Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: 0cjWeX/oE5YfBzHDiMJqRf4346avcc+kOBBnASzF5TI=
Subject key identifier: 42:26:7A:A6:63:4D:54:E2:BF:EC:F7:55:07:E6:F7:1D:77:98:C8:A3
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 01974E573D8BDD955634CC75D848D906F46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 07:00:29 +0000
Manifest this update: Sun 08 Jun 2025 07:00:29 +0000
Manifest next update: Mon 09 Jun 2025 07:00:29 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: VF1tkfm7coevIS3msO9TMVTIOlfZc/vjS2mkOFjTZ+A=)
2: dl3PAMO_cjTEN-X9xexRuh-Chb4.roa (hash: EybA63Tgz5VJ0tdqhdyDgjCCTh9UVwGU3vK+Wpg2GJ4=)
3: lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa (hash: UW3HI87+Tvs0vPfpNH93w8VClrUvFKCrCGbfw0Tz9ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:3d:8b:dd:95:56:34:cc:75:d8:48:d9:06:f4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Jun 8 07:00:29 2025 GMT
Not After : Jun 9 07:00:29 2025 GMT
Subject: CN=42267aa6634d54e2bfecf75507e6f71d7798c8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:29:13:23:77:dd:08:1c:dc:94:5b:dd:d9:
1e:d2:75:0e:b5:78:a2:89:53:fc:1a:de:33:d0:05:
17:19:81:7a:a3:12:b5:05:d3:e6:fa:13:c2:9c:11:
9d:48:7a:75:a8:be:b8:8d:aa:e7:ef:6a:35:0c:60:
d2:44:71:01:51:8a:33:09:7f:79:6a:2a:94:f0:33:
f9:e3:0c:0b:3e:6e:7a:dd:66:6e:79:3c:df:28:82:
19:c6:f8:99:dd:2d:0f:0f:ca:22:ba:d9:64:82:ed:
28:a5:55:bd:31:09:38:a3:e7:99:c3:c9:e8:9e:29:
6c:18:a9:36:78:c7:47:d1:64:d9:cf:76:87:df:4e:
bd:6f:9a:69:21:2d:26:89:a4:da:e8:e4:59:0c:92:
15:ba:aa:ab:85:85:49:4a:c3:d7:e4:f4:a0:40:96:
8f:01:c6:8a:a2:c2:d7:7f:f6:f0:11:78:0f:58:c1:
31:1d:d3:22:48:c5:a4:02:e8:ab:44:a8:81:2b:af:
fa:24:3a:61:e3:9e:b6:ab:3c:16:29:b2:f8:28:55:
d7:5c:26:ef:b8:63:33:7a:16:c4:65:bd:ff:79:02:
4b:5b:88:57:6a:65:dc:0f:2b:49:10:0c:f8:b7:77:
ab:2c:6b:44:45:6b:70:21:8f:89:c2:a0:ad:6b:7f:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:26:7A:A6:63:4D:54:E2:BF:EC:F7:55:07:E6:F7:1D:77:98:C8:A3
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:15:07:e4:71:d4:a8:fd:65:96:5a:e1:b9:84:e3:1c:3d:6b:
77:6e:3c:dd:7e:18:6c:00:73:32:cb:8f:88:3f:bb:5e:5f:ef:
19:44:32:56:a4:61:12:31:d3:e0:dd:f6:be:e3:2f:a2:09:91:
8b:89:e0:d5:63:5c:52:aa:10:a5:12:f5:e3:a7:c8:26:62:82:
a8:9c:f1:0f:ef:15:89:04:d5:b0:61:84:ed:e5:06:9b:57:5b:
8c:2c:5c:90:97:26:0e:a9:e0:7b:cb:cb:db:be:ef:1b:79:81:
fc:b3:10:f1:9e:a3:d8:c5:a5:55:b8:75:d7:97:eb:70:c6:73:
cb:d3:75:6c:1f:20:2d:35:fc:cc:03:97:67:5b:66:e2:72:2f:
e2:fc:0f:ed:19:fb:21:54:bd:19:ef:2d:d7:14:7e:8a:73:16:
7e:bf:48:fa:c3:3b:ca:50:ab:e9:c6:b5:52:a8:f1:98:b8:12:
f7:97:e4:42:76:6e:db:b3:80:d4:3d:56:fc:42:92:66:2c:c6:
50:f9:2e:0b:d0:bf:e8:43:1f:1d:10:27:3c:8f:73:e9:54:51:
db:d1:67:29:6c:26:1e:df:61:67:42:63:f8:ea:b2:b2:38:02:
22:d9:af:34:73:89:b0:a2:72:5c:3d:a5:81:53:b3:24:2a:80:
ea:48:d6:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOVz2L3ZVWNMx12EjZBvRqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NDgwNTI3ZDBiMzVjYWY5NWIzNzUwMmM0YzZmOWUzZTgx
ZmQ4YTMwHhcNMjUwNjA4MDcwMDI5WhcNMjUwNjA5MDcwMDI5WjAzMTEwLwYDVQQD
Eyg0MjI2N2FhNjYzNGQ1NGUyYmZlY2Y3NTUwN2U2ZjcxZDc3OThjOGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOApEyN33Qgc3JRb3dke0nUOtXii
iVP8Gt4z0AUXGYF6oxK1BdPm+hPCnBGdSHp1qL64jarn72o1DGDSRHEBUYozCX95
aiqU8DP54wwLPm563WZueTzfKIIZxviZ3S0PD8oiutlkgu0opVW9MQk4o+eZw8no
nilsGKk2eMdH0WTZz3aH3069b5ppIS0miaTa6ORZDJIVuqqrhYVJSsPX5PSgQJaP
AcaKosLXf/bwEXgPWMExHdMiSMWkAuirRKiBK6/6JDph4562qzwWKbL4KFXXXCbv
uGMzehbEZb3/eQJLW4hXamXcDytJEAz4t3erLGtERWtwIY+JwqCta3+QdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEImeqZjTVTiv+z3VQfm9x13mMijMB8GA1UdIwQY
MBaAFHdIBSfQs1yvlbN1AsTG+ePoH9ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iOTc4NDktMmFmNS00YzNlLThmMGUt
NGRkMzg1M2EyMjQxLzEvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iOTc4NDktMmFmNS00YzNlLThmMGUtNGRkMzg1M2EyMjQx
LzEvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBUH5HHU
qP1lllrhuYTjHD1rd2483X4YbABzMsuPiD+7Xl/vGUQyVqRhEjHT4N32vuMvogmR
i4ng1WNcUqoQpRL146fIJmKCqJzxD+8ViQTVsGGE7eUGm1dbjCxckJcmDqnge8vL
277vG3mB/LMQ8Z6j2MWlVbh115frcMZzy9N1bB8gLTX8zAOXZ1tm4nIv4vwP7Rn7
IVS9Ge8t1xR+inMWfr9I+sM7ylCr6ca1UqjxmLgS95fkQnZu27OA1D1W/EKSZizG
UPkuC9C/6EMfHRAnPI9z6VRR29FnKWwmHt9hZ0Jj+OqysjgCItmvNHOJsKJyXD2l
gVOzJCqA6kjW2g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:03:46 2025 by rpki-client