Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
File: dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft (raw, json)
Hash identifier: JyoGaUC2XtYT2aCCLSggJ5Ju7QKItnjaNmmziDFE7rA=
Subject key identifier: 35:6E:75:73:06:58:42:B0:A8:04:75:4F:91:15:B2:89:EE:2D:A9:85
Authority key identifier: 75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
Certificate issuer: /CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Certificate serial: 01974BFB0DB2668CCED25AD9F45764869BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 20:00:33 +0000
Manifest this update: Sat 07 Jun 2025 20:00:33 +0000
Manifest next update: Sun 08 Jun 2025 20:00:33 +0000
Files and hashes: 1: ITU9N73wNSwtRlo0RIBRFcqyI18.roa (hash: tZ8waA6UjAXlSU4mKy5eCZ0yrObYCvk+4Q5dVUfAZCs=)
2: dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl (hash: aczotZBvDxplgHS2RIOZ7iwwoBaf1OhZ0qtvv0La7SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:0d:b2:66:8c:ce:d2:5a:d9:f4:57:64:86:9b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Validity
Not Before: Jun 7 20:00:33 2025 GMT
Not After : Jun 8 20:00:33 2025 GMT
Subject: CN=356e7573065842b0a804754f9115b289ee2da985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:59:31:a4:c3:36:e4:42:2f:2d:ea:54:08:
74:c0:66:a4:ee:eb:80:89:8f:b1:fc:23:c3:c6:db:
27:6b:06:8c:f3:b8:b2:12:26:e6:15:11:6c:a9:0e:
14:5a:ab:b1:23:c5:f7:77:76:03:bb:24:d1:5d:28:
11:4c:9a:d5:be:7b:ea:c0:8c:21:38:cc:e6:4e:59:
ea:e1:fb:55:e7:bd:9a:bf:96:d7:6e:15:c2:30:be:
15:f1:27:13:9a:e8:b0:0a:a3:0d:c1:1d:e4:90:8f:
e6:d8:df:8b:0c:3c:33:1d:2a:73:74:f5:10:95:f9:
c1:33:95:10:e2:83:e0:1e:1b:b7:5d:05:26:82:de:
20:aa:1d:3b:56:71:f5:22:d1:10:03:d2:1e:7f:77:
e2:e4:b2:c3:78:43:d4:71:9d:04:7d:75:62:36:b6:
f9:fc:21:9b:1f:57:02:46:33:55:3a:58:27:d1:ba:
2e:13:7f:83:ad:c7:f5:4a:a3:2f:3d:e4:d4:de:3a:
bd:d9:41:be:1c:99:49:17:4f:a1:b7:ca:b2:b4:9c:
96:38:8c:94:cb:43:03:da:83:5f:d2:cf:87:04:d0:
36:3b:76:fe:f5:f4:f5:1b:8a:58:72:e4:54:8f:85:
50:a0:c3:24:23:c4:6d:8f:55:74:1e:79:e3:99:df:
f3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6E:75:73:06:58:42:B0:A8:04:75:4F:91:15:B2:89:EE:2D:A9:85
X509v3 Authority Key Identifier:
keyid:75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:43:96:6e:ea:c2:00:7e:6b:4f:95:59:81:91:bb:7b:5c:06:
ac:10:32:42:6d:14:78:71:57:9f:4f:2c:0d:ab:ab:b2:ce:09:
26:07:96:95:37:bf:6a:8d:0b:e8:cb:36:29:44:f0:3b:58:e4:
64:7b:59:1e:28:63:c6:2d:07:06:89:b5:10:06:8e:79:48:c2:
21:32:0d:a6:35:8f:df:c6:a3:17:14:5f:58:3b:ae:8b:01:e7:
ce:4a:23:f1:88:92:90:48:b6:20:3d:be:da:1b:3c:15:a5:9d:
56:a2:a7:34:24:1f:f1:15:6d:fd:38:fe:69:f6:04:e9:db:f9:
3e:ac:09:14:16:17:a6:34:84:57:bc:c4:70:00:05:46:a1:67:
e0:f4:a3:49:c6:ae:eb:d0:14:2b:64:94:e9:b6:cb:33:46:b7:
ed:df:b9:30:c0:dc:b9:4c:ab:4e:43:c6:9e:d0:f7:17:ff:39:
c5:d5:c6:4e:32:9f:b6:1b:80:e6:a7:5a:8a:94:c0:a6:9e:f9:
89:9f:80:f6:59:ee:49:57:81:65:7b:1d:7f:9c:98:77:74:98:
89:81:d4:65:a1:e1:68:da:78:e2:94:cf:59:6a:2d:cf:73:3d:
d7:51:3f:bf:01:d9:fb:ec:ab:3c:04:7d:9b:8a:c6:b7:53:eb:
5d:3b:8a:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+w2yZozO0lrZ9FdkhpvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Yjk4MmVhYmE0NDA4Y2Q5NDE4OTlmNWNlZWMxZGE2YTY3
YzVjNDkwHhcNMjUwNjA3MjAwMDMzWhcNMjUwNjA4MjAwMDMzWjAzMTEwLwYDVQQD
EygzNTZlNzU3MzA2NTg0MmIwYTgwNDc1NGY5MTE1YjI4OWVlMmRhOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUtZMaTDNuRCLy3qVAh0wGak7uuA
iY+x/CPDxtsnawaM87iyEibmFRFsqQ4UWquxI8X3d3YDuyTRXSgRTJrVvnvqwIwh
OMzmTlnq4ftV572av5bXbhXCML4V8ScTmuiwCqMNwR3kkI/m2N+LDDwzHSpzdPUQ
lfnBM5UQ4oPgHhu3XQUmgt4gqh07VnH1ItEQA9Ief3fi5LLDeEPUcZ0EfXViNrb5
/CGbH1cCRjNVOlgn0bouE3+Drcf1SqMvPeTU3jq92UG+HJlJF0+ht8qytJyWOIyU
y0MD2oNf0s+HBNA2O3b+9fT1G4pYcuRUj4VQoMMkI8Rtj1V0Hnnjmd/zKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVudXMGWEKwqAR1T5EVsonuLamFMB8GA1UdIwQY
MBaAFHW5guq6RAjNlBiZ9c7sHaamfFxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82OWYzZjMtMGZhYS00NjVmLWFhN2Et
ZDcxY2ExOWY5ODllLzEvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82OWYzZjMtMGZhYS00NjVmLWFhN2EtZDcxY2ExOWY5ODll
LzEvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEOWburC
AH5rT5VZgZG7e1wGrBAyQm0UeHFXn08sDaurss4JJgeWlTe/ao0L6Ms2KUTwO1jk
ZHtZHihjxi0HBom1EAaOeUjCITINpjWP38ajFxRfWDuuiwHnzkoj8YiSkEi2ID2+
2hs8FaWdVqKnNCQf8RVt/Tj+afYE6dv5PqwJFBYXpjSEV7zEcAAFRqFn4PSjScau
69AUK2SU6bbLM0a37d+5MMDcuUyrTkPGntD3F/85xdXGTjKfthuA5qdaipTApp75
iZ+A9lnuSVeBZXsdf5yYd3SYiYHUZaHhaNp44pTPWWotz3M911E/vwHZ++yrPAR9
m4rGt1PrXTuKTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:11:45 2025 by rpki-client