Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: yy1jcO1l7vxy58EaheOO99ElfGarD/hw7Ldt4I3iFuw=
Subject key identifier: 34:D2:80:AC:A3:03:F3:6D:7D:D8:FE:CB:A7:25:0A:42:21:96:71:97
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 01975A24D5C6FA1C47FF0BF84100FECD0A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 1583
Signing time: Tue 10 Jun 2025 14:00:52 +0000
Manifest this update: Tue 10 Jun 2025 14:00:52 +0000
Manifest next update: Wed 11 Jun 2025 14:00:52 +0000
Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=)
2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: B25RzJ/qbnNWpOixTzslzvr+ciY9dyjLbG3X6+kwcw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:d5:c6:fa:1c:47:ff:0b:f8:41:00:fe:cd:0a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Jun 10 14:00:52 2025 GMT
Not After : Jun 11 14:00:52 2025 GMT
Subject: CN=34d280aca303f36d7dd8fecba7250a4221967197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:36:f8:bd:86:e2:e4:ac:fe:83:a6:a3:74:
b1:38:c2:39:e7:b9:45:7e:00:18:9e:ce:8f:86:9b:
c1:84:59:29:ee:d0:b5:a1:fd:ea:dd:2b:80:d5:95:
3c:7e:14:26:dc:ab:4d:41:12:f3:81:22:34:82:d9:
f3:5c:2e:2a:d3:c8:0b:96:e9:ed:7e:db:db:d7:39:
00:a5:5b:28:ea:d9:91:03:7b:88:96:fc:61:2b:3a:
eb:82:b5:c9:9a:55:1e:30:12:6f:c0:4d:ea:19:f9:
8d:6d:8f:d7:1b:1b:6d:e3:b7:0d:7c:0d:77:73:41:
6c:13:22:5f:f7:6d:a1:03:ec:4f:2c:6b:b1:54:47:
e3:df:55:8f:7e:f1:b6:78:53:25:fc:97:19:7f:7c:
06:88:24:22:fd:34:b3:89:70:d4:f8:76:f1:86:79:
a9:45:49:0b:77:09:22:1b:a2:9f:74:80:9b:10:23:
5d:0a:d5:73:f9:bc:27:a4:5d:3f:8e:9c:d0:26:45:
91:b8:65:a9:41:34:62:48:df:3e:54:d6:f8:04:77:
b0:ad:2e:07:dd:e7:c7:3a:c6:1a:ca:a9:b8:72:26:
90:06:56:72:a7:38:20:df:8a:ed:f1:5e:59:63:ab:
fe:00:2e:08:b1:c1:5e:08:ca:aa:a5:22:04:fb:24:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D2:80:AC:A3:03:F3:6D:7D:D8:FE:CB:A7:25:0A:42:21:96:71:97
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6d:85:37:f0:3c:d3:c3:9a:7a:b3:cc:1b:3d:ae:0e:be:5a:
5e:27:a8:a1:82:c7:28:40:60:a8:97:20:0e:29:f8:e2:0e:d3:
51:13:16:6c:93:6b:df:d1:6e:77:00:ad:68:4b:49:96:b8:9d:
e0:2a:b4:1f:e1:a4:ef:96:92:bc:e1:38:1a:fa:e3:38:5e:3b:
c5:1c:79:98:9a:59:2e:16:92:f8:7d:8a:b1:f5:a4:81:f9:31:
87:8d:7f:75:21:25:9c:0c:d0:4e:db:ca:14:61:3b:bb:d2:e0:
d6:f5:a9:25:75:f7:d6:b8:47:06:e2:27:43:38:54:cf:5d:c4:
98:fb:c7:78:e1:95:ce:5d:2f:2e:4c:8c:ee:37:32:ad:db:93:
12:04:de:8a:4b:06:53:98:c0:5a:03:f5:cd:00:67:2c:bb:dd:
3d:b1:bb:51:e6:32:9c:01:9c:7e:26:7b:5c:98:07:19:ac:38:
2a:f6:ed:32:db:72:4e:57:4c:9b:c4:f1:f6:6c:5f:4e:75:9a:
ee:a5:80:71:43:7d:e4:be:1c:06:09:71:3d:fe:88:08:22:79:
66:75:57:36:5c:1d:0a:8a:04:c4:31:66:1e:f3:06:83:59:49:
46:df:1d:5f:b9:25:c9:fd:23:7a:e7:ec:fd:2a:f8:b2:eb:0f:
f5:f7:2b:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdaJNXG+hxH/wv4QQD+zQoBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1M2Q0NzZkYjk2ZGUxZTU4NjIzMTE5YTcwYjlkN2IwMGI2
NzZkYTAwHhcNMjUwNjEwMTQwMDUyWhcNMjUwNjExMTQwMDUyWjAzMTEwLwYDVQQD
EygzNGQyODBhY2EzMDNmMzZkN2RkOGZlY2JhNzI1MGE0MjIxOTY3MTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRg2+L2G4uSs/oOmo3SxOMI557lF
fgAYns6PhpvBhFkp7tC1of3q3SuA1ZU8fhQm3KtNQRLzgSI0gtnzXC4q08gLlunt
ftvb1zkApVso6tmRA3uIlvxhKzrrgrXJmlUeMBJvwE3qGfmNbY/XGxtt47cNfA13
c0FsEyJf922hA+xPLGuxVEfj31WPfvG2eFMl/JcZf3wGiCQi/TSziXDU+Hbxhnmp
RUkLdwkiG6KfdICbECNdCtVz+bwnpF0/jpzQJkWRuGWpQTRiSN8+VNb4BHewrS4H
3efHOsYayqm4ciaQBlZypzgg34rt8V5ZY6v+AC4IscFeCMqqpSIE+yRGSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTSgKyjA/Ntfdj+y6clCkIhlnGXMB8GA1UdIwQY
MBaAFHU9R225beHlhiMRmnC517ALZ22gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUt
NDY4NTc4MmFjMmMzLzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUtNDY4NTc4MmFjMmMz
LzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD22FN/A8
08OaerPMGz2uDr5aXieooYLHKEBgqJcgDin44g7TURMWbJNr39FudwCtaEtJlrid
4Cq0H+Gk75aSvOE4GvrjOF47xRx5mJpZLhaS+H2KsfWkgfkxh41/dSElnAzQTtvK
FGE7u9Lg1vWpJXX31rhHBuInQzhUz13EmPvHeOGVzl0vLkyM7jcyrduTEgTeiksG
U5jAWgP1zQBnLLvdPbG7UeYynAGcfiZ7XJgHGaw4KvbtMttyTldMm8Tx9mxfTnWa
7qWAcUN95L4cBglxPf6ICCJ5ZnVXNlwdCooExDFmHvMGg1lJRt8dX7klyf0jeufs
/Sr4susP9fcraw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:55:08 2025 by rpki-client