Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
File: 2-DKfB4Oihx60C0LuCi0EYiuUkM.mft (raw, json)
Hash identifier: ocOnUd3MBTn6HnV3T9Tu4MHW31Oez989LxrelTnBtOQ=
Subject key identifier: B5:C7:4F:0B:D3:6F:41:E9:86:A7:4B:6D:BA:C1:04:9E:10:5E:2D:1B
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 0197B820C75FDA43CF1D6B1C410CE8624677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 20:00:45 +0000
Manifest this update: Sat 28 Jun 2025 20:00:45 +0000
Manifest next update: Sun 29 Jun 2025 20:00:45 +0000
Files and hashes: 1: 2-DKfB4Oihx60C0LuCi0EYiuUkM.crl (hash: C8A5SFQPj88XDfyazufk/aGmeGdYvxhiSoBn429ysaw=)
2: YUHP8povBVbIoytw6_5ZqfFufds.roa (hash: 4y2ao8ApJ816sNFdEpxQ92wC7F5kE/EpHC15Iiekv/g=)
3: dfdU0SSX7h5aeT4V6yh3besByGY.roa (hash: bqm/qnBL9+Tfu7cFwtiTcjOHYz4XyBbBgnruIPUTM5E=)
4: s5dxYiB9Gl46l9OI-oBQkPHsB5c.roa (hash: GmqIgSNFyM7jr2DKPly+VsAPd7JfDn9lu127LyfeGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:c7:5f:da:43:cf:1d:6b:1c:41:0c:e8:62:46:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Jun 28 20:00:45 2025 GMT
Not After : Jun 29 20:00:45 2025 GMT
Subject: CN=b5c74f0bd36f41e986a74b6dbac1049e105e2d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b8:93:7e:85:7a:a3:19:69:04:c3:b2:39:68:
4d:29:1c:66:22:33:3d:c3:d6:78:3d:ee:b8:22:af:
57:53:1f:97:20:b0:79:67:50:87:cb:6e:ff:64:65:
da:c4:bf:99:9a:e3:1e:11:fb:da:76:ac:07:6f:c4:
c3:4d:d5:b6:e3:f6:f4:11:01:36:57:5a:bc:5b:aa:
4b:e8:4a:c8:f2:40:91:21:74:4f:07:79:4f:5c:d6:
1d:87:89:a4:37:0e:79:d0:19:01:18:fa:db:f6:71:
a4:d3:ff:92:15:04:19:78:b4:1b:0f:00:7a:9c:6b:
65:c5:15:8d:0a:d1:ea:b9:28:25:2b:62:de:fd:7e:
94:ab:82:f7:c7:18:66:88:e0:af:dc:46:37:d6:95:
10:86:c5:73:32:f3:7a:b0:cb:3d:90:21:fb:88:14:
ee:84:30:5a:72:94:77:f7:49:82:c1:43:ee:c6:1a:
2b:cc:83:cd:85:1b:a7:83:84:5b:37:ff:37:2e:f1:
38:17:d0:61:70:8a:88:9d:e8:c9:7e:9d:99:0b:57:
aa:95:68:b5:fc:3c:90:6f:26:a7:45:27:08:e9:6e:
72:28:ef:9b:2e:b4:08:cd:a5:2d:d7:c4:fb:d5:08:
87:b9:ab:03:e0:90:89:6a:ec:e8:4f:1a:d6:49:60:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C7:4F:0B:D3:6F:41:E9:86:A7:4B:6D:BA:C1:04:9E:10:5E:2D:1B
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:49:9a:4f:14:37:61:87:8a:43:07:4d:1c:41:db:60:a6:e3:
