Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: CdcPusdI0GTrNNl8H8k9tv5O5R+w6SI9l3u2+e1KAbA=
Subject key identifier: C2:9B:C9:98:76:FA:AE:58:DC:9D:14:06:95:F3:3B:04:88:DA:A6:59
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 01974E5844BB5E090C05E053F4AC37D6C23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 07:01:36 +0000
Manifest this update: Sun 08 Jun 2025 07:01:36 +0000
Manifest next update: Mon 09 Jun 2025 07:01:36 +0000
Files and hashes: 1: 3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa (hash: 32NxwfNK1ZaYklZXBKeX9wsuxMzcdx3YENya2fUqH/0=)
2: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: qnRaeKs56FRDkOJBMUDah0SzbwFvGROFITYYH6I+L90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:44:bb:5e:09:0c:05:e0:53:f4:ac:37:d6:c2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Jun 8 07:01:36 2025 GMT
Not After : Jun 9 07:01:36 2025 GMT
Subject: CN=c29bc99876faae58dc9d140695f33b0488daa659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:2c:6d:16:f8:2c:f6:b7:48:b6:68:0f:0c:
a6:f3:d3:72:0b:65:99:e8:86:b8:63:b3:95:65:4b:
5f:3e:84:56:83:07:3d:d5:52:15:21:d5:f8:5a:2e:
a4:6f:90:78:a8:d2:cf:3c:6d:3b:fd:35:9f:3c:1c:
5f:84:95:0d:a3:68:fd:99:55:87:cf:a2:17:73:e3:
8a:cc:e8:e2:1c:fa:7f:43:72:e7:7f:c1:4e:be:f0:
17:52:53:d3:36:a1:8f:86:e5:23:c0:b7:a4:7b:a0:
13:57:81:e1:28:1d:10:fa:b8:5d:cc:69:89:98:b5:
d0:91:96:67:ab:ac:67:13:3d:bd:00:59:dd:98:e2:
af:7e:d5:1e:a1:b0:a6:a5:f6:7f:af:45:cc:72:02:
6d:33:52:52:02:27:4d:f4:8e:bf:84:3f:bf:87:89:
9d:8c:65:62:71:61:f7:fb:ba:fa:dc:48:dd:62:3a:
b5:f1:26:0c:e7:dd:3f:47:a4:4b:78:01:f0:43:04:
36:52:f9:2d:c3:58:cc:58:20:dd:c5:01:94:57:ec:
2e:66:d2:f1:ea:19:9d:d3:92:96:2f:99:82:15:40:
d2:43:2e:d3:c2:64:51:53:b8:6d:5d:77:e7:c8:1c:
50:1a:82:57:37:f0:0d:06:4a:f1:57:cd:a0:84:1a:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9B:C9:98:76:FA:AE:58:DC:9D:14:06:95:F3:3B:04:88:DA:A6:59
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c8:f1:32:cb:05:eb:52:1d:06:67:16:b5:af:bb:a3:f7:14:
4f:53:fe:a1:aa:75:04:24:40:87:e0:16:b5:3c:1d:d0:b1:f5:
19:54:f4:3a:f5:fe:8b:f8:d7:7d:17:ae:ae:4a:c2:0f:57:d8:
22:77:46:4e:3a:62:86:38:8f:40:a0:d2:a2:16:d9:54:96:3f:
7b:25:f2:2b:ae:cf:3b:38:ed:83:fc:74:6e:9c:e4:da:18:de:
93:18:76:0e:14:a9:14:d2:2d:b3:68:20:76:ea:f0:c1:fa:2d:
a0:e7:06:7a:6f:87:d8:fc:58:1e:d8:37:69:26:13:04:26:04:
b9:d4:8f:24:8f:d1:ae:2f:e7:ff:57:e5:f0:80:fd:c3:16:92:
96:fb:85:35:66:8f:5a:f6:51:d6:a6:fb:ef:a9:74:af:20:d8:
bc:18:27:d8:68:4c:21:59:d1:cb:3d:a1:11:8f:4b:3b:ac:4f:
c9:47:79:e9:0d:10:0b:b1:bd:92:25:28:56:83:d3:dc:b8:67:
d5:7b:d7:fe:35:8a:03:7f:25:c1:6d:00:40:cd:8e:a9:06:e4:
d6:de:42:d0:b1:fd:e4:15:90:4f:33:25:09:db:e0:31:fb:65:
8a:37:76:dd:05:a1:67:3b:83:23:c8:1d:da:91:cd:0d:32:34:
8d:c8:b9:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOWES7XgkMBeBT9Kw31sI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzYzNTc0ODk4MDYwZTFiNmE0OGNhYzNmMWYyYmNiMzZj
ODZkNGUwHhcNMjUwNjA4MDcwMTM2WhcNMjUwNjA5MDcwMTM2WjAzMTEwLwYDVQQD
EyhjMjliYzk5ODc2ZmFhZTU4ZGM5ZDE0MDY5NWYzM2IwNDg4ZGFhNjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6MsbRb4LPa3SLZoDwym89NyC2WZ
6Ia4Y7OVZUtfPoRWgwc91VIVIdX4Wi6kb5B4qNLPPG07/TWfPBxfhJUNo2j9mVWH
z6IXc+OKzOjiHPp/Q3Lnf8FOvvAXUlPTNqGPhuUjwLeke6ATV4HhKB0Q+rhdzGmJ
mLXQkZZnq6xnEz29AFndmOKvftUeobCmpfZ/r0XMcgJtM1JSAidN9I6/hD+/h4md
jGVicWH3+7r63EjdYjq18SYM590/R6RLeAHwQwQ2Uvktw1jMWCDdxQGUV+wuZtLx
6hmd05KWL5mCFUDSQy7TwmRRU7htXXfnyBxQGoJXN/ANBkrxV82ghBqJDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKbyZh2+q5Y3J0UBpXzOwSI2qZZMB8GA1UdIwQY
MBaAFAw2NXSJgGDhtqSMrD8fK8s2yG1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYt
YmE5MDFhNWZjYjc0LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYtYmE5MDFhNWZjYjc0
LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMjxMssF
61IdBmcWta+7o/cUT1P+oap1BCRAh+AWtTwd0LH1GVT0OvX+i/jXfReurkrCD1fY
IndGTjpihjiPQKDSohbZVJY/eyXyK67POzjtg/x0bpzk2hjekxh2DhSpFNIts2gg
durwwfotoOcGem+H2PxYHtg3aSYTBCYEudSPJI/Rri/n/1fl8ID9wxaSlvuFNWaP
WvZR1qb776l0ryDYvBgn2GhMIVnRyz2hEY9LO6xPyUd56Q0QC7G9kiUoVoPT3Lhn
1XvX/jWKA38lwW0AQM2OqQbk1t5C0LH95BWQTzMlCdvgMftlijd23QWhZzuDI8gd
2pHNDTI0jci5sA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:45:09 2025 by rpki-client