21:03:c0:fa:ab:15:d6:e2:e3:7d:45:b7:40:
ca:14:af:84:3a:f0:e1:5a:c8:48:d5:b6:c5:d7:19:
d0:b3:71:18:24:16:b9:d9:ed:3d:eb:b3:3e:de:ab:
33:db:9e:8a:44:b8:47:b9:4e:4e:cb:99:80:7e:34:
81:fe:d8:e3:53:ff:76:c1:5f:2f:d3:6f:5d:2a:f9:
8f:0d:59:fe:11:78:ae:5f:8d:ca:60:06:74:5f:a9:
3b:7a:d6:e9:10:29:6c:1c:39:9c:13:4b:e6:2b:f8:
a2:9a:b2:40:de:ed:a1:f9:d2:1f:63:8b:d8:df:e6:
c3:61:1b:cf:7d:53:08:32:79:7f:87:be:72:e5:79:
99:46:b9:3e:37:b6:6e:d4:c9:82:e7:31:37:51:f0:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A5:74:1A:2A:4D:68:8C:B3:A9:74:D9:FB:25:82:35:70:26:3A:BE
X509v3 Authority Key Identifier:
keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:15:6f:73:c1:f3:0f:fc:48:9d:d6:fb:19:f9:fc:75:7a:a9:
39:9c:83:de:69:22:9d:35:8f:21:45:45:7b:74:83:8b:f5:47:
e7:2a:8e:72:5f:49:11:db:37:26:ec:d3:be:6f:a7:35:c5:69:
04:04:4a:22:56:c8:a4:93:d0:82:a0:e2:3a:1c:db:cc:cc:e0:
9c:75:d4:73:f1:a3:0d:49:e4:70:0f:6e:22:31:67:81:9a:d4:
c8:37:98:54:bb:b7:ec:9c:37:bd:45:f8:ba:95:dd:e4:08:7e:
09:bf:c6:98:a0:04:32:3f:16:08:91:e3:06:62:b4:eb:dc:3a:
12:b8:b5:e3:ce:e7:45:dc:fa:06:30:55:62:de:c1:71:4f:b6:
64:55:a5:93:94:75:ef:d8:a3:88:95:f1:99:a6:17:22:2c:c1:
90:ce:7f:a0:fc:61:ae:7f:67:06:cc:f3:2a:1e:fe:26:f2:b4:
bc:6f:54:bc:e5:48:dd:d8:85:b2:93:08:1c:78:35:e4:95:32:
b2:92:5d:f2:15:b5:76:9a:43:0d:33:fe:1c:a0:ab:3f:83:72:
53:ea:ee:db:e0:1e:61:b3:50:c0:eb:e4:b4:a8:cf:d1:b0:f2:
98:81:f8:7d:e9:b5:d4:d8:4d:ee:71:20:a6:22:70:4c:0e:45:
7b:3d:d1:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPemdXcyRGMuDwJ5yShh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNkOTFiMWIyZjlhZjRiNzQyMTRhNmQ2NzhjZTA3MTk2
OGUxY2YwHhcNMjUwNjE0MDcwMTAzWhcNMjUwNjE1MDcwMTAzWjAzMTEwLwYDVQQD
EygzOGE1NzQxYTJhNGQ2ODhjYjNhOTc0ZDlmYjI1ODIzNTcwMjYzYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05dTXkM7vZ0zxrOKSbON2RZlwVzc
wmUKtvkF1ZG0m5ow+50/hGMaczHuP3QfA15/bIzek5QFCHLOdIWqKY0kDb5xjMBd
vyV0kzP+OxF28aprqoNIXp4HvUhjgO9zdU/ilr2cg2V5SmujOiEDwPqrFdbi431F
t0DKFK+EOvDhWshI1bbF1xnQs3EYJBa52e0967M+3qsz256KRLhHuU5Oy5mAfjSB
/tjjU/92wV8v029dKvmPDVn+EXiuX43KYAZ0X6k7etbpEClsHDmcE0vmK/iimrJA
3u2h+dIfY4vY3+bDYRvPfVMIMnl/h75y5XmZRrk+N7Zu1MmC5zE3UfDwGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDildBoqTWiMs6l02fslgjVwJjq+MB8GA1UdIwQY
MBaAFHW82RsbL5r0t0IUptZ4zgcZaOHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2Qt
MWMwNTc1NTI2OTFlLzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2QtMWMwNTc1NTI2OTFl
LzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBVvc8Hz
D/xIndb7Gfn8dXqpOZyD3mkinTWPIUVFe3SDi/VH5yqOcl9JEds3JuzTvm+nNcVp
BARKIlbIpJPQgqDiOhzbzMzgnHXUc/GjDUnkcA9uIjFngZrUyDeYVLu37Jw3vUX4
upXd5Ah+Cb/GmKAEMj8WCJHjBmK069w6Eri1487nRdz6BjBVYt7BcU+2ZFWlk5R1
79ijiJXxmaYXIizBkM5/oPxhrn9nBszzKh7+JvK0vG9UvOVI3diFspMIHHg15JUy
spJd8hW1dppDDTP+HKCrP4NyU+ru2+AeYbNQwOvktKjP0bDymIH4fem11NhN7nEg
piJwTA5Fez3RaA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:35:45 2025 by rpki-client