48:36:f6:73:c6:09:68:ae:15:21:15:0f:90:a7:af:10:4f:fb:
de:2a:0e:72:08:54:4c:c4:5a:53:86:52:5f:78:56:d7:26:b2:
98:18:38:ea:ca:fd:cf:03:3a:09:73:4e:87:a7:dd:a2:4d:68:
25:ed:c8:58:17:9e:63:ef:71:c9:ee:85:ac:a1:03:c7:00:c6:
e8:a8:e0:01:ba:17:65:b2:3f:42:a7:5d:8a:9b:e6:81:21:cc:
dc:1e:c4:45:48:56:78:ac:9b:07:35:52:3a:19:27:5e:a2:96:
7d:ee:e0:28:e2:fb:bb:54:3b:5d:c2:8f:da:80:e9:84:5a:54:
bf:86:04:b2:02:28:6d:b3:ec:71:e8:9c:fe:7b:42:a8:b3:aa:
e8:bc:9f:a2:4f:2f:45:f8:42:42:cd:41:2d:9e:a6:32:97:e0:
94:55:93:3a:0f:de:a5:d2:24:32:02:81:27:ad:30:76:be:f1:
49:eb:d3:ec:03:8f:fc:7f:50:4e:f6:a9:6e:ff:4e:d9:46:d5:
80:f9:98:d3:30:9f:ec:f6:fd:c3:e4:45:90:a7:c5:91:9d:3e:
f0:00:b7:f9:13:6b:5d:3a:d9:ad:a0:a3:e1:be:8d:35:f0:a3:
22:bd:3a:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IMdf2kPPHWscQQzoYkZ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTBjYTdjMWUwZThhMWM3YWQwMmQwYmI4MjhiNDExODhh
ZTUyNDMwHhcNMjUwNjI4MjAwMDQ1WhcNMjUwNjI5MjAwMDQ1WjAzMTEwLwYDVQQD
EyhiNWM3NGYwYmQzNmY0MWU5ODZhNzRiNmRiYWMxMDQ5ZTEwNWUyZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47iTfoV6oxlpBMOyOWhNKRxmIjM9
w9Z4Pe64Iq9XUx+XILB5Z1CHy27/ZGXaxL+ZmuMeEfvadqwHb8TDTdW24/b0EQE2
V1q8W6pL6ErI8kCRIXRPB3lPXNYdh4mkNw550BkBGPrb9nGk0/+SFQQZeLQbDwB6
nGtlxRWNCtHquSglK2Le/X6Uq4L3xxhmiOCv3EY31pUQhsVzMvN6sMs9kCH7iBTu
hDBacpR390mCwUPuxhorzIPNhRung4RbN/83LvE4F9BhcIqInejJfp2ZC1eqlWi1
/DyQbyanRScI6W5yKO+bLrQIzaUt18T71QiHuasD4JCJauzoTxrWSWBrhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXHTwvTb0HphqdLbbrBBJ4QXi0bMB8GA1UdIwQY
MBaAFNvgynweDoocetAtC7gotBGIrlJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMt
NGY5MTEyZWRlOTY4LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mM2M4ZTgtYzViYy00MjExLWE5YWMtNGY5MTEyZWRlOTY4
LzEvMi1ES2ZCNE9paHg2MEMwTHVDaTBFWWl1VWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0maTxQ3
YYeKQwdNHEHbYKbjSDb2c8YJaK4VIRUPkKevEE/73ioOcghUTMRaU4ZSX3hW1yay
mBg46sr9zwM6CXNOh6fdok1oJe3IWBeeY+9xye6FrKEDxwDG6KjgAboXZbI/Qqdd
ipvmgSHM3B7ERUhWeKybBzVSOhknXqKWfe7gKOL7u1Q7XcKP2oDphFpUv4YEsgIo
bbPsceic/ntCqLOq6Lyfok8vRfhCQs1BLZ6mMpfglFWTOg/epdIkMgKBJ60wdr7x
SevT7AOP/H9QTvapbv9O2UbVgPmY0zCf7Pb9w+RFkKfFkZ0+8AC3+RNrXTrZraCj
4b6NNfCjIr06tQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:45 2025 by rpki-client