Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: JXJBRVJAw3oMpZOlr7rRSh7vQOo/RtHqWvGdo+mlUyM=
Subject key identifier: 7F:D1:EE:60:57:AE:E4:80:26:00:79:9B:98:C8:3B:89:E9:BA:9C:15
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 01974C9FE1F9C44985EC8B81EA0FFAC407EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 23:00:35 +0000
Manifest this update: Sat 07 Jun 2025 23:00:35 +0000
Manifest next update: Sun 08 Jun 2025 23:00:35 +0000
Files and hashes: 1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: rjhhjMiWTYfBme87YTMkwkUBB/yTlNX2xmbhchuStJM=)
2: PGpk2qjaEHATBO5WJqpwQvvo-t4.roa (hash: sxUY6k6RZnsEb5wstWgn4/zoH8gCs5vVrsT2wup6jP0=)
3: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (hash: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:e1:f9:c4:49:85:ec:8b:81:ea:0f:fa:c4:07:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Jun 7 23:00:35 2025 GMT
Not After : Jun 8 23:00:35 2025 GMT
Subject: CN=7fd1ee6057aee4802600799b98c83b89e9ba9c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:b3:1c:8c:ef:f0:6c:40:a4:7c:e4:63:0f:
6b:62:1b:f9:56:15:d6:2a:11:1d:12:eb:50:e4:14:
20:6d:df:54:20:b3:9f:47:6c:bf:ca:05:7b:dd:65:
a4:00:fa:66:e9:a0:1a:0a:39:72:ab:03:aa:18:4e:
40:31:8f:2b:b8:b4:6b:f9:e0:27:94:55:33:59:68:
ac:e9:e0:c9:5d:5d:93:c4:20:d7:1b:6b:89:eb:81:
d2:ae:77:7f:2d:7c:cc:47:19:50:8c:b7:cc:fe:43:
d2:57:33:0c:40:80:f2:6d:09:87:3a:e5:6f:a1:30:
cd:9c:dd:eb:7d:eb:dd:7f:ea:33:23:13:de:38:3c:
ab:25:64:96:65:2a:c5:0a:26:ae:07:76:d9:02:0c:
8b:f6:42:59:6c:3a:86:72:82:71:6c:94:cc:24:05:
f5:9b:24:a3:dd:02:a5:a5:55:66:e5:40:18:db:0f:
31:26:2c:85:9d:11:31:f1:cb:40:16:92:6d:6b:aa:
89:66:b7:78:e2:b4:af:b4:41:5e:ca:7f:14:f8:b7:
93:90:94:f6:55:6a:66:c8:3b:0c:75:3c:e6:86:60:
b7:5b:3a:f5:f8:bf:48:76:8b:89:2e:d8:b7:40:d2:
08:8b:64:ab:b1:78:f0:05:c9:94:de:1c:18:6d:b7:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D1:EE:60:57:AE:E4:80:26:00:79:9B:98:C8:3B:89:E9:BA:9C:15
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c2:b5:fc:f5:a5:03:0e:d7:63:5c:29:d4:f5:51:e6:82:aa:
25:fb:25:7f:4c:f6:c5:df:0e:6c:bf:ac:8a:2d:3f:27:e1:fd:
f1:d7:a5:27:fa:59:d0:4d:dd:bd:14:f9:5d:94:82:c0:d4:50:
0b:fe:ad:b1:4c:5e:4b:9a:f0:1f:31:2d:dd:bc:17:40:ba:ec:
fa:d9:c6:14:12:fd:0a:0a:ba:f1:26:e2:8c:9d:de:c0:a6:22:
6c:5a:69:ec:94:53:c7:93:b9:30:62:c7:e1:85:76:cf:e7:dd:
1a:4a:55:e6:bc:3a:1f:46:83:c5:a9:e0:33:55:f0:61:4a:97:
8b:ce:af:35:84:04:48:78:e1:c3:10:2a:64:97:ac:b7:60:eb:
0f:84:a8:35:30:cd:43:03:0a:1a:ad:89:b2:64:d4:1c:d8:d6:
0e:d7:1e:b4:f0:1d:6d:f7:1a:a4:9e:73:ab:20:fa:e6:24:4f:
64:7d:a0:bd:77:e5:8c:fc:eb:28:01:f3:b8:c8:66:1b:85:08:
84:e7:65:6c:e5:6b:d1:32:fc:67:4a:80:ee:3c:e0:df:1c:44:
7e:0c:bb:f8:56:81:96:dc:72:dd:53:5d:1f:63:7d:68:d6:93:
ef:b3:cb:d3:4a:79:64:b3:24:70:79:e0:6a:5e:2a:e7:96:d3:
fd:0f:95:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMn+H5xEmF7IuB6g/6xAfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDEzNGZhZmJhNzJlMDYzMzljYWRjNTVkNWYxM2JhZTQ4
MmIxMmQwHhcNMjUwNjA3MjMwMDM1WhcNMjUwNjA4MjMwMDM1WjAzMTEwLwYDVQQD
Eyg3ZmQxZWU2MDU3YWVlNDgwMjYwMDc5OWI5OGM4M2I4OWU5YmE5YzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPmzHIzv8GxApHzkYw9rYhv5VhXW
KhEdEutQ5BQgbd9UILOfR2y/ygV73WWkAPpm6aAaCjlyqwOqGE5AMY8ruLRr+eAn
lFUzWWis6eDJXV2TxCDXG2uJ64HSrnd/LXzMRxlQjLfM/kPSVzMMQIDybQmHOuVv
oTDNnN3rfevdf+ozIxPeODyrJWSWZSrFCiauB3bZAgyL9kJZbDqGcoJxbJTMJAX1
mySj3QKlpVVm5UAY2w8xJiyFnREx8ctAFpJta6qJZrd44rSvtEFeyn8U+LeTkJT2
VWpmyDsMdTzmhmC3Wzr1+L9IdouJLti3QNIIi2SrsXjwBcmU3hwYbbcsvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/R7mBXruSAJgB5m5jIO4npupwVMB8GA1UdIwQY
MBaAFA4BNPr7py4GM5ytxV1fE7rkgrEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzct
ZDEyNDZjYzJjMzRlLzEvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzctZDEyNDZjYzJjMzRl
LzEvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMK1/PWl
Aw7XY1wp1PVR5oKqJfslf0z2xd8ObL+sii0/J+H98delJ/pZ0E3dvRT5XZSCwNRQ
C/6tsUxeS5rwHzEt3bwXQLrs+tnGFBL9Cgq68SbijJ3ewKYibFpp7JRTx5O5MGLH
4YV2z+fdGkpV5rw6H0aDxangM1XwYUqXi86vNYQESHjhwxAqZJest2DrD4SoNTDN
QwMKGq2JsmTUHNjWDtcetPAdbfcapJ5zqyD65iRPZH2gvXfljPzrKAHzuMhmG4UI
hOdlbOVr0TL8Z0qA7jzg3xxEfgy7+FaBltxy3VNdH2N9aNaT77PL00p5ZLMkcHng
al4q55bT/Q+VNw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:26:44 2025 by rpki-client