Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: scbmV/EAaaE6/MqK1fm98gbAFkiFknnJNR3WX5qpNe8=
Subject key identifier: 2E:6D:08:3C:3E:5C:F7:1F:E3:99:CB:72:9A:D7:DD:30:21:57:D8:A2
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 0197782F059165AD0E286F08632F290F3DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 1593
Signing time: Mon 16 Jun 2025 10:00:36 +0000
Manifest this update: Mon 16 Jun 2025 10:00:36 +0000
Manifest next update: Tue 17 Jun 2025 10:00:36 +0000
Files and hashes: 1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: xdO8mmRT+iHKg7yLBtR/KsysYV/I4qrdzckA2py76u4=)
3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2f:05:91:65:ad:0e:28:6f:08:63:2f:29:0f:3d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Jun 16 10:00:36 2025 GMT
Not After : Jun 17 10:00:36 2025 GMT
Subject: CN=2e6d083c3e5cf71fe399cb729ad7dd302157d8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:3a:4c:f5:9a:ef:67:b6:d4:d4:54:da:12:
51:3f:95:cf:d0:8f:4f:a0:15:e9:17:81:61:ee:1f:
af:f6:52:fe:61:ef:b7:73:fe:ea:65:57:c7:e7:10:
0f:e9:ea:e7:50:a6:75:11:a1:22:6f:85:e4:12:3f:
88:75:6b:64:36:13:db:15:47:8e:cc:0f:4a:d7:de:
77:a7:59:fc:9d:62:9e:c9:78:53:8f:ff:c5:51:32:
d0:f9:4f:81:72:42:fe:64:60:bc:13:74:ef:10:05:
d7:2c:53:15:1a:7b:15:10:6c:95:66:a7:79:69:eb:
e2:6f:e5:de:14:1d:87:22:60:33:7a:50:f2:56:f4:
00:fb:c5:05:3c:7c:49:15:cd:6a:58:ab:ff:99:68:
e0:87:72:22:08:76:b3:e0:eb:05:57:f8:ba:03:54:
77:20:06:c6:bc:1a:c2:cb:00:13:ed:97:93:1d:8b:
50:c9:b3:7a:67:3a:22:20:d7:95:a6:20:ab:a6:67:
d2:a5:be:ba:d8:17:51:bf:ba:43:db:9f:4f:84:5d:
3f:2f:ba:a8:75:4d:01:46:37:ac:12:ab:86:69:d6:
10:57:e0:b8:56:54:c5:82:0c:67:24:3b:29:e2:8a:
0a:9c:91:3c:43:51:88:01:1b:d0:5d:93:ce:ee:c6:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6D:08:3C:3E:5C:F7:1F:E3:99:CB:72:9A:D7:DD:30:21:57:D8:A2
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ec:35:58:0d:a3:c8:eb:40:51:69:d6:15:66:62:70:74:c0:
2a:ef:09:8a:4d:85:fe:8c:5f:b4:f1:fb:96:ac:98:53:82:85:
33:1f:8d:24:b2:70:60:f2:cf:cc:e4:4b:92:2c:41:6a:08:51:
95:1e:4a:d5:38:4e:2e:7e:c9:08:d6:6b:bc:67:e9:a8:38:bf:
83:3a:b1:20:c0:f0:81:ca:62:cc:e4:4b:2c:93:3a:53:a8:63:
1f:9b:c6:6b:11:28:d1:93:a6:6f:0e:5b:af:fa:de:9b:5e:20:
d0:73:69:26:20:56:c9:3b:0c:ce:1d:70:85:4b:e0:49:e7:28:
b1:30:33:61:13:80:91:45:ff:a8:2c:8c:d8:19:87:65:3a:79:
59:86:49:c7:7a:40:c3:f1:01:21:be:e3:f5:77:a4:f0:ca:6f:
a4:47:35:9a:97:cd:2a:98:73:d3:96:6d:07:98:df:5a:ef:f4:
96:1a:d2:ff:b2:c0:67:18:6f:6b:34:36:18:08:ad:cd:d8:9d:
65:89:4c:d4:a3:b9:86:4e:62:20:ec:28:86:76:19:df:40:47:
15:44:fd:e9:24:5e:f3:71:cc:6d:c5:83:96:55:3b:fa:0b:7f:
92:89:26:55:1b:f7:d5:57:a6:dd:d0:85:b9:1e:b7:d4:3a:28:
72:92:12:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd4LwWRZa0OKG8IYy8pDz37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZjEwNTljMjczYzUwZWRjZjNkY2VkZmM1ODAwMTUyZWM5
MWRiYTIwHhcNMjUwNjE2MTAwMDM2WhcNMjUwNjE3MTAwMDM2WjAzMTEwLwYDVQQD
EygyZTZkMDgzYzNlNWNmNzFmZTM5OWNiNzI5YWQ3ZGQzMDIxNTdkOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0g6TPWa72e21NRU2hJRP5XP0I9P
oBXpF4Fh7h+v9lL+Ye+3c/7qZVfH5xAP6ernUKZ1EaEib4XkEj+IdWtkNhPbFUeO
zA9K1953p1n8nWKeyXhTj//FUTLQ+U+BckL+ZGC8E3TvEAXXLFMVGnsVEGyVZqd5
aevib+XeFB2HImAzelDyVvQA+8UFPHxJFc1qWKv/mWjgh3IiCHaz4OsFV/i6A1R3
IAbGvBrCywAT7ZeTHYtQybN6ZzoiINeVpiCrpmfSpb662BdRv7pD259PhF0/L7qo
dU0BRjesEquGadYQV+C4VlTFggxnJDsp4ooKnJE8Q1GIARvQXZPO7sbrRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5tCDw+XPcf45nLcprX3TAhV9iiMB8GA1UdIwQY
MBaAFHTxBZwnPFDtzz3O38WAAVLskduiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83MGY4YmItOWEzNy00ZjNlLWE1ODEt
M2VhODE5NGZiNDQ2LzEvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83MGY4YmItOWEzNy00ZjNlLWE1ODEtM2VhODE5NGZiNDQ2
LzEvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuw1WA2j
yOtAUWnWFWZicHTAKu8Jik2F/oxftPH7lqyYU4KFMx+NJLJwYPLPzORLkixBaghR
lR5K1ThOLn7JCNZrvGfpqDi/gzqxIMDwgcpizORLLJM6U6hjH5vGaxEo0ZOmbw5b
r/rem14g0HNpJiBWyTsMzh1whUvgSecosTAzYROAkUX/qCyM2BmHZTp5WYZJx3pA
w/EBIb7j9Xek8MpvpEc1mpfNKphz05ZtB5jfWu/0lhrS/7LAZxhvazQ2GAitzdid
ZYlM1KO5hk5iIOwohnYZ30BHFUT96SRe83HMbcWDllU7+gt/kokmVRv31Vem3dCF
uR631DoocpIS5w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:51:51 2025 by rpki-client