Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
File: debiEsY3QbhblXx8l_fFj1teEzU.mft (raw, json)
Hash identifier: yd0Yvnze4weiQ9Rg4KyO9+YRa1trdPAiU6onYvpznTc=
Subject key identifier: F3:17:B4:44:EF:EE:B5:E2:74:0E:66:D2:5B:E2:7C:39:C2:23:9F:B2
Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
Certificate issuer: /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Certificate serial: 01974CD7056F3FC0B423D3311AA6CBE273F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 00:00:49 +0000
Manifest this update: Sun 08 Jun 2025 00:00:49 +0000
Manifest next update: Mon 09 Jun 2025 00:00:49 +0000
Files and hashes: 1: bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa (hash: TT4ui96hPVB8JuhJPLD2IoWX5TtqeZQlOzkrZUeBR/0=)
2: debiEsY3QbhblXx8l_fFj1teEzU.crl (hash: USnpR1B2yM3KY02HQ1df2zwtXUB1fXPaNSgmR2XSXNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:05:6f:3f:c0:b4:23:d3:31:1a:a6:cb:e2:73:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Validity
Not Before: Jun 8 00:00:49 2025 GMT
Not After : Jun 9 00:00:49 2025 GMT
Subject: CN=f317b444efeeb5e2740e66d25be27c39c2239fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:f7:f7:11:36:e2:38:92:01:1f:36:cf:0b:
75:25:ef:ae:34:df:c6:8f:c6:d0:f4:a1:5e:1c:c2:
b7:f3:2c:11:9d:c0:9f:8c:4e:3e:7d:8c:e4:19:5a:
f1:b2:f1:3d:3a:27:b7:bb:11:42:5b:5b:0e:b9:14:
9a:b7:e7:0e:cd:94:7c:6d:76:21:c6:ca:48:e2:99:
e5:00:a6:10:5c:f4:0f:e4:58:4c:ee:1c:4c:1f:74:
15:c6:dc:fa:5e:65:c4:98:21:56:b0:8a:b0:6b:eb:
f0:12:21:69:04:fd:4a:72:10:f9:05:40:c9:3f:73:
16:fd:3a:27:df:40:e1:bc:7c:2f:3d:9b:69:bd:4f:
2b:46:f3:55:26:fe:c3:fa:c5:e6:88:46:e0:67:b6:
2f:85:31:72:6f:72:94:fb:f9:75:5c:f2:f0:d0:6c:
3a:8b:8c:8d:fe:52:55:22:47:45:da:20:4e:12:5f:
65:bb:bc:84:6b:ed:6f:30:52:0c:2a:0e:fc:1d:60:
2b:06:d8:1e:63:c9:75:41:06:ca:20:2e:46:2f:59:
74:9a:85:85:34:48:c2:4d:3a:e1:b6:ce:b4:0d:3c:
b1:12:b1:66:90:d6:f2:c1:be:35:8c:e0:28:92:1c:
0d:c4:d0:41:6a:62:2b:80:86:b8:11:cf:23:0b:06:
e5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:17:B4:44:EF:EE:B5:E2:74:0E:66:D2:5B:E2:7C:39:C2:23:9F:B2
X509v3 Authority Key Identifier:
keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:00:fe:ef:f6:37:07:f3:75:a1:21:cd:96:49:62:aa:e1:95:
7a:7a:9f:7c:8f:0f:4f:b0:be:48:eb:c1:f9:f5:8d:1a:09:3a:
8b:c8:c5:7b:a7:2e:81:e4:9c:f1:e2:04:42:c2:3e:db:a0:cc:
60:33:b2:0d:37:d3:eb:22:4e:8c:2f:37:94:4d:e7:87:a8:63:
f3:5d:6c:94:d3:46:1f:62:26:e3:5e:93:99:47:40:bd:3d:56:
ee:1b:d4:23:1b:2d:6a:21:63:c1:13:bb:b5:83:48:67:63:4f:
f6:dd:46:9d:f7:2e:bb:c6:22:20:b2:e8:f9:0d:09:2c:3c:00:
4a:3d:39:ea:8e:2f:74:da:01:df:1d:ed:37:09:bd:02:60:db:
76:a0:db:5a:ae:ce:7a:eb:69:ea:77:c4:f9:32:0c:55:c3:3a:
31:51:74:a8:41:56:7d:2c:7c:54:8e:e2:9c:7a:a2:e0:28:b0:
a3:7d:a4:b5:f2:21:21:ea:e3:78:2f:6b:a9:be:17:0a:26:c9:
81:54:71:3d:34:7f:1e:b8:65:95:6d:62:13:18:a0:d1:39:a3:
83:59:17:50:73:f8:46:08:17:13:6b:4b:db:2a:7a:b1:97:56:
db:17:e8:70:b5:0a:d6:c5:90:fa:47:d2:e0:fd:63:a8:77:4a:
82:b0:a9:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1wVvP8C0I9MxGqbL4nPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTZlMjEyYzYzNzQxYjg1Yjk1N2M3Yzk3ZjdjNThmNWI1
ZTEzMzUwHhcNMjUwNjA4MDAwMDQ5WhcNMjUwNjA5MDAwMDQ5WjAzMTEwLwYDVQQD
EyhmMzE3YjQ0NGVmZWViNWUyNzQwZTY2ZDI1YmUyN2MzOWMyMjM5ZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmn39xE24jiSAR82zwt1Je+uNN/G
j8bQ9KFeHMK38ywRncCfjE4+fYzkGVrxsvE9Oie3uxFCW1sOuRSat+cOzZR8bXYh
xspI4pnlAKYQXPQP5FhM7hxMH3QVxtz6XmXEmCFWsIqwa+vwEiFpBP1KchD5BUDJ
P3MW/Ton30DhvHwvPZtpvU8rRvNVJv7D+sXmiEbgZ7YvhTFyb3KU+/l1XPLw0Gw6
i4yN/lJVIkdF2iBOEl9lu7yEa+1vMFIMKg78HWArBtgeY8l1QQbKIC5GL1l0moWF
NEjCTTrhts60DTyxErFmkNbywb41jOAokhwNxNBBamIrgIa4Ec8jCwblzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMXtETv7rXidA5m0lvifDnCI5+yMB8GA1UdIwQY
MBaAFHXm4hLGN0G4W5V8fJf3xY9bXhM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zMzNlYTYtNTg0YS00NzQ5LTgzYzct
MDNkNzQ2MWViNThhLzEvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8zMzNlYTYtNTg0YS00NzQ5LTgzYzctMDNkNzQ2MWViNThh
LzEvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAywD+7/Y3
B/N1oSHNlkliquGVenqffI8PT7C+SOvB+fWNGgk6i8jFe6cugeSc8eIEQsI+26DM
YDOyDTfT6yJOjC83lE3nh6hj811slNNGH2Im416TmUdAvT1W7hvUIxstaiFjwRO7
tYNIZ2NP9t1Gnfcuu8YiILLo+Q0JLDwASj056o4vdNoB3x3tNwm9AmDbdqDbWq7O
eutp6nfE+TIMVcM6MVF0qEFWfSx8VI7inHqi4Ciwo32ktfIhIerjeC9rqb4XCibJ
gVRxPTR/HrhllW1iExig0Tmjg1kXUHP4RggXE2tL2yp6sZdW2xfocLUK1sWQ+kfS
4P1jqHdKgrCpCQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:30:34 2025 by rpki-client