Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: KJ8hDtVnT4CbJnMwRNRltLtSFj3zlbRRIlaTI27AqcU=
Subject key identifier: FB:6E:AA:91:9A:2B:EE:B7:34:9B:21:56:9A:DC:2F:AF:01:C0:5F:27
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 01974C6996CEE7C9E4EAB24230004038CD33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 0258
Signing time: Sat 07 Jun 2025 22:01:17 +0000
Manifest this update: Sat 07 Jun 2025 22:01:17 +0000
Manifest next update: Sun 08 Jun 2025 22:01:17 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: jEuRc7kcipj8vp6mUY83b4rujCDsBmqDUR4ctqq6sE4=)
2: rtEx3Op6iiS7UiDW09qCJKnWeDg.roa (hash: 2wI3hDpLjlRGiKeHXtROGiZLVSVg2X+p2EcwYyyykiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:96:ce:e7:c9:e4:ea:b2:42:30:00:40:38:cd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Jun 7 22:01:17 2025 GMT
Not After : Jun 8 22:01:17 2025 GMT
Subject: CN=fb6eaa919a2beeb7349b21569adc2faf01c05f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:85:6a:75:33:c9:bf:73:d8:4f:87:90:78:
33:9b:88:01:3f:f3:f0:3f:34:a4:fa:d8:f2:bf:2f:
47:89:9e:34:d4:9f:8b:eb:0e:f3:ce:a0:21:b5:ad:
72:15:ee:2e:a9:04:f6:77:1c:12:d2:38:f8:58:d4:
fe:9d:b2:1f:f7:25:3f:9b:e9:70:a8:da:a5:f5:e3:
66:06:98:8d:52:c5:9d:b7:28:cf:e6:61:12:7f:b6:
e5:1e:a6:24:5e:35:4c:a8:a9:db:d1:d7:b9:95:fc:
2e:86:26:65:aa:63:74:2b:eb:2e:49:81:c3:9d:19:
d6:5a:4c:11:71:d7:8f:e4:07:0d:16:42:2f:13:5d:
55:c1:13:84:e3:75:42:8a:32:17:d3:d4:09:1b:dc:
fb:2b:8e:b0:13:3d:5c:c6:0b:a2:5d:cd:cd:4b:57:
19:94:2d:40:42:d5:47:de:3d:68:2b:15:5f:fc:ae:
bb:84:36:d6:62:24:8c:ef:1c:b2:5f:c9:b7:d7:9c:
87:42:47:a6:b2:b9:7f:98:f2:ac:a5:d1:28:63:a7:
50:70:94:82:26:d9:e7:ef:0e:dd:c0:df:cf:b9:4b:
ba:db:06:7c:e0:d9:c7:20:4b:b6:3d:4f:5e:64:bd:
3e:0c:ba:03:a6:0a:8e:37:aa:aa:6b:0b:1a:c0:96:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6E:AA:91:9A:2B:EE:B7:34:9B:21:56:9A:DC:2F:AF:01:C0:5F:27
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:29:89:a6:d3:f1:00:bf:fa:17:f6:d3:65:b1:6c:b5:41:05:
da:4f:a7:fb:7f:e5:11:5c:40:4a:e7:4b:83:46:aa:ba:d8:ea:
96:f1:7b:9e:ee:7e:e4:48:26:21:13:40:26:93:00:d2:02:30:
4a:55:81:6d:27:80:d7:5d:33:d1:f3:12:cc:3c:c1:26:d4:d9:
67:c0:43:af:5b:4c:a1:c4:f0:f0:ce:03:ae:24:b8:38:06:cd:
54:22:1f:a7:da:98:c0:87:90:21:6f:a5:46:cc:2c:e7:c9:41:
27:07:64:f4:c4:6a:52:8d:e2:71:65:1e:25:0d:0b:f7:ae:a9:
e0:5e:bc:0b:6d:5b:dc:4b:36:c4:44:f6:84:ea:a7:08:f2:35:
3a:25:0b:eb:3d:c6:a9:bc:da:c2:1c:ee:93:48:10:26:66:2a:
58:64:e2:75:cc:cd:16:d9:a6:86:70:b7:44:6e:8c:f5:74:90:
f1:c7:70:25:ea:15:b2:a4:be:b4:86:42:9e:fb:b0:d2:fb:98:
67:d5:49:29:2f:ec:fc:09:97:b3:29:2f:c1:24:e2:00:4a:4d:
6f:3c:93:01:0a:eb:da:a5:d2:44:a5:16:52:01:0c:3d:90:e1:
70:7c:93:12:66:4c:be:2b:30:cd:2b:7e:55:cc:6b:51:19:47:
6b:96:47:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMaZbO58nk6rJCMABAOM0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDAxOWVkMmNiNjIxOTdiMGNhOTZlMWU3MTYxYzk4NjQ5
MDg2YWYwHhcNMjUwNjA3MjIwMTE3WhcNMjUwNjA4MjIwMTE3WjAzMTEwLwYDVQQD
EyhmYjZlYWE5MTlhMmJlZWI3MzQ5YjIxNTY5YWRjMmZhZjAxYzA1ZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsqFanUzyb9z2E+HkHgzm4gBP/Pw
PzSk+tjyvy9HiZ401J+L6w7zzqAhta1yFe4uqQT2dxwS0jj4WNT+nbIf9yU/m+lw
qNql9eNmBpiNUsWdtyjP5mESf7blHqYkXjVMqKnb0de5lfwuhiZlqmN0K+suSYHD
nRnWWkwRcdeP5AcNFkIvE11VwROE43VCijIX09QJG9z7K46wEz1cxguiXc3NS1cZ
lC1AQtVH3j1oKxVf/K67hDbWYiSM7xyyX8m315yHQkemsrl/mPKspdEoY6dQcJSC
Jtnn7w7dwN/PuUu62wZ84NnHIEu2PU9eZL0+DLoDpgqON6qqawsawJYZMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtuqpGaK+63NJshVprcL68BwF8nMB8GA1UdIwQY
MBaAFA4AGe0stiGXsMqW4ecWHJhkkIavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEt
MDU5YjAwNmYzOWQ5LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEtMDU5YjAwNmYzOWQ5
LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSmJptPx
AL/6F/bTZbFstUEF2k+n+3/lEVxASudLg0aqutjqlvF7nu5+5EgmIRNAJpMA0gIw
SlWBbSeA110z0fMSzDzBJtTZZ8BDr1tMocTw8M4DriS4OAbNVCIfp9qYwIeQIW+l
Rsws58lBJwdk9MRqUo3icWUeJQ0L966p4F68C21b3Es2xET2hOqnCPI1OiUL6z3G
qbzawhzuk0gQJmYqWGTidczNFtmmhnC3RG6M9XSQ8cdwJeoVsqS+tIZCnvuw0vuY
Z9VJKS/s/AmXsykvwSTiAEpNbzyTAQrr2qXSRKUWUgEMPZDhcHyTEmZMviswzSt+
VcxrURlHa5ZHcw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:13:39 2025 by rpki-client