Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
File: dciLHEH7612r73Q8V6zf_E-nRpk.mft (raw, json)
Hash identifier: FV9I0mTSe8mssbvHuBXGi29kCQf1e4zOqeAB2XNYo9U=
Subject key identifier: 00:5B:C4:09:AD:24:A9:B8:46:40:E1:0F:D0:78:57:3D:5E:A3:E8:AD
Authority key identifier: 75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
Certificate issuer: /CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Certificate serial: 01977F4398347E5691373822AFD4BEF35484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
Manifest number: 1027
Signing time: Tue 17 Jun 2025 19:00:25 +0000
Manifest this update: Tue 17 Jun 2025 19:00:25 +0000
Manifest next update: Wed 18 Jun 2025 19:00:25 +0000
Files and hashes: 1: 2bqsQsJql_hwoFMeZ0nmgZGmbEw.roa (hash: e5rzAihzL4LX4PAPTH0rwfwcZpBTQn6I0oUQG0cd6f8=)
2: dciLHEH7612r73Q8V6zf_E-nRpk.crl (hash: EHN3alzXMM62BkdmK4I8jThBGeGGBueuQU4ByZtPBR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:43:98:34:7e:56:91:37:38:22:af:d4:be:f3:54:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Validity
Not Before: Jun 17 19:00:25 2025 GMT
Not After : Jun 18 19:00:25 2025 GMT
Subject: CN=005bc409ad24a9b84640e10fd078573d5ea3e8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:0a:7f:39:02:e5:ea:1f:8a:11:6c:3f:6b:
7d:4c:99:87:0d:28:82:53:88:6b:0d:ef:26:46:9e:
a6:8d:da:94:df:09:07:2b:32:9d:02:31:b5:66:c8:
da:71:e3:b7:3b:5f:87:f4:e3:ff:83:b5:15:c9:d3:
ff:95:9b:63:24:c3:5c:a2:54:e6:8f:e1:53:ce:1f:
be:11:40:dc:7f:d7:d0:a8:74:99:7e:de:31:e3:32:
6f:55:c4:a8:85:48:ef:dd:c7:ee:9b:53:1c:60:5f:
c1:40:ca:1d:10:7c:97:e4:cb:fb:b1:41:48:83:a7:
e4:92:0c:4a:70:71:fc:d1:e7:7c:a0:1d:9c:b8:d1:
ac:c5:b4:61:a2:a7:3e:45:f7:8c:64:ef:f7:0d:83:
f4:5f:a2:b6:3b:5b:6a:cf:14:1e:0e:81:7a:68:b0:
05:b7:46:73:e0:c4:85:04:2f:1a:9c:dd:f9:00:48:
4a:95:7a:e9:94:c0:06:b2:78:33:4c:f9:fa:38:36:
d4:aa:b3:2a:aa:05:f9:b7:7e:86:f6:e6:ca:15:ab:
82:d6:3d:79:9a:93:25:13:11:ba:b7:b6:3c:a5:a2:
4c:2a:22:a0:fe:b7:ab:6f:a1:8f:46:29:72:82:d5:
81:20:86:cf:0a:58:d2:dd:72:61:b2:36:07:fc:00:
b1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5B:C4:09:AD:24:A9:B8:46:40:E1:0F:D0:78:57:3D:5E:A3:E8:AD
X509v3 Authority Key Identifier:
keyid:75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d6:71:b7:c3:d9:a5:17:f1:dd:2b:84:90:d3:83:0c:5d:6a:
ff:38:71:55:24:7b:ae:84:97:6d:17:6d:99:b6:f1:b5:0c:ec:
