Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File: dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier: DIfP2R7JKEHmHhHmN4LoBhB8lssgC1HkTFB7hWBMRU0=
Subject key identifier: 24:ED:5F:61:1B:D9:88:9A:F0:26:07:86:FB:8C:B6:CC:BE:A4:1B:B0
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial: 0197499F1E0EC6B8A357371334CC9FCC29D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number: 0962
Signing time: Sat 07 Jun 2025 09:00:54 +0000
Manifest this update: Sat 07 Jun 2025 09:00:54 +0000
Manifest next update: Sun 08 Jun 2025 09:00:54 +0000
Files and hashes: 1: K2WTfNgGTgwLI8daJh2SwttMQ5w.roa (hash: kg2DGvsW5/IaD92YzOAMjHp8f1xtHOO7qcNliTfoKss=)
2: Ppnz_gWGkTgslud1nbRvdKIkQ7U.roa (hash: pUR0ufw079uWlFJjSqIiEUz3vris4ZJFN/dXSNPf1bk=)
3: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: Akk2/PZtoBfWOI7AdqX2ITrOwyadROd+9LGAIkSHOw8=)
4: gYinuUkN5-ijpn1rqGGqGii0p6g.roa (hash: lpzZyTHLuJfHa94o7AaeZ6AmXeDKqlRwU9KcssuE8rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:1e:0e:c6:b8:a3:57:37:13:34:cc:9f:cc:29:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
Validity
Not Before: Jun 7 09:00:54 2025 GMT
Not After : Jun 8 09:00:54 2025 GMT
Subject: CN=24ed5f611bd9889af0260786fb8cb6ccbea41bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:64:92:d5:57:57:f4:f7:8f:72:54:1a:4a:
b9:d4:1b:9f:ca:46:2e:f1:5c:5f:99:6e:36:3f:84:
28:00:54:b3:26:5c:69:ed:73:23:0b:86:a2:62:7a:
8e:de:09:3f:af:22:0e:8c:99:1f:62:36:53:a8:b2:
f9:cf:82:d7:ef:1c:a0:6f:b3:ee:31:08:e9:17:f6:
ea:cc:a6:17:50:a6:44:35:a2:66:6f:97:1d:97:3c:
e1:5c:05:1c:e7:57:78:20:8d:06:c7:91:a9:06:3d:
cb:94:c7:d1:e9:7d:3b:0d:b7:ca:71:4c:8f:a1:1a:
c8:ef:3e:28:54:2b:e3:9b:29:e8:47:a4:77:2f:04:
31:df:5a:6b:4e:d6:ee:22:9c:0a:62:72:98:82:a3:
ea:d3:94:23:97:4d:4c:79:66:f2:03:6e:ee:1f:91:
2d:48:56:50:06:41:2a:2f:6e:fd:05:1c:ce:5b:86:
50:d9:ab:46:bd:67:2d:d7:b7:02:66:4a:dd:7d:14:
03:2b:89:90:72:36:62:3e:9e:65:a1:1b:a0:9d:da:
1a:0b:c3:3b:c1:97:8b:4f:46:3b:6f:24:67:a9:a3:
3d:6e:da:c0:95:56:87:94:99:10:3e:a6:7f:24:75:
bc:9f:90:86:46:18:07:ee:52:af:df:6d:06:15:ce:
e2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:ED:5F:61:1B:D9:88:9A:F0:26:07:86:FB:8C:B6:CC:BE:A4:1B:B0
X509v3 Authority Key Identifier:
keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:10:55:01:ee:94:8c:3f:12:66:63:42:cb:41:e5:7e:0c:fe:
26:ad:ff:16:44:d4:8e:95:22:0b:f0:fc:de:87:f2:7e:b3:33:
57:49:37:44:5d:ab:d0:42:ab:85:fe:ae:b8:9f:3a:e9:da:0e:
91:b2:fb:9e:b5:23:50:45:72:c8:22:47:14:1a:64:0b:9b:9e:
04:6d:d8:00:05:03:ea:12:96:26:4c:23:b1:ed:44:d8:74:16:
3f:cc:23:23:8d:be:fc:a8:e6:89:27:7a:29:30:8c:f6:07:87:
c3:16:bf:bc:02:09:ee:d8:70:3e:da:e3:31:98:7b:39:a9:06:
9c:54:1e:dd:00:00:46:5d:c6:3a:5a:6b:1c:13:a8:d9:7a:f9:
03:e1:af:f9:1e:a5:29:82:6a:3e:c7:95:3d:8c:e5:c9:bc:a2:
01:35:76:fe:61:a2:32:99:81:e9:82:69:b7:bc:28:7d:66:22:
20:ed:df:91:13:28:2e:0d:79:ee:1c:86:b4:f8:8a:1c:0a:23:
c6:ae:6a:99:84:c2:c2:38:59:83:82:8c:65:7f:4d:88:0b:bb:
2e:c5:6a:9f:d2:3f:88:4b:f2:a0:fb:26:25:8c:34:e3:b0:a6:
b0:72:8f:83:6a:c3:1f:a4:b0:19:b2:cd:7b:0f:9f:94:b9:69:
3b:8b:6f:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnx4OxrijVzcTNMyfzCnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Yjc5NTA2NjE1MGExYzM2N2RhYmNjZjY5Yzk3MGFiMGM3
MjMyMTUwHhcNMjUwNjA3MDkwMDU0WhcNMjUwNjA4MDkwMDU0WjAzMTEwLwYDVQQD
EygyNGVkNWY2MTFiZDk4ODlhZjAyNjA3ODZmYjhjYjZjY2JlYTQxYmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso1kktVXV/T3j3JUGkq51BufykYu
8VxfmW42P4QoAFSzJlxp7XMjC4aiYnqO3gk/ryIOjJkfYjZTqLL5z4LX7xygb7Pu
MQjpF/bqzKYXUKZENaJmb5cdlzzhXAUc51d4II0Gx5GpBj3LlMfR6X07DbfKcUyP
oRrI7z4oVCvjmynoR6R3LwQx31prTtbuIpwKYnKYgqPq05Qjl01MeWbyA27uH5Et
SFZQBkEqL279BRzOW4ZQ2atGvWct17cCZkrdfRQDK4mQcjZiPp5loRugndoaC8M7
wZeLT0Y7byRnqaM9btrAlVaHlJkQPqZ/JHW8n5CGRhgH7lKv320GFc7i/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTtX2Eb2Yia8CYHhvuMtsy+pBuwMB8GA1UdIwQY
MBaAFHW3lQZhUKHDZ9q8z2nJcKsMcjIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjct
NTQ3YmU0Y2ZhNDU3LzEvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjctNTQ3YmU0Y2ZhNDU3
LzEvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBBVAe6U
jD8SZmNCy0Hlfgz+Jq3/FkTUjpUiC/D83ofyfrMzV0k3RF2r0EKrhf6uuJ866doO
kbL7nrUjUEVyyCJHFBpkC5ueBG3YAAUD6hKWJkwjse1E2HQWP8wjI42+/KjmiSd6
KTCM9geHwxa/vAIJ7thwPtrjMZh7OakGnFQe3QAARl3GOlprHBOo2Xr5A+Gv+R6l
KYJqPseVPYzlybyiATV2/mGiMpmB6YJpt7wofWYiIO3fkRMoLg157hyGtPiKHAoj
xq5qmYTCwjhZg4KMZX9NiAu7LsVqn9I/iEvyoPsmJYw047CmsHKPg2rDH6SwGbLN
ew+flLlpO4tvRw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:10:50 2025 by rpki-client