Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
File: du6ffY5dGMUIhPgzeK5Iui_NpuI.mft (raw, json)
Hash identifier: SphLqYarn9jVWORaBlmvR3n5JK/NkvV7rEwlX5z9rFs=
Subject key identifier: 21:FC:8C:B4:3A:0C:4D:DB:44:63:1E:76:DB:C3:C8:B2:2F:06:10:3D
Authority key identifier: 76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
Certificate issuer: /CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Certificate serial: 01974967D6656598FBB09C79F34527B407DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
Manifest number: 10D4
Signing time: Sat 07 Jun 2025 08:00:31 +0000
Manifest this update: Sat 07 Jun 2025 08:00:31 +0000
Manifest next update: Sun 08 Jun 2025 08:00:31 +0000
Files and hashes: 1: du6ffY5dGMUIhPgzeK5Iui_NpuI.crl (hash: QnUxs2PMjJK+vzgzvAoJiaEI50XPDpLCYBR2qRxu3C0=)
2: mXqLLr6nY4_O8xCSHszNUcdYNRQ.roa (hash: mR7ch814nod8YJeRcpIlHri0tj0aQVOIDu8w+ijK6HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:d6:65:65:98:fb:b0:9c:79:f3:45:27:b4:07:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Validity
Not Before: Jun 7 08:00:31 2025 GMT
Not After : Jun 8 08:00:31 2025 GMT
Subject: CN=21fc8cb43a0c4ddb44631e76dbc3c8b22f06103d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ad:0c:bf:bf:53:ba:76:2d:fc:df:32:85:0f:
7b:f3:62:d8:0b:47:49:d2:ca:37:87:40:f1:5b:3f:
bd:f2:5d:7c:cd:a0:90:d3:7a:76:37:33:23:76:3c:
8b:73:59:68:6e:06:3f:94:e2:30:c5:c7:24:6b:ee:
69:33:ed:4d:42:00:dc:e1:b1:98:87:f7:38:28:ac:
f7:18:5c:e1:ab:68:49:aa:85:ee:85:5b:96:23:bd:
aa:07:2e:c5:d0:c4:08:80:51:b5:34:59:c8:0b:8e:
80:d8:00:26:36:8f:8f:0c:1e:2a:4c:8e:28:2f:26:
3c:f7:40:0a:8f:ce:c2:aa:61:4f:2e:3e:1f:9d:e4:
50:6f:03:b9:f5:6b:48:ca:b2:51:c8:51:ee:cc:b1:
f7:41:02:4e:0b:f4:68:2a:fb:4f:14:1a:45:97:d0:
41:72:2e:a6:03:64:cc:ff:60:4b:7e:31:ec:88:c1:
9c:31:03:c8:e7:3a:cf:48:00:fc:a9:45:ff:c4:e0:
48:f6:d8:0d:a6:3c:60:1a:ca:b6:39:40:dc:47:07:
a2:54:3f:2f:8f:fa:9f:e8:a1:5e:74:02:71:4b:54:
a8:d6:3e:76:62:ea:88:4a:97:15:97:da:c7:18:6c:
d9:8d:74:9d:36:59:5e:35:69:c2:f1:e5:0a:fc:79:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FC:8C:B4:3A:0C:4D:DB:44:63:1E:76:DB:C3:C8:B2:2F:06:10:3D
X509v3 Authority Key Identifier:
keyid:76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:49:db:f3:1f:77:b8:4d:0c:e8:c8:5a:ea:36:ce:73:2e:21:
db:5e:ac:11:8b:c3:6a:7b:eb:2a:27:bc:34:58:7e:77:dd:7b:
2f:bf:b9:19:ff:e0:20:f1:65:4f:44:d2:db:8c:a7:6f:50:f5:
da:19:79:3b:11:6e:dc:0c:b2:23:d7:31:0e:f0:33:a7:dc:53:
ee:58:fa:55:31:6b:cb:ad:26:e4:14:47:ac:5c:98:04:16:2a:
67:50:cc:f7:f5:9d:09:e6:be:10:65:5d:b9:ba:8b:66:0c:64:
a6:8f:7b:35:26:41:c6:9d:70:0c:46:5e:93:3a:d1:98:eb:d8:
fc:d0:a8:86:08:13:4a:1e:18:aa:1c:42:9b:8e:80:92:fa:55:
8d:84:09:93:50:87:5d:bf:dc:d4:6d:e1:10:9c:c9:c8:50:9d:
00:a1:14:8b:e7:bf:b8:27:a6:63:20:bc:9e:ae:4b:7d:9a:ba:
63:9b:47:d2:9c:29:0c:a7:37:da:e8:20:6b:c6:44:79:8f:df:
78:63:21:c6:89:7a:cd:b2:1c:ad:10:bb:64:91:1d:7c:bc:a0:
99:dc:91:3b:ee:a8:2b:e8:d1:a0:49:6a:6a:92:eb:69:2d:c1:
f8:f2:43:17:b0:63:d9:f0:67:14:81:48:b4:6f:47:a8:06:ad:
d6:54:50:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ9ZlZZj7sJx580UntAfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZWU5ZjdkOGU1ZDE4YzUwODg0ZjgzMzc4YWU0OGJhMmZj
ZGE2ZTIwHhcNMjUwNjA3MDgwMDMxWhcNMjUwNjA4MDgwMDMxWjAzMTEwLwYDVQQD
EygyMWZjOGNiNDNhMGM0ZGRiNDQ2MzFlNzZkYmMzYzhiMjJmMDYxMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K0Mv79TunYt/N8yhQ9782LYC0dJ
0so3h0DxWz+98l18zaCQ03p2NzMjdjyLc1lobgY/lOIwxccka+5pM+1NQgDc4bGY
h/c4KKz3GFzhq2hJqoXuhVuWI72qBy7F0MQIgFG1NFnIC46A2AAmNo+PDB4qTI4o
LyY890AKj87CqmFPLj4fneRQbwO59WtIyrJRyFHuzLH3QQJOC/RoKvtPFBpFl9BB
ci6mA2TM/2BLfjHsiMGcMQPI5zrPSAD8qUX/xOBI9tgNpjxgGsq2OUDcRweiVD8v
j/qf6KFedAJxS1So1j52YuqISpcVl9rHGGzZjXSdNlleNWnC8eUK/HkZlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCH8jLQ6DE3bRGMedtvDyLIvBhA9MB8GA1UdIwQY
MBaAFHbun32OXRjFCIT4M3iuSLovzabiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHU2ZmZZNWRHTVVJaFBnemVLNUl1aV9OcHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hYTNiNDItYjYwMS00MGI0LWIyOTkt
YmY4ZTk2MGZlMGFkLzEvZHU2ZmZZNWRHTVVJaFBnemVLNUl1aV9OcHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9hYTNiNDItYjYwMS00MGI0LWIyOTktYmY4ZTk2MGZlMGFk
LzEvZHU2ZmZZNWRHTVVJaFBnemVLNUl1aV9OcHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEnb8x93
uE0M6Mha6jbOcy4h216sEYvDanvrKie8NFh+d917L7+5Gf/gIPFlT0TS24ynb1D1
2hl5OxFu3AyyI9cxDvAzp9xT7lj6VTFry60m5BRHrFyYBBYqZ1DM9/WdCea+EGVd
ubqLZgxkpo97NSZBxp1wDEZekzrRmOvY/NCohggTSh4YqhxCm46AkvpVjYQJk1CH
Xb/c1G3hEJzJyFCdAKEUi+e/uCemYyC8nq5LfZq6Y5tH0pwpDKc32ugga8ZEeY/f
eGMhxol6zbIcrRC7ZJEdfLygmdyRO+6oK+jRoElqapLraS3B+PJDF7Bj2fBnFIFI
tG9HqAat1lRQEA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:35:06 2025 by rpki-client