Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: t6nxAhFgzrtTBvWMXMdUpPbgX6LBzYjlQ5QA1FohnGo=
Subject key identifier: CF:33:C2:B8:56:56:A6:AF:AC:AB:E5:0C:1B:0C:B1:63:95:77:BF:DF
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 01974CD79806186AC1C10841DC1FEBE92943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 1234
Signing time: Sun 08 Jun 2025 00:01:26 +0000
Manifest this update: Sun 08 Jun 2025 00:01:26 +0000
Manifest next update: Mon 09 Jun 2025 00:01:26 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: dorvJpQy1LJU5+rnE9imWzL2Uo+BH2mabjwIthASl7Q=)
2: l2z6jen0BvB90JFFcv4xMvXKDU4.roa (hash: 3LW90buItGbBk8vwyzdEvNmU4J6IAwriJoEjk0Q8hlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:98:06:18:6a:c1:c1:08:41:dc:1f:eb:e9:29:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Jun 8 00:01:26 2025 GMT
Not After : Jun 9 00:01:26 2025 GMT
Subject: CN=cf33c2b85656a6afacabe50c1b0cb1639577bfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:86:bf:06:5b:1e:45:77:99:4a:8a:81:71:
71:6a:05:3a:a5:d4:07:1e:39:46:e4:0d:1b:96:7a:
ba:ee:45:7b:9e:b0:1b:c3:c2:2e:4c:ce:6f:e4:2e:
bc:f7:32:00:0a:a7:c0:40:de:56:a4:90:94:90:f2:
e9:1d:06:91:ff:de:3d:8d:c8:c9:d4:40:a0:74:ca:
e4:50:2c:5f:2e:00:81:de:22:bd:ee:94:fa:00:db:
3a:05:c9:1a:d6:ca:49:9b:69:5b:72:62:52:14:ed:
34:20:00:74:21:5f:92:1f:4a:ac:3f:38:85:21:62:
4e:00:ed:96:8e:78:b3:ef:8f:c7:23:f6:1d:ba:28:
c9:d6:a2:6e:ab:6e:2b:89:b8:bc:65:6a:60:51:47:
c8:17:08:b2:4f:ce:d6:d2:9d:46:0f:3b:61:29:08:
d7:43:76:ab:14:47:a5:e6:7d:bc:9e:bb:00:e0:f6:
58:ca:c5:42:2f:5b:51:95:02:33:d3:5e:17:31:9e:
cd:ed:32:a7:2f:73:81:5b:1b:d0:97:5a:0d:c2:e4:
49:d3:74:9e:0b:e0:52:e0:41:0d:a1:91:c7:6e:49:
07:28:1d:6c:ae:78:f4:ea:7e:b0:16:00:53:a7:0a:
83:0f:60:de:00:41:7e:30:1e:7d:22:7d:ea:ba:e6:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:33:C2:B8:56:56:A6:AF:AC:AB:E5:0C:1B:0C:B1:63:95:77:BF:DF
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5f:2d:c8:a0:aa:6d:e9:a7:70:ae:76:29:54:ad:57:b9:42:
db:51:49:b6:24:3a:ff:06:d6:5a:a5:6d:83:c9:82:02:fc:bb:
c7:6a:c3:84:aa:80:ea:f9:4e:04:01:5e:d0:d3:e8:3c:4e:ee:
f8:d8:26:b3:cf:16:58:31:99:d7:77:3a:64:4f:a8:8b:02:35:
4e:d8:b9:26:76:4d:50:0d:17:82:ea:cb:aa:54:ea:11:ce:d9:
ca:1a:65:de:0b:6c:5b:49:9b:40:ef:95:ad:85:9f:a5:54:a1:
f7:fb:a0:b7:51:22:cf:f2:da:7e:e9:a8:c6:3e:ab:86:a2:e0:
aa:70:c9:55:d7:da:2b:df:b9:b6:35:12:9a:df:d5:ee:cd:22:
ad:59:91:60:02:bd:f6:59:44:c2:6c:22:98:59:6f:0e:40:77:
92:d3:40:52:76:9e:e7:f8:55:73:af:e5:1b:ab:ef:02:12:21:
40:62:a0:85:9e:ff:7f:b2:a7:5d:44:e1:e6:f3:88:0d:f6:23:
c2:08:ff:5c:88:29:9f:cf:e3:05:fa:4f:4c:00:5a:09:35:98:
56:1b:5e:48:c7:66:a8:03:2a:35:60:5e:8a:c9:8d:7d:d1:9e:
20:5c:a0:84:f3:0c:0d:f4:28:c5:20:9c:82:8f:56:4d:c3:75:
ff:eb:36:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM15gGGGrBwQhB3B/r6SlDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMzE2NTUwMjNiZDE0MTczMWQ1NmZiODQ1M2ZmMDUxNGY3
Mjg4NjUwHhcNMjUwNjA4MDAwMTI2WhcNMjUwNjA5MDAwMTI2WjAzMTEwLwYDVQQD
EyhjZjMzYzJiODU2NTZhNmFmYWNhYmU1MGMxYjBjYjE2Mzk1NzdiZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTWGvwZbHkV3mUqKgXFxagU6pdQH
HjlG5A0blnq67kV7nrAbw8IuTM5v5C689zIACqfAQN5WpJCUkPLpHQaR/949jcjJ
1ECgdMrkUCxfLgCB3iK97pT6ANs6Bcka1spJm2lbcmJSFO00IAB0IV+SH0qsPziF
IWJOAO2Wjniz74/HI/YduijJ1qJuq24ribi8ZWpgUUfIFwiyT87W0p1GDzthKQjX
Q3arFEel5n28nrsA4PZYysVCL1tRlQIz014XMZ7N7TKnL3OBWxvQl1oNwuRJ03Se
C+BS4EENoZHHbkkHKB1srnj06n6wFgBTpwqDD2DeAEF+MB59In3quuYegQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8zwrhWVqavrKvlDBsMsWOVd7/fMB8GA1UdIwQY
MBaAFNAxZVAjvRQXMdVvuEU/8FFPcohlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5Nzkt
ZDhiZDJmNTZiYzhjLzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5NzktZDhiZDJmNTZiYzhj
LzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeV8tyKCq
bemncK52KVStV7lC21FJtiQ6/wbWWqVtg8mCAvy7x2rDhKqA6vlOBAFe0NPoPE7u
+Ngms88WWDGZ13c6ZE+oiwI1Tti5JnZNUA0XgurLqlTqEc7Zyhpl3gtsW0mbQO+V
rYWfpVSh9/ugt1Eiz/Lafumoxj6rhqLgqnDJVdfaK9+5tjUSmt/V7s0irVmRYAK9
9llEwmwimFlvDkB3ktNAUnae5/hVc6/lG6vvAhIhQGKghZ7/f7KnXUTh5vOIDfYj
wgj/XIgpn8/jBfpPTABaCTWYVhteSMdmqAMqNWBeismNfdGeIFyghPMMDfQoxSCc
go9WTcN1/+s2Jw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:49:35 2025 by rpki-client