Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
File: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft (raw, json)
Hash identifier: CaiQjEgoiomkBkEjJ9QmdfWkcMCuRnEkpvffvizG5n8=
Subject key identifier: 26:98:13:9D:9F:C6:27:E3:CC:2A:0B:DC:EB:02:4B:6F:95:B0:99:32
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 01974C69BC561C7D659553A06A05D7CA3B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
Manifest number: 1584
Signing time: Sat 07 Jun 2025 22:01:27 +0000
Manifest this update: Sat 07 Jun 2025 22:01:27 +0000
Manifest next update: Sun 08 Jun 2025 22:01:27 +0000
Files and hashes: 1: AGpWRsY_xlGvwtNQWAnABWymQ8A.roa (hash: pZbxN4jH7CXcAGUCPIracQWWJ5Fx7UpJPwtV6JB2GN4=)
2: BCBgNqu47uxxNNiHpeHJ8N3bbPk.roa (hash: YwTUOz8aV/A2kQXL80C7PIKK4Uk0yf33ChXiFW3offA=)
3: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl (hash: K8QnK/+x0nnksAwtHmyxgQPKanDYZd5j0OXHhY85y6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:bc:56:1c:7d:65:95:53:a0:6a:05:d7:ca:3b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: Jun 7 22:01:27 2025 GMT
Not After : Jun 8 22:01:27 2025 GMT
Subject: CN=2698139d9fc627e3cc2a0bdceb024b6f95b09932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:2c:02:6a:dc:f9:26:cd:b4:fc:34:4d:5a:
26:11:db:34:88:71:7d:63:58:78:57:9a:3b:c6:20:
2b:f0:9c:00:a2:b4:6d:d1:b5:4a:e1:ce:57:56:0e:
96:3c:7b:73:c1:b9:d6:a2:57:70:8d:f3:cc:cd:66:
8f:6f:eb:1b:b2:e5:bf:85:17:4f:03:42:99:f1:ab:
07:e6:70:15:4f:92:90:0f:a4:b9:34:24:4c:7a:35:
bc:6c:77:01:66:42:6f:a8:03:dc:09:95:c6:4d:f6:
1c:03:52:ca:15:9f:9c:57:89:b8:da:fd:f0:c4:ad:
8e:29:73:6a:62:63:3d:b6:e3:86:66:4e:1b:c7:dc:
8d:67:2c:96:fc:b8:12:7e:3c:04:3a:fe:e8:2a:ad:
3b:90:22:db:f1:25:13:d5:34:3a:b7:84:6f:84:a6:
9a:6b:ed:52:b8:49:fc:c1:91:c0:7d:18:7e:a9:c4:
f4:66:3e:43:81:b2:58:32:f4:b0:91:e0:2c:1d:3d:
75:75:3c:4c:ae:bb:ef:c3:2e:b5:22:1a:fc:19:26:
16:46:9d:62:40:23:28:0d:23:f3:c0:ea:00:b4:ee:
cc:68:0b:6b:99:6b:e6:27:00:35:10:46:4c:bf:c7:
b0:da:96:92:b2:29:4d:13:89:1b:62:c8:a5:15:eb:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:13:9D:9F:C6:27:E3:CC:2A:0B:DC:EB:02:4B:6F:95:B0:99:32
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c8:c0:12:08:ac:76:bb:af:ba:5b:b2:25:83:c7:5e:b4:f8:
75:73:ab:fa:57:c0:b2:4a:b9:f9:e2:00:88:66:10:11:59:31:
34:d4:59:1b:5d:34:e7:f2:a8:d5:9f:2f:78:d7:a9:1f:87:b2:
3e:27:72:e5:d1:32:64:45:fe:5c:2a:d2:4b:48:b9:75:8a:88:
ed:39:4f:3a:d9:65:d3:ae:af:43:96:37:60:d9:8a:87:98:41:
f2:8a:5e:8c:92:8a:84:1e:4b:03:93:09:f2:c3:fa:1f:1a:2d:
d1:7a:b2:9e:40:e8:4c:7c:d8:8e:e5:a6:64:aa:86:fd:af:5e:
3c:39:7e:d3:b4:3d:5c:4f:da:86:f3:1a:a0:99:ed:6f:10:bd:
bb:ec:99:3e:8a:1b:b8:71:1f:c4:81:ee:cb:8c:f7:0f:bf:38:
37:0d:56:22:ca:b2:ff:58:8e:90:cd:99:23:0f:cf:40:df:6a:
b3:5a:ba:0a:22:95:23:03:39:a6:ec:58:1d:4e:06:2f:0c:27:
4d:bc:d6:8b:7e:8b:61:a4:2e:6e:f1:9c:fc:74:93:eb:c8:73:
f1:d6:15:81:51:12:bb:c9:f5:6c:7d:0a:2a:a5:bc:86:83:f6:
a3:cb:00:1f:54:c9:e3:98:e7:83:2d:4c:0c:fc:e5:6d:1d:74:
7a:c2:f9:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMabxWHH1llVOgagXXyjsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjA4N2IwZjY3MTZkMjNjOGQyM2ViM2QwMzkyYjZiZjY0
MmFkNGIwHhcNMjUwNjA3MjIwMTI3WhcNMjUwNjA4MjIwMTI3WjAzMTEwLwYDVQQD
EygyNjk4MTM5ZDlmYzYyN2UzY2MyYTBiZGNlYjAyNGI2Zjk1YjA5OTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjUsAmrc+SbNtPw0TVomEds0iHF9
Y1h4V5o7xiAr8JwAorRt0bVK4c5XVg6WPHtzwbnWoldwjfPMzWaPb+sbsuW/hRdP
A0KZ8asH5nAVT5KQD6S5NCRMejW8bHcBZkJvqAPcCZXGTfYcA1LKFZ+cV4m42v3w
xK2OKXNqYmM9tuOGZk4bx9yNZyyW/LgSfjwEOv7oKq07kCLb8SUT1TQ6t4RvhKaa
a+1SuEn8wZHAfRh+qcT0Zj5DgbJYMvSwkeAsHT11dTxMrrvvwy61Ihr8GSYWRp1i
QCMoDSPzwOoAtO7MaAtrmWvmJwA1EEZMv8ew2paSsilNE4kbYsilFevTHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaYE52fxifjzCoL3OsCS2+VsJkyMB8GA1UdIwQY
MBaAFA0gh7D2cW0jyNI+s9A5K2v2Qq1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mY2I3MjktYzI4OC00ZTE1LTkzODQt
YTIwZDJkNzUxZWI1LzEvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mY2I3MjktYzI4OC00ZTE1LTkzODQtYTIwZDJkNzUxZWI1
LzEvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8jAEgis
druvuluyJYPHXrT4dXOr+lfAskq5+eIAiGYQEVkxNNRZG1005/Ko1Z8veNepH4ey
Pidy5dEyZEX+XCrSS0i5dYqI7TlPOtll066vQ5Y3YNmKh5hB8opejJKKhB5LA5MJ
8sP6Hxot0XqynkDoTHzYjuWmZKqG/a9ePDl+07Q9XE/ahvMaoJntbxC9u+yZPoob
uHEfxIHuy4z3D784Nw1WIsqy/1iOkM2ZIw/PQN9qs1q6CiKVIwM5puxYHU4GLwwn
TbzWi36LYaQubvGc/HST68hz8dYVgVESu8n1bH0KKqW8hoP2o8sAH1TJ45jngy1M
DPzlbR10esL56A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:38:14 2025 by rpki-client