Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File: dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier: w42BInPIPBWHvn3KiaeR/LDtODQMwOh2J82Sj7AEtIw=
Subject key identifier: F2:B9:8C:56:BB:64:B4:85:3A:1E:77:B8:29:31:CB:31:07:F2:81:BC
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial: 01978056883FEB858E5266A9A3BD9A074404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number: 0551
Signing time: Wed 18 Jun 2025 00:00:43 +0000
Manifest this update: Wed 18 Jun 2025 00:00:43 +0000
Manifest next update: Thu 19 Jun 2025 00:00:43 +0000
Files and hashes: 1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: yfe8Ju2q4jNfbvrRymoRFLwv6WkrVsO0xbsiCuSxFjY=)
2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:56:88:3f:eb:85:8e:52:66:a9:a3:bd:9a:07:44:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Validity
Not Before: Jun 18 00:00:43 2025 GMT
Not After : Jun 19 00:00:43 2025 GMT
Subject: CN=f2b98c56bb64b4853a1e77b82931cb3107f281bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:e6:5a:eb:8b:30:ea:f0:39:a2:4f:31:9f:
77:aa:8b:74:32:93:73:12:79:88:a1:ef:09:a0:76:
89:be:27:c6:ac:3e:c7:0e:c5:08:ba:f9:ff:4b:35:
06:0d:13:e5:dc:b8:c2:42:12:8c:1e:62:cb:66:0f:
40:36:2d:d7:50:24:4f:45:b1:77:4f:9f:24:9c:18:
c4:21:da:62:7b:7f:80:46:b0:2f:16:82:bc:c5:6d:
4c:f8:58:0c:6e:b0:4f:9a:4a:eb:f5:b0:2f:15:22:
26:78:94:d0:d0:e8:5d:4c:d2:da:3d:03:fb:dd:97:
04:72:ff:c6:e3:fa:4e:4f:93:df:97:f9:f0:8b:91:
2b:8e:14:34:04:f7:a8:4d:cb:ec:4f:73:d4:26:ed:
24:f3:48:cf:e2:c1:34:0c:06:b1:2d:f7:82:9f:e7:
e6:23:51:01:68:cf:aa:5d:17:78:e8:5b:88:ac:a0:
e3:9e:13:71:a8:ef:a5:a2:06:b6:64:14:dc:74:8f:
f6:9d:ab:ab:94:3a:44:78:c1:84:b7:d4:b7:69:16:
74:c2:c3:25:08:bf:16:1a:78:08:5e:46:36:6a:2f:
78:ae:b4:4f:f0:26:db:b1:02:18:a9:b1:a5:c9:80:
a8:fe:1f:ce:d9:67:76:80:df:9c:4b:92:88:e7:2d:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B9:8C:56:BB:64:B4:85:3A:1E:77:B8:29:31:CB:31:07:F2:81:BC
X509v3 Authority Key Identifier:
keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:dc:c4:e8:62:2f:c4:4f:dc:8c:dc:3d:9a:74:b2:73:d6:64:
fe:ae:c1:f6:3c:76:a9:de:eb:5b:43:c0:67:3c:01:ce:15:f3:
d7:26:78:16:6b:35:26:04:22:e5:6e:6b:28:e4:8a:e0:8b:d2:
ac:fe:5c:16:b4:22:b9:31:50:e9:09:cd:c0:12:dc:dc:0f:7a:
85:a4:28:a6:31:79:78:ca:11:3c:c5:63:10:08:2e:07:3f:d2:
e8:65:b0:89:c5:32:3e:e8:14:24:0e:ab:38:dd:22:49:1b:b4:
92:fb:0a:2e:e7:6c:ca:2c:27:4f:4e:f8:3c:30:a4:8f:b3:2e:
a4:b3:cd:e2:8c:b3:b3:34:5e:64:72:e5:e6:8b:5b:ba:a6:93:
d8:99:d3:17:7e:41:4c:55:7c:d9:3b:7b:84:58:3a:13:93:90:
82:d4:26:45:7e:2b:3f:cd:83:9d:69:f4:1a:61:ae:66:35:9a:
07:6e:9f:85:30:17:15:50:0d:e5:7a:84:7d:5e:e2:d4:5d:1f:
51:0e:09:a0:9b:b8:b8:42:27:58:5d:ee:ae:7e:78:8b:45:97:
41:65:cb:3c:3d:ce:5f:1a:4d:98:f4:4c:82:f1:49:7c:17:a4:
b5:05:aa:bd:84:59:6e:1e:77:0c:80:2a:9b:ec:4d:e6:b0:d6:
2d:eb:f5:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAVog/64WOUmapo72aB0QEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODc4NDkyYTA2N2NiNWEzZWRmOTY5NWE2ZmQyNTg5ZjMy
NzNhYTcwHhcNMjUwNjE4MDAwMDQzWhcNMjUwNjE5MDAwMDQzWjAzMTEwLwYDVQQD
EyhmMmI5OGM1NmJiNjRiNDg1M2ExZTc3YjgyOTMxY2IzMTA3ZjI4MWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gvmWuuLMOrwOaJPMZ93qot0MpNz
EnmIoe8JoHaJvifGrD7HDsUIuvn/SzUGDRPl3LjCQhKMHmLLZg9ANi3XUCRPRbF3
T58knBjEIdpie3+ARrAvFoK8xW1M+FgMbrBPmkrr9bAvFSImeJTQ0OhdTNLaPQP7
3ZcEcv/G4/pOT5Pfl/nwi5ErjhQ0BPeoTcvsT3PUJu0k80jP4sE0DAaxLfeCn+fm
I1EBaM+qXRd46FuIrKDjnhNxqO+loga2ZBTcdI/2naurlDpEeMGEt9S3aRZ0wsMl
CL8WGngIXkY2ai94rrRP8CbbsQIYqbGlyYCo/h/O2Wd2gN+cS5KI5y3fQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPK5jFa7ZLSFOh53uCkxyzEH8oG8MB8GA1UdIwQY
MBaAFHWHhJKgZ8taPt+Wlab9JYnzJzqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMWJlNzctZTg3OC00NmU4LWE4NzUt
ZDA5ZmVlMDljY2IxLzEvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mMWJlNzctZTg3OC00NmU4LWE4NzUtZDA5ZmVlMDljY2Ix
LzEvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNzE6GIv
xE/cjNw9mnSyc9Zk/q7B9jx2qd7rW0PAZzwBzhXz1yZ4Fms1JgQi5W5rKOSK4IvS
rP5cFrQiuTFQ6QnNwBLc3A96haQopjF5eMoRPMVjEAguBz/S6GWwicUyPugUJA6r
ON0iSRu0kvsKLudsyiwnT074PDCkj7MupLPN4oyzszReZHLl5otbuqaT2JnTF35B
TFV82Tt7hFg6E5OQgtQmRX4rP82DnWn0GmGuZjWaB26fhTAXFVAN5XqEfV7i1F0f
UQ4JoJu4uEInWF3urn54i0WXQWXLPD3OXxpNmPRMgvFJfBektQWqvYRZbh53DIAq
m+xN5rDWLev1uw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 10:42:54 2025 by rpki-client