Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
File: DkOg3wWaUlGkALWh8TIboA0xINI.mft (raw, json)
Hash identifier: jTiUGMML+Pw0ZAfdWZ+kqdZGFUpwlCoVrSKNHL5GzRk=
Subject key identifier: 41:E1:C1:D1:31:5C:1A:C2:C1:E4:C3:73:B3:B0:B3:6C:3A:7E:48:9A
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial: 0197B96B2F7A16564FAE2C4B5B2D2773C70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 02:01:38 +0000
Manifest this update: Sun 29 Jun 2025 02:01:38 +0000
Manifest next update: Mon 30 Jun 2025 02:01:38 +0000
Files and hashes: 1: DkOg3wWaUlGkALWh8TIboA0xINI.crl (hash: gRGMkgeZ6A8cXIusorW9y69TdipaSAuLdfkyvhNiZ8s=)
2: meyQlZ2V2fFm7jP19tS1SnwZU8o.roa (hash: Rjzn7WIqlB0uqbC7++KFiY3Pm+Td1rmouk6fxkElj30=)
3: u8p2k1kowabt5V010HcHbUdny4A.roa (hash: +zIIZMzEVP0HgE88S7aeA3JokmowyYpTKNzs1+R3c2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:2f:7a:16:56:4f:ae:2c:4b:5b:2d:27:73:c7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Validity
Not Before: Jun 29 02:01:38 2025 GMT
Not After : Jun 30 02:01:38 2025 GMT
Subject: CN=41e1c1d1315c1ac2c1e4c373b3b0b36c3a7e489a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:a6:25:91:1f:55:fc:1a:3f:7c:0d:4b:a3:
9e:82:98:f3:d7:bc:ca:4f:c8:e1:27:b9:25:74:a6:
7c:8a:f4:7f:64:0e:cd:c0:f7:d1:1b:f9:29:27:48:
f4:0d:23:21:13:56:0d:5b:c9:a4:4f:12:fe:b5:d8:
fc:9a:6b:90:40:8c:82:e7:ad:27:1c:63:ab:f8:b4:
32:e7:89:1b:a4:65:de:f6:7e:96:1f:95:02:8a:82:
2a:f4:1d:41:c8:8d:92:fa:96:35:e6:f4:33:5f:7c:
f9:6f:d4:f4:98:84:3c:01:72:86:f8:75:40:06:de:
dd:49:20:7b:70:05:b1:04:b0:c8:20:22:05:ce:65:
fa:5b:51:76:55:4d:2c:c6:0d:13:5b:28:31:eb:10:
0c:de:47:27:1a:2b:77:00:14:fa:d4:92:6e:23:6e:
ae:03:c0:2b:76:ab:a3:02:f7:ce:c1:76:b0:e8:37:
b5:29:f2:dc:a6:04:3d:61:53:15:da:5d:61:6c:65:
52:10:fe:48:32:99:ef:34:f2:3a:98:fc:5b:0b:13:
da:d7:18:95:12:9d:2b:1c:f9:0f:f4:d1:cc:c8:22:
e1:f4:f1:d3:a7:0e:72:cc:85:c7:f5:57:ea:f4:01:
96:19:b3:91:d0:41:e8:9a:b6:d8:b6:ae:7d:bb:ca:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E1:C1:D1:31:5C:1A:C2:C1:E4:C3:73:B3:B0:B3:6C:3A:7E:48:9A
X509v3 Authority Key Identifier:
keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cf:81:0a:57:e6:00:ff:8e:1a:62:70:91:bf:2b:13:44:f9:
84:e3:0b:c6:a6:ab:9e:98:a0:9b:22:b4:8a:22:a2:9f:ff:10:
