Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: R2ifGwgKW1Ps2YikHfFh/H8z9vh0oU2kvibf2twTJFU=
Subject key identifier: 07:4D:41:56:60:0E:C4:42:8C:5A:A4:26:4B:D4:F3:45:A7:A3:56:0E
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 0197748968F9B9418EE4428B3195BCBB51B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 100D
Signing time: Sun 15 Jun 2025 17:00:51 +0000
Manifest this update: Sun 15 Jun 2025 17:00:51 +0000
Manifest next update: Mon 16 Jun 2025 17:00:51 +0000
Files and hashes: 1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: cnPYbiNvIL7YIuWzySFKEDtRPbhXO2JDd/ti5dJshxg=)
2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:68:f9:b9:41:8e:e4:42:8b:31:95:bc:bb:51:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Jun 15 17:00:51 2025 GMT
Not After : Jun 16 17:00:51 2025 GMT
Subject: CN=074d4156600ec4428c5aa4264bd4f345a7a3560e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:b5:92:c8:1b:97:5e:96:21:24:8b:41:db:
b6:5d:f8:b8:91:d8:a8:ed:e6:bc:a7:2c:6e:52:57:
62:7e:42:09:b2:a7:ba:a2:4f:91:fe:42:52:8d:cd:
1e:9d:3b:03:04:fd:fa:fd:e3:05:4b:10:35:85:b8:
55:4e:75:82:7d:86:95:00:93:d3:03:18:42:10:8c:
82:04:5a:3a:75:6b:df:c2:22:42:a1:56:3b:4b:67:
92:b3:63:12:f0:fa:9b:0d:27:bf:e0:cd:e7:03:34:
0b:28:88:c1:be:4c:1e:4a:ca:60:2c:97:91:90:8f:
5e:2e:58:8c:95:24:14:54:6c:e2:ce:8f:2e:ca:eb:
d5:e2:e5:8f:a2:ca:81:cd:96:08:71:78:bf:e2:c2:
ec:68:59:fb:77:1e:b2:ab:a1:19:2f:3d:e7:7e:9d:
06:47:5e:33:7d:a6:c6:fe:79:39:e1:99:79:46:0b:
89:1f:93:5e:8f:1c:83:4c:5f:b2:c6:ec:38:22:b5:
66:2f:8b:fa:0e:21:d5:48:ba:cf:46:61:17:89:bd:
c5:ec:1b:f9:52:2b:3d:2b:86:90:95:23:80:c6:d6:
3a:7b:df:32:5f:24:27:3c:52:fc:09:68:9c:5c:3c:
14:a5:2b:d7:da:01:86:59:66:8e:f3:6c:48:75:6c:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:41:56:60:0E:C4:42:8C:5A:A4:26:4B:D4:F3:45:A7:A3:56:0E
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:aa:7a:a2:f5:78:b3:dc:cb:08:20:b9:e6:a1:e2:ec:3f:3f:
a2:0b:8b:ff:4a:db:a9:91:5a:fb:63:42:42:71:ee:36:b8:ee:
2a:2b:58:ac:c5:4f:87:e5:36:10:86:6d:1f:f8:1c:a3:2a:f6:
5b:9e:ad:bb:90:21:00:f8:74:81:47:27:6f:c8:9a:82:dd:d1:
02:6c:61:b5:00:a6:d6:a4:c9:15:c2:7c:ab:23:db:01:86:dd:
15:31:6a:84:e2:47:fe:48:e3:aa:dd:20:a6:d8:cc:ef:5c:ee:
90:3d:3a:fe:12:92:f8:5c:f4:e7:2d:3c:fe:65:db:91:17:7c:
bb:1c:d4:3c:7e:2a:a8:2b:08:0a:74:7c:83:39:d7:00:97:0f:
db:f1:63:20:f0:ef:f6:f6:28:a4:31:95:1f:46:c5:eb:bf:78:
42:47:7c:7b:05:8e:c7:ef:10:58:0e:35:b4:85:9e:7a:51:2f:
06:fe:11:fc:5e:83:e3:03:fc:83:d7:87:7b:d0:71:cd:12:7b:
6a:98:32:b1:2e:bb:b5:5b:37:0c:0c:f3:4a:3e:06:76:73:dc:
c6:73:d0:26:f3:60:19:43:b5:1b:47:d5:8c:e2:0e:ba:b2:1f:
b3:97:f9:a9:22:80:97:d7:ce:b0:2b:be:c7:ef:d3:28:55:ef:
cc:29:86:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0iWj5uUGO5EKLMZW8u1G2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDg2YjY3ZDg5ODk2NTNiYWViNjhiOGQyNGFiOWU5YmQw
Y2FmMmEwHhcNMjUwNjE1MTcwMDUxWhcNMjUwNjE2MTcwMDUxWjAzMTEwLwYDVQQD
EygwNzRkNDE1NjYwMGVjNDQyOGM1YWE0MjY0YmQ0ZjM0NWE3YTM1NjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wa1ksgbl16WISSLQdu2Xfi4kdio
7ea8pyxuUldifkIJsqe6ok+R/kJSjc0enTsDBP36/eMFSxA1hbhVTnWCfYaVAJPT
AxhCEIyCBFo6dWvfwiJCoVY7S2eSs2MS8PqbDSe/4M3nAzQLKIjBvkweSspgLJeR
kI9eLliMlSQUVGzizo8uyuvV4uWPosqBzZYIcXi/4sLsaFn7dx6yq6EZLz3nfp0G
R14zfabG/nk54Zl5RguJH5NejxyDTF+yxuw4IrVmL4v6DiHVSLrPRmEXib3F7Bv5
Uis9K4aQlSOAxtY6e98yXyQnPFL8CWicXDwUpSvX2gGGWWaO82xIdWw7lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdNQVZgDsRCjFqkJkvU80Wno1YOMB8GA1UdIwQY
MBaAFA4Ia2fYmJZTuutouNJKuem9DK8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQt
NjIyYmI0ODk5ODg3LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQtNjIyYmI0ODk5ODg3
LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqp6ovV4
s9zLCCC55qHi7D8/oguL/0rbqZFa+2NCQnHuNrjuKitYrMVPh+U2EIZtH/gcoyr2
W56tu5AhAPh0gUcnb8iagt3RAmxhtQCm1qTJFcJ8qyPbAYbdFTFqhOJH/kjjqt0g
ptjM71zukD06/hKS+Fz05y08/mXbkRd8uxzUPH4qqCsICnR8gznXAJcP2/FjIPDv
9vYopDGVH0bF6794Qkd8ewWOx+8QWA41tIWeelEvBv4R/F6D4wP8g9eHe9BxzRJ7
apgysS67tVs3DAzzSj4GdnPcxnPQJvNgGUO1G0fVjOIOurIfs5f5qSKAl9fOsCu+
x+/TKFXvzCmGQA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:26:01 2025 by rpki-client