Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
File: do_utqkKhqzxGHHk5Xii6n7Cgdk.mft (raw, json)
Hash identifier: X9I1MZFReKCx4UI57tmra99lOp6MZgOJclS1cLsbqFM=
Subject key identifier: 65:F5:EC:9A:8E:D0:DE:2C:EA:94:90:88:D9:8B:14:CA:FC:55:06:C8
Authority key identifier: 76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
Certificate issuer: /CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Certificate serial: 01974FA1662E721685393D16FB078587E168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
Manifest number: 8B
Signing time: Sun 08 Jun 2025 13:01:06 +0000
Manifest this update: Sun 08 Jun 2025 13:01:06 +0000
Manifest next update: Mon 09 Jun 2025 13:01:06 +0000
Files and hashes: 1: ZZ126kZc2Gs9amlt5Rc0VmUZOPw.roa (hash: laA9ImB0VtnpNlOC8RmvM5URSIvzaqpg8ewZvS5hOLw=)
2: do_utqkKhqzxGHHk5Xii6n7Cgdk.crl (hash: K3zsPQIx6A3bTC/Lau8X26Nmqsnu31UxvdYtdZaAs0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:66:2e:72:16:85:39:3d:16:fb:07:85:87:e1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Validity
Not Before: Jun 8 13:01:06 2025 GMT
Not After : Jun 9 13:01:06 2025 GMT
Subject: CN=65f5ec9a8ed0de2cea949088d98b14cafc5506c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:36:c2:48:6b:1a:a6:5f:69:16:64:ef:ec:
39:62:f1:fd:20:9e:aa:71:fc:35:91:17:89:9c:dd:
25:99:36:fa:c3:66:25:01:37:4a:6e:e8:ad:87:2d:
58:6b:dc:cd:26:68:d7:af:de:5b:4b:0d:6c:59:d1:
30:e2:4d:a3:75:3a:78:e8:1d:60:c1:20:31:35:f4:
b9:b4:2f:25:66:af:64:5d:db:c0:88:bc:c2:5b:1d:
66:a6:c7:3b:00:93:94:20:dd:5a:01:50:9e:77:7e:
82:af:e1:f1:ed:a7:2c:24:53:da:6d:a0:3b:c8:0f:
05:2b:2a:ef:4e:51:3a:b0:20:53:29:aa:5d:d7:77:
cf:9a:7a:c2:d9:b6:ef:82:08:ea:45:30:ed:04:aa:
b1:55:0e:c0:df:9b:bf:ee:d5:16:ca:95:38:f2:7d:
8b:6d:57:de:bd:91:db:b3:c5:26:44:ed:7a:eb:9e:
79:ea:0d:cf:30:67:d1:44:d7:01:86:86:2e:85:e3:
9f:a0:d2:65:9d:b3:d3:96:81:cb:1f:80:a9:79:40:
97:07:a6:09:e3:a4:44:9a:51:4d:38:ed:9c:34:08:
52:c6:05:33:05:3b:76:8b:99:09:f3:17:20:c7:f1:
33:a1:b3:c9:c0:fb:30:0f:f1:97:48:94:10:8d:bf:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F5:EC:9A:8E:D0:DE:2C:EA:94:90:88:D9:8B:14:CA:FC:55:06:C8
X509v3 Authority Key Identifier:
keyid:76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:42:43:d6:d8:d6:af:b0:84:b4:b2:41:fc:5f:fb:66:02:7b:
7a:14:35:4b:0d:ab:eb:6d:3b:e2:ab:c6:a3:a1:ba:a1:62:40:
