Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: m+la7C/PvoJLcPgZlpVJMR2RVdB9R5uvMZamjAXYSh4=
Subject key identifier: 17:73:37:4D:33:EC:37:0E:D3:8C:67:9A:99:F9:6E:0C:C5:C2:83:F4
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 0197B7B335C112569F6B5B7CCF8E6D019326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 1137
Signing time: Sat 28 Jun 2025 18:01:04 +0000
Manifest this update: Sat 28 Jun 2025 18:01:04 +0000
Manifest next update: Sun 29 Jun 2025 18:01:04 +0000
Files and hashes: 1: HD_5B5PkdD6FjC7TkT0hg6RMpR4.roa (hash: edkKQyLMUB/s54h+sVCKB7yaqoodePtajczbUuzbRHE=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: wfoMkAQzhcChr9zG8UQY1/kLNjolJ+r4IMzXCM+fkZA=)
3: f_wGT4AI_ECeedsmGEwBxGaUeL4.roa (hash: uaJcjwmpsOrQII9GbK1eXz3SSaKBT2wK73YD/T5U+Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:35:c1:12:56:9f:6b:5b:7c:cf:8e:6d:01:93:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Jun 28 18:01:04 2025 GMT
Not After : Jun 29 18:01:04 2025 GMT
Subject: CN=1773374d33ec370ed38c679a99f96e0cc5c283f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:78:26:8e:c6:93:a5:7f:15:12:96:f7:a5:
ec:65:14:96:9c:47:46:76:67:f7:cb:3b:35:95:ae:
99:26:13:17:09:ef:02:af:70:59:d5:d1:61:8e:f0:
2e:6e:28:44:60:52:21:4f:62:fd:20:29:f9:76:7f:
62:e0:e6:af:44:44:f9:d5:56:93:33:66:67:8a:aa:
d1:ba:6f:a2:83:17:e6:ac:30:45:84:14:72:c6:d3:
22:07:67:3f:da:eb:68:b9:d8:32:b0:90:2d:47:72:
7f:d6:55:83:55:e8:d9:b1:76:4b:b1:74:09:0a:c4:
60:f8:fa:13:dd:69:fa:05:b6:10:e6:89:db:c3:ff:
9f:af:13:aa:67:29:b7:a1:62:60:dc:b3:78:40:41:
53:ac:e4:ea:c8:2f:3b:17:ce:42:0f:eb:8f:be:ac:
6d:6e:49:84:e9:c3:6e:6f:37:0f:e0:bd:f9:5e:38:
87:40:63:ba:c6:4a:3e:74:eb:4c:ce:a0:ce:3d:d5:
56:f3:f4:4e:01:97:93:e2:e9:f3:bc:e5:d3:26:8f:
fe:5b:d3:a4:2a:36:23:12:61:1e:ed:33:4b:cd:30:
b8:30:4a:e1:15:c3:e3:80:6f:26:57:46:3a:e5:48:
54:50:40:e2:94:ea:a3:c8:11:91:53:9d:ab:69:92:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:73:37:4D:33:EC:37:0E:D3:8C:67:9A:99:F9:6E:0C:C5:C2:83:F4
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b1:38:a6:e0:92:05:96:7a:2d:f4:50:76:36:85:c0:ba:65:
df:40:d4:c0:32:fc:bd:6e:97:3e:9a:a1:38:4c:2f:fb:a3:99:
c6:10:03:8b:53:3a:12:2a:1f:d8:7b:bb:4c:5c:37:38:28:9f:
8d:18:f8:df:93:3c:89:2f:c2:66:3a:93:a4:85:90:6c:57:c8:
7f:f3:3c:ea:67:26:d5:2e:2d:0a:fa:f3:a3:54:c3:cc:66:d2:
76:fc:82:52:76:1e:f0:20:a5:6d:39:1c:78:86:02:cc:97:19:
82:e1:7f:ca:0a:f2:f3:1c:87:e6:b7:47:d7:ad:f8:25:7e:4d:
36:01:9f:d4:6f:2a:2c:e5:1a:17:2a:eb:7b:f5:9d:9c:95:29:
6b:ba:7c:f5:a0:4e:53:94:67:47:ca:71:3d:db:30:c1:9c:6e:
f6:a5:a0:95:66:72:bf:41:74:d2:7f:88:c0:c2:86:0c:b5:ab:
70:74:27:7c:6b:1a:af:1a:f9:9d:58:d9:c8:ad:22:98:73:ea:
1e:13:4a:18:2b:d7:29:4a:c0:9c:59:37:49:c4:46:d1:39:54:
61:b6:22:00:41:88:37:95:84:99:bc:a3:07:87:f8:9d:21:38:
5b:8b:1a:f7:cd:b2:2e:05:e9:48:c2:85:aa:51:a5:fc:9e:51:
0a:33:c7:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3szXBElafa1t8z45tAZMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWE5MzEyYWY0YzNkOWNlZTA4MmM5NTQxYTZiNjVhZGE1
NjliM2MwHhcNMjUwNjI4MTgwMTA0WhcNMjUwNjI5MTgwMTA0WjAzMTEwLwYDVQQD
EygxNzczMzc0ZDMzZWMzNzBlZDM4YzY3OWE5OWY5NmUwY2M1YzI4M2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxN4Jo7Gk6V/FRKW96XsZRSWnEdG
dmf3yzs1la6ZJhMXCe8Cr3BZ1dFhjvAubihEYFIhT2L9ICn5dn9i4OavRET51VaT
M2ZniqrRum+igxfmrDBFhBRyxtMiB2c/2utoudgysJAtR3J/1lWDVejZsXZLsXQJ
CsRg+PoT3Wn6BbYQ5onbw/+frxOqZym3oWJg3LN4QEFTrOTqyC87F85CD+uPvqxt
bkmE6cNubzcP4L35XjiHQGO6xko+dOtMzqDOPdVW8/ROAZeT4unzvOXTJo/+W9Ok
KjYjEmEe7TNLzTC4MErhFcPjgG8mV0Y65UhUUEDilOqjyBGRU52raZLqnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdzN00z7DcO04xnmpn5bgzFwoP0MB8GA1UdIwQY
MBaAFHSqkxKvTD2c7ggslUGmtlraVps8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUt
OThhMWQ2NWNmZTZmLzEvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wYTQxNWEtYzcyOC00MmU5LWJlNDUtOThhMWQ2NWNmZTZm
LzEvZEtxVEVxOU1QWnp1Q0N5VlFhYTJXdHBXbXp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrE4puCS
BZZ6LfRQdjaFwLpl30DUwDL8vW6XPpqhOEwv+6OZxhADi1M6Eiof2Hu7TFw3OCif
jRj435M8iS/CZjqTpIWQbFfIf/M86mcm1S4tCvrzo1TDzGbSdvyCUnYe8CClbTkc
eIYCzJcZguF/ygry8xyH5rdH1634JX5NNgGf1G8qLOUaFyrre/WdnJUpa7p89aBO
U5RnR8pxPdswwZxu9qWglWZyv0F00n+IwMKGDLWrcHQnfGsarxr5nVjZyK0imHPq
HhNKGCvXKUrAnFk3ScRG0TlUYbYiAEGIN5WEmbyjB4f4nSE4W4sa982yLgXpSMKF
qlGl/J5RCjPHmA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:15:47 2025 by rpki-client