Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: IIIZZS5WG+I6BOT7n/sY4YIaDRa0YVngZU4XujPTPmA=
Subject key identifier: 50:AE:1C:1F:60:F0:14:FC:BC:CB:57:BC:71:42:82:2C:26:D6:19:82
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 01977B6752856C6C9988F2ECF12CE6EFBB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 0666
Signing time: Tue 17 Jun 2025 01:00:58 +0000
Manifest this update: Tue 17 Jun 2025 01:00:58 +0000
Manifest next update: Wed 18 Jun 2025 01:00:58 +0000
Files and hashes: 1: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: JWGamkXaH2MGlpR+Fram3H5ctl/YbpJclhLltseRuUk=)
2: gFGZ2BFs8uwMqzE5e-fa-6VVCNI.roa (hash: RsuEdz61HYwgHfhCVbH78Gqegx1PGZpeCp/nCDSO5do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:67:52:85:6c:6c:99:88:f2:ec:f1:2c:e6:ef:bb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Jun 17 01:00:58 2025 GMT
Not After : Jun 18 01:00:58 2025 GMT
Subject: CN=50ae1c1f60f014fcbccb57bc7142822c26d61982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:ed:a3:e8:3e:18:b1:99:a6:4b:47:40:9d:
52:af:2a:2b:6c:2c:17:53:9b:24:74:28:0b:3a:14:
9e:dd:3d:e1:08:39:5a:eb:c0:f0:76:d1:23:13:65:
a0:fc:59:02:c7:a4:ba:84:d8:3b:39:3f:e2:aa:82:
83:8b:fb:d5:7a:33:2f:8c:55:84:d4:a7:d6:15:8f:
21:93:b0:4f:d1:72:af:26:7c:09:43:ab:29:c9:6a:
24:39:c5:24:46:60:b6:fb:dd:68:5c:02:4d:a7:a7:
ed:b2:dc:74:6f:b4:b7:86:f3:e4:44:34:c5:fd:82:
83:63:9c:02:8c:d3:09:78:3d:ef:5f:b6:d3:71:82:
b0:e7:c3:08:4c:c1:e6:9c:6a:56:a2:09:7c:d1:08:
f0:a9:a7:e2:3f:9e:4a:9b:28:b0:8c:6e:c0:a1:cf:
97:27:49:5d:c4:23:14:d7:6f:45:30:d1:34:6f:22:
7d:61:db:30:c2:89:b8:2d:86:51:48:87:2b:c7:12:
cc:bb:d2:16:1d:fc:23:b9:23:04:94:f3:d3:6b:f6:
54:0a:d0:2e:8d:73:a9:97:71:d8:cd:a0:98:01:c3:
58:e1:56:b8:90:22:b2:c1:0a:98:d9:62:43:d0:e2:
84:4d:d3:fa:e3:84:8a:67:cd:00:b3:65:de:d7:61:
16:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AE:1C:1F:60:F0:14:FC:BC:CB:57:BC:71:42:82:2C:26:D6:19:82
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:29:d2:08:60:60:1f:82:3d:4f:15:b9:3f:44:28:0c:ae:6f:
0f:fb:7e:7f:28:f7:34:cb:ec:a9:1d:cd:25:73:26:18:cb:20:
d7:05:df:52:31:f6:7f:94:44:75:47:e9:7a:ae:b9:df:eb:66:
48:58:c5:1e:e9:45:46:87:67:96:96:e3:fe:82:16:d6:d3:09:
cd:ca:ac:73:bf:9f:b5:c6:59:c6:b8:1e:4a:e0:03:17:bf:67:
f9:a5:76:f3:27:9c:b0:e8:99:65:56:96:c7:7d:b8:64:52:95:
a1:d4:2c:df:2d:f9:07:0f:06:55:82:5f:3a:83:22:40:48:6c:
07:05:d8:80:17:d4:29:8e:43:2e:9e:45:4c:07:a6:4b:c0:a7:
a2:da:e5:2d:af:66:13:25:af:4a:06:ca:8c:ce:f7:0c:8a:82:
c2:51:2d:f7:4b:ef:0c:68:ed:97:4f:fc:cf:37:72:3f:4e:83:
81:2b:2b:a3:4f:88:2b:36:d3:02:49:f8:3b:a5:df:c2:bd:8e:
48:01:06:3b:32:bb:de:ab:92:76:65:aa:f0:e8:b3:81:c6:e5:
6e:ed:a5:df:df:7e:2c:b4:ef:d4:74:a6:fb:88:03:bd:90:be:
57:3d:0b:13:8e:8c:35:07:35:ce:2a:fe:c9:10:ea:fc:17:bb:
85:f7:cf:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd7Z1KFbGyZiPLs8Szm77sPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDJjYWJlYjFkNzI0ZTdhNDhkZDYxZTlhN2UwYzUwYTRl
OWJmNTAwHhcNMjUwNjE3MDEwMDU4WhcNMjUwNjE4MDEwMDU4WjAzMTEwLwYDVQQD
Eyg1MGFlMWMxZjYwZjAxNGZjYmNjYjU3YmM3MTQyODIyYzI2ZDYxOTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztLto+g+GLGZpktHQJ1SryorbCwX
U5skdCgLOhSe3T3hCDla68DwdtEjE2Wg/FkCx6S6hNg7OT/iqoKDi/vVejMvjFWE
1KfWFY8hk7BP0XKvJnwJQ6spyWokOcUkRmC2+91oXAJNp6ftstx0b7S3hvPkRDTF
/YKDY5wCjNMJeD3vX7bTcYKw58MITMHmnGpWogl80QjwqafiP55KmyiwjG7Aoc+X
J0ldxCMU129FMNE0byJ9Ydswwom4LYZRSIcrxxLMu9IWHfwjuSMElPPTa/ZUCtAu
jXOpl3HYzaCYAcNY4Va4kCKywQqY2WJD0OKETdP644SKZ80As2Xe12EWcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCuHB9g8BT8vMtXvHFCgiwm1hmCMB8GA1UdIwQY
MBaAFAzSyr6x1yTnpI3WHpp+DFCk6b9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iNzk3NzctNGEwNC00ZGFiLWExZGMt
MjUzNzQ0OTRjZWVlLzEvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iNzk3NzctNGEwNC00ZGFiLWExZGMtMjUzNzQ0OTRjZWVl
LzEvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCnSCGBg
H4I9TxW5P0QoDK5vD/t+fyj3NMvsqR3NJXMmGMsg1wXfUjH2f5REdUfpeq653+tm
SFjFHulFRodnlpbj/oIW1tMJzcqsc7+ftcZZxrgeSuADF79n+aV28yecsOiZZVaW
x324ZFKVodQs3y35Bw8GVYJfOoMiQEhsBwXYgBfUKY5DLp5FTAemS8CnotrlLa9m
EyWvSgbKjM73DIqCwlEt90vvDGjtl0/8zzdyP06DgSsro0+IKzbTAkn4O6Xfwr2O
SAEGOzK73quSdmWq8Oizgcblbu2l399+LLTv1HSm+4gDvZC+Vz0LE46MNQc1zir+
yRDq/Be7hffPAQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 10:03:14 2025 by rpki-client