Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier: 7PmGEuqoUnhvxSLNDGvHp8H98wYolPIEEBkeEqn3EVo=
Subject key identifier: 7E:BF:A1:A3:37:EE:E1:47:47:BD:ED:92:C1:61:44:94:66:EA:B9:62
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial: 0197B70EB3B43758DCD060D08D3159174E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number: 11D6
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: 27W+0PxjXwnlelpLjqAeonyvuOpQCSxj9jZMAk55M3g=)
2: GU3WIEeqeryj-R-zsa0cMuUQBHM.roa (hash: P0OhDT05+JAj4QXmTS/0O2Bzhb6RhdbVqJWFN0gOpmE=)
3: cIkzHkYil73CUQBJR_lXOc-rvck.roa (hash: rY7DgjrJWLfJoJzDxWf7uBXP1TGyTLjuDroDK6Z0PGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b3:b4:37:58:dc:d0:60:d0:8d:31:59:17:4e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=7ebfa1a337eee14747bded92c161449466eab962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:ae:46:a4:c2:86:14:d1:ef:ef:b9:bf:0e:
2b:e9:8b:55:6d:0d:0a:b2:55:5c:0f:87:38:08:e2:
ce:b4:3f:27:32:27:cb:e3:64:01:c1:9b:9b:7c:d1:
5c:81:2c:84:59:c1:88:96:86:0f:87:b6:e3:18:42:
bf:0e:67:a3:a8:d4:80:37:cb:47:77:c1:e4:f4:c2:
a3:a7:87:62:26:88:dc:8d:90:99:c1:17:eb:07:5b:
b1:40:d0:26:fb:fa:ee:6d:6e:80:34:64:fb:f8:27:
a2:8f:3e:c7:d1:80:56:38:48:b9:cb:0f:74:4d:ea:
98:89:d9:66:ad:3e:7e:b5:20:95:25:64:2d:07:ef:
18:72:10:67:38:41:14:a2:04:6b:86:46:bb:32:df:
df:46:3c:87:cd:6a:31:ca:42:f5:ca:ab:51:ee:89:
d7:88:2b:12:d6:e9:49:26:fd:61:22:a1:7f:27:f3:
cb:e3:e5:b9:48:9a:78:8e:78:3b:fc:2e:c7:a2:f6:
fe:70:ac:b5:eb:c7:9b:c5:e9:91:3b:40:31:3c:43:
5e:e4:56:14:00:f9:c3:22:eb:f2:60:04:bc:54:3f:
c2:ba:14:23:b1:28:d9:0b:e9:98:8e:54:13:31:02:
08:8c:63:6d:66:5d:49:66:18:90:bd:ee:7b:5a:2f:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BF:A1:A3:37:EE:E1:47:47:BD:ED:92:C1:61:44:94:66:EA:B9:62
X509v3 Authority Key Identifier:
keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d9:27:30:02:ce:b0:c9:fa:d0:94:43:d9:d0:a8:04:c1:de:
54:95:15:dd:3f:ef:f0:d8:c7:1f:b2:0f:12:d7:32:60:57:1d:
b8:86:3f:1f:25:f8:a0:64:c3:c5:c0:cb:8a:b6:a7:09:75:ee:
b5:10:9d:30:db:fb:34:14:81:00:f7:c5:2a:8b:ad:09:f8:65:
a3:e8:a2:f5:25:59:d5:90:64:72:f8:e8:16:c2:3d:2e:0e:f9:
e8:1c:57:71:09:ea:47:6c:a2:a8:8c:e1:6f:21:5e:31:e6:5a:
5c:81:5d:0d:ac:8c:2e:33:f0:dc:49:ed:a6:04:f6:5b:34:fe:
a3:81:9a:be:43:bf:44:7f:7c:96:05:32:4c:45:7d:94:3f:a2:
2d:69:fa:6a:69:7c:dc:fb:cc:e8:c2:d7:07:b4:1f:2c:88:46:
a5:3b:69:48:89:9e:80:33:c4:16:59:bc:09:1a:53:06:8f:b4:
48:74:f0:9d:65:0b:47:31:5b:19:ae:e6:21:7d:ef:0c:6b:b1:
41:c4:39:10:aa:32:11:0a:b3:25:bd:f4:c2:6b:52:b7:3d:91:
94:31:94:d7:6a:c1:c7:db:72:76:e9:f6:d3:41:16:ee:cf:0f:
4b:4d:a5:9e:ec:41:e5:b6:d4:47:2c:ee:03:73:b8:13:89:aa:
aa:ec:04:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DrO0N1jc0GDQjTFZF05VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMTg1MzJiYWEyZmQ4NjU4M2EyNjNiYjFmYmNjYmM4MGQ0
MGQ5OTAwHhcNMjUwNjI4MTUwMTIzWhcNMjUwNjI5MTUwMTIzWjAzMTEwLwYDVQQD
Eyg3ZWJmYTFhMzM3ZWVlMTQ3NDdiZGVkOTJjMTYxNDQ5NDY2ZWFiOTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+GuRqTChhTR7++5vw4r6YtVbQ0K
slVcD4c4COLOtD8nMifL42QBwZubfNFcgSyEWcGIloYPh7bjGEK/DmejqNSAN8tH
d8Hk9MKjp4diJojcjZCZwRfrB1uxQNAm+/rubW6ANGT7+Ceijz7H0YBWOEi5yw90
TeqYidlmrT5+tSCVJWQtB+8YchBnOEEUogRrhka7Mt/fRjyHzWoxykL1yqtR7onX
iCsS1ulJJv1hIqF/J/PL4+W5SJp4jng7/C7Hovb+cKy168ebxemRO0AxPENe5FYU
APnDIuvyYAS8VD/CuhQjsSjZC+mYjlQTMQIIjGNtZl1JZhiQve57Wi/+/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6/oaM37uFHR73tksFhRJRm6rliMB8GA1UdIwQY
MBaAFA0YUyuqL9hlg6Jjux+8y8gNQNmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQt
MmIzYTE1OWNhMmVmLzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQtMmIzYTE1OWNhMmVm
LzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNknMALO
sMn60JRD2dCoBMHeVJUV3T/v8NjHH7IPEtcyYFcduIY/HyX4oGTDxcDLiranCXXu
tRCdMNv7NBSBAPfFKoutCfhlo+ii9SVZ1ZBkcvjoFsI9Lg756BxXcQnqR2yiqIzh
byFeMeZaXIFdDayMLjPw3EntpgT2WzT+o4GavkO/RH98lgUyTEV9lD+iLWn6aml8
3PvM6MLXB7QfLIhGpTtpSImegDPEFlm8CRpTBo+0SHTwnWULRzFbGa7mIX3vDGux
QcQ5EKoyEQqzJb30wmtStz2RlDGU12rBx9tydun200EW7s8PS02lnuxB5bbURyzu
A3O4E4mqquwEtA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:44 2025 by rpki-client