Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: utVI0L7ChtMgZ8er/EBZpKRnnkrRCPre+WpzyBaPyX8=
Subject key identifier: 72:F0:C2:32:7D:1D:A4:EC:5F:CB:BA:37:CA:1B:5C:42:C9:99:45:BE
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 01974C9FC70C6E8A1AD5EFFF4CCBFB031D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 23:00:28 +0000
Manifest this update: Sat 07 Jun 2025 23:00:28 +0000
Manifest next update: Sun 08 Jun 2025 23:00:28 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: sqRwyxVWWHOmN8BO+aIf1O7BtaWE482Gl72LELAb9sI=)
2: WtAp0tL-l96y_gbMlR5puzdruQc.roa (hash: xRGTdhiVzbN5no9s0pfriVSMuD8OBdniQOQSDlzn9q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:c7:0c:6e:8a:1a:d5:ef:ff:4c:cb:fb:03:1d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Jun 7 23:00:28 2025 GMT
Not After : Jun 8 23:00:28 2025 GMT
Subject: CN=72f0c2327d1da4ec5fcbba37ca1b5c42c99945be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:d9:ad:0f:ca:1a:2c:71:d8:37:fd:17:69:
99:90:83:8f:7c:8d:0b:69:42:5b:0c:e7:64:49:7c:
d8:cd:e6:1c:66:7b:f1:da:85:20:b7:b2:22:da:a7:
28:51:53:71:d1:20:57:29:66:c6:0a:6e:23:f1:b7:
18:08:35:da:9a:16:6c:86:4c:3c:d4:4a:2a:9f:f3:
a7:9a:c6:15:4b:30:bf:d9:e2:88:16:14:a0:55:4f:
ed:dd:d3:b7:eb:d4:75:0b:43:2b:60:3f:6f:ca:f1:
a5:12:20:90:a2:d5:fa:d0:e3:6a:d6:d2:c3:b8:5a:
b8:dd:81:ce:f0:a6:9f:d2:a0:70:b8:4d:44:6c:f7:
ef:c3:26:0b:8e:c8:be:86:48:46:61:1a:11:48:b7:
13:d9:5d:0b:0a:fb:d3:ea:54:5a:60:a2:f9:8b:b0:
ee:6e:28:9a:81:9a:e8:35:4d:5a:b7:5e:a0:9f:89:
bd:8a:25:f3:84:4b:5b:42:9a:06:41:08:bd:8b:cc:
82:12:bf:77:5c:35:bf:46:bc:83:7b:1f:04:8e:87:
f9:a5:cb:55:8e:a0:a2:7f:97:28:02:37:d3:f9:93:
27:1e:23:32:68:e8:4d:1a:d6:6c:50:ed:88:bb:ce:
5c:b1:23:9d:b6:50:30:8e:f4:52:0d:a1:ec:4f:4f:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F0:C2:32:7D:1D:A4:EC:5F:CB:BA:37:CA:1B:5C:42:C9:99:45:BE
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:58:20:ad:02:f5:98:3c:a9:8a:9d:d3:47:2c:3b:2f:c7:fd:
75:f2:8c:8f:13:70:b3:b3:9c:85:47:62:3d:89:26:30:8f:bb:
de:58:ce:a7:0c:e7:cc:b7:b6:f1:ba:34:e5:5f:b5:bb:26:e2:
3b:f0:19:af:29:e8:f0:ae:2e:b5:e3:26:7a:1e:79:e6:6b:db:
c1:88:25:1e:9d:ef:6b:e7:23:22:09:ba:14:ab:1e:f4:c2:a6:
fd:7e:e1:ce:5c:b6:71:bd:07:6d:cf:6c:51:38:a8:98:8a:e6:
cb:fe:5b:2f:f2:e3:84:78:4d:ce:6e:12:17:1c:14:27:07:8e:
1c:0a:e0:2c:82:85:b5:7f:fa:9e:f8:61:25:7e:b2:ca:1a:08:
6d:68:7e:23:b2:e2:5a:d2:39:3f:18:36:25:c4:ab:9b:30:29:
ed:25:71:30:96:d7:8a:3a:4d:82:a6:40:d1:4b:bc:8c:af:c9:
b2:54:0b:ea:d8:e9:16:93:68:9d:98:93:c8:4b:b9:2f:e7:56:
ce:53:66:5c:e3:e7:ab:3a:e2:24:b6:8a:b7:0d:20:d6:2e:82:
dd:bd:10:96:53:3a:63:81:6b:f1:7f:36:89:d5:ff:2a:56:1d:
dc:e4:85:7d:60:26:96:4c:78:c2:73:02:7a:00:f4:18:cb:63:
7b:47:e3:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMn8cMbooa1e//TMv7Ax0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOGFhZTE4OWM2M2NlYjU2NDNjYjA4MDMyN2JjYWEzYjBl
ZjhhNTkwHhcNMjUwNjA3MjMwMDI4WhcNMjUwNjA4MjMwMDI4WjAzMTEwLwYDVQQD
Eyg3MmYwYzIzMjdkMWRhNGVjNWZjYmJhMzdjYTFiNWM0MmM5OTk0NWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKbZrQ/KGixx2Df9F2mZkIOPfI0L
aUJbDOdkSXzYzeYcZnvx2oUgt7Ii2qcoUVNx0SBXKWbGCm4j8bcYCDXamhZshkw8
1Eoqn/OnmsYVSzC/2eKIFhSgVU/t3dO369R1C0MrYD9vyvGlEiCQotX60ONq1tLD
uFq43YHO8Kaf0qBwuE1EbPfvwyYLjsi+hkhGYRoRSLcT2V0LCvvT6lRaYKL5i7Du
biiagZroNU1at16gn4m9iiXzhEtbQpoGQQi9i8yCEr93XDW/RryDex8Ejof5pctV
jqCif5coAjfT+ZMnHiMyaOhNGtZsUO2Iu85csSOdtlAwjvRSDaHsT0+3DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLwwjJ9HaTsX8u6N8obXELJmUW+MB8GA1UdIwQY
MBaAFAyKrhicY861ZDywgDJ7yqOw74pZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQt
YjZiYTg2Y2YzMWY5LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQtYjZiYTg2Y2YzMWY5
LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1ggrQL1
mDypip3TRyw7L8f9dfKMjxNws7OchUdiPYkmMI+73ljOpwznzLe28bo05V+1uybi
O/AZryno8K4uteMmeh555mvbwYglHp3va+cjIgm6FKse9MKm/X7hzly2cb0Hbc9s
UTiomIrmy/5bL/LjhHhNzm4SFxwUJweOHArgLIKFtX/6nvhhJX6yyhoIbWh+I7Li
WtI5Pxg2JcSrmzAp7SVxMJbXijpNgqZA0Uu8jK/JslQL6tjpFpNonZiTyEu5L+dW
zlNmXOPnqzriJLaKtw0g1i6C3b0QllM6Y4Fr8X82idX/KlYd3OSFfWAmlkx4wnMC
egD0GMtje0fjiw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:31 2025 by rpki-client