Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File: dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier: Xb4nO5mwlBTZBZQBxNby04i5EdtutReVmA5OtSzpPbc=
Subject key identifier: 3A:76:FE:40:7D:6D:A4:ED:C7:3A:70:FE:A7:D6:F7:FE:1F:12:46:4A
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial: 019750469ED31DFF7F4E0F6CD18A74446F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number: 0553
Signing time: Sun 08 Jun 2025 16:01:34 +0000
Manifest this update: Sun 08 Jun 2025 16:01:34 +0000
Manifest next update: Mon 09 Jun 2025 16:01:34 +0000
Files and hashes: 1: 5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa (hash: IgoqrrmJPuGzGpT+UcpwCttOwj7BjxbDg3tOXCDKJe8=)
2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: khcGqAlPnxlMm3lTAqbtba1iN/XplrrUZ5/XhMWZwBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:9e:d3:1d:ff:7f:4e:0f:6c:d1:8a:74:44:6f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Validity
Not Before: Jun 8 16:01:34 2025 GMT
Not After : Jun 9 16:01:34 2025 GMT
Subject: CN=3a76fe407d6da4edc73a70fea7d6f7fe1f12464a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:95:fe:4a:3a:3d:ed:08:48:d1:23:70:7e:
98:f0:57:69:fb:cd:66:26:cd:c6:6b:5b:b0:ee:73:
64:44:fc:57:fa:a4:a7:e8:dc:f5:31:2d:75:39:5f:
79:a3:0e:b6:aa:36:27:ac:ad:c1:93:b4:c3:62:15:
b3:04:2c:02:17:d2:2c:a5:2a:ed:29:af:87:c3:eb:
d1:ad:d2:97:d0:c2:86:4d:c3:a9:8d:77:c8:70:9a:
21:92:91:7b:1e:97:95:f5:af:25:a9:74:91:d6:c6:
33:f9:ac:01:bc:1e:18:a1:fc:6d:f5:f1:d4:86:be:
c7:8b:1d:99:c3:55:da:fe:c0:89:b9:92:98:ce:1c:
8a:0c:8f:ab:08:20:65:6b:9a:cc:c0:0d:ec:60:92:
68:9a:68:1a:c1:25:ba:53:93:84:80:3a:3c:3a:89:
c9:96:b2:73:98:b4:5f:e3:ce:8a:ec:53:43:f2:1b:
86:89:fe:ea:1b:d4:62:b5:b0:f1:48:02:43:6d:6e:
e6:49:c0:59:5a:1f:77:f7:a2:bf:06:73:82:60:58:
48:af:1d:16:8a:61:b1:d9:ce:57:eb:18:81:45:d0:
a8:bd:22:47:7e:3c:18:08:63:83:6c:d1:59:eb:c5:
0d:11:9d:a6:88:76:e4:95:5f:ba:c4:66:76:f4:2a:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:76:FE:40:7D:6D:A4:ED:C7:3A:70:FE:A7:D6:F7:FE:1F:12:46:4A
X509v3 Authority Key Identifier:
keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:99:a8:ba:2a:9b:ff:f7:fb:e7:6c:40:d5:e9:07:d7:69:3f:
53:c2:45:cf:ab:ee:c6:8b:62:bb:d7:ac:5f:3b:5a:f7:e8:d8:
e7:5b:f1:c9:66:a1:6a:95:d3:63:4b:c2:7c:03:d9:6d:96:38:
67:15:4e:b6:02:23:6b:d5:10:9e:59:c3:10:08:b7:96:8b:d1:
78:26:af:c3:7d:3a:a2:7e:73:0c:b4:43:c1:2c:93:b6:c5:cd:
ec:a5:a9:c8:fe:17:ac:7f:0f:1f:fc:ec:02:1d:f6:1f:84:35:
7d:7b:32:8d:ad:c7:34:ec:ef:33:fa:af:29:8d:dc:9f:fd:d9:
71:f3:71:8b:7d:d6:f9:83:36:f9:fb:96:fa:bb:28:dc:92:fa:
da:83:21:05:59:b0:10:49:13:85:73:8a:dc:cd:c5:c9:ac:18:
42:b8:2d:b0:39:e8:ba:3c:bc:a4:87:9e:16:c7:2f:98:91:dc:
f0:a8:82:7b:af:60:f4:cc:7a:bf:23:66:de:8a:ef:67:68:3a:
30:f9:55:89:66:ee:0e:a3:2c:73:b0:e4:43:af:3e:0b:80:98:
47:87:82:04:36:8c:8f:98:3c:07:f7:51:cb:84:f6:c0:18:13:
e2:60:cc:ec:d5:ce:0c:58:31:37:12:e6:b2:63:20:74:1d:4e:
b9:7f:2c:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRp7THf9/Tg9s0Yp0RG+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjliNGYxYTA5MGFjMDdiZTE3NjJkZWMzMzhlNmEwZmUz
NWQ5N2UwHhcNMjUwNjA4MTYwMTM0WhcNMjUwNjA5MTYwMTM0WjAzMTEwLwYDVQQD
EygzYTc2ZmU0MDdkNmRhNGVkYzczYTcwZmVhN2Q2ZjdmZTFmMTI0NjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOeV/ko6Pe0ISNEjcH6Y8Fdp+81m
Js3Ga1uw7nNkRPxX+qSn6Nz1MS11OV95ow62qjYnrK3Bk7TDYhWzBCwCF9IspSrt
Ka+Hw+vRrdKX0MKGTcOpjXfIcJohkpF7HpeV9a8lqXSR1sYz+awBvB4Yofxt9fHU
hr7Hix2Zw1Xa/sCJuZKYzhyKDI+rCCBla5rMwA3sYJJommgawSW6U5OEgDo8OonJ
lrJzmLRf486K7FND8huGif7qG9RitbDxSAJDbW7mScBZWh9396K/BnOCYFhIrx0W
imGx2c5X6xiBRdCovSJHfjwYCGODbNFZ68UNEZ2miHbklV+6xGZ29CotjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp2/kB9baTtxzpw/qfW9/4fEkZKMB8GA1UdIwQY
MBaAFHYptPGgkKwHvhdi3sM45qD+Ndl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQt
NWYxNzViNWFlMDM4LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQtNWYxNzViNWFlMDM4
LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZmouiqb
//f752xA1ekH12k/U8JFz6vuxotiu9esXzta9+jY51vxyWahapXTY0vCfAPZbZY4
ZxVOtgIja9UQnlnDEAi3lovReCavw306on5zDLRDwSyTtsXN7KWpyP4XrH8PH/zs
Ah32H4Q1fXsyja3HNOzvM/qvKY3cn/3ZcfNxi33W+YM2+fuW+rso3JL62oMhBVmw
EEkThXOK3M3FyawYQrgtsDnoujy8pIeeFscvmJHc8KiCe69g9Mx6vyNm3orvZ2g6
MPlViWbuDqMsc7DkQ68+C4CYR4eCBDaMj5g8B/dRy4T2wBgT4mDM7NXODFgxNxLm
smMgdB1OuX8stQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:08:03 2025 by rpki-client