Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
File: dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json)
Hash identifier: XYecZGib2TQBOEiwO7RHn2wYnavHutWg/g/ZcujVy/4=
Subject key identifier: 43:0D:14:C6:03:40:00:02:02:0E:B4:C5:55:D5:09:0D:A5:35:29:B0
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Certificate issuer: /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial: 019768F2D3A7711A3EB106107E2817D474D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
Manifest number: 08E8
Signing time: Fri 13 Jun 2025 11:00:33 +0000
Manifest this update: Fri 13 Jun 2025 11:00:33 +0000
Manifest next update: Sat 14 Jun 2025 11:00:33 +0000
Files and hashes: 1: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: jvJ5Ltgo1Uvg4Wn9ZanQuS/lIOGOFvNCwNLFhaFwdSA=)
2: jgYJrOBGpxmFCRX1q-MlycW-osQ.roa (hash: zjiQPJ4SZc/bB7c5P+iOwvUmdfPHzDJrUsMFIzmnB8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:d3:a7:71:1a:3e:b1:06:10:7e:28:17:d4:74:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Validity
Not Before: Jun 13 11:00:33 2025 GMT
Not After : Jun 14 11:00:33 2025 GMT
Subject: CN=430d14c603400002020eb4c555d5090da53529b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:2d:f8:b8:54:bd:89:d4:85:3e:79:cb:a8:
8b:ad:73:b9:58:e0:e4:89:05:75:69:51:87:e1:14:
fc:78:11:68:10:ea:e0:e2:e2:41:ad:07:5b:9d:f0:
92:f3:43:a9:6e:a4:4e:4c:8c:57:fe:07:71:b3:64:
6c:37:3a:ff:92:3b:d7:fc:02:1b:07:4e:f1:36:75:
0c:2f:70:37:8d:5f:31:11:5a:01:c8:27:c1:22:00:
05:ef:be:bc:4d:c1:a5:e3:2d:8c:19:ad:5f:f7:66:
0d:39:e7:f7:b6:0a:a7:97:e8:3e:2f:fc:a5:2c:a0:
ee:7a:37:a7:dd:c9:af:ad:24:87:12:45:9f:91:0d:
07:fe:3a:a5:20:c3:39:77:ac:d5:94:ad:17:03:2f:
ea:61:a2:2b:b6:bf:20:2b:8d:11:2b:a1:a3:e1:a1:
73:a1:28:40:5c:83:f4:8e:1a:4c:69:ae:2c:51:2f:
af:91:40:19:ce:08:f7:bc:2c:98:f6:55:dd:0e:b6:
16:5d:37:e1:7c:52:9a:00:a9:54:64:7a:38:10:f3:
db:9a:28:a6:01:a8:0c:df:c1:e5:0a:d7:40:ae:e6:
54:8c:b3:13:49:99:75:ba:f4:4c:e8:77:39:a8:d0:
72:d3:00:40:82:8f:93:0c:53:80:35:e0:0a:29:b7:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0D:14:C6:03:40:00:02:02:0E:B4:C5:55:D5:09:0D:A5:35:29:B0
X509v3 Authority Key Identifier:
keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:52:36:6d:11:03:bc:29:eb:50:7e:ce:dc:ae:a6:80:12:1b:
a2:2f:55:a6:64:76:7d:e0:06:0b:a7:cf:4b:a8:fb:c3:89:2f:
03:26:90:d4:bd:0b:af:f3:8d:e8:84:bf:8d:8e:07:a6:9e:6a:
b5:0e:98:42:0e:6f:a3:b3:55:da:b5:24:ea:98:30:67:9b:c5:
37:88:ea:d6:12:5f:01:83:e1:7f:1e:22:99:df:ba:f4:fe:9b:
b3:23:c1:62:f3:fb:a2:5c:76:70:dc:3a:cb:9d:da:1c:b1:5c:
d5:ea:81:cb:fe:79:31:41:f8:23:a7:cc:e1:2f:74:81:ba:f2:
73:22:29:61:39:a4:78:2b:71:c7:a7:6e:42:be:0d:38:18:46:
87:e0:ea:59:5c:d8:d5:8e:60:ff:38:2c:46:57:35:88:db:20:
c9:43:38:27:69:40:5a:80:3b:a1:26:9f:1a:aa:ff:40:7d:e3:
35:51:17:49:87:ac:7a:9a:f2:3f:90:c3:c9:49:59:d8:1f:4c:
2f:1a:bf:3d:88:af:c6:09:08:5f:bc:53:05:b8:c8:ca:c6:e7:
2f:80:d4:b6:a1:7f:f0:e3:29:bb:88:8e:03:a0:a2:c3:c3:9b:
0d:3d:3e:85:d4:52:de:f6:1c:f8:c7:a1:50:05:e3:85:cf:f6:
d2:c4:15:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdo8tOncRo+sQYQfigX1HTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MDAxYmNjNjlhMTY1MDM0MjFiODg4NTFmNDdhYTE2YzVj
ZjJkYmMwHhcNMjUwNjEzMTEwMDMzWhcNMjUwNjE0MTEwMDMzWjAzMTEwLwYDVQQD
Eyg0MzBkMTRjNjAzNDAwMDAyMDIwZWI0YzU1NWQ1MDkwZGE1MzUyOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvot+LhUvYnUhT55y6iLrXO5WODk
iQV1aVGH4RT8eBFoEOrg4uJBrQdbnfCS80OpbqROTIxX/gdxs2RsNzr/kjvX/AIb
B07xNnUML3A3jV8xEVoByCfBIgAF7768TcGl4y2MGa1f92YNOef3tgqnl+g+L/yl
LKDuejen3cmvrSSHEkWfkQ0H/jqlIMM5d6zVlK0XAy/qYaIrtr8gK40RK6Gj4aFz
oShAXIP0jhpMaa4sUS+vkUAZzgj3vCyY9lXdDrYWXTfhfFKaAKlUZHo4EPPbmiim
AagM38HlCtdAruZUjLMTSZl1uvRM6Hc5qNBy0wBAgo+TDFOANeAKKbdJCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMNFMYDQAACAg60xVXVCQ2lNSmwMB8GA1UdIwQY
MBaAFHcAG8xpoWUDQhuIhR9HqhbFzy28MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82ZmYyMzAtZTAxMi00NTMxLTg2NmMt
MGE4YmQyZjM2YzcyLzEvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82ZmYyMzAtZTAxMi00NTMxLTg2NmMtMGE4YmQyZjM2Yzcy
LzEvZHdBYnpHbWhaUU5DRzRpRkgwZXFGc1hQTGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVI2bRED
vCnrUH7O3K6mgBIboi9VpmR2feAGC6fPS6j7w4kvAyaQ1L0Lr/ON6IS/jY4Hpp5q
tQ6YQg5vo7NV2rUk6pgwZ5vFN4jq1hJfAYPhfx4imd+69P6bsyPBYvP7olx2cNw6
y53aHLFc1eqBy/55MUH4I6fM4S90gbrycyIpYTmkeCtxx6duQr4NOBhGh+DqWVzY
1Y5g/zgsRlc1iNsgyUM4J2lAWoA7oSafGqr/QH3jNVEXSYesepryP5DDyUlZ2B9M
Lxq/PYivxgkIX7xTBbjIysbnL4DUtqF/8OMpu4iOA6Ciw8ObDT0+hdRS3vYc+Meh
UAXjhc/20sQVKw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 12:40:32 2025 by rpki-client