Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: cbqrfBouLgW32l0jj/vdCxpSgf4FqyidpOjViMkdqGA=
Subject key identifier: AB:ED:91:09:32:63:FA:47:DF:4E:20:62:3B:4B:33:59:3B:28:56:4A
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 01976D744765D0064365AA4A9CA3E9D11ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 146D
Signing time: Sat 14 Jun 2025 08:00:26 +0000
Manifest this update: Sat 14 Jun 2025 08:00:26 +0000
Manifest next update: Sun 15 Jun 2025 08:00:26 +0000
Files and hashes: 1: 1tRI1NAS620irGWcDu4y9Qfw5Oc.roa (hash: cB16kbTr6A/atusEQcb+v3J61xx/lkSsq3ehr1/v5HA=)
2: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: M7NF2fUpSR1mJIFPzwVbRK2xpefonqg7AW6Ol8FYFtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:47:65:d0:06:43:65:aa:4a:9c:a3:e9:d1:1e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Jun 14 08:00:26 2025 GMT
Not After : Jun 15 08:00:26 2025 GMT
Subject: CN=abed91093263fa47df4e20623b4b33593b28564a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:08:7e:a9:e2:87:84:21:24:ea:84:61:ff:
29:b3:ea:90:27:8d:f5:f7:25:54:29:2c:8b:df:d2:
5c:62:cf:50:39:8d:6d:ca:c3:98:c9:18:c6:83:c6:
39:07:74:54:b8:01:4a:6e:a9:55:7c:36:fe:83:a1:
5d:ca:3b:f9:44:d2:69:eb:78:1d:23:06:5c:5c:01:
97:af:db:20:31:b7:54:9b:af:6a:21:af:e1:73:3d:
3a:1b:3b:45:33:4c:2d:12:f9:cd:c9:11:f2:02:f4:
97:f8:82:c2:2b:0a:4e:a4:9d:5d:70:93:af:d9:e8:
79:03:07:34:5a:86:79:88:99:ee:ba:fc:10:70:c3:
bd:cb:92:70:84:9c:e7:fa:89:2e:9a:64:53:07:2e:
e5:60:32:9a:7b:e8:1b:3e:3a:c0:9d:58:1a:69:da:
43:84:0f:be:ba:81:f4:ba:46:41:e8:cf:61:e4:f8:
ef:39:30:c4:8a:ca:62:f6:e3:31:a9:b9:20:8a:3c:
e3:45:8a:39:96:87:a4:74:c5:25:18:e3:4f:a5:72:
98:68:ff:49:46:08:40:18:2e:b2:4c:19:e2:b8:33:
04:08:08:35:24:90:4e:67:44:c1:3e:4a:32:c6:1f:
a7:f1:bf:1a:43:46:8e:51:7a:4e:41:2c:cc:61:fe:
57:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:ED:91:09:32:63:FA:47:DF:4E:20:62:3B:4B:33:59:3B:28:56:4A
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:30:bf:09:20:a0:44:24:14:3c:a4:30:d4:ce:ab:ac:63:17:
30:14:a2:c0:93:6a:29:b3:f6:74:d4:27:b3:67:94:e7:54:c0:
a2:8a:d1:2f:f4:3b:ea:60:d3:23:de:bf:3c:61:e8:56:24:73:
97:2d:f7:f7:6b:69:01:d6:02:9a:0c:72:43:74:a7:ed:ef:d1:
33:e6:42:04:5d:cb:05:f7:6d:f0:2b:f7:6b:00:ff:38:dc:98:
b2:4a:db:d5:d5:63:76:37:e7:ad:55:2e:f8:36:fe:a6:56:03:
e2:89:80:30:d9:f3:3b:e9:14:84:a6:af:b0:8d:31:c1:3b:3b:
00:b6:2b:7c:01:6a:3a:e0:35:59:b8:ea:24:de:c2:94:f3:a2:
e2:55:eb:b7:44:d9:80:10:20:1f:4d:97:b4:d8:d0:81:49:90:
e9:42:5d:f7:65:ca:2a:8c:31:1d:ee:09:98:af:be:c2:b7:67:
2a:d1:46:14:b3:8e:ab:40:7e:fb:57:96:05:b1:59:7e:4a:28:
18:da:28:60:7d:0e:f2:1b:c6:0b:2c:4f:41:01:24:ab:44:3f:
d6:f7:62:46:53:2e:9b:27:09:12:a9:82:8d:fb:c9:69:65:66:
95:7a:b5:41:a2:30:c2:f5:31:51:d1:26:70:dd:16:b8:39:89:
ee:16:5c:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdEdl0AZDZapKnKPp0R7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTBiODBiM2Q0ODkzYzljMWVjN2QwMWMyOWJmM2I0NTBi
Yjg1MWQwHhcNMjUwNjE0MDgwMDI2WhcNMjUwNjE1MDgwMDI2WjAzMTEwLwYDVQQD
EyhhYmVkOTEwOTMyNjNmYTQ3ZGY0ZTIwNjIzYjRiMzM1OTNiMjg1NjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXkIfqnih4QhJOqEYf8ps+qQJ431
9yVUKSyL39JcYs9QOY1tysOYyRjGg8Y5B3RUuAFKbqlVfDb+g6Fdyjv5RNJp63gd
IwZcXAGXr9sgMbdUm69qIa/hcz06GztFM0wtEvnNyRHyAvSX+ILCKwpOpJ1dcJOv
2eh5Awc0WoZ5iJnuuvwQcMO9y5JwhJzn+okummRTBy7lYDKae+gbPjrAnVgaadpD
hA++uoH0ukZB6M9h5PjvOTDEispi9uMxqbkgijzjRYo5loekdMUlGONPpXKYaP9J
RghAGC6yTBniuDMECAg1JJBOZ0TBPkoyxh+n8b8aQ0aOUXpOQSzMYf5XmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvtkQkyY/pH304gYjtLM1k7KFZKMB8GA1UdIwQY
MBaAFA+QuAs9SJPJwex9AcKb87RQu4UdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85OWEyYjEtMTE0NC00ZjljLThmZGYt
NDNlNGQ1NmQ0MDQzLzEvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85OWEyYjEtMTE0NC00ZjljLThmZGYtNDNlNGQ1NmQ0MDQz
LzEvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjC/CSCg
RCQUPKQw1M6rrGMXMBSiwJNqKbP2dNQns2eU51TAoorRL/Q76mDTI96/PGHoViRz
ly3392tpAdYCmgxyQ3Sn7e/RM+ZCBF3LBfdt8Cv3awD/ONyYskrb1dVjdjfnrVUu
+Db+plYD4omAMNnzO+kUhKavsI0xwTs7ALYrfAFqOuA1WbjqJN7ClPOi4lXrt0TZ
gBAgH02XtNjQgUmQ6UJd92XKKowxHe4JmK++wrdnKtFGFLOOq0B++1eWBbFZfkoo
GNooYH0O8hvGCyxPQQEkq0Q/1vdiRlMumycJEqmCjfvJaWVmlXq1QaIwwvUxUdEm
cN0WuDmJ7hZcaA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:01:41 2025 by rpki-client