Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: 4iNVC9EY5hO3gmse5GTB6OJN40uuAlo21P2CdU+NMCM=
Subject key identifier: 17:0B:F1:E6:D6:62:A0:BE:64:8B:47:5C:16:CD:3D:9B:CE:80:06:DB
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 01975EDD43A976A5BFA65AE9FCF993FEC1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 13AA
Signing time: Wed 11 Jun 2025 12:00:48 +0000
Manifest this update: Wed 11 Jun 2025 12:00:48 +0000
Manifest next update: Thu 12 Jun 2025 12:00:48 +0000
Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=)
2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: dymtMI4CbsexYaUU2phm3UlEf+uRQ/HYAygMBiluwh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:dd:43:a9:76:a5:bf:a6:5a:e9:fc:f9:93:fe:c1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Jun 11 12:00:48 2025 GMT
Not After : Jun 12 12:00:48 2025 GMT
Subject: CN=170bf1e6d662a0be648b475c16cd3d9bce8006db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:d1:c3:ea:da:05:ef:55:07:37:cf:27:39:
97:3f:ea:f8:d2:ef:55:c9:3d:a5:f7:8f:c9:36:e8:
ee:df:d5:70:96:f9:e3:44:79:2d:1a:6e:9a:43:60:
db:fb:f0:36:f7:88:0b:57:07:e2:96:08:78:45:88:
a1:c8:4f:4b:ad:f5:3d:02:b3:02:58:61:f4:61:9e:
6e:f7:d6:3e:e6:ac:5a:6f:c0:9d:a2:b1:6a:ff:91:
00:84:67:ad:19:e5:2d:8c:37:ff:6b:f6:d9:a4:4e:
69:6e:cf:5a:a5:d1:a9:4c:e2:36:77:0d:27:84:ce:
20:40:97:38:66:47:f1:64:90:1a:74:d6:ef:bc:c1:
c0:3a:82:44:e0:7d:ac:b6:bb:f9:2e:43:db:b3:ad:
83:36:d3:51:a0:41:dc:72:fd:37:59:15:18:41:1f:
f1:63:45:25:b7:7d:aa:da:70:84:9d:f2:4e:1d:3b:
29:df:66:3c:ae:39:34:5d:cb:e2:41:f0:fc:a4:df:
70:61:7b:ee:de:14:01:0f:4f:16:17:f7:49:a5:1f:
55:79:ff:a4:18:a8:e7:de:51:70:6b:c3:0c:1f:bf:
43:5b:57:94:75:fd:ee:e2:3c:23:a0:81:b6:93:2d:
f2:2a:f2:98:4f:14:9a:12:57:8b:99:e3:60:08:48:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0B:F1:E6:D6:62:A0:BE:64:8B:47:5C:16:CD:3D:9B:CE:80:06:DB
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e7:88:4a:15:91:32:44:a5:6c:63:1c:af:08:1a:94:3f:54:
6c:7f:25:6d:5b:dc:69:90:ed:55:56:aa:97:bd:97:54:bf:c2:
f2:30:3a:71:c4:a2:1b:22:60:12:ba:d1:8f:7d:ca:d0:af:c8:
65:32:d3:2b:c0:e4:e7:23:e4:51:b2:cc:27:00:36:f4:61:83:
18:7b:47:9f:17:f1:1c:71:7f:52:d6:de:48:4c:21:46:e2:d6:
46:7c:cb:ed:9f:e5:53:bb:1f:61:0c:8c:76:6f:ef:91:86:f4:
27:6f:e0:6c:2b:f5:60:4a:ec:54:75:a4:fd:09:1b:a1:09:03:
c8:ce:51:53:70:b0:c9:6d:55:12:f1:cc:f3:64:4a:2f:9f:38:
18:03:f7:3a:fa:8c:e7:a5:a9:dd:07:11:c9:ae:6f:8d:be:d0:
10:26:d9:bf:fa:e6:27:0f:ef:0d:30:a2:1c:7f:2c:d8:af:a8:
6e:cc:ff:c0:4f:a9:82:48:44:cd:b8:d2:2d:ff:cb:2a:43:f3:
e0:ff:4a:4f:3d:14:dc:88:42:46:ce:c4:b6:8e:48:28:1b:40:
75:2a:59:2d:06:04:3f:70:d7:0d:20:12:ce:32:b9:16:e0:12:
6c:7d:55:30:3f:39:65:65:20:32:4f:93:41:d2:85:4c:d7:b0:
5b:35:33:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZde3UOpdqW/plrp/PmT/sHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTE2ZGY2NGIzOTQxYjA0Njc0MzQxMWVkODZlYTYwMzBk
NzJmYmEwHhcNMjUwNjExMTIwMDQ4WhcNMjUwNjEyMTIwMDQ4WjAzMTEwLwYDVQQD
EygxNzBiZjFlNmQ2NjJhMGJlNjQ4YjQ3NWMxNmNkM2Q5YmNlODAwNmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYnRw+raBe9VBzfPJzmXP+r40u9V
yT2l94/JNuju39VwlvnjRHktGm6aQ2Db+/A294gLVwfilgh4RYihyE9LrfU9ArMC
WGH0YZ5u99Y+5qxab8CdorFq/5EAhGetGeUtjDf/a/bZpE5pbs9apdGpTOI2dw0n
hM4gQJc4ZkfxZJAadNbvvMHAOoJE4H2strv5LkPbs62DNtNRoEHccv03WRUYQR/x
Y0Ult32q2nCEnfJOHTsp32Y8rjk0XcviQfD8pN9wYXvu3hQBD08WF/dJpR9Vef+k
GKjn3lFwa8MMH79DW1eUdf3u4jwjoIG2ky3yKvKYTxSaEleLmeNgCEgPBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcL8ebWYqC+ZItHXBbNPZvOgAbbMB8GA1UdIwQY
MBaAFA9RbfZLOUGwRnQ0Ee2G6mAw1y+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2Et
YmExMDJjZGIyMzk3LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2EtYmExMDJjZGIyMzk3
LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeeIShWR
MkSlbGMcrwgalD9UbH8lbVvcaZDtVVaql72XVL/C8jA6ccSiGyJgErrRj33K0K/I
ZTLTK8Dk5yPkUbLMJwA29GGDGHtHnxfxHHF/UtbeSEwhRuLWRnzL7Z/lU7sfYQyM
dm/vkYb0J2/gbCv1YErsVHWk/QkboQkDyM5RU3CwyW1VEvHM82RKL584GAP3OvqM
56Wp3QcRya5vjb7QECbZv/rmJw/vDTCiHH8s2K+obsz/wE+pgkhEzbjSLf/LKkPz
4P9KTz0U3IhCRs7Eto5IKBtAdSpZLQYEP3DXDSASzjK5FuASbH1VMD85ZWUgMk+T
QdKFTNewWzUzRw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:30:55 2025 by rpki-client