Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: JT1LuITY23hZIRFhkpkudsgMICXGrhX79hKi6KRRG6w=
Subject key identifier: 43:90:00:94:CB:76:01:3F:4B:33:75:EF:B1:77:41:75:55:8A:26:31
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 019762F0FFE1F2A2CCD2D2AC65E01DAD7DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 0D27
Signing time: Thu 12 Jun 2025 07:00:50 +0000
Manifest this update: Thu 12 Jun 2025 07:00:50 +0000
Manifest next update: Fri 13 Jun 2025 07:00:50 +0000
Files and hashes: 1: aRphps94ueev9_cb0Fbr1t6EWos.roa (hash: qY/6yr4D72wfd0je0UgbA5pXBnLSwy4IbEDXkYKHi6c=)
2: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: jFPnCaSsG0FAtXgOObKuP3sYDD0eUrKL5MWd18y885c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:f0:ff:e1:f2:a2:cc:d2:d2:ac:65:e0:1d:ad:7d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Jun 12 07:00:50 2025 GMT
Not After : Jun 13 07:00:50 2025 GMT
Subject: CN=43900094cb76013f4b3375efb1774175558a2631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:e3:cd:86:77:19:66:95:be:48:de:22:56:
91:fe:0b:ea:d1:c3:83:b5:34:fb:ba:72:41:dc:d0:
50:bc:91:31:08:cd:77:35:20:94:e8:70:e6:c7:a8:
a7:a1:63:0e:0b:e0:fd:78:ea:9a:de:35:a9:6e:6e:
21:eb:f7:5b:8d:82:2a:b0:98:f9:69:47:db:54:bf:
01:37:32:b8:2d:cd:cd:21:05:c5:be:a4:ad:d8:f2:
49:0d:78:1c:32:85:f6:45:3b:b9:58:16:9a:eb:bc:
22:37:f9:30:44:01:b2:7f:da:ee:8e:f1:ea:e5:e3:
ec:50:be:9e:c1:df:ea:59:a2:8f:fa:d7:1f:fb:ca:
f2:46:36:12:04:11:dd:fd:77:be:ce:4d:ec:49:53:
be:08:6b:13:c2:2a:62:80:24:ee:3a:02:6c:c8:23:
43:03:7f:7c:fb:fe:20:21:e4:b4:d4:c9:d4:a1:b6:
e8:33:69:67:bb:89:3d:23:c2:6b:6a:9d:fc:51:3a:
b8:8a:c3:07:cf:b1:ed:4f:88:83:12:68:42:f3:eb:
53:a1:89:3f:e0:21:a8:e2:f5:66:23:3e:8c:c9:d8:
bb:c7:8c:62:43:ed:c2:ce:53:bd:93:97:e5:85:aa:
a6:bc:76:56:e2:55:6d:74:c1:d0:fc:62:90:ba:49:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:90:00:94:CB:76:01:3F:4B:33:75:EF:B1:77:41:75:55:8A:26:31
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6b:f1:c5:f0:4f:bb:f1:7b:d9:29:a8:1f:9a:a9:45:80:6c:
f3:cd:7c:8a:de:ea:09:0f:aa:a3:e9:d8:7c:61:51:00:7d:d8:
1c:43:eb:98:cf:e7:cb:fb:6d:e8:84:42:35:e3:48:55:ee:3e:
4c:6d:42:a5:bd:20:da:04:70:f9:52:e4:46:3c:49:07:0c:0c:
0d:e3:7a:02:c7:71:6c:41:b9:fa:af:43:c0:5b:29:5c:3e:2f:
18:99:73:d6:5e:db:4a:da:4d:df:4c:17:80:49:6b:09:ed:da:
eb:75:a2:ec:86:ec:99:c7:4d:7b:ad:2b:8f:84:31:89:8f:9e:
76:6c:98:f8:e9:34:bc:e8:45:05:70:7c:84:a8:e1:c3:31:79:
b3:ff:b4:60:d9:21:af:85:66:aa:c7:03:7f:ad:cd:c9:db:29:
3f:2f:1c:2b:7d:f7:59:90:3a:c2:02:78:e7:0d:ff:76:3c:67:
8d:c3:1e:f2:a5:c8:fb:18:55:c7:6e:9c:92:8d:1d:57:01:b2:
36:d0:26:f3:e5:c6:3f:c0:3d:f6:a4:93:ec:27:69:4e:7b:8a:
a8:71:76:72:a4:85:22:ba:d4:10:af:f0:49:39:a7:30:d2:1a:
01:48:9a:d0:7f:74:1c:d3:d3:e4:44:1d:dd:2e:4f:0d:49:f5:
c7:e1:c7:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdi8P/h8qLM0tKsZeAdrX3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWU5NDFhNjgxYzE1ODYzNzllMDcyNDdkY2MxOWYzZjQx
MDM1ZDgwHhcNMjUwNjEyMDcwMDUwWhcNMjUwNjEzMDcwMDUwWjAzMTEwLwYDVQQD
Eyg0MzkwMDA5NGNiNzYwMTNmNGIzMzc1ZWZiMTc3NDE3NTU1OGEyNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XLjzYZ3GWaVvkjeIlaR/gvq0cOD
tTT7unJB3NBQvJExCM13NSCU6HDmx6inoWMOC+D9eOqa3jWpbm4h6/dbjYIqsJj5
aUfbVL8BNzK4Lc3NIQXFvqSt2PJJDXgcMoX2RTu5WBaa67wiN/kwRAGyf9rujvHq
5ePsUL6ewd/qWaKP+tcf+8ryRjYSBBHd/Xe+zk3sSVO+CGsTwipigCTuOgJsyCND
A398+/4gIeS01MnUobboM2lnu4k9I8Jrap38UTq4isMHz7HtT4iDEmhC8+tToYk/
4CGo4vVmIz6Mydi7x4xiQ+3CzlO9k5flhaqmvHZW4lVtdMHQ/GKQukmgGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOQAJTLdgE/SzN177F3QXVViiYxMB8GA1UdIwQY
MBaAFHSulBpoHBWGN54HJH3MGfP0EDXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEs2VUdtZ2NGWVkzbmdja2Zjd1o4X1FRTmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xNGU0YzItOGE5OC00NTZlLTk2MTIt
OTQyOWRhODdiZDUwLzEvZEs2VUdtZ2NGWVkzbmdja2Zjd1o4X1FRTmRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8xNGU0YzItOGE5OC00NTZlLTk2MTItOTQyOWRhODdiZDUw
LzEvZEs2VUdtZ2NGWVkzbmdja2Zjd1o4X1FRTmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2vxxfBP
u/F72SmoH5qpRYBs8818it7qCQ+qo+nYfGFRAH3YHEPrmM/ny/tt6IRCNeNIVe4+
TG1Cpb0g2gRw+VLkRjxJBwwMDeN6AsdxbEG5+q9DwFspXD4vGJlz1l7bStpN30wX
gElrCe3a63Wi7IbsmcdNe60rj4QxiY+edmyY+Ok0vOhFBXB8hKjhwzF5s/+0YNkh
r4VmqscDf63NydspPy8cK333WZA6wgJ45w3/djxnjcMe8qXI+xhVx26cko0dVwGy
NtAm8+XGP8A99qST7CdpTnuKqHF2cqSFIrrUEK/wSTmnMNIaAUia0H90HNPT5EQd
3S5PDUn1x+HHBQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 11:28:31 2025 by rpki-client