Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
File: DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json)
Hash identifier: Z7ebi2mHEF7//m4gamLq2bvcgw02r9qKTzIeOGqcB0U=
Subject key identifier: C3:A9:43:BA:62:BB:0D:DC:4B:B4:23:12:1D:38:4D:E3:D8:CF:74:D3
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 0197D8BEF1004BFE9A7EAFA0C54697F0F03D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
Manifest number: 1266
Signing time: Sat 05 Jul 2025 04:01:21 +0000
Manifest this update: Sat 05 Jul 2025 04:01:21 +0000
Manifest next update: Sun 06 Jul 2025 04:01:21 +0000
Files and hashes: 1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: uxCOz4tQw/po23KPtFDuggKIBf0bH3Pp7Vu/RTKYSuc=)
2: cnib18kOQCfp6lVhz4WmJc4Qscg.roa (hash: 29WsgPo6IrtJ1OC04nNW3KGjgpHd3XfgWJen7328b88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:be:f1:00:4b:fe:9a:7e:af:a0:c5:46:97:f0:f0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: Jul 5 04:01:21 2025 GMT
Not After : Jul 6 04:01:21 2025 GMT
Subject: CN=c3a943ba62bb0ddc4bb423121d384de3d8cf74d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:31:e2:71:26:ef:1d:e9:65:3b:a4:d4:63:
40:76:00:21:6e:8a:a8:0e:04:51:4a:f2:2f:ce:60:
3e:48:fe:0b:20:be:12:61:8d:b6:af:3d:44:22:17:
43:10:f5:5d:b7:61:61:ea:b4:1c:e9:59:0e:75:2f:
ce:30:f5:c6:27:55:f9:df:a8:06:ca:58:0d:00:ff:
bd:3e:f1:30:37:02:dd:c9:1e:57:8c:1d:d7:98:d9:
83:cc:9c:35:2e:a7:2f:c1:cb:b7:34:2c:ee:c6:88:
bf:c6:2c:fd:86:b2:4f:b2:54:bc:e7:15:f2:4b:1f:
e3:d5:7e:cf:79:d6:e5:3a:a1:3e:bd:3d:94:ea:5d:
ed:c2:6a:40:8d:32:96:80:5f:cb:53:f0:fa:99:72:
ca:95:48:e0:0a:6c:1b:81:b2:5e:b5:4a:df:80:49:
b7:08:04:20:aa:49:ab:11:99:2c:ea:16:36:c9:6a:
0d:af:a1:e2:9f:79:b0:ee:22:77:91:86:01:5f:54:
51:6b:9d:5a:f4:9c:83:27:0d:4f:b4:be:db:c2:2b:
98:98:98:5e:e8:ab:97:d2:43:0d:ad:2d:f8:94:31:
3f:62:41:71:17:5b:87:1e:d6:35:ec:c4:5f:f2:45:
ae:ca:01:c0:96:94:00:69:96:b9:09:73:bd:39:c7:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A9:43:BA:62:BB:0D:DC:4B:B4:23:12:1D:38:4D:E3:D8:CF:74:D3
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9d:b0:53:ee:2b:26:df:d0:e0:6b:6e:fc:ef:b1:c2:72:c7:
46:09:62:c7:69:e0:7c:47:08:1c:6a:9e:1a:92:19:e0:7c:ab:
d6:03:0d:96:a1:c2:2f:a6:59:61:5d:3a:78:98:87:23:0c:57:
64:1f:ef:8d:99:a1:4f:4f:2b:b0:6d:60:e0:35:4a:33:97:de:
4a:8d:82:e2:64:4c:53:66:ae:8c:f6:95:3a:7d:52:ee:49:b5:
33:67:5f:77:1e:36:ed:6f:33:94:ea:df:4f:7e:1a:66:f5:28:
a7:59:8b:b7:9e:5c:d8:b3:cd:79:c1:f7:8b:00:5e:a3:75:ac:
38:24:ec:72:6d:60:d5:73:8e:e0:3a:19:14:4d:ea:70:c0:b7:
cc:4e:17:fe:d2:53:dc:4a:0c:19:a0:a6:3b:51:bc:a2:09:02:
f5:89:c5:63:43:e6:69:95:a1:24:ec:7b:e5:9b:2b:06:de:6b:
00:12:08:c3:b0:64:be:ea:49:89:73:61:93:b1:bd:af:df:28:
16:2c:ab:a3:f0:4d:d3:e5:55:0f:3b:8d:d7:e9:e0:c4:6a:b0:
6e:6c:5c:31:2a:aa:f7:c5:2f:81:f6:e2:61:07:95:c3:50:a3:
be:f8:d8:92:c7:ae:5f:55:02:9f:04:4c:a8:2a:24:31:89:2c:
d9:91:9b:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfYvvEAS/6afq+gxUaX8PA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNmZhMTU2YzU3YzRlODg1YjllNmFmODIzMGI2NTRkNzk2
YTU2MTEwHhcNMjUwNzA1MDQwMTIxWhcNMjUwNzA2MDQwMTIxWjAzMTEwLwYDVQQD
EyhjM2E5NDNiYTYyYmIwZGRjNGJiNDIzMTIxZDM4NGRlM2Q4Y2Y3NGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z4x4nEm7x3pZTuk1GNAdgAhboqo
DgRRSvIvzmA+SP4LIL4SYY22rz1EIhdDEPVdt2Fh6rQc6VkOdS/OMPXGJ1X536gG
ylgNAP+9PvEwNwLdyR5XjB3XmNmDzJw1Lqcvwcu3NCzuxoi/xiz9hrJPslS85xXy
Sx/j1X7PedblOqE+vT2U6l3twmpAjTKWgF/LU/D6mXLKlUjgCmwbgbJetUrfgEm3
CAQgqkmrEZks6hY2yWoNr6Hin3mw7iJ3kYYBX1RRa51a9JyDJw1PtL7bwiuYmJhe
6KuX0kMNrS34lDE/YkFxF1uHHtY17MRf8kWuygHAlpQAaZa5CXO9OceSQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOpQ7piuw3cS7QjEh04TePYz3TTMB8GA1UdIwQY
MBaAFAxvoVbFfE6IW55q+CMLZU15alYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQt
YjhjMzZlY2VkYWQ4LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQtYjhjMzZlY2VkYWQ4
LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE52wU+4r
Jt/Q4Gtu/O+xwnLHRglix2ngfEcIHGqeGpIZ4Hyr1gMNlqHCL6ZZYV06eJiHIwxX
ZB/vjZmhT08rsG1g4DVKM5feSo2C4mRMU2aujPaVOn1S7km1M2dfdx427W8zlOrf
T34aZvUop1mLt55c2LPNecH3iwBeo3WsOCTscm1g1XOO4DoZFE3qcMC3zE4X/tJT
3EoMGaCmO1G8ogkC9YnFY0PmaZWhJOx75ZsrBt5rABIIw7BkvupJiXNhk7G9r98o
Fiyro/BN0+VVDzuN1+ngxGqwbmxcMSqq98UvgfbiYQeVw1CjvvjYkseuX1UCnwRM
qCokMYks2ZGbAw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 06:53:06 2025 by rpki-client