Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
File: dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft (raw, json)
Hash identifier: Bb2eDcQQvKFPlrqRPek+Sy7ulNrCF2RQt53E+6bCPf4=
Subject key identifier: 56:62:A5:E2:08:23:96:C5:61:6B:F6:0A:AA:5B:BB:89:80:5F:FE:CA
Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
Certificate issuer: /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Certificate serial: 0197481EA151652FE5B053AF301DD817184C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
Manifest number: 0296
Signing time: Sat 07 Jun 2025 02:00:56 +0000
Manifest this update: Sat 07 Jun 2025 02:00:56 +0000
Manifest next update: Sun 08 Jun 2025 02:00:56 +0000
Files and hashes: 1: 9pwkvVGUxZHUtwNlu3Y83Nxaz_8.roa (hash: wGfSTyvkpA3QffCb7EADqonJa2uikcNI7XZWM9G88mE=)
2: dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl (hash: nD19Jb5p6UXcarGU7UL/t57Y/p+LXW2pkmnF30H2dkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:a1:51:65:2f:e5:b0:53:af:30:1d:d8:17:18:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Validity
Not Before: Jun 7 02:00:56 2025 GMT
Not After : Jun 8 02:00:56 2025 GMT
Subject: CN=5662a5e2082396c5616bf60aaa5bbb89805ffeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:30:c6:fb:40:ad:c6:a2:52:ec:fb:2a:4f:
70:e9:2a:06:8a:3a:13:d8:cb:c7:d4:45:21:29:c8:
41:ec:7c:65:de:8d:52:62:54:fe:8f:cc:51:e6:11:
34:1b:de:3b:da:0a:92:15:8b:25:df:00:04:52:7a:
cd:ae:97:bd:24:33:c6:df:27:16:7f:13:50:50:9e:
05:6a:5c:bb:75:35:ba:38:92:1c:69:e3:47:cf:58:
66:fc:cf:e7:8a:96:34:46:58:36:b5:7b:6c:3b:94:
df:2a:13:0a:c9:ac:61:4a:09:ad:0f:d4:0e:d1:db:
86:b8:59:d9:7a:91:db:f4:1a:7c:80:5a:47:97:8a:
6b:c9:be:0f:76:98:73:94:98:75:8a:1c:59:b9:99:
01:00:93:da:16:08:d9:ac:90:67:fc:88:c1:3d:2c:
7d:d8:9b:5b:46:2d:f0:3b:75:50:8a:5e:3a:44:9d:
9b:45:e7:b8:36:da:0d:bd:4e:75:42:26:27:ee:d2:
62:3e:4b:04:09:20:cc:c8:15:86:81:94:7b:e4:cb:
1e:6b:fe:d3:02:18:a9:66:b9:17:c7:cc:50:0e:22:
32:b4:ea:4c:f0:80:47:9f:a6:7c:0e:3a:10:63:55:
fa:bc:0b:00:4d:9f:f5:54:0a:9b:2f:23:64:3d:22:
18:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:62:A5:E2:08:23:96:C5:61:6B:F6:0A:AA:5B:BB:89:80:5F:FE:CA
X509v3 Authority Key Identifier:
keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:91:b6:00:61:a4:0c:88:1a:04:3c:c3:74:b2:db:7e:69:33:
e9:11:6e:45:6f:28:db:a7:a9:54:87:29:18:ba:86:f4:a3:80:
2a:ff:b7:06:ad:e5:84:1e:fb:94:d0:8a:0d:a0:94:7b:5b:e3:
d6:63:2b:29:eb:71:bf:dc:1f:de:a6:4b:7a:74:bb:f6:9a:42:
0e:29:2d:5f:30:80:d9:e2:13:74:3b:7b:72:2b:47:34:f4:fb:
bb:86:8b:d1:f0:74:1c:83:16:0f:87:ef:f1:f7:ff:d2:ea:b0:
e3:21:1a:21:a3:f9:61:11:0d:62:eb:04:61:05:bc:83:32:89:
b8:57:f2:dc:aa:8f:70:35:fe:e6:f1:41:01:8b:d6:92:70:e7:
0f:6f:6b:6a:dd:55:2c:5a:20:ce:d0:46:33:2d:e5:36:0a:30:
5a:3b:84:b0:db:bf:3d:32:9e:86:7d:a7:61:e7:4f:28:38:e0:
fa:60:98:c4:90:47:a8:c4:c8:56:57:7e:b6:b3:26:e6:2a:bc:
c8:bc:67:ef:2d:ac:cd:f7:27:e7:28:29:a1:02:59:00:38:0f:
bc:c9:09:53:d1:6f:01:7d:16:ad:4c:00:4a:68:a1:b0:c1:ec:
60:ef:e8:04:3f:42:e7:b9:50:af:ec:32:d1:90:68:de:8b:74:
bb:83:8b:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHqFRZS/lsFOvMB3YFxhMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjE4ZWYyYzRiNGY4MjQ5ZjlhNmVkYTBiMzNmMGU1N2Rh
OGE5ZGMwHhcNMjUwNjA3MDIwMDU2WhcNMjUwNjA4MDIwMDU2WjAzMTEwLwYDVQQD
Eyg1NjYyYTVlMjA4MjM5NmM1NjE2YmY2MGFhYTViYmI4OTgwNWZmZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyAwxvtArcaiUuz7Kk9w6SoGijoT
2MvH1EUhKchB7Hxl3o1SYlT+j8xR5hE0G9472gqSFYsl3wAEUnrNrpe9JDPG3ycW
fxNQUJ4Faly7dTW6OJIcaeNHz1hm/M/nipY0Rlg2tXtsO5TfKhMKyaxhSgmtD9QO
0duGuFnZepHb9Bp8gFpHl4pryb4PdphzlJh1ihxZuZkBAJPaFgjZrJBn/IjBPSx9
2JtbRi3wO3VQil46RJ2bRee4NtoNvU51QiYn7tJiPksECSDMyBWGgZR75Msea/7T
AhipZrkXx8xQDiIytOpM8IBHn6Z8DjoQY1X6vAsATZ/1VAqbLyNkPSIYbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZipeIII5bFYWv2Cqpbu4mAX/7KMB8GA1UdIwQY
MBaAFHWxjvLEtPgkn5pu2gsz8OV9qKncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84NWY4OTQtMWU1NS00YWQyLTk2MTUt
YjVlNTZlMGVjY2RlLzEvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84NWY4OTQtMWU1NS00YWQyLTk2MTUtYjVlNTZlMGVjY2Rl
LzEvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJG2AGGk
DIgaBDzDdLLbfmkz6RFuRW8o26epVIcpGLqG9KOAKv+3Bq3lhB77lNCKDaCUe1vj
1mMrKetxv9wf3qZLenS79ppCDiktXzCA2eITdDt7citHNPT7u4aL0fB0HIMWD4fv
8ff/0uqw4yEaIaP5YRENYusEYQW8gzKJuFfy3KqPcDX+5vFBAYvWknDnD29rat1V
LFogztBGMy3lNgowWjuEsNu/PTKehn2nYedPKDjg+mCYxJBHqMTIVld+trMm5iq8
yLxn7y2szfcn5ygpoQJZADgPvMkJU9FvAX0WrUwASmihsMHsYO/oBD9C57lQr+wy
0ZBo3ot0u4OLQg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:00:11 2025 by rpki-client