Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: pjy5QFvLZq8F6crGlQwsvoS83f5i+iELIf0tIUESmzI=
Subject key identifier: 13:00:8E:99:2E:25:13:9B:24:5A:58:5A:22:93:14:C9:86:83:B8:D0
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 01976E504EA59DBDEFB40CCD0FEFC069BD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 0312
Signing time: Sat 14 Jun 2025 12:00:46 +0000
Manifest this update: Sat 14 Jun 2025 12:00:46 +0000
Manifest next update: Sun 15 Jun 2025 12:00:46 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: i2QsSDDSsVg7M+5LAtIVPeIwYbgNVCyOkdU6OiKyjYs=)
2: PPz_1wH3hqFDjLC-MrIMRrZJxeQ.roa (hash: ZY1q21nV+Hi/oVRVSMTtHd27zoQ6myzruEINZqqxjKM=)
3: fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa (hash: 6em1xLWv3WGsIAinbV2APlVzvS3mzKB3u+DwFqIP/5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:4e:a5:9d:bd:ef:b4:0c:cd:0f:ef:c0:69:bd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Jun 14 12:00:46 2025 GMT
Not After : Jun 15 12:00:46 2025 GMT
Subject: CN=13008e992e25139b245a585a229314c98683b8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:ec:be:9e:a5:21:b7:9b:b6:41:4d:d9:c9:
00:a2:75:2a:c0:8a:be:89:45:ae:97:ab:58:89:3e:
fe:c9:c3:41:29:28:f6:2d:bb:09:5f:82:fe:f0:bb:
e4:a3:43:cc:9d:6b:01:f7:a3:f9:45:a6:c0:7e:12:
49:fb:99:a5:88:0e:8a:82:ec:57:be:f0:eb:68:33:
ef:02:d0:dc:0a:77:c0:1f:9a:79:2a:7a:06:de:ab:
0f:21:8b:a2:88:0c:4b:e6:35:39:5b:50:3e:00:3c:
ff:a8:58:82:43:ef:d2:f7:5b:1a:33:10:56:08:8a:
5e:62:54:88:bb:f6:f7:81:06:16:73:2f:ff:12:f3:
0c:07:7c:3e:38:e0:47:e5:35:c7:9e:18:f5:dc:f6:
65:64:83:03:f0:25:87:07:cc:e9:e6:a1:d6:eb:14:
9c:91:9a:ed:0e:e5:cc:21:58:0a:ac:20:45:c8:55:
4d:f9:85:8a:15:1f:33:c6:ee:d0:5c:d7:78:30:d2:
0e:61:c4:e5:89:84:24:33:69:7d:0b:58:b3:2e:87:
4d:c2:6b:a8:3b:e8:3c:be:05:c1:2c:a6:d1:6f:10:
1c:8e:89:3a:ce:cd:a7:bc:d1:4a:cf:26:9a:33:d8:
fc:61:e7:c1:85:ac:1e:30:4e:66:d2:c6:2d:39:36:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:00:8E:99:2E:25:13:9B:24:5A:58:5A:22:93:14:C9:86:83:B8:D0
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:8f:ac:81:a8:f5:84:46:7b:d3:88:41:35:47:b8:be:2d:cb:
35:c9:30:72:57:98:b7:ad:ec:8e:65:f5:6c:b4:d1:f5:5f:61:
62:bd:a6:e3:fa:da:10:e4:2a:83:0e:c9:f7:f9:e9:32:b0:eb:
85:b3:d7:d1:8d:e7:bd:61:6f:98:df:cb:fa:90:4f:dd:5e:ef:
18:27:a7:22:a4:c6:62:4e:7a:cb:33:02:44:72:76:c9:e0:f2:
51:34:9a:87:78:b7:56:33:9c:e4:52:2e:02:e1:e4:00:c5:35:
c5:ce:41:41:c9:5f:ff:10:56:fb:44:c3:d0:c8:60:c3:65:1b:
e7:52:b5:88:90:f2:ae:47:c0:f0:2f:d1:7b:68:81:1d:72:19:
69:9c:e7:bf:86:2a:ce:b0:a1:43:c9:e2:a3:6d:fd:52:2d:df:
76:4f:57:46:cf:3a:64:61:3d:36:b4:ad:f3:7e:39:54:70:14:
44:02:10:c8:e2:04:09:a5:56:09:67:df:66:4f:24:50:c8:e6:
ef:19:44:72:66:06:02:c9:5a:d8:30:11:bf:fd:e6:cc:a9:fc:
80:5a:89:57:7a:31:dc:a6:be:00:ee:b8:93:d6:13:b2:e5:9f:
3a:71:57:8a:e0:11:e9:fe:36:84:68:b0:1b:c7:36:8a:df:15:
06:30:ad:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUE6lnb3vtAzND+/Aab1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDI1ZmEzNTdjMjBhYmJmMTE4NDI2MjM0NjU4ZTYyZDdk
YzcwNzYwHhcNMjUwNjE0MTIwMDQ2WhcNMjUwNjE1MTIwMDQ2WjAzMTEwLwYDVQQD
EygxMzAwOGU5OTJlMjUxMzliMjQ1YTU4NWEyMjkzMTRjOTg2ODNiOGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS3svp6lIbebtkFN2ckAonUqwIq+
iUWul6tYiT7+ycNBKSj2LbsJX4L+8Lvko0PMnWsB96P5RabAfhJJ+5mliA6KguxX
vvDraDPvAtDcCnfAH5p5KnoG3qsPIYuiiAxL5jU5W1A+ADz/qFiCQ+/S91saMxBW
CIpeYlSIu/b3gQYWcy//EvMMB3w+OOBH5TXHnhj13PZlZIMD8CWHB8zp5qHW6xSc
kZrtDuXMIVgKrCBFyFVN+YWKFR8zxu7QXNd4MNIOYcTliYQkM2l9C1izLodNwmuo
O+g8vgXBLKbRbxAcjok6zs2nvNFKzyaaM9j8YefBhaweME5m0sYtOTbbyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMAjpkuJRObJFpYWiKTFMmGg7jQMB8GA1UdIwQY
MBaAFA8CX6NXwgq78RhCYjRljmLX3HB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2Ut
ZDRkNTlhMDk1YzdmLzEvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2UtZDRkNTlhMDk1Yzdm
LzEvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvI+sgaj1
hEZ704hBNUe4vi3LNckwcleYt63sjmX1bLTR9V9hYr2m4/raEOQqgw7J9/npMrDr
hbPX0Y3nvWFvmN/L+pBP3V7vGCenIqTGYk56yzMCRHJ2yeDyUTSah3i3VjOc5FIu
AuHkAMU1xc5BQclf/xBW+0TD0Mhgw2Ub51K1iJDyrkfA8C/Re2iBHXIZaZznv4Yq
zrChQ8nio239Ui3fdk9XRs86ZGE9NrSt8345VHAURAIQyOIECaVWCWffZk8kUMjm
7xlEcmYGAsla2DARv/3mzKn8gFqJV3ox3Ka+AO64k9YTsuWfOnFXiuAR6f42hGiw
G8c2it8VBjCtaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:39:50 2025 by rpki-client