Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: 5Y0yCQHG0GXuPx6IFR6GSYoj6gyl97Oe0zaUVcUn1S4=
Subject key identifier: 0D:35:3D:6B:34:36:89:A3:A1:5A:86:DD:C1:73:4A:8C:B3:F0:23:80
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 019769CED2DC5C424B969EE4FD73F34A732C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 0280
Signing time: Fri 13 Jun 2025 15:00:51 +0000
Manifest this update: Fri 13 Jun 2025 15:00:51 +0000
Manifest next update: Sat 14 Jun 2025 15:00:51 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: haRFBWQVWyCvSmmhaIpiMTnbdWrIRAOgQkA+DdMYHiE=)
2: ZRyYFoPWFr4LTQ9gIPHP5w-ddzQ.roa (hash: GUrbPOCAIn4PH8GnCdvd1SlQ4fdh24I+//UmwqdbMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:d2:dc:5c:42:4b:96:9e:e4:fd:73:f3:4a:73:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Jun 13 15:00:51 2025 GMT
Not After : Jun 14 15:00:51 2025 GMT
Subject: CN=0d353d6b343689a3a15a86ddc1734a8cb3f02380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:75:90:16:bc:cd:b0:6e:9b:56:f2:a6:e9:
44:ae:f7:b7:ac:95:5f:9b:ae:82:16:2d:fa:00:44:
37:51:45:4e:35:92:66:61:b8:b8:cd:c4:e9:f0:29:
e2:51:e1:bc:dc:60:37:2b:83:d3:01:cb:a2:02:93:
62:e4:bf:bc:01:20:eb:87:85:0c:a2:5b:0c:06:15:
d6:b7:16:3f:8f:1e:64:14:77:49:a1:bb:5f:de:f2:
16:7e:41:60:bb:fe:2a:35:a7:96:ea:7b:0e:54:69:
c0:fa:39:cd:06:2d:0f:70:03:75:f1:1a:f4:12:6a:
1f:c1:5c:35:61:d5:58:7e:da:ce:86:4a:75:35:74:
3c:b6:d8:0e:34:db:78:fe:2b:0a:94:70:18:e3:9f:
01:30:a5:7e:12:de:98:7c:9e:e4:9d:80:9d:b0:b0:
b8:65:39:16:fd:de:bb:9a:3c:11:51:4c:6b:74:53:
26:32:be:f4:66:48:df:f3:a2:82:cf:8e:5d:d1:34:
1b:ea:f4:99:49:c4:12:f3:cf:7d:fd:84:35:7b:af:
e4:0b:35:eb:fc:cd:df:91:f7:d8:77:79:9d:7c:08:
89:b7:3b:73:75:7f:19:6b:4b:09:90:ef:ec:b0:c8:
31:0a:c1:47:47:fb:1e:cf:42:0f:3d:6f:ae:89:19:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:35:3D:6B:34:36:89:A3:A1:5A:86:DD:C1:73:4A:8C:B3:F0:23:80
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:df:10:21:a2:82:f8:07:74:c3:1b:04:34:4b:da:c9:7f:31:
4e:55:5e:e7:c7:94:a0:2f:0f:20:3e:55:1a:d2:b8:01:2c:fc:
bb:7f:79:20:34:72:11:0d:87:ae:3e:17:5a:0f:d8:7c:a0:9c:
e7:d3:95:84:2c:5d:bb:18:8e:b7:b3:a7:d4:43:ea:58:dd:60:
ff:ce:3c:a0:19:a4:8f:e0:e4:a8:ed:02:58:1f:fd:a9:f3:bf:
b3:26:b6:93:20:a6:18:35:e1:e1:f7:88:35:1a:4e:21:b8:63:
17:d7:c1:cd:98:87:c6:e3:ce:65:2b:59:13:4e:25:f6:39:40:
ff:75:1d:2d:61:ac:5e:8e:f3:17:44:23:5d:23:a9:98:84:02:
9c:c1:84:3c:dd:5c:d7:89:0f:1f:5a:2c:a6:ff:0d:f5:cd:f9:
ec:d8:35:9d:73:d3:d1:75:af:3b:b9:cb:02:96:bb:ca:2d:39:
8f:b2:30:0a:74:07:ac:37:42:f3:20:7f:42:86:5e:ca:2a:2a:
4c:64:45:fa:d6:40:ab:31:96:30:ae:8a:84:dc:e8:f1:89:59:
dc:e2:db:a1:95:93:8d:8a:02:3c:93:9c:3c:1e:a1:e8:77:af:
2c:fa:06:54:18:2d:1c:22:81:87:bd:6d:55:a9:6d:04:a9:48:
67:b8:b3:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpztLcXEJLlp7k/XPzSnMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWNmNzA3MzA1MTJhZWZhNzAzMDc2NjJjZjU5Mjg4ZThj
ZDI2NGMwHhcNMjUwNjEzMTUwMDUxWhcNMjUwNjE0MTUwMDUxWjAzMTEwLwYDVQQD
EygwZDM1M2Q2YjM0MzY4OWEzYTE1YTg2ZGRjMTczNGE4Y2IzZjAyMzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE51kBa8zbBum1bypulErve3rJVf
m66CFi36AEQ3UUVONZJmYbi4zcTp8CniUeG83GA3K4PTAcuiApNi5L+8ASDrh4UM
olsMBhXWtxY/jx5kFHdJobtf3vIWfkFgu/4qNaeW6nsOVGnA+jnNBi0PcAN18Rr0
EmofwVw1YdVYftrOhkp1NXQ8ttgONNt4/isKlHAY458BMKV+Et6YfJ7knYCdsLC4
ZTkW/d67mjwRUUxrdFMmMr70Zkjf86KCz45d0TQb6vSZScQS8899/YQ1e6/kCzXr
/M3fkffYd3mdfAiJtztzdX8Za0sJkO/ssMgxCsFHR/sez0IPPW+uiRn9PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA01PWs0NomjoVqG3cFzSoyz8COAMB8GA1UdIwQY
MBaAFAxc9wcwUSrvpwMHZiz1kojozSZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMt
YWRmYzcyZWYwZGZhLzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMtYWRmYzcyZWYwZGZh
LzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB98QIaKC
+Ad0wxsENEvayX8xTlVe58eUoC8PID5VGtK4ASz8u395IDRyEQ2Hrj4XWg/YfKCc
59OVhCxduxiOt7On1EPqWN1g/848oBmkj+DkqO0CWB/9qfO/sya2kyCmGDXh4feI
NRpOIbhjF9fBzZiHxuPOZStZE04l9jlA/3UdLWGsXo7zF0QjXSOpmIQCnMGEPN1c
14kPH1ospv8N9c357Ng1nXPT0XWvO7nLApa7yi05j7IwCnQHrDdC8yB/QoZeyioq
TGRF+tZAqzGWMK6KhNzo8YlZ3OLboZWTjYoCPJOcPB6h6HevLPoGVBgtHCKBh71t
ValtBKlIZ7izBg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:28 2025 by rpki-client