Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json)
Hash identifier: vfbyJfCCqi1LiGOjGmfoF+mnF5nWdKJlNZ8lqH1qpd4=
Subject key identifier: AF:C8:26:A3:3C:D8:87:6D:A7:02:D2:AD:26:C8:28:E4:D5:7A:23:6B
Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Certificate serial: 01974A7AA13857B5AF7FB514CD36CE1C2973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 13:00:39 +0000
Manifest this update: Sat 07 Jun 2025 13:00:39 +0000
Manifest next update: Sun 08 Jun 2025 13:00:39 +0000
Files and hashes: 1: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: +WRvOrhICcxJDBa5M4bcS1NovAv+nXO1iVqJ3q14xNM=)
2: MtUZJrG93YjlOedI7qMBnb84kTo.roa (hash: DRebjnmDQxS/ZtsZn/V0IAu2K2KwJtKcDq984/E8Rws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a1:38:57:b5:af:7f:b5:14:cd:36:ce:1c:29:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0
Validity
Not Before: Jun 7 13:00:39 2025 GMT
Not After : Jun 8 13:00:39 2025 GMT
Subject: CN=afc826a33cd8876da702d2ad26c828e4d57a236b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:74:c7:16:84:88:c3:24:c4:ee:e9:2a:14:
19:ca:8a:ca:e4:34:4c:43:d9:57:52:78:ab:ae:de:
fb:14:a9:77:4f:11:8a:66:ad:ec:fc:47:93:39:b0:
84:4a:21:7b:1d:c2:1d:2b:e9:db:4f:b5:97:39:0e:
05:d9:b9:b5:b9:45:d6:ea:69:43:19:74:3f:10:9a:
3b:a7:94:99:32:41:79:ad:53:70:34:fd:f4:95:1a:
ac:88:0b:7a:0d:39:8e:59:44:b2:69:a1:57:5a:01:
6f:10:bf:62:14:56:c7:68:5d:49:d8:7f:dc:a4:e9:
77:a7:79:74:3f:62:05:53:83:97:49:c5:9c:1f:fb:
0b:bb:a2:0b:45:3c:3f:07:d6:67:18:42:8e:86:3d:
73:b1:b4:dd:e4:1a:f9:50:4f:ed:e4:3f:97:0d:d3:
81:17:c7:68:7f:6a:f8:d8:33:32:05:df:b5:bc:d6:
94:ca:45:0c:a4:d7:14:06:44:45:77:81:38:e5:93:
8f:7e:22:1b:5e:eb:a6:be:87:d3:87:68:e7:de:f8:
cf:56:50:0b:66:78:55:1a:5a:d9:c9:77:4f:50:48:
2b:28:3b:90:1e:db:58:69:c1:5a:14:35:19:ce:bc:
a1:55:a1:70:f7:a7:82:f6:4c:06:2f:a5:5f:30:54:
0c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C8:26:A3:3C:D8:87:6D:A7:02:D2:AD:26:C8:28:E4:D5:7A:23:6B
X509v3 Authority Key Identifier:
keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b4:ad:6a:60:66:1a:63:12:82:37:11:70:b9:96:73:50:ed:
8f:24:52:c2:85:7c:37:e8:a8:5e:e5:2b:8d:e0:0e:25:43:a6:
54:76:eb:1c:62:f1:08:32:e7:d7:43:b2:e5:7d:8e:52:46:d9:
15:b8:fe:71:33:f4:2a:77:71:ce:d7:4e:2a:44:f9:64:07:8d:
48:01:0b:b8:b9:0e:31:99:13:26:6b:2c:c4:7c:ee:8d:f8:c7:
ed:f2:80:a0:0c:ad:c3:2b:40:df:00:5b:19:7f:bb:f7:3a:a0:
e0:6b:bd:38:cc:8d:46:dd:63:d9:d0:69:0b:70:4c:e0:6f:ed:
dd:93:67:95:29:c5:ab:6e:74:5a:da:16:8d:ba:13:2e:e2:09:
1e:a5:73:4c:fe:26:52:2f:9c:77:12:d7:e7:50:3d:39:54:15:
1b:28:85:e2:2d:12:83:c2:9f:d9:73:50:71:38:cf:6e:65:09:
23:f4:d7:21:7d:75:3c:bf:c4:8d:8a:6b:01:32:eb:a6:ef:09:
22:79:50:3a:2d:e9:28:c9:e5:28:15:fa:cf:44:bb:a9:95:67:
08:ef:dc:aa:18:24:f7:bf:95:0d:25:51:6e:06:ac:46:2c:86:
c3:35:d3:48:50:a2:68:12:b2:75:a4:ea:81:dd:93:4a:44:f4:
9c:d9:c6:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeqE4V7Wvf7UUzTbOHClzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjQ5MTIyZDllOWJiYWZhNTc3ZjY0NDdmMjFiOGJlYzc2
YzA1ZjAwHhcNMjUwNjA3MTMwMDM5WhcNMjUwNjA4MTMwMDM5WjAzMTEwLwYDVQQD
EyhhZmM4MjZhMzNjZDg4NzZkYTcwMmQyYWQyNmM4MjhlNGQ1N2EyMzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2p0xxaEiMMkxO7pKhQZyorK5DRM
Q9lXUnirrt77FKl3TxGKZq3s/EeTObCESiF7HcIdK+nbT7WXOQ4F2bm1uUXW6mlD
GXQ/EJo7p5SZMkF5rVNwNP30lRqsiAt6DTmOWUSyaaFXWgFvEL9iFFbHaF1J2H/c
pOl3p3l0P2IFU4OXScWcH/sLu6ILRTw/B9ZnGEKOhj1zsbTd5Br5UE/t5D+XDdOB
F8dof2r42DMyBd+1vNaUykUMpNcUBkRFd4E45ZOPfiIbXuumvofTh2jn3vjPVlAL
ZnhVGlrZyXdPUEgrKDuQHttYacFaFDUZzryhVaFw96eC9kwGL6VfMFQM9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/IJqM82IdtpwLSrSbIKOTVeiNrMB8GA1UdIwQY
MBaAFA20kSLZ6buvpXf2RH8huL7HbAXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2Et
MTQ2MDBkNTc4MDhhLzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2EtMTQ2MDBkNTc4MDhh
LzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwbStamBm
GmMSgjcRcLmWc1DtjyRSwoV8N+ioXuUrjeAOJUOmVHbrHGLxCDLn10Oy5X2OUkbZ
Fbj+cTP0KndxztdOKkT5ZAeNSAELuLkOMZkTJmssxHzujfjH7fKAoAytwytA3wBb
GX+79zqg4Gu9OMyNRt1j2dBpC3BM4G/t3ZNnlSnFq250WtoWjboTLuIJHqVzTP4m
Ui+cdxLX51A9OVQVGyiF4i0Sg8Kf2XNQcTjPbmUJI/TXIX11PL/EjYprATLrpu8J
InlQOi3pKMnlKBX6z0S7qZVnCO/cqhgk97+VDSVRbgasRiyGwzXTSFCiaBKydaTq
gd2TSkT0nNnG1A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:37 2025 by rpki-client