Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File: duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier: qtoAdvOpNrG9UIAtNQAnJLtoIQMkpYTvMQ7Lf5JC0u8=
Subject key identifier: 43:A9:E8:C5:68:32:88:0E:F9:3A:B5:01:4D:3F:21:81:63:0B:9C:56
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer: /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial: 0197477964723F6CF4A4508B090D11AA83BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number: 150A
Signing time: Fri 06 Jun 2025 23:00:27 +0000
Manifest this update: Fri 06 Jun 2025 23:00:27 +0000
Manifest next update: Sat 07 Jun 2025 23:00:27 +0000
Files and hashes: 1: 1-eNfPNgGjJz34a_6zifXZRNCWXw.roa (hash: BrqTM2h6iG7WyfhfDjhQFT8qhh74OvrPhMC05Ggy8tQ=)
2: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: yPflp2jiBg30xddxmC9xMjpBVIWB6gw0gTKdrS/R77A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:64:72:3f:6c:f4:a4:50:8b:09:0d:11:aa:83:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Validity
Not Before: Jun 6 23:00:27 2025 GMT
Not After : Jun 7 23:00:27 2025 GMT
Subject: CN=43a9e8c56832880ef93ab5014d3f2181630b9c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:08:21:9b:59:45:61:af:66:af:d0:e8:64:
68:26:5f:92:b0:04:5e:44:6c:e3:2b:f5:90:24:d9:
3d:88:5b:ef:f0:ff:dc:78:4b:4e:b9:7f:19:a6:7d:
44:70:5f:06:45:19:0c:28:49:77:13:e4:52:a5:81:
55:51:25:fc:fa:5a:86:da:78:f2:cf:5b:65:84:ed:
eb:29:50:c5:e7:c1:6f:d5:a7:fe:25:48:1a:bc:4a:
9d:e9:43:fd:46:90:68:f1:bf:42:60:72:b5:e2:c6:
7a:c7:36:ff:0f:d1:27:76:a5:43:6a:c1:0c:eb:44:
25:91:77:f3:82:56:89:f1:77:f8:70:94:d2:54:86:
f2:57:ce:59:71:3f:be:ba:81:72:0f:37:2d:e5:c3:
79:9d:ba:64:11:25:ea:f9:18:24:18:be:3a:30:d2:
90:fd:b0:4f:af:c1:2a:8c:2b:b5:fe:8c:00:dc:99:
6e:6e:54:31:f9:65:80:9b:6c:03:2f:fd:a4:fc:9a:
c4:78:ff:3c:83:c0:17:54:ac:b4:4f:8c:e6:82:5d:
57:d2:ef:89:b1:32:e8:d7:4d:d2:2d:64:9e:27:57:
00:b8:92:ea:15:f8:23:5c:d8:6c:cb:d2:40:62:12:
b7:a0:41:6f:b9:bb:cb:7b:a6:de:81:c1:69:9a:4f:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A9:E8:C5:68:32:88:0E:F9:3A:B5:01:4D:3F:21:81:63:0B:9C:56
X509v3 Authority Key Identifier:
keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:28:23:62:ce:88:27:6f:4b:b8:cd:9f:34:d1:7a:1d:be:7f:
a2:b8:0f:d8:f7:9a:44:20:31:e2:94:36:e7:d7:bf:fe:f3:2f:
62:f8:03:55:79:d1:2a:f7:93:cb:d8:6c:4c:1d:69:27:e9:8c:
b0:77:e2:37:ef:04:64:bc:6f:03:c4:ad:ab:d4:05:83:be:fb:
9a:69:01:ba:a6:0a:44:12:66:bd:4d:de:96:2b:e9:2f:c1:a5:
6b:82:cc:f6:2c:6d:90:e0:9f:eb:c4:53:99:a3:2b:65:aa:5c:
c8:c0:f3:37:4f:93:b5:84:e3:64:5e:62:53:b8:66:2a:92:08:
28:76:11:4a:93:f3:2d:b3:73:4f:a1:a7:9d:21:19:4b:f6:39:
6c:4f:c3:bf:a2:26:ba:70:cd:d9:fb:c4:fb:11:2a:06:91:01:
5f:af:9a:b7:06:61:a3:19:bc:a6:4e:01:ef:19:fc:d3:38:6a:
a7:78:06:9e:6d:7a:04:e0:b1:db:1d:92:29:c5:92:9e:7d:e6:
56:33:94:b9:53:c3:8e:6b:2f:e4:4b:35:b7:9d:72:4d:0b:1f:
75:52:bc:bf:77:20:43:75:dc:a9:dd:b3:53:0e:a0:96:c6:c2:
c2:7f:65:aa:63:0d:63:2a:4b:dc:e9:80:15:f1:07:c0:88:fd:
f7:19:a4:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeWRyP2z0pFCLCQ0RqoO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZTA1ZTllZTU5NDc3ZTAxNTVmYzFlZGMwYTE4MzA3Mjk3
NjZlODgwHhcNMjUwNjA2MjMwMDI3WhcNMjUwNjA3MjMwMDI3WjAzMTEwLwYDVQQD
Eyg0M2E5ZThjNTY4MzI4ODBlZjkzYWI1MDE0ZDNmMjE4MTYzMGI5YzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/gIIZtZRWGvZq/Q6GRoJl+SsARe
RGzjK/WQJNk9iFvv8P/ceEtOuX8Zpn1EcF8GRRkMKEl3E+RSpYFVUSX8+lqG2njy
z1tlhO3rKVDF58Fv1af+JUgavEqd6UP9RpBo8b9CYHK14sZ6xzb/D9EndqVDasEM
60QlkXfzglaJ8Xf4cJTSVIbyV85ZcT++uoFyDzct5cN5nbpkESXq+RgkGL46MNKQ
/bBPr8EqjCu1/owA3JlublQx+WWAm2wDL/2k/JrEeP88g8AXVKy0T4zmgl1X0u+J
sTLo103SLWSeJ1cAuJLqFfgjXNhsy9JAYhK3oEFvubvLe6begcFpmk+ZywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOp6MVoMogO+Tq1AU0/IYFjC5xWMB8GA1UdIwQY
MBaAFHbgXp7llHfgFV/B7cChgwcpdm6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82NmU1MWEtZmU4Mi00YjVkLTk4ODQt
YjUzM2Y0OTQxYWZlLzEvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82NmU1MWEtZmU4Mi00YjVkLTk4ODQtYjUzM2Y0OTQxYWZl
LzEvZHVCZW51V1VkLUFWWDhIdHdLR0RCeWwyYm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCgjYs6I
J29LuM2fNNF6Hb5/orgP2PeaRCAx4pQ259e//vMvYvgDVXnRKveTy9hsTB1pJ+mM
sHfiN+8EZLxvA8Stq9QFg777mmkBuqYKRBJmvU3elivpL8Gla4LM9ixtkOCf68RT
maMrZapcyMDzN0+TtYTjZF5iU7hmKpIIKHYRSpPzLbNzT6GnnSEZS/Y5bE/Dv6Im
unDN2fvE+xEqBpEBX6+atwZhoxm8pk4B7xn80zhqp3gGnm16BOCx2x2SKcWSnn3m
VjOUuVPDjmsv5Es1t51yTQsfdVK8v3cgQ3Xcqd2zUw6glsbCwn9lqmMNYypL3OmA
FfEHwIj99xmkwA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:25 2025 by rpki-client