Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: tSlqjEINsAq7Y15/TRMaycCrplYxkCcZrtRr0660vOQ=
Subject key identifier: 08:B4:6B:42:38:EB:F5:93:12:C1:AC:87:CB:41:ED:67:6A:46:AD:A8
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 019739BE131772140071EA2C3ADF7EB4949E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 1508
Signing time: Wed 04 Jun 2025 07:00:47 +0000
Manifest this update: Wed 04 Jun 2025 07:00:47 +0000
Manifest next update: Thu 05 Jun 2025 07:00:47 +0000
Files and hashes: 1: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: 6j7Y2IvXGJ1fBQwUexxX3NCp/g04aiZDT41NErsVXN4=)
2: OKYG51ny4JzR_NLTt0NMC5jjs5w.roa (hash: q7wWYvvmDZVEwvT4mSRrL9j7EyJqRlFav3ZfehvFtAs=)
3: ZQQ0gAGZL_jGDDuR_dzAPHQgjqs.roa (hash: 1IkjnF/CrXtM+w2XOvbsVxbee7zsKOEnEqn8FcXAMF8=)
4: qLpskkGdWMp75uesslOqcJ0MWnE.roa (hash: X4MuNwdwba0DvT/WVM9tY1i1XGTLnQOuEconDao1Nw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:be:13:17:72:14:00:71:ea:2c:3a:df:7e:b4:94:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Jun 4 07:00:47 2025 GMT
Not After : Jun 5 07:00:47 2025 GMT
Subject: CN=08b46b4238ebf59312c1ac87cb41ed676a46ada8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:5a:5b:7d:46:8d:fc:89:3c:70:74:e5:16:
44:e8:99:3f:80:71:26:10:a1:7d:a1:f2:6e:16:50:
4f:98:35:29:a5:f3:74:26:62:e8:1b:cd:89:62:0c:
a0:85:f9:55:c2:7b:b6:bf:50:be:c9:cc:f4:64:73:
03:cc:f0:43:da:90:2b:5a:26:24:7a:44:93:07:56:
8d:56:51:c0:1e:5d:b5:ed:d7:53:b7:1f:81:a4:d9:
04:2b:20:40:9a:fc:7e:5e:6d:1c:8a:72:b6:94:19:
f4:13:bd:9a:3f:2a:4c:95:f5:91:fa:6e:ff:94:2c:
17:da:09:39:c6:7e:8c:9b:6a:1e:e3:8e:65:ce:22:
9d:4c:df:36:79:dc:6b:72:0a:87:56:17:ea:c9:d5:
5e:31:94:da:14:1a:99:e9:51:c3:e4:c2:6e:d4:04:
19:f5:65:9d:44:0e:41:8a:bb:10:e7:df:7e:13:aa:
06:5d:39:19:f0:5e:c8:7a:67:8b:88:4f:95:4a:34:
7f:30:61:c3:2f:0e:4c:08:d5:39:39:32:e7:70:99:
2c:82:26:63:00:c7:ac:29:16:7e:2f:3e:c3:c5:ac:
f8:f1:e8:44:2d:c9:a3:ef:6d:19:3c:79:c0:2a:c1:
d9:55:34:96:5a:12:05:93:3d:36:74:29:d2:72:ea:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B4:6B:42:38:EB:F5:93:12:C1:AC:87:CB:41:ED:67:6A:46:AD:A8
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3f:31:cf:83:c8:3a:73:2d:0e:2f:3c:f9:b3:c4:0d:74:9c:
7a:bb:57:55:a8:5a:f6:f3:cc:59:5e:8d:90:66:cb:69:cf:4e:
b7:14:21:d6:7a:a6:c4:30:00:92:f7:f3:8b:5e:e5:19:92:78:
52:94:8c:7a:73:1e:0e:a0:11:54:e8:f5:06:d2:b6:a7:cb:55:
ec:5c:b3:84:50:26:ba:f7:f8:b4:64:44:13:ba:47:1e:20:8a:
93:8d:0b:4b:a0:ae:98:4e:40:33:f0:7d:26:b1:78:de:25:a3:
c7:d8:f5:49:5c:59:14:ca:bf:bd:5c:f6:1a:26:cc:7b:7f:64:
78:53:32:d2:10:7c:27:d5:1f:7b:9c:e8:17:9d:47:61:76:cc:
80:a9:9d:c9:a3:3f:6c:fc:b5:6f:1e:24:8c:8c:9c:49:70:9e:
28:7e:da:d1:da:a9:4a:8d:5e:d9:e6:d3:85:aa:28:27:7e:83:
10:35:4a:a3:77:f2:ae:e3:b5:51:9c:75:fd:d0:30:54:60:e1:
35:ba:73:3a:dd:fc:e5:b3:73:d8:40:24:f0:d0:46:eb:40:4a:
7f:a5:0a:80:7e:d7:a7:cd:f6:38:32:62:24:3a:9c:89:53:3f:
e0:7d:55:b3:6f:32:f3:c3:12:78:9b:c5:75:c1:d3:f0:eb:b7:
77:6b:d0:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc5vhMXchQAceosOt9+tJSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjODY2NjJiNzUyYzhhM2JlNzJlODU0NDM5NGZmOTI2ZjY4
ZmJmN2UwHhcNMjUwNjA0MDcwMDQ3WhcNMjUwNjA1MDcwMDQ3WjAzMTEwLwYDVQQD
EygwOGI0NmI0MjM4ZWJmNTkzMTJjMWFjODdjYjQxZWQ2NzZhNDZhZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjBaW31GjfyJPHB05RZE6Jk/gHEm
EKF9ofJuFlBPmDUppfN0JmLoG82JYgyghflVwnu2v1C+ycz0ZHMDzPBD2pArWiYk
ekSTB1aNVlHAHl217ddTtx+BpNkEKyBAmvx+Xm0cinK2lBn0E72aPypMlfWR+m7/
lCwX2gk5xn6Mm2oe445lziKdTN82edxrcgqHVhfqydVeMZTaFBqZ6VHD5MJu1AQZ
9WWdRA5BirsQ599+E6oGXTkZ8F7IemeLiE+VSjR/MGHDLw5MCNU5OTLncJksgiZj
AMesKRZ+Lz7Dxaz48ehELcmj720ZPHnAKsHZVTSWWhIFkz02dCnScuo1bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAi0a0I46/WTEsGsh8tB7WdqRq2oMB8GA1UdIwQY
MBaAFAyGZit1LIo75y6FRDlP+Sb2j79+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5Yjgt
MWNjYzljMjk1ZThlLzEvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5YjgtMWNjYzljMjk1ZThl
LzEvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKT8xz4PI
OnMtDi88+bPEDXScertXVaha9vPMWV6NkGbLac9OtxQh1nqmxDAAkvfzi17lGZJ4
UpSMenMeDqARVOj1BtK2p8tV7FyzhFAmuvf4tGREE7pHHiCKk40LS6CumE5AM/B9
JrF43iWjx9j1SVxZFMq/vVz2GibMe39keFMy0hB8J9Ufe5zoF51HYXbMgKmdyaM/
bPy1bx4kjIycSXCeKH7a0dqpSo1e2ebThaooJ36DEDVKo3fyruO1UZx1/dAwVGDh
NbpzOt385bNz2EAk8NBG60BKf6UKgH7Xp832ODJiJDqciVM/4H1Vs28y88MSeJvF
dcHT8Ou3d2vQLA==
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:50:59 2025 by rpki-client