Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier: N55G9xnhYf8nMu4LsP7hX0uZ2xyShIHTqWmDg81nY30=
Subject key identifier: 4F:CF:64:06:6E:DF:45:D6:0B:9E:F2:EC:D0:98:D4:A6:97:4F:76:7E
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial: 019763964ABDA3F71CE1775BAC7A08102164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number: 07B3
Signing time: Thu 12 Jun 2025 10:01:23 +0000
Manifest this update: Thu 12 Jun 2025 10:01:23 +0000
Manifest next update: Fri 13 Jun 2025 10:01:23 +0000
Files and hashes: 1: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: 8/fhy6cljYkpNoL0bHm7rT4m6O0ahV7YNE4jt1FPPek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:4a:bd:a3:f7:1c:e1:77:5b:ac:7a:08:10:21:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Validity
Not Before: Jun 12 10:01:23 2025 GMT
Not After : Jun 13 10:01:23 2025 GMT
Subject: CN=4fcf64066edf45d60b9ef2ecd098d4a6974f767e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:13:f3:5d:bd:22:de:8c:d5:63:10:e8:de:
27:da:af:21:4d:9e:5b:55:a8:6c:d8:2d:c3:7f:84:
2d:97:a9:f4:fa:d9:cd:11:69:63:15:0a:eb:86:a5:
50:e3:96:d6:e9:44:e9:b0:22:a2:60:32:ad:a9:4a:
5b:39:e2:56:d7:dc:db:2a:31:db:5b:53:5d:ed:f6:
7f:f1:66:7e:99:fe:6d:0c:56:f1:2d:36:e4:a0:f6:
20:1d:68:55:06:34:4a:7d:55:6a:69:7f:de:5d:da:
bb:d5:d3:64:46:0f:7a:5d:71:0c:e2:ed:d7:c8:2d:
89:5f:ff:6e:19:aa:4f:6e:a4:59:28:9f:2b:a7:90:
7b:c7:13:01:2e:2c:91:4f:a1:1b:8a:08:19:54:d2:
78:09:43:b3:c1:fb:36:c7:64:b5:6c:a8:0b:53:a5:
e6:72:0e:ca:ee:f9:0c:59:f0:2d:d6:5e:89:43:7e:
55:8a:2b:89:26:c6:f5:17:46:8e:6f:cc:ef:86:6b:
73:8f:16:4d:8d:4b:72:6f:8e:b5:a6:0e:82:58:5a:
d1:f1:ae:fa:f0:80:cf:9d:fa:17:b8:95:71:fa:08:
d4:78:be:d5:f7:3b:63:42:ca:3e:c3:aa:1b:36:08:
27:7b:3a:d2:10:9d:b8:91:98:b6:1f:9a:8b:3a:b0:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CF:64:06:6E:DF:45:D6:0B:9E:F2:EC:D0:98:D4:A6:97:4F:76:7E
X509v3 Authority Key Identifier:
keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:74:43:5f:9e:a5:8f:14:56:79:54:fd:73:07:81:2f:5d:c7:
b2:e6:ca:e7:bc:24:91:bf:9d:9b:21:e7:31:8a:d6:24:18:75:
ef:6e:b6:db:6e:cb:6f:45:23:bc:9d:bf:54:16:04:e6:fa:0e:
e6:fa:55:5e:79:9d:e1:25:f7:fb:05:d8:5e:ee:b0:b2:20:8d:
8d:df:3e:35:0a:bc:89:40:ac:5a:2f:34:43:0e:a5:f6:e1:30:
08:2d:21:59:8f:3f:b4:76:e1:4b:c6:4f:a1:04:0a:9a:62:bb:
f3:67:f6:b6:f9:f9:d1:f6:98:18:73:44:bd:18:31:e1:b8:f4:
51:83:f7:12:4b:f6:24:0e:1e:9b:a3:7e:9c:11:49:96:ca:48:
8b:b2:3b:76:8e:74:4e:b8:f1:3b:c2:c0:1d:43:ef:45:26:86:
41:96:01:97:ac:16:13:4a:cd:cf:7a:e0:45:52:49:e8:6e:6d:
92:f3:82:b3:50:b6:e8:33:f8:37:c1:99:59:cc:86:2e:60:3e:
a7:42:55:6c:a8:a8:b4:4f:29:b9:a7:10:c2:f0:0c:81:bd:61:
37:7c:b9:70:2d:40:7e:78:7c:dc:00:72:c3:5f:f9:b3:7f:be:
3f:b4:4f:45:95:05:50:6c:62:f3:fa:fd:39:9f:18:b9:64:70:
1a:d3:1d:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjlkq9o/cc4XdbrHoIECFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNkOTFiMWIyZjlhZjRiNzQyMTRhNmQ2NzhjZTA3MTk2
OGUxY2YwHhcNMjUwNjEyMTAwMTIzWhcNMjUwNjEzMTAwMTIzWjAzMTEwLwYDVQQD
Eyg0ZmNmNjQwNjZlZGY0NWQ2MGI5ZWYyZWNkMDk4ZDRhNjk3NGY3NjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtygT8129It6M1WMQ6N4n2q8hTZ5b
Vahs2C3Df4Qtl6n0+tnNEWljFQrrhqVQ45bW6UTpsCKiYDKtqUpbOeJW19zbKjHb
W1Nd7fZ/8WZ+mf5tDFbxLTbkoPYgHWhVBjRKfVVqaX/eXdq71dNkRg96XXEM4u3X
yC2JX/9uGapPbqRZKJ8rp5B7xxMBLiyRT6EbiggZVNJ4CUOzwfs2x2S1bKgLU6Xm
cg7K7vkMWfAt1l6JQ35ViiuJJsb1F0aOb8zvhmtzjxZNjUtyb461pg6CWFrR8a76
8IDPnfoXuJVx+gjUeL7V9ztjQso+w6obNggnezrSEJ24kZi2H5qLOrADtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/PZAZu30XWC57y7NCY1KaXT3Z+MB8GA1UdIwQY
MBaAFHW82RsbL5r0t0IUptZ4zgcZaOHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2Qt
MWMwNTc1NTI2OTFlLzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9jOWMwMzAtNTUzZS00MzBhLTk4N2QtMWMwNTc1NTI2OTFl
LzEvZGJ6Wkd4c3ZtdlMzUWhTbTFuak9CeGxvNGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3RDX56l
jxRWeVT9cweBL13HsubK57wkkb+dmyHnMYrWJBh17262227Lb0UjvJ2/VBYE5voO
5vpVXnmd4SX3+wXYXu6wsiCNjd8+NQq8iUCsWi80Qw6l9uEwCC0hWY8/tHbhS8ZP
oQQKmmK782f2tvn50faYGHNEvRgx4bj0UYP3Ekv2JA4em6N+nBFJlspIi7I7do50
TrjxO8LAHUPvRSaGQZYBl6wWE0rNz3rgRVJJ6G5tkvOCs1C26DP4N8GZWcyGLmA+
p0JVbKiotE8puacQwvAMgb1hN3y5cC1Afnh83AByw1/5s3++P7RPRZUFUGxi8/r9
OZ8YuWRwGtMdZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 14:29:00 2025 by rpki-client