Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
File: DoVoAb747TroEOfmejH9AStE0ww.mft (raw, json)
Hash identifier: OIC/POGL5M/FJbqg6KCqwwmynrc/gFMbYJUIbNBfMhk=
Subject key identifier: 20:88:CB:D3:A1:AB:B3:CC:10:62:EB:B4:A6:91:96:31:46:4C:CB:8B
Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
Certificate issuer: /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Certificate serial: 0197469E03D76E52EAD8FDBF09EB26FC8F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
Manifest number: 14CC
Signing time: Fri 06 Jun 2025 19:00:50 +0000
Manifest this update: Fri 06 Jun 2025 19:00:50 +0000
Manifest next update: Sat 07 Jun 2025 19:00:50 +0000
Files and hashes: 1: DoVoAb747TroEOfmejH9AStE0ww.crl (hash: 5o1x52ryMFPLaCYfBXkEbNdCLtDW982dPQCYFw1sXiU=)
2: zD8lanFfCKcjzXb5ZLkO_uI8Eww.roa (hash: FP/b4ehPHpPPt6ISCHNjh4J5r42QMToe0aZbLviIqX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:03:d7:6e:52:ea:d8:fd:bf:09:eb:26:fc:8f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Validity
Not Before: Jun 6 19:00:50 2025 GMT
Not After : Jun 7 19:00:50 2025 GMT
Subject: CN=2088cbd3a1abb3cc1062ebb4a6919631464ccb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:86:06:43:b0:aa:8c:29:7f:ad:c4:22:d8:
71:15:8a:47:9f:94:7d:37:1c:ff:4a:75:81:82:4e:
bc:a2:fd:37:cb:80:5a:6d:f3:40:9d:ea:24:99:78:
88:5c:35:3c:16:4a:f2:23:3d:c1:b5:66:ea:99:da:
f9:8b:46:48:b7:7c:ee:72:1a:cc:cc:2f:3c:dd:26:
04:6b:84:65:6f:a6:9f:15:d4:9f:b9:46:21:0c:dc:
5d:0a:5c:3b:82:e4:69:e7:2e:b1:fc:c3:06:81:b5:
66:11:af:c7:6a:0c:4b:b0:6d:d8:9f:0a:fb:fa:60:
f9:ea:65:c0:b6:bf:2a:58:c2:3a:2f:95:76:c2:99:
c4:8e:8d:bb:bf:92:a3:6b:eb:6a:75:89:40:d4:1c:
83:ff:4b:19:86:28:9f:eb:2e:df:17:ed:7a:32:cf:
ff:32:85:6b:0b:54:af:3b:e4:3d:bd:c9:00:c1:17:
b3:83:2b:74:c6:70:69:e9:82:15:e0:51:7f:ac:d5:
a6:ac:28:c3:4e:c1:14:5e:4d:82:c7:71:45:8d:75:
d9:4c:ea:30:63:db:6f:1a:8d:82:80:7d:38:68:dd:
bb:fa:3a:2e:b3:b4:a4:ae:90:12:e6:4a:73:0f:c5:
bf:46:1b:b9:bd:d8:fb:8e:9b:b9:fa:dc:ec:57:f7:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:88:CB:D3:A1:AB:B3:CC:10:62:EB:B4:A6:91:96:31:46:4C:CB:8B
X509v3 Authority Key Identifier:
keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:35:08:2e:d6:13:43:59:dd:4d:e3:d0:dd:1f:77:2c:5e:9d:
7d:02:83:26:d1:94:b8:ba:17:19:41:54:15:e2:90:2d:b5:1a:
24:63:4e:22:ff:69:74:56:9f:d2:5a:96:df:50:b6:6b:03:36:
73:3e:ed:c5:fb:3a:ab:5f:6d:3f:ef:7b:46:97:22:03:73:97:
26:23:9e:f2:bf:82:1d:2d:cb:c7:2a:98:4c:c3:5f:fa:bc:6d:
97:33:53:c7:22:4a:ce:8d:43:20:86:03:05:42:99:f7:2e:54:
76:32:6d:e9:76:60:15:b3:ca:3d:10:3c:f1:36:70:1d:c8:0d:
cb:d6:f3:ce:8f:f1:db:0b:9c:08:e1:0b:e2:3c:93:3c:5e:a1:
a0:35:79:c6:86:8e:99:59:74:25:ef:5f:3d:87:32:5f:41:0b:
6d:8f:b5:a8:07:d1:42:a4:08:22:2c:6e:a2:17:1d:37:ce:94:
e8:a2:44:2b:9e:16:bc:25:3a:b9:47:8b:ec:10:dc:6f:d2:4f:
bb:fe:ad:e1:36:db:b9:18:d0:34:d8:03:02:36:ff:4a:6d:9f:
2b:91:4a:7a:a7:ad:ac:fa:87:f8:09:c0:7d:04:3d:54:96:e5:
99:30:16:40:e9:ef:54:3e:72:74:09:7c:c5:72:51:9f:74:29:
c1:94:d0:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGngPXblLq2P2/Cesm/I8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlODU2ODAxYmVmOGVkM2FlODEwZTdlNjdhMzFmZDAxMmI0
NGQzMGMwHhcNMjUwNjA2MTkwMDUwWhcNMjUwNjA3MTkwMDUwWjAzMTEwLwYDVQQD
EygyMDg4Y2JkM2ExYWJiM2NjMTA2MmViYjRhNjkxOTYzMTQ2NGNjYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUiGBkOwqowpf63EIthxFYpHn5R9
Nxz/SnWBgk68ov03y4BabfNAneokmXiIXDU8FkryIz3BtWbqmdr5i0ZIt3zuchrM
zC883SYEa4Rlb6afFdSfuUYhDNxdClw7guRp5y6x/MMGgbVmEa/HagxLsG3Ynwr7
+mD56mXAtr8qWMI6L5V2wpnEjo27v5Kja+tqdYlA1ByD/0sZhiif6y7fF+16Ms//
MoVrC1SvO+Q9vckAwRezgyt0xnBp6YIV4FF/rNWmrCjDTsEUXk2Cx3FFjXXZTOow
Y9tvGo2CgH04aN27+jous7SkrpAS5kpzD8W/Rhu5vdj7jpu5+tzsV/dJgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCIy9Ohq7PMEGLrtKaRljFGTMuLMB8GA1UdIwQY
MBaAFA6FaAG++O066BDn5nox/QErRNMMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81NDE0MzQtODc5ZC00ZTU1LWE0N2Yt
MTkwYjA2ZGVlNGRjLzEvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81NDE0MzQtODc5ZC00ZTU1LWE0N2YtMTkwYjA2ZGVlNGRj
LzEvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjUILtYT
Q1ndTePQ3R93LF6dfQKDJtGUuLoXGUFUFeKQLbUaJGNOIv9pdFaf0lqW31C2awM2
cz7txfs6q19tP+97RpciA3OXJiOe8r+CHS3LxyqYTMNf+rxtlzNTxyJKzo1DIIYD
BUKZ9y5UdjJt6XZgFbPKPRA88TZwHcgNy9bzzo/x2wucCOEL4jyTPF6hoDV5xoaO
mVl0Je9fPYcyX0ELbY+1qAfRQqQIIixuohcdN86U6KJEK54WvCU6uUeL7BDcb9JP
u/6t4TbbuRjQNNgDAjb/Sm2fK5FKeqetrPqH+AnAfQQ9VJblmTAWQOnvVD5ydAl8
xXJRn3QpwZTQ1A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:34:00 2025 by rpki-client