Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: V+Q9i5shWa60NYZnE9xVXDPRDyMn1T1z6+YF+yHgJS4=
Subject key identifier: 17:B2:8D:D8:06:B5:56:C3:7A:7B:6C:EF:E4:4A:12:74:E8:C5:68:84
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 01974E574D6AC733871FC9F79818DD982D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 0C17
Signing time: Sun 08 Jun 2025 07:00:33 +0000
Manifest this update: Sun 08 Jun 2025 07:00:33 +0000
Manifest next update: Mon 09 Jun 2025 07:00:33 +0000
Files and hashes: 1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: N5xn1M9MzDTewUWxvr+qkXQjuE/2MHF+j2VX7D2K2X0=)
2: JSDk17ahgjuw722aAK05JMcAXY0.roa (hash: /NFnbJGiq89G5CeYaHNRHk4PJoghq/D0jyLC3XejUq4=)
3: ziX8_hpTF8ziYiuxKjrOFhfqeQo.roa (hash: HyWFcNCrTB5jYAeqdAfWDrR8oFNvkYOvB8sslFQIfBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:4d:6a:c7:33:87:1f:c9:f7:98:18:dd:98:2d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Jun 8 07:00:33 2025 GMT
Not After : Jun 9 07:00:33 2025 GMT
Subject: CN=17b28dd806b556c37a7b6cefe44a1274e8c56884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cd:2a:ff:03:2c:fc:2a:cf:e1:24:95:9e:c5:
38:92:1e:16:64:38:7d:67:e4:a9:3c:84:ca:d5:9e:
b6:89:d1:14:0c:b1:70:1e:c0:05:00:c6:8f:a9:0b:
38:6d:7e:36:00:88:db:b9:7a:ea:c4:54:19:a3:68:
1e:b6:0b:d1:49:05:89:c6:9c:fd:9e:2c:d5:27:90:
ca:16:45:2b:5b:95:c7:ee:28:70:94:b2:07:c2:18:
6e:f7:ec:fc:43:21:16:55:c1:60:75:5c:32:46:84:
46:fc:d3:dd:43:2f:a3:b7:66:aa:72:e5:41:f8:18:
ed:b8:f0:39:6d:e0:bc:5b:b8:55:df:8f:10:f4:43:
75:98:9d:f2:f5:2a:1f:47:e4:f7:1e:f9:d8:ee:6c:
ed:93:f3:cf:84:3b:45:c7:99:f5:30:4d:11:bb:4f:
8a:64:13:b7:f8:af:e6:6f:19:b5:83:90:b8:eb:2b:
5f:35:f7:60:ba:aa:a2:cd:ca:16:da:d8:bc:06:12:
dc:75:62:b0:37:7b:1d:60:9c:27:32:cc:97:9d:20:
10:9b:fa:b3:90:8d:51:72:0a:cd:d5:16:96:3f:3a:
3d:88:ef:21:2a:3c:fe:78:24:76:fd:c7:06:fb:dd:
73:1c:7f:2f:45:bd:ae:09:45:18:01:a6:59:68:ce:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B2:8D:D8:06:B5:56:C3:7A:7B:6C:EF:E4:4A:12:74:E8:C5:68:84
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:19:0b:2e:8d:e1:9f:2b:5b:ce:a5:a8:16:4f:5e:57:43:92:
ce:22:92:03:d4:c2:74:cf:eb:6d:a6:37:59:03:b4:eb:a4:23:
7f:34:cb:81:f6:50:33:60:bc:0f:39:48:c6:78:f1:ac:4d:9f:
12:3c:79:5a:fe:bc:31:ae:58:5b:0f:43:6c:37:4e:d7:25:f1:
