Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
File: dbciFa46YYMFwSMUKzSd8mZyoU0.mft (raw, json)
Hash identifier: UsQwWJrV+KzwVvWNmpwtUFgLWAj1ClxldxVfmzyT3pI=
Subject key identifier: 96:BB:23:5C:F1:BB:B4:1F:B0:99:54:8C:3C:8C:32:3B:D9:5B:74:B4
Authority key identifier: 75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
Certificate issuer: /CN=75b72215ae3a618305c123142b349df26672a14d
Certificate serial: 019748554F137B30C7497FC467F89E09401B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
Manifest number: 026D
Signing time: Sat 07 Jun 2025 03:00:39 +0000
Manifest this update: Sat 07 Jun 2025 03:00:39 +0000
Manifest next update: Sun 08 Jun 2025 03:00:39 +0000
Files and hashes: 1: dbciFa46YYMFwSMUKzSd8mZyoU0.crl (hash: YsNdRzjn9AfMIBtU4Pkr//Gu8Y0ZGSzU9Qb+LEjHhSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:4f:13:7b:30:c7:49:7f:c4:67:f8:9e:09:40:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b72215ae3a618305c123142b349df26672a14d
Validity
Not Before: Jun 7 03:00:39 2025 GMT
Not After : Jun 8 03:00:39 2025 GMT
Subject: CN=96bb235cf1bbb41fb099548c3c8c323bd95b74b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:df:b7:fe:32:a0:d7:9b:b5:c7:c7:cb:61:
4c:62:ab:b7:bb:0c:5a:ab:ed:72:78:40:8b:c5:84:
5f:f0:a1:46:d5:f1:29:9a:c0:a4:90:ff:3e:72:f5:
55:4d:38:e4:d6:1d:17:64:94:03:c0:70:92:e9:17:
55:86:c0:e5:4a:ea:45:13:09:35:24:60:59:31:da:
fd:50:41:eb:ff:41:89:9f:24:e7:55:07:5b:be:c1:
28:87:a8:4a:59:06:af:68:14:d6:ae:d2:0c:cd:76:
c7:05:c1:8a:0f:0d:33:6e:2c:de:fe:7b:1c:99:4c:
70:41:16:b5:55:c5:65:2f:7b:33:d3:a2:7f:13:9a:
45:aa:3c:40:81:52:d3:43:7c:95:b6:b6:5e:0d:66:
2c:cd:ac:56:cc:d7:99:b8:44:96:b2:ca:26:47:65:
a1:b0:05:d1:f5:01:f3:87:a5:54:3f:89:de:7f:0e:
43:ac:67:66:9f:77:e7:7f:98:b8:00:e0:bf:e6:4f:
05:34:2e:0d:1e:18:f7:a7:4b:5e:c6:06:93:2e:30:
f9:4a:07:01:1c:5a:8d:96:c4:1a:8c:35:1b:c6:24:
24:3f:69:ae:2b:5d:2c:36:25:0c:db:a7:7a:26:77:
cb:9f:95:73:aa:c6:33:fe:4b:90:46:fd:4d:2b:08:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BB:23:5C:F1:BB:B4:1F:B0:99:54:8C:3C:8C:32:3B:D9:5B:74:B4
X509v3 Authority Key Identifier:
keyid:75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0f:c7:d9:f6:8c:f7:b4:b7:1b:a6:6b:51:25:7d:6b:70:95:
79:d5:cc:7f:43:2e:4a:c2:f9:c1:69:1f:24:d4:eb:0d:ee:4c:
92:db:61:37:4b:10:6e:04:f0:6e:ff:75:90:90:4c:1c:8a:2f:
46:35:8a:e0:81:2a:0c:d1:a7:37:7d:ad:ba:e8:53:18:22:94:
43:5a:ab:aa:8a:77:2f:d2:a5:3f:c1:62:26:b6:e2:10:50:8f:
0a:31:7a:7b:16:8e:84:3b:a0:20:bb:14:06:6e:2a:9a:dd:57:
8f:2c:e9:bb:1c:4e:cd:b0:5b:34:80:16:32:44:62:36:aa:12:
26:09:1b:3e:f6:90:4b:3a:6e:2c:d9:39:63:74:b0:cc:f4:da:
b4:3c:02:69:fd:64:a4:3a:24:a5:36:f9:87:f1:28:68:b5:c1:
83:79:40:51:e1:41:b2:57:d2:72:f1:4e:63:3e:70:98:2d:ef:
78:bf:0f:76:18:bf:7d:5e:3e:f5:91:01:43:d1:4f:81:76:fa:
83:09:23:e8:b7:1f:4c:e6:ee:25:9a:69:26:a3:b9:fb:48:75:
28:8f:8c:bd:ad:8a:ce:88:8e:9e:c6:98:49:d6:b4:d2:6c:e0:
87:69:c3:ab:6c:b2:d3:93:c7:2b:ca:71:8e:63:fd:9a:72:f7:
b8:ae:22:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVU8TezDHSX/EZ/ieCUAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjcyMjE1YWUzYTYxODMwNWMxMjMxNDJiMzQ5ZGYyNjY3
MmExNGQwHhcNMjUwNjA3MDMwMDM5WhcNMjUwNjA4MDMwMDM5WjAzMTEwLwYDVQQD
Eyg5NmJiMjM1Y2YxYmJiNDFmYjA5OTU0OGMzYzhjMzIzYmQ5NWI3NGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK7ft/4yoNebtcfHy2FMYqu3uwxa
q+1yeECLxYRf8KFG1fEpmsCkkP8+cvVVTTjk1h0XZJQDwHCS6RdVhsDlSupFEwk1
JGBZMdr9UEHr/0GJnyTnVQdbvsEoh6hKWQavaBTWrtIMzXbHBcGKDw0zbize/nsc
mUxwQRa1VcVlL3sz06J/E5pFqjxAgVLTQ3yVtrZeDWYszaxWzNeZuESWssomR2Wh
sAXR9QHzh6VUP4nefw5DrGdmn3fnf5i4AOC/5k8FNC4NHhj3p0texgaTLjD5SgcB
HFqNlsQajDUbxiQkP2muK10sNiUM26d6JnfLn5VzqsYz/kuQRv1NKwghZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJa7I1zxu7QfsJlUjDyMMjvZW3S0MB8GA1UdIwQY
MBaAFHW3IhWuOmGDBcEjFCs0nfJmcqFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iZWE5ZGItMWI5Mi00NGNiLThmZDMt
YmRiZTViN2E3NjgwLzEvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9iZWE5ZGItMWI5Mi00NGNiLThmZDMtYmRiZTViN2E3Njgw
LzEvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArA/H2faM
97S3G6ZrUSV9a3CVedXMf0MuSsL5wWkfJNTrDe5MktthN0sQbgTwbv91kJBMHIov
RjWK4IEqDNGnN32tuuhTGCKUQ1qrqop3L9KlP8FiJrbiEFCPCjF6exaOhDugILsU
Bm4qmt1XjyzpuxxOzbBbNIAWMkRiNqoSJgkbPvaQSzpuLNk5Y3SwzPTatDwCaf1k
pDokpTb5h/EoaLXBg3lAUeFBslfScvFOYz5wmC3veL8Pdhi/fV4+9ZEBQ9FPgXb6
gwkj6LcfTObuJZppJqO5+0h1KI+Mva2KzoiOnsaYSda00mzgh2nDq2yy05PHK8px
jmP9mnL3uK4iqw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:18:48 2025 by rpki-client