Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
File: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft (raw, json)
Hash identifier: s4NEzhmAEyNyzY9qnXbtM5tUMWm66SEZjSge83E+D7k=
Subject key identifier: 53:2E:2E:47:9A:D9:18:31:5E:8F:D1:D3:F2:5A:18:25:37:D2:A6:FB
Authority key identifier: 76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
Certificate issuer: /CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Certificate serial: 019758DADE3B647FE2796E23E28729174172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
Manifest number: 04CC
Signing time: Tue 10 Jun 2025 08:00:28 +0000
Manifest this update: Tue 10 Jun 2025 08:00:28 +0000
Manifest next update: Wed 11 Jun 2025 08:00:28 +0000
Files and hashes: 1: bsvx6NPc5wE4z82KVeJlkoJxWms.roa (hash: 6rlBzLZqcg/z+eAbxCr25c2freBfaX3gVlYhMsk4Kok=)
2: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl (hash: 5N36+v+GJWYMYCWywsQ4NCPRgdWegUSU+97IiFXEGMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:de:3b:64:7f:e2:79:6e:23:e2:87:29:17:41:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Validity
Not Before: Jun 10 08:00:28 2025 GMT
Not After : Jun 11 08:00:28 2025 GMT
Subject: CN=532e2e479ad918315e8fd1d3f25a182537d2a6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:18:71:69:b4:70:af:b1:70:49:fc:7c:58:
29:67:44:24:62:96:8e:55:53:a2:1f:e1:15:48:01:
99:c4:74:20:f3:fd:05:ad:33:9a:d9:df:6d:77:fd:
3d:b3:e5:ee:0d:4f:6d:36:22:45:2d:51:96:fb:44:
67:12:2f:34:88:8a:26:ef:fc:15:53:c4:01:92:0f:
be:40:b3:21:21:00:04:f3:02:07:b6:4c:97:c8:b7:
2b:b6:5a:02:61:2e:42:16:a7:56:a1:51:03:e5:9b:
26:50:ea:a9:64:6f:b8:3a:c6:b1:fe:62:18:e9:4d:
af:07:a0:74:8a:61:97:19:96:42:d8:4e:00:e9:05:
96:8c:17:71:81:96:13:ca:5f:2f:d1:1c:84:7e:81:
a1:3e:d9:fa:44:f1:08:f1:22:14:06:bb:ab:c3:da:
c6:d8:5b:7a:50:8e:a5:9d:88:9c:83:c9:1b:0e:4f:
84:44:b0:82:1a:64:50:d3:84:9a:af:33:64:29:dd:
c0:b0:25:34:e1:1f:1d:f7:b5:fa:d8:dc:d4:0c:4d:
9b:bd:e4:36:3c:63:3f:8b:e7:dc:7c:76:ba:12:a3:
32:30:36:64:c8:8a:be:b6:33:81:b7:a3:50:65:c4:
f5:38:da:07:3b:42:b7:28:6d:cc:1d:f6:c2:72:47:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2E:2E:47:9A:D9:18:31:5E:8F:D1:D3:F2:5A:18:25:37:D2:A6:FB
X509v3 Authority Key Identifier:
keyid:76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cf:10:eb:14:81:d1:06:f9:5e:1a:11:81:a4:59:5b:58:ee:
14:d6:7e:fa:b5:1c:bf:fa:f8:c0:ff:db:2c:05:77:4e:86:96:
64:d7:41:fe:67:7e:d6:f0:82:46:d7:4e:63:f7:96:a2:74:cd:
4f:67:7b:81:cd:c5:50:b3:16:e6:f7:c0:c2:e4:51:56:bd:7a:
b2:e2:8e:fd:ea:fd:db:92:c1:c6:da:13:18:0b:91:c6:13:2e:
53:50:f0:9c:5d:c9:eb:06:c5:08:ce:5b:1e:83:83:82:89:9c:
c7:70:01:54:25:36:1e:f7:4f:d5:ea:29:d0:4a:f8:f3:a7:1c:
b7:b3:1e:f2:3f:ed:80:91:90:ac:50:40:58:8e:8f:7d:0a:b1:
31:7c:11:2a:fb:d9:bd:d4:c8:37:1e:0d:ad:c2:f8:1d:0b:24:
d5:bc:07:5f:ca:5d:89:77:19:40:43:f2:a7:b5:dd:b0:58:e4:
20:ac:b3:91:7c:ea:88:76:bd:a5:de:28:48:f0:f7:e0:05:20:
3b:82:0e:a2:fb:c8:3e:32:f8:f1:05:6b:2d:52:46:e5:1c:1b:
74:7a:d8:d3:98:72:aa:ab:6b:31:94:0a:4f:3e:7b:0a:54:f8:
3a:24:54:fd:ef:5e:3a:de:ea:3e:e8:f1:dd:49:57:43:88:6a:
93:ac:2a:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdY2t47ZH/ieW4j4ocpF0FyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTA2MzRjNGU0MTc3YjkxODQ0YjZkYzBhZWI3MzI5OGQ4
YjQzZmEwHhcNMjUwNjEwMDgwMDI4WhcNMjUwNjExMDgwMDI4WjAzMTEwLwYDVQQD
Eyg1MzJlMmU0NzlhZDkxODMxNWU4ZmQxZDNmMjVhMTgyNTM3ZDJhNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTYYcWm0cK+xcEn8fFgpZ0QkYpaO
VVOiH+EVSAGZxHQg8/0FrTOa2d9td/09s+XuDU9tNiJFLVGW+0RnEi80iIom7/wV
U8QBkg++QLMhIQAE8wIHtkyXyLcrtloCYS5CFqdWoVED5ZsmUOqpZG+4Osax/mIY
6U2vB6B0imGXGZZC2E4A6QWWjBdxgZYTyl8v0RyEfoGhPtn6RPEI8SIUBrurw9rG
2Ft6UI6lnYicg8kbDk+ERLCCGmRQ04SarzNkKd3AsCU04R8d97X62NzUDE2bveQ2
PGM/i+fcfHa6EqMyMDZkyIq+tjOBt6NQZcT1ONoHO0K3KG3MHfbCckeqmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMuLkea2RgxXo/R0/JaGCU30qb7MB8GA1UdIwQY
MBaAFHZQY0xOQXe5GES23ArrcymNi0P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxCalRFNUJkN2tZUkxiY0N1dHpLWTJMUV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hNGY2ZTQtMTJlNy00MjFmLWFhMzEt
NDExNWJkNTA4Mjg0LzEvZGxCalRFNUJkN2tZUkxiY0N1dHpLWTJMUV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9hNGY2ZTQtMTJlNy00MjFmLWFhMzEtNDExNWJkNTA4Mjg0
LzEvZGxCalRFNUJkN2tZUkxiY0N1dHpLWTJMUV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbM8Q6xSB
0Qb5XhoRgaRZW1juFNZ++rUcv/r4wP/bLAV3ToaWZNdB/md+1vCCRtdOY/eWonTN
T2d7gc3FULMW5vfAwuRRVr16suKO/er925LBxtoTGAuRxhMuU1DwnF3J6wbFCM5b
HoODgomcx3ABVCU2HvdP1eop0Er486cct7Me8j/tgJGQrFBAWI6PfQqxMXwRKvvZ
vdTINx4NrcL4HQsk1bwHX8pdiXcZQEPyp7XdsFjkIKyzkXzqiHa9pd4oSPD34AUg
O4IOovvIPjL48QVrLVJG5RwbdHrY05hyqqtrMZQKTz57ClT4OiRU/e9eOt7qPujx
3UlXQ4hqk6wqhQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 10:08:11 2025 by rpki-client