ec:d9:a7:43:09:8d:d9:94:05:c9:36:55:75:5e:c5:3d:29:f2:
38:50:8a:0c:a0:22:7d:7d:3b:be:2b:cb:50:ac:87:91:9b:db:
ec:45:e8:8b:f2:b4:89:0a:97:9b:b2:3f:ce:d6:52:fd:4f:18:
c2:1f:be:f9:cc:37:1d:6a:93:9f:b0:01:f0:d1:d0:cc:d3:a4:
eb:e7:0a:2c:2a:92:b0:fc:c8:78:6f:bc:a2:bc:c5:df:88:bf:
72:df:9d:a6:88:f8:69:85:68:d2:8c:5e:48:9a:db:47:34:4e:
30:21:9c:fd:52:83:c2:48:3e:32:93:60:2a:f0:e7:15:88:04:
45:42:bc:e1:ad:1d:b3:d9:a1:fe:e6:5b:4d:1e:d8:77:c9:a9:
42:1c:a1:57:8a:c5:57:86:a5:67:d1:bb:80:a4:0f:fe:05:05:
04:d6:18:03:46:b8:c7:2c:3d:4b:43:53:c2:fb:33:ec:11:96:
71:e2:83:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV01qxzOHH8n3mBjdmC2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMTdkYWUwNDQ3NmRiMTAxNmNhYTQzZTNlZDliYzZiZDY5
ZjM5NzUwHhcNMjUwNjA4MDcwMDMzWhcNMjUwNjA5MDcwMDMzWjAzMTEwLwYDVQQD
EygxN2IyOGRkODA2YjU1NmMzN2E3YjZjZWZlNDRhMTI3NGU4YzU2ODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA480q/wMs/CrP4SSVnsU4kh4WZDh9
Z+SpPITK1Z62idEUDLFwHsAFAMaPqQs4bX42AIjbuXrqxFQZo2getgvRSQWJxpz9
nizVJ5DKFkUrW5XH7ihwlLIHwhhu9+z8QyEWVcFgdVwyRoRG/NPdQy+jt2aqcuVB
+BjtuPA5beC8W7hV348Q9EN1mJ3y9SofR+T3HvnY7mztk/PPhDtFx5n1ME0Ru0+K
ZBO3+K/mbxm1g5C46ytfNfdguqqizcoW2ti8BhLcdWKwN3sdYJwnMsyXnSAQm/qz
kI1RcgrN1RaWPzo9iO8hKjz+eCR2/ccG+91zHH8vRb2uCUUYAaZZaM4PSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeyjdgGtVbDents7+RKEnToxWiEMB8GA1UdIwQY
MBaAFAwX2uBEdtsQFsqkPj7ZvGvWnzl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREJmYTRFUjIyeEFXeXFRLVB0bThhOWFmT1hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi84MWQ5NGQtMmU0MC00NTQ2LThiODkt
ODA0ZjE3ZWMyNDVlLzEvREJmYTRFUjIyeEFXeXFRLVB0bThhOWFmT1hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi84MWQ5NGQtMmU0MC00NTQ2LThiODktODA0ZjE3ZWMyNDVl
LzEvREJmYTRFUjIyeEFXeXFRLVB0bThhOWFmT1hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRkLLo3h
nytbzqWoFk9eV0OSziKSA9TCdM/rbaY3WQO066QjfzTLgfZQM2C8DzlIxnjxrE2f
Ejx5Wv68Ma5YWw9DbDdO1yXx7NmnQwmN2ZQFyTZVdV7FPSnyOFCKDKAifX07vivL
UKyHkZvb7EXoi/K0iQqXm7I/ztZS/U8Ywh+++cw3HWqTn7AB8NHQzNOk6+cKLCqS
sPzIeG+8orzF34i/ct+dpoj4aYVo0oxeSJrbRzROMCGc/VKDwkg+MpNgKvDnFYgE
RUK84a0ds9mh/uZbTR7Yd8mpQhyhV4rFV4alZ9G7gKQP/gUFBNYYA0a4xyw9S0NT
wvsz7BGWceKDsw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:29:32 2025 by rpki-client