Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
File: dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json)
Hash identifier: vCGOOd6gRghgAQ4aNNv691bJOV5zXrVT1RLK7WOZOpU=
Subject key identifier: 55:75:EB:54:A9:2D:56:80:32:B7:D5:73:F9:1D:0F:D4:99:BC:16:11
Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Certificate serial: 01974CD6B95BA5FEB28521C194FA3F12D35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
Manifest number: 11D1
Signing time: Sun 08 Jun 2025 00:00:29 +0000
Manifest this update: Sun 08 Jun 2025 00:00:29 +0000
Manifest next update: Mon 09 Jun 2025 00:00:29 +0000
Files and hashes: 1: 6S1fN0Slf3Y95btQEfpy__y_tiw.roa (hash: 5FWi2gr8yiM3yt2DtW3oiI0p1G9KyA1KVfzD3/JWlJI=)
2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: iJiqx4byrtLaqzJxJghJFAPg+Lspc+a6cSG3uNGXQ4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:b9:5b:a5:fe:b2:85:21:c1:94:fa:3f:12:d3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Validity
Not Before: Jun 8 00:00:29 2025 GMT
Not After : Jun 9 00:00:29 2025 GMT
Subject: CN=5575eb54a92d568032b7d573f91d0fd499bc1611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:c3:86:65:62:91:e5:e5:c2:b9:f4:0d:95:
48:c5:39:b5:da:a1:5f:cd:54:24:d8:8f:55:43:46:
eb:bc:62:d1:00:0e:50:06:7d:d4:42:20:a4:23:0b:
c7:9a:4b:42:0f:88:9d:bb:08:c3:d8:4c:96:eb:75:
34:40:ee:03:eb:00:6f:2a:13:22:c2:1b:cb:55:5b:
32:d9:28:b1:ea:39:97:3e:50:8b:68:b3:68:6c:bb:
ba:23:bd:ad:60:e8:82:90:ea:a0:71:b1:a2:79:82:
c4:40:8f:f9:86:28:77:58:63:44:cd:a4:1c:e1:52:
90:96:00:80:8e:90:dc:ef:58:11:7d:27:36:39:1f:
e9:59:e1:8d:f9:fd:cb:14:e0:51:a7:c7:a4:9e:03:
c6:57:f9:7b:99:5a:7d:2d:46:5f:9d:ed:9b:b7:72:
15:72:8f:22:3a:7b:fb:90:b4:d0:34:c6:46:b4:e1:
ee:31:27:14:49:4a:f8:00:bd:8d:ef:da:94:da:b2:
01:f6:c9:f3:0c:5b:2b:d3:19:b9:2c:65:88:1c:fb:
ad:53:61:9a:8a:77:93:61:14:5e:74:d2:c7:8b:a2:
0e:42:53:c6:5a:7c:70:98:74:72:e8:41:df:0a:5e:
e9:aa:ee:ab:e3:f3:23:2c:98:7f:a5:7e:11:ae:8c:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:75:EB:54:A9:2D:56:80:32:B7:D5:73:F9:1D:0F:D4:99:BC:16:11
X509v3 Authority Key Identifier:
keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4a:c2:89:05:64:71:c7:49:94:53:90:63:39:d9:5f:d5:27:
df:e2:9b:b4:36:d3:4c:fc:1b:f1:f8:73:70:ea:bd:1d:bd:4d:
9b:23:54:98:cf:71:be:63:b1:9b:84:24:be:59:37:68:03:9f:
8c:e1:8e:b8:43:48:99:a1:72:a5:32:09:50:e1:66:2a:25:06:
2e:91:9d:c0:f1:cb:73:de:44:5f:d9:87:a1:8f:74:ae:33:ae:
52:6c:5d:18:59:4b:72:79:3d:b9:1f:0a:37:c5:0e:28:eb:3c:
1c:17:26:11:31:34:b2:99:75:dc:6e:23:98:52:16:83:aa:1b:
c9:d0:a5:b6:cb:81:e4:4d:1c:d9:70:48:c5:5f:26:4d:d7:9b:
07:0b:34:54:43:ce:9c:15:09:86:8f:e9:03:68:d0:f9:5a:d4:
5e:ce:36:38:02:05:d6:82:ad:e8:f1:1c:16:c4:79:1b:d9:f6:
a4:0c:89:be:a3:43:16:cd:6c:af:b8:e2:bb:e4:2a:43:61:e9:
fb:42:2d:49:14:d3:72:c9:05:c5:b2:58:c0:7a:75:87:5f:f3:
60:93:d1:e6:4e:0e:87:22:64:cd:73:67:82:db:a8:d9:9a:54:
79:94:1d:9b:9a:a6:24:1a:7d:47:4a:b6:b8:c2:bc:63:b0:dc:
43:2f:a1:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1rlbpf6yhSHBlPo/EtNdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YTQ3ZTNhNjcxNjBhZTQ2NjJlMGViY2NlZDdhOTIzM2Nl
NDdhYmYwHhcNMjUwNjA4MDAwMDI5WhcNMjUwNjA5MDAwMDI5WjAzMTEwLwYDVQQD
Eyg1NTc1ZWI1NGE5MmQ1NjgwMzJiN2Q1NzNmOTFkMGZkNDk5YmMxNjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2DDhmVikeXlwrn0DZVIxTm12qFf
zVQk2I9VQ0brvGLRAA5QBn3UQiCkIwvHmktCD4iduwjD2EyW63U0QO4D6wBvKhMi
whvLVVsy2Six6jmXPlCLaLNobLu6I72tYOiCkOqgcbGieYLEQI/5hih3WGNEzaQc
4VKQlgCAjpDc71gRfSc2OR/pWeGN+f3LFOBRp8ekngPGV/l7mVp9LUZfne2bt3IV
co8iOnv7kLTQNMZGtOHuMScUSUr4AL2N79qU2rIB9snzDFsr0xm5LGWIHPutU2Ga
ineTYRRedNLHi6IOQlPGWnxwmHRy6EHfCl7pqu6r4/MjLJh/pX4RroyczwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFV161SpLVaAMrfVc/kdD9SZvBYRMB8GA1UdIwQY
MBaAFHSkfjpnFgrkZi4OvM7XqSM85Hq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2Yt
OTJjN2Q0NmRkYjg5LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2YtOTJjN2Q0NmRkYjg5
LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANErCiQVk
ccdJlFOQYznZX9Un3+KbtDbTTPwb8fhzcOq9Hb1NmyNUmM9xvmOxm4Qkvlk3aAOf
jOGOuENImaFypTIJUOFmKiUGLpGdwPHLc95EX9mHoY90rjOuUmxdGFlLcnk9uR8K
N8UOKOs8HBcmETE0spl13G4jmFIWg6obydCltsuB5E0c2XBIxV8mTdebBws0VEPO
nBUJho/pA2jQ+VrUXs42OAIF1oKt6PEcFsR5G9n2pAyJvqNDFs1sr7jiu+QqQ2Hp
+0ItSRTTcskFxbJYwHp1h1/zYJPR5k4OhyJkzXNngtuo2ZpUeZQdm5qmJBp9R0q2
uMK8Y7DcQy+hRQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:15:35 2025 by rpki-client