2f:14:43:e3:2b:33:ac:0b:14:36:1b:28:f4:99:52:b5:1d:ec:
33:b9:95:75:51:e3:c3:1b:20:b1:a5:cf:03:63:a3:b1:c5:5f:
e7:86:ad:da:49:9f:11:0f:24:05:cb:7d:fb:a4:1b:3a:aa:52:
d2:25:03:47:37:16:c2:a7:12:91:13:7f:ac:2f:2e:2d:79:ae:
1b:63:f3:e1:2f:0a:79:0b:88:a4:bf:b4:73:40:ac:21:be:1d:
9b:82:4a:9b:e3:50:d0:4e:90:7d:6d:54:44:65:77:96:9a:6f:
77:14:2e:26:82:20:d8:b8:39:b9:41:11:ac:d3:25:89:ac:a3:
e2:f9:18:d0:32:f3:dd:26:11:cc:b0:ad:34:e4:1e:26:4c:21:
bd:fa:8a:69:43:e4:c3:b8:22:00:26:8d:a2:bd:3c:ea:e9:c0:
71:2f:e5:05:b1:0f:9f:3a:26:91:25:c5:9b:ec:cc:cd:4b:14:
20:d4:70:46:78:f0:6f:f3:fa:c6:3f:8a:ed:e2:e8:63:ea:bb:
14:e9:6e:3e:81:c0:96:ef:f5:b1:db:e1:73:e5:ec:59:6f:0a:
12:14:9d:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5ay96FlZPrixLWy0nc8cPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDNhMGRmMDU5YTUyNTFhNDAwYjVhMWYxMzIxYmEwMGQz
MTIwZDIwHhcNMjUwNjI5MDIwMTM4WhcNMjUwNjMwMDIwMTM4WjAzMTEwLwYDVQQD
Eyg0MWUxYzFkMTMxNWMxYWMyYzFlNGMzNzNiM2IwYjM2YzNhN2U0ODlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswCmJZEfVfwaP3wNS6Oegpjz17zK
T8jhJ7kldKZ8ivR/ZA7NwPfRG/kpJ0j0DSMhE1YNW8mkTxL+tdj8mmuQQIyC560n
HGOr+LQy54kbpGXe9n6WH5UCioIq9B1ByI2S+pY15vQzX3z5b9T0mIQ8AXKG+HVA
Bt7dSSB7cAWxBLDIICIFzmX6W1F2VU0sxg0TWygx6xAM3kcnGit3ABT61JJuI26u
A8ArdqujAvfOwXaw6De1KfLcpgQ9YVMV2l1hbGVSEP5IMpnvNPI6mPxbCxPa1xiV
Ep0rHPkP9NHMyCLh9PHTpw5yzIXH9Vfq9AGWGbOR0EHomrbYtq59u8qvtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHhwdExXBrCweTDc7Ows2w6fkiaMB8GA1UdIwQY
MBaAFA5DoN8FmlJRpAC1ofEyG6ANMSDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYmIzM2ItNjhmNy00NzQ4LTg0YWMt
MDA0ZmU0MzNjN2M4LzEvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wYmIzM2ItNjhmNy00NzQ4LTg0YWMtMDA0ZmU0MzNjN2M4
LzEvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8+BClfm
AP+OGmJwkb8rE0T5hOMLxqarnpigmyK0iiKin/8QLxRD4yszrAsUNhso9JlStR3s
M7mVdVHjwxsgsaXPA2OjscVf54at2kmfEQ8kBct9+6QbOqpS0iUDRzcWwqcSkRN/
rC8uLXmuG2Pz4S8KeQuIpL+0c0CsIb4dm4JKm+NQ0E6QfW1URGV3lppvdxQuJoIg
2Lg5uUERrNMliayj4vkY0DLz3SYRzLCtNOQeJkwhvfqKaUPkw7giACaNor086unA
cS/lBbEPnzomkSXFm+zMzUsUINRwRnjwb/P6xj+K7eLoY+q7FOluPoHAlu/1sdvh
c+XsWW8KEhSd4Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:24:47 2025 by rpki-client