Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: OUsMEn+g6qdeNVlWDV8OBwCDjrgQk7bBEMMyKfjRr8E=
Subject key identifier: 90:5B:CF:75:07:A3:C1:BA:0F:5B:DE:98:F0:7A:78:2B:BF:B0:54:F6
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 019774C065E60F22D4BB91ADF84A495D6CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 13B8
Signing time: Sun 15 Jun 2025 18:00:55 +0000
Manifest this update: Sun 15 Jun 2025 18:00:55 +0000
Manifest next update: Mon 16 Jun 2025 18:00:55 +0000
Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: r6fJmpSDisDXCWZWNlAHz8so+HBSoVVCRZX86aawm8o=)
2: ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa (hash: 9V1D5AZ/eHVRt4YDKcmTOE8v9iNuXaOV/i0Ye/mdU9E=)
3: zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa (hash: DtxqGawsrFVZx4HNzS+S5CsdD6flwYPGqAxKv36rkJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:c0:65:e6:0f:22:d4:bb:91:ad:f8:4a:49:5d:6c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Jun 15 18:00:55 2025 GMT
Not After : Jun 16 18:00:55 2025 GMT
Subject: CN=905bcf7507a3c1ba0f5bde98f07a782bbfb054f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:5c:32:bb:61:30:9e:5c:70:c1:6d:5e:5e:
e6:da:5b:74:b2:a6:58:6c:17:92:f1:5f:db:bd:1b:
27:49:d6:b3:09:31:66:67:27:0d:b0:0f:e6:01:46:
ca:e1:37:46:fc:f9:d6:e4:26:8a:91:99:ef:0f:c9:
19:14:3c:14:ed:86:52:e7:46:04:de:6e:43:98:c1:
b1:99:73:da:b2:1b:df:69:e0:6a:5e:b3:51:34:57:
56:dc:12:3f:61:ff:2c:61:91:16:0a:90:7d:f2:68:
cb:26:00:fb:c6:95:f9:e7:76:cb:a5:13:4f:e1:5e:
54:c5:f9:0b:bf:02:62:10:a2:74:96:d0:84:17:c1:
87:bf:3b:c0:b3:77:c3:f7:4c:91:dc:95:f7:c2:37:
4f:c3:b7:0d:3d:d1:71:11:5c:a8:0c:47:93:5e:27:
63:64:95:0f:c0:46:91:08:91:35:e5:29:78:92:5c:
70:1a:d9:8f:b3:eb:ff:b5:98:d6:e4:6d:4f:6b:1d:
53:ab:5b:6c:f0:92:85:94:c2:b7:c1:26:8b:b6:ec:
36:2a:6b:90:ad:71:c9:e3:52:67:48:d2:2a:f8:dd:
1c:9d:04:bf:a8:da:f8:b2:f4:74:ef:12:8d:b4:a7:
36:d0:27:92:03:0b:a9:43:a9:95:33:58:8d:69:ba:
1d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5B:CF:75:07:A3:C1:BA:0F:5B:DE:98:F0:7A:78:2B:BF:B0:54:F6
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4e:9e:87:59:9a:03:d0:51:01:cb:3d:4e:f9:7a:48:7b:13:
fb:ee:c1:fc:b9:2b:3c:a3:e6:57:20:7b:41:5e:4c:de:b5:5e:
96:b9:7e:56:36:af:92:d0:47:8f:77:59:d6:e0:2f:07:55:a7:
b2:50:29:f9:71:39:46:2c:02:f1:c3:98:7e:15:90:08:e0:56:
8e:82:f9:c7:5f:91:50:e5:2e:d2:c1:dd:90:9e:99:a5:63:b8:
97:46:e3:ab:9d:f9:7b:b7:a2:59:98:0d:77:d2:18:b9:c8:6f:
03:08:99:92:11:6f:c1:44:e2:d0:be:38:ea:82:76:70:5e:4a:
e7:e6:65:6a:3f:e2:5a:19:eb:c8:9e:0c:82:a3:e7:47:ce:2d:
58:7c:8b:24:8a:26:ea:0e:a6:dc:ff:71:5f:0f:4c:27:31:2c:
65:b9:d0:1f:cb:40:1c:de:50:39:9c:fe:41:88:2a:87:f2:9e:
75:9c:3e:a6:ac:54:49:41:b6:30:75:9e:ef:58:c1:d6:f0:3e:
30:f7:0f:58:fc:b1:9a:bd:42:80:5c:9f:ec:c7:8b:7d:21:5a:
7e:20:c3:a9:16:c8:9f:53:17:10:93:05:5f:e9:b4:1a:eb:b7:
95:f3:36:95:39:e0:94:b2:3a:73:43:99:73:3f:23:bf:54:3f:
58:64:42:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0wGXmDyLUu5Gt+EpJXWy6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZjFhNzYzNzQ1YzI1ZGFkMjhmNGE4MTE2Njg4ZTgyY2Ux
MjAyOGIwHhcNMjUwNjE1MTgwMDU1WhcNMjUwNjE2MTgwMDU1WjAzMTEwLwYDVQQD
Eyg5MDViY2Y3NTA3YTNjMWJhMGY1YmRlOThmMDdhNzgyYmJmYjA1NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyxcMrthMJ5ccMFtXl7m2lt0sqZY
bBeS8V/bvRsnSdazCTFmZycNsA/mAUbK4TdG/PnW5CaKkZnvD8kZFDwU7YZS50YE
3m5DmMGxmXPashvfaeBqXrNRNFdW3BI/Yf8sYZEWCpB98mjLJgD7xpX553bLpRNP
4V5UxfkLvwJiEKJ0ltCEF8GHvzvAs3fD90yR3JX3wjdPw7cNPdFxEVyoDEeTXidj
ZJUPwEaRCJE15Sl4klxwGtmPs+v/tZjW5G1Pax1Tq1ts8JKFlMK3wSaLtuw2KmuQ
rXHJ41JnSNIq+N0cnQS/qNr4svR07xKNtKc20CeSAwupQ6mVM1iNabodDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBbz3UHo8G6D1vemPB6eCu/sFT2MB8GA1UdIwQY
MBaAFHXxp2N0XCXa0o9KgRZojoLOEgKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQt
Yzg0OWJjMGYzNTliLzEvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQtYzg0OWJjMGYzNTli
LzEvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABU6eh1ma
A9BRAcs9Tvl6SHsT++7B/LkrPKPmVyB7QV5M3rVelrl+VjavktBHj3dZ1uAvB1Wn
slAp+XE5RiwC8cOYfhWQCOBWjoL5x1+RUOUu0sHdkJ6ZpWO4l0bjq535e7eiWZgN
d9IYuchvAwiZkhFvwUTi0L446oJ2cF5K5+Zlaj/iWhnryJ4MgqPnR84tWHyLJIom
6g6m3P9xXw9MJzEsZbnQH8tAHN5QOZz+QYgqh/KedZw+pqxUSUG2MHWe71jB1vA+
MPcPWPyxmr1CgFyf7MeLfSFafiDDqRbIn1MXEJMFX+m0Guu3lfM2lTnglLI6c0OZ
cz8jv1Q/WGRCKg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:56:08 2025 by rpki-client