5e:ba:d9:e2:72:49:1a:a8:35:f7:b2:5f:d3:27:7d:f1:ed:94:
a2:d2:b4:b3:60:d4:aa:a5:35:d6:b3:cc:73:cb:47:6f:1f:9d:
b7:a9:46:53:66:bc:e8:d0:2e:b1:fe:72:aa:4b:3a:05:31:ef:
4f:c8:44:46:fc:c9:66:bc:9e:4c:18:c4:db:53:92:28:bf:00:
db:26:6b:35:fe:0a:1c:ad:1f:f7:e8:b5:ba:39:6a:a8:d2:05:
31:a5:41:0e:f6:d0:24:59:b8:e2:6d:b4:78:2b:5f:80:e7:51:
34:d0:e4:e7:af:a9:65:b4:a1:d7:28:57:ae:c6:d9:6d:37:ad:
0b:bf:5c:ab:f0:c4:f4:04:ed:5a:3d:30:b4:79:53:cc:92:6b:
4d:35:18:27:e3:68:24:8c:ce:d7:9d:27:1a:06:ba:eb:14:5d:
3d:ec:16:d0:9a:e5:9b:b8:1f:5c:78:85:a3:f6:62:08:17:f8:
ee:73:5b:14:66:f9:26:cb:bb:af:1a:06:25:7b:b1:81:89:7d:
db:75:fa:9a:21:c3:ce:56:90:92:80:f0:c5:95:61:81:cd:4f:
55:a1:ec:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/Q5g0flaRNzgir9S+81SEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Yzg4YjFjNDFmYmViNWRhYmVmNzQzYzU3YWNkZmZjNGZh
NzQ2OTkwHhcNMjUwNjE3MTkwMDI1WhcNMjUwNjE4MTkwMDI1WjAzMTEwLwYDVQQD
EygwMDViYzQwOWFkMjRhOWI4NDY0MGUxMGZkMDc4NTczZDVlYTNlOGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxssKfzkC5eofihFsP2t9TJmHDSiC
U4hrDe8mRp6mjdqU3wkHKzKdAjG1ZsjaceO3O1+H9OP/g7UVydP/lZtjJMNcolTm
j+FTzh++EUDcf9fQqHSZft4x4zJvVcSohUjv3cfum1McYF/BQModEHyX5Mv7sUFI
g6fkkgxKcHH80ed8oB2cuNGsxbRhoqc+RfeMZO/3DYP0X6K2O1tqzxQeDoF6aLAF
t0Zz4MSFBC8anN35AEhKlXrplMAGsngzTPn6ODbUqrMqqgX5t36G9ubKFauC1j15
mpMlExG6t7Y8paJMKiKg/rerb6GPRilygtWBIIbPCljS3XJhsjYH/ACxUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABbxAmtJKm4RkDhD9B4Vz1eo+itMB8GA1UdIwQY
MBaAFHXIixxB++tdq+90PFes3/xPp0aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGNpTEhFSDc2MTJyNzNROFY2emZfRS1uUnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yYTIxNjQtMTY1Ni00NGNiLTkyOTQt
MGIxZGVjMzc1NTU0LzEvZGNpTEhFSDc2MTJyNzNROFY2emZfRS1uUnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yYTIxNjQtMTY1Ni00NGNiLTkyOTQtMGIxZGVjMzc1NTU0
LzEvZGNpTEhFSDc2MTJyNzNROFY2emZfRS1uUnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNZxt8PZ
pRfx3SuEkNODDF1q/zhxVSR7roSXbRdtmbbxtQzsXrrZ4nJJGqg197Jf0yd98e2U
otK0s2DUqqU11rPMc8tHbx+dt6lGU2a86NAusf5yqks6BTHvT8hERvzJZryeTBjE
21OSKL8A2yZrNf4KHK0f9+i1ujlqqNIFMaVBDvbQJFm44m20eCtfgOdRNNDk56+p
ZbSh1yhXrsbZbTetC79cq/DE9ATtWj0wtHlTzJJrTTUYJ+NoJIzO150nGga66xRd
PewW0Jrlm7gfXHiFo/ZiCBf47nNbFGb5Jsu7rxoGJXuxgYl923X6miHDzlaQkoDw
xZVhgc1PVaHs7w==
-----END CERTIFICATE-----
Generated at Wed Jun 18 04:06:45 2025 by rpki-client