58:bd:44:0e:f0:35:89:0e:7d:d9:d4:9c:ec:84:4b:58:92:06:
67:4f:5b:9f:ba:d9:e8:0c:a0:ab:9b:08:85:25:e9:d8:23:ad:
4c:8e:da:f1:2b:62:3d:6d:0a:ae:e7:0c:10:c2:c7:2a:50:61:
d9:05:b8:db:df:29:4b:86:a4:20:00:70:80:41:d9:52:db:5c:
84:14:2e:0f:97:1d:de:29:44:56:8b:01:89:bb:fc:a2:2f:3d:
e1:7c:c3:ce:04:54:78:fc:68:04:4b:85:c5:4c:b8:4a:06:af:
10:1f:8a:a9:ce:33:af:3b:93:23:79:af:5b:bb:52:dc:2a:4b:
ab:2a:22:4e:de:9e:3f:7a:5f:34:77:45:b8:c5:b9:63:8f:62:
f5:2e:e6:a4:9d:4d:4e:96:41:ac:0d:6f:ba:8e:61:ca:b2:0d:
05:14:e1:53:69:ac:ad:75:2e:5e:50:81:7e:27:82:49:c6:a4:
c2:47:03:e9:57:2e:dd:ce:c1:d1:3d:5a:04:c5:9a:2b:dd:b2:
e4:59:c2:b0:3b:e9:e9:15:a5:79:99:19:9d:a9:1b:20:a1:c7:
08:7d:0c:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPoWYuchaFOT0W+weFh+FoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OGZlZWI2YTkwYTg2YWNmMTE4NzFlNGU1NzhhMmVhN2Vj
MjgxZDkwHhcNMjUwNjA4MTMwMTA2WhcNMjUwNjA5MTMwMTA2WjAzMTEwLwYDVQQD
Eyg2NWY1ZWM5YThlZDBkZTJjZWE5NDkwODhkOThiMTRjYWZjNTUwNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpo2wkhrGqZfaRZk7+w5YvH9IJ6q
cfw1kReJnN0lmTb6w2YlATdKbuithy1Ya9zNJmjXr95bSw1sWdEw4k2jdTp46B1g
wSAxNfS5tC8lZq9kXdvAiLzCWx1mpsc7AJOUIN1aAVCed36Cr+Hx7acsJFPabaA7
yA8FKyrvTlE6sCBTKapd13fPmnrC2bbvggjqRTDtBKqxVQ7A35u/7tUWypU48n2L
bVfevZHbs8UmRO1665556g3PMGfRRNcBhoYuheOfoNJlnbPTloHLH4CpeUCXB6YJ
46REmlFNOO2cNAhSxgUzBTt2i5kJ8xcgx/EzobPJwPswD/GXSJQQjb8jbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGX17JqO0N4s6pSQiNmLFMr8VQbIMB8GA1UdIwQY
MBaAFHaP7rapCoas8Rhx5OV4oup+woHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG9fdXRxa0tocXp4R0hIazVYaWk2bjdDZ2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY2M2EtZWFmMS00YTg5LTgwNGMt
MGMxZjRkMzM3ODNlLzEvZG9fdXRxa0tocXp4R0hIazVYaWk2bjdDZ2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjY2M2EtZWFmMS00YTg5LTgwNGMtMGMxZjRkMzM3ODNl
LzEvZG9fdXRxa0tocXp4R0hIazVYaWk2bjdDZ2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0JD1tjW
r7CEtLJB/F/7ZgJ7ehQ1Sw2r62074qvGo6G6oWJAWL1EDvA1iQ592dSc7IRLWJIG
Z09bn7rZ6Aygq5sIhSXp2COtTI7a8StiPW0KrucMEMLHKlBh2QW4298pS4akIABw
gEHZUttchBQuD5cd3ilEVosBibv8oi894XzDzgRUePxoBEuFxUy4SgavEB+Kqc4z
rzuTI3mvW7tS3CpLqyoiTt6eP3pfNHdFuMW5Y49i9S7mpJ1NTpZBrA1vuo5hyrIN
BRThU2msrXUuXlCBfieCScakwkcD6Vcu3c7B0T1aBMWaK92y5FnCsDvp6RWleZkZ
nakbIKHHCH0Mdw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:41:40 2025 by rpki-client