Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: jYHWFNvOT6ox5C1r5YaVfyo1i65QMuGkWb9AE7WGp14=
Subject key identifier: 74:FA:0D:CD:C1:2A:9E:08:44:7A:A9:04:DE:6A:23:65:5B:13:F2:60
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 01974A43D5532B7A87AF252022466195E1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0C38
Signing time: Sat 07 Jun 2025 12:00:48 +0000
Manifest this update: Sat 07 Jun 2025 12:00:48 +0000
Manifest next update: Sun 08 Jun 2025 12:00:48 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: xT6PT5R11MqGhvALplJLWv+EJHzOqw+HINsAiFc2izs=)
2: KKoVkt36UzhB8KBbFPImmZW73vA.roa (hash: GhpkIl47GYlGJw2nWrVttpHKLmkRE0ZfoRg/RpNRI/I=)
3: fMybGYR-8tzcLwLk9F7xQBZ6-N4.roa (hash: Y2XsWw7qdiuLK4RPieRUDih+9enRniyBYvTmKwdcDsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:d5:53:2b:7a:87:af:25:20:22:46:61:95:e1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Jun 7 12:00:48 2025 GMT
Not After : Jun 8 12:00:48 2025 GMT
Subject: CN=74fa0dcdc12a9e08447aa904de6a23655b13f260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:b5:20:70:71:ab:12:9f:77:2a:b7:91:27:
af:b4:fd:05:46:7b:ea:fc:d4:7b:ad:2f:43:c9:4d:
ac:e6:0c:62:ce:93:5d:f0:86:fb:17:fe:c7:34:91:
7e:1c:e6:33:29:c9:ec:be:f2:76:23:23:b5:37:dd:
cb:ff:77:52:70:8c:00:56:d3:c8:d6:84:17:fc:c2:
ae:c6:ba:7f:99:7c:1e:c8:c6:91:57:b0:65:42:43:
76:d7:94:97:2d:ff:cf:df:ab:bf:ae:0c:13:82:0f:
97:d4:cf:bb:48:1e:cc:61:fb:38:dc:69:28:96:84:
89:15:4a:32:8a:61:e7:5d:d8:99:37:1b:e2:26:d6:
9d:44:47:e8:d1:0b:55:d2:cd:15:75:7a:d1:ee:b7:
9e:1c:4d:d3:8a:e6:59:64:36:28:37:79:a3:c8:d2:
0c:3c:2e:d2:f2:4b:f6:20:5b:85:21:f4:12:4c:d5:
56:7d:f3:ae:5b:c2:7f:02:f5:71:3b:25:26:99:de:
de:e2:3e:ff:c6:2e:ed:2c:65:0b:dd:5c:50:c3:fd:
33:df:ea:71:bd:77:a0:ae:01:64:07:49:f1:f8:59:
e4:e9:18:25:33:f2:d2:50:68:3d:d5:a8:7d:ea:98:
b3:b3:43:f8:2c:07:1f:48:02:ac:30:79:26:15:f8:
9a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FA:0D:CD:C1:2A:9E:08:44:7A:A9:04:DE:6A:23:65:5B:13:F2:60
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:40:50:66:2f:7d:64:42:be:8e:34:db:4b:7d:62:20:2c:a4:
25:4b:26:a7:1a:84:3a:1e:d7:f0:6d:de:25:12:ff:6d:d2:6b:
6e:2b:d8:6d:6b:75:3f:0c:d2:c3:bb:00:58:be:96:0f:e8:bf:
ee:1b:a3:80:ef:5b:61:c6:a0:84:f9:bd:69:33:6a:84:67:45:
9e:9a:84:f3:d8:a9:2a:4a:3b:90:9e:73:73:04:c1:45:77:62:
65:78:22:29:68:82:38:4c:1d:c5:e2:b6:13:68:93:23:28:8f:
fb:cb:4a:9a:19:3e:71:04:94:04:0b:a3:b0:63:7e:01:02:37:
78:24:5d:92:af:05:c1:72:74:f2:dd:b6:81:90:a2:8c:08:e7:
8e:34:7b:1d:8d:1c:67:e9:66:14:59:da:d8:fc:1b:dc:ee:ba:
aa:5c:ac:b7:d3:a2:c2:cd:0e:d9:04:37:c6:f3:f9:b6:c8:fc:
13:11:21:d5:af:9c:69:f6:c3:9e:4b:5e:f1:10:d9:35:5e:dd:
f5:0e:37:31:33:66:51:83:77:ec:8d:c0:9f:fe:fd:ad:93:70:
64:34:39:a4:d1:da:3d:0f:7d:7f:bf:c0:f7:bd:db:b9:8b:9f:
cb:12:05:92:17:8b:06:2d:60:4b:0a:54:c5:cd:09:1b:51:70:
e9:74:0e:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ9VTK3qHryUgIkZhleHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTFlNWI1OGRhMzI2ZTY1NGU5OTRmZWYyMTk1Mjc2NzU5
NTc5YmUwHhcNMjUwNjA3MTIwMDQ4WhcNMjUwNjA4MTIwMDQ4WjAzMTEwLwYDVQQD
Eyg3NGZhMGRjZGMxMmE5ZTA4NDQ3YWE5MDRkZTZhMjM2NTViMTNmMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr+1IHBxqxKfdyq3kSevtP0FRnvq
/NR7rS9DyU2s5gxizpNd8Ib7F/7HNJF+HOYzKcnsvvJ2IyO1N93L/3dScIwAVtPI
1oQX/MKuxrp/mXweyMaRV7BlQkN215SXLf/P36u/rgwTgg+X1M+7SB7MYfs43Gko
loSJFUoyimHnXdiZNxviJtadREfo0QtV0s0VdXrR7reeHE3TiuZZZDYoN3mjyNIM
PC7S8kv2IFuFIfQSTNVWffOuW8J/AvVxOyUmmd7e4j7/xi7tLGUL3VxQw/0z3+px
vXegrgFkB0nx+Fnk6RglM/LSUGg91ah96pizs0P4LAcfSAKsMHkmFfiaBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHT6Dc3BKp4IRHqpBN5qI2VbE/JgMB8GA1UdIwQY
MBaAFA+R5bWNoybmVOmU/vIZUnZ1lXm+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNjVlZmEtZjA0OS00NjQ3LThjZjEt
ODI0Y2NlZmQ5YzgxLzEvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yNjVlZmEtZjA0OS00NjQ3LThjZjEtODI0Y2NlZmQ5Yzgx
LzEvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0BQZi99
ZEK+jjTbS31iICykJUsmpxqEOh7X8G3eJRL/bdJrbivYbWt1PwzSw7sAWL6WD+i/
7hujgO9bYcaghPm9aTNqhGdFnpqE89ipKko7kJ5zcwTBRXdiZXgiKWiCOEwdxeK2
E2iTIyiP+8tKmhk+cQSUBAujsGN+AQI3eCRdkq8FwXJ08t22gZCijAjnjjR7HY0c
Z+lmFFna2Pwb3O66qlyst9Oiws0O2QQ3xvP5tsj8ExEh1a+cafbDnkte8RDZNV7d
9Q43MTNmUYN37I3An/79rZNwZDQ5pNHaPQ99f7/A973buYufyxIFkheLBi1gSwpU
xc0JG1Fw6XQOGw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:05 2025 by rpki-client