Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier: uApCPs8DnY9SGysNCyNzKmkblIoVF2+guwmQCAQ0pdo=
Subject key identifier: 20:8B:DB:59:05:19:01:0B:8F:4D:56:29:D1:2C:13:46:84:24:FB:28
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 01975DCB8A19AB28539A05F590D5F373EF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 07:01:49 +0000
Manifest this update: Wed 11 Jun 2025 07:01:49 +0000
Manifest next update: Thu 12 Jun 2025 07:01:49 +0000
Files and hashes: 1: 8GPy1nq-d8qyd5DzcEoD7_wmnRk.roa (hash: VU25KKsH1DHg8pytMPBtSMEdGMuo9BZsAecAtygfZnk=)
2: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: F4LZBJ10F2AFfNEznaB4cJ6Pf4GTWytHBMkvpKpXkWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:8a:19:ab:28:53:9a:05:f5:90:d5:f3:73:ef:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: Jun 11 07:01:49 2025 GMT
Not After : Jun 12 07:01:49 2025 GMT
Subject: CN=208bdb590519010b8f4d5629d12c13468424fb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5f:b5:3a:19:b0:b7:d8:a8:b8:9b:4b:9a:12:
e1:83:32:3c:0b:e3:02:3e:58:6f:ff:85:84:f0:c8:
4d:87:b3:8c:90:18:d7:b7:b0:73:67:41:81:76:54:
0e:76:02:cb:00:b7:9a:27:bc:2e:8c:01:87:b9:52:
94:3f:14:c3:d7:23:4f:c4:48:2f:35:38:70:9b:0a:
46:cd:cd:aa:35:6b:e6:4a:2f:34:bf:aa:89:fa:32:
97:e3:e4:12:15:8f:11:f3:3a:3d:1a:1c:60:6a:d9:
fa:9b:c5:87:54:fe:44:b6:f0:62:39:d6:74:7b:ff:
22:33:30:36:b7:78:ae:b6:a4:22:ca:37:a1:3f:22:
10:3c:51:e2:0c:2a:aa:d0:03:8b:fc:64:1c:b6:14:
45:5b:5f:6a:79:5b:75:03:38:bd:92:09:f2:c5:16:
a6:8f:91:2c:17:9a:a2:c2:c9:4d:0d:b3:b6:5d:33:
24:eb:d1:c0:1f:d4:b5:1b:ac:12:8c:c8:24:ea:70:
3e:ec:7f:7c:15:cc:cb:b9:64:f0:33:5e:b4:0a:fa:
7b:b5:79:18:74:76:7a:0a:cb:83:52:df:e8:0b:a1:
8e:18:41:c0:1c:a3:2b:a0:be:8f:54:61:6d:9c:76:
db:23:5b:9e:7e:b2:29:2d:8d:df:3e:2e:86:1b:36:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8B:DB:59:05:19:01:0B:8F:4D:56:29:D1:2C:13:46:84:24:FB:28
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7f:22:11:f1:fc:77:7d:0b:35:15:2e:68:8d:d8:95:d2:76:
b3:3c:4e:a1:17:f5:71:13:33:e1:3b:86:8c:c4:19:7f:3a:93:
7f:fc:34:a8:14:aa:f0:67:a1:a2:a2:a6:18:17:54:29:3a:8f:
31:a5:e1:da:ed:33:6a:81:4f:5b:89:52:b8:ef:0b:6d:b6:e1:
56:61:a9:fc:b6:eb:4c:91:69:9b:20:01:5a:99:22:f1:03:e8:
55:6d:88:90:8f:2e:77:a3:98:9f:3f:55:cf:ec:fa:3f:cf:63:
30:cf:1c:a2:9d:ce:53:02:55:e8:33:d1:0d:8d:57:20:73:a7:
1a:72:e6:8a:81:4e:3d:2f:e0:40:a0:f1:e3:3b:d6:61:59:08:
11:67:9d:24:02:05:d1:34:13:da:40:3f:6f:c6:6e:bc:27:0b:
05:c2:b7:72:9f:1e:47:55:f5:24:bb:64:76:4b:5a:6e:09:2c:
be:b6:0b:f2:80:1e:8b:76:33:0d:df:d3:0a:ce:6c:58:60:5a:
26:56:e4:3f:61:05:b4:89:2c:5d:53:ff:d8:93:c8:96:88:09:
cd:1f:92:38:2f:c8:94:79:1a:66:8f:70:72:bf:b2:a2:63:ee:
c6:f3:5f:0f:2f:1a:67:c9:86:76:2d:47:54:5b:a0:50:75:5e:
e0:5d:8a:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddy4oZqyhTmgX1kNXzc+9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmM2YxMzMyY2ZmMDViMjJhM2E2NmE2ZDRjMzQ4ZmJjMDFk
ZTExNWMwHhcNMjUwNjExMDcwMTQ5WhcNMjUwNjEyMDcwMTQ5WjAzMTEwLwYDVQQD
EygyMDhiZGI1OTA1MTkwMTBiOGY0ZDU2MjlkMTJjMTM0Njg0MjRmYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl+1Ohmwt9iouJtLmhLhgzI8C+MC
Plhv/4WE8MhNh7OMkBjXt7BzZ0GBdlQOdgLLALeaJ7wujAGHuVKUPxTD1yNPxEgv
NThwmwpGzc2qNWvmSi80v6qJ+jKX4+QSFY8R8zo9Ghxgatn6m8WHVP5EtvBiOdZ0
e/8iMzA2t3iutqQiyjehPyIQPFHiDCqq0AOL/GQcthRFW19qeVt1Azi9kgnyxRam
j5EsF5qiwslNDbO2XTMk69HAH9S1G6wSjMgk6nA+7H98FczLuWTwM160Cvp7tXkY
dHZ6CsuDUt/oC6GOGEHAHKMroL6PVGFtnHbbI1uefrIpLY3fPi6GGzYXAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCL21kFGQELj01WKdEsE0aEJPsoMB8GA1UdIwQY
MBaAFA8/EzLP8Fsio6ZqbUw0j7wB3hFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUt
ZGFhZjI5MjExOTQ5LzEvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUtZGFhZjI5MjExOTQ5
LzEvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApn8iEfH8
d30LNRUuaI3YldJ2szxOoRf1cRMz4TuGjMQZfzqTf/w0qBSq8GehoqKmGBdUKTqP
MaXh2u0zaoFPW4lSuO8LbbbhVmGp/LbrTJFpmyABWpki8QPoVW2IkI8ud6OYnz9V
z+z6P89jMM8cop3OUwJV6DPRDY1XIHOnGnLmioFOPS/gQKDx4zvWYVkIEWedJAIF
0TQT2kA/b8ZuvCcLBcK3cp8eR1X1JLtkdktabgksvrYL8oAei3YzDd/TCs5sWGBa
JlbkP2EFtIksXVP/2JPIlogJzR+SOC/IlHkaZo9wcr+yomPuxvNfDy8aZ8mGdi1H
VFugUHVe4F2K+A==
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:01:40 2025 by rpki-client