Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
File: dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json)
Hash identifier: sU9iao4NaiUu3SHzbTxMc/5cL1aAAnlF9MeYPUXz0p8=
Subject key identifier: D6:4E:36:D2:1E:5B:33:B1:33:57:94:2F:66:41:C9:85:C9:F8:49:76
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial: 0197BAB43F89CF2EC0CA60300B432800AA35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
Manifest number: 03CD
Signing time: Sun 29 Jun 2025 08:01:04 +0000
Manifest this update: Sun 29 Jun 2025 08:01:04 +0000
Manifest next update: Mon 30 Jun 2025 08:01:04 +0000
Files and hashes: 1: 7ky7nj7F_jVbzl2sZpXMbb-mdKw.roa (hash: LY2VlTHDrXTzgp1AOuCkmRPYOmnqACU3YmdlJ3mfogY=)
2: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: Ux8+1AFpiQfy/ABnic1nMsoXrwpD2irW8h1yBFVFo0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:3f:89:cf:2e:c0:ca:60:30:0b:43:28:00:aa:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
Validity
Not Before: Jun 29 08:01:04 2025 GMT
Not After : Jun 30 08:01:04 2025 GMT
Subject: CN=d64e36d21e5b33b13357942f6641c985c9f84976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:c8:5f:03:33:42:28:1f:d3:48:49:a9:e9:
30:3e:96:64:39:9c:5e:26:e9:b0:4f:14:06:c0:ed:
b9:8d:09:8a:71:42:77:8f:43:6f:16:c4:3d:66:66:
1c:8e:cb:71:7c:b7:69:d4:74:b1:d1:64:2e:81:bb:
dc:6f:d1:78:32:68:75:b6:c8:5c:76:af:16:ce:a0:
6c:4f:c0:88:56:ba:57:c8:18:54:b3:b0:6f:61:b4:
c9:4a:e2:c2:04:1d:3f:e2:f5:89:84:2f:54:66:38:
25:51:e1:cb:66:51:97:21:da:75:6a:28:dd:43:8c:
0a:3d:9e:5c:27:8c:bd:93:23:d9:1d:b5:b4:79:f3:
90:36:d1:22:b4:a2:0d:38:ed:a9:5b:14:17:ab:1e:
e3:3a:f5:ec:df:7b:eb:17:fb:7b:6f:58:c0:7d:eb:
96:d1:3c:e9:45:25:48:56:b4:d4:ea:66:c0:81:14:
b5:bb:85:76:d3:d3:7c:8f:a9:00:5a:2e:c7:d6:3d:
68:d9:17:aa:33:4d:79:67:f3:a4:f3:3e:c8:9a:f7:
96:42:c4:52:ed:96:ef:f9:f2:b4:57:29:83:31:c2:
a8:eb:5f:2c:1b:e8:a3:70:f7:b2:3b:1f:9d:b5:71:
b5:18:41:be:2b:51:fc:bd:36:28:ed:ee:29:f1:3c:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4E:36:D2:1E:5B:33:B1:33:57:94:2F:66:41:C9:85:C9:F8:49:76
X509v3 Authority Key Identifier:
keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bd:5c:c2:f3:99:81:43:6e:3f:69:7c:fa:3a:65:90:0d:0e:
74:51:03:d6:4e:87:f4:46:84:37:e5:12:80:04:32:b5:9a:a9:
07:59:65:fe:7b:3c:97:6e:bf:22:41:9a:ee:80:b3:26:8d:40:
4d:5b:e4:28:19:49:03:8c:69:27:3e:57:6e:c1:45:80:9f:c7:
f0:74:ae:86:1d:cd:7e:d8:16:58:b2:f6:c5:49:3f:11:54:2b:
33:5e:8d:bd:9c:5d:9f:ba:71:8a:1d:c1:d2:6b:8f:58:76:49:
f1:78:15:82:06:ad:f3:de:17:f8:37:25:f3:e6:86:45:36:73:
4f:96:2f:47:69:2d:96:fc:f4:e0:0e:17:ad:bc:0c:6f:02:ba:
d6:89:43:bb:0b:37:e5:be:05:98:da:fb:93:0a:bc:5a:96:10:
40:e6:20:64:24:fe:5c:de:84:e7:5d:58:ee:ff:f1:48:53:45:
1e:a1:f6:6d:27:7c:ab:72:86:9a:00:ee:f1:76:0f:3f:33:bc:
c7:35:8f:c5:28:59:e8:92:14:2c:38:52:12:7e:de:ae:65:22:
39:c0:0a:2e:94:04:ad:3f:b1:0f:60:3d:ee:60:c6:76:07:db:
3f:bc:8d:b5:88:ce:71:66:de:3e:a9:83:ae:13:f6:9d:73:cd:
1d:34:3d:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6tD+Jzy7AymAwC0MoAKo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjAzZjA1MGM5Zjk0NmJlMmIyNThkYzQ5NjBlYzA5MDg1
ZmMxNTcwHhcNMjUwNjI5MDgwMTA0WhcNMjUwNjMwMDgwMTA0WjAzMTEwLwYDVQQD
EyhkNjRlMzZkMjFlNWIzM2IxMzM1Nzk0MmY2NjQxYzk4NWM5Zjg0OTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS7IXwMzQigf00hJqekwPpZkOZxe
JumwTxQGwO25jQmKcUJ3j0NvFsQ9ZmYcjstxfLdp1HSx0WQugbvcb9F4Mmh1tshc
dq8WzqBsT8CIVrpXyBhUs7BvYbTJSuLCBB0/4vWJhC9UZjglUeHLZlGXIdp1aijd
Q4wKPZ5cJ4y9kyPZHbW0efOQNtEitKINOO2pWxQXqx7jOvXs33vrF/t7b1jAfeuW
0TzpRSVIVrTU6mbAgRS1u4V209N8j6kAWi7H1j1o2ReqM015Z/Ok8z7ImveWQsRS
7Zbv+fK0VymDMcKo618sG+ijcPeyOx+dtXG1GEG+K1H8vTYo7e4p8TxNuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZONtIeWzOxM1eUL2ZByYXJ+El2MB8GA1UdIwQY
MBaAFHSwPwUMn5Rr4rJY3Elg7AkIX8FXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jNzU3NTMtMTdjMi00MzI0LTgyNjQt
MzdjNzJhN2FjOGQxLzEvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jNzU3NTMtMTdjMi00MzI0LTgyNjQtMzdjNzJhN2FjOGQx
LzEvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkr1cwvOZ
gUNuP2l8+jplkA0OdFED1k6H9EaEN+USgAQytZqpB1ll/ns8l26/IkGa7oCzJo1A
TVvkKBlJA4xpJz5XbsFFgJ/H8HSuhh3NftgWWLL2xUk/EVQrM16NvZxdn7pxih3B
0muPWHZJ8XgVggat894X+Dcl8+aGRTZzT5YvR2ktlvz04A4XrbwMbwK61olDuws3
5b4FmNr7kwq8WpYQQOYgZCT+XN6E511Y7v/xSFNFHqH2bSd8q3KGmgDu8XYPPzO8
xzWPxShZ6JIULDhSEn7ermUiOcAKLpQErT+xD2A97mDGdgfbP7yNtYjOcWbePqmD
rhP2nXPNHTQ92Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:06:49 2025 by rpki-client