Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: twuV4SY3OMO5uIT//Y4zz7k9iWorHWrP/Ys6LlatN5E=
Subject key identifier: C0:26:11:38:9C:A0:50:4E:BC:9C:13:77:2E:2E:21:2C:E2:3F:75:80
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 0197CE71EB69B416EB4742BE89EF4D907E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 0DBB
Signing time: Thu 03 Jul 2025 04:01:01 +0000
Manifest this update: Thu 03 Jul 2025 04:01:01 +0000
Manifest next update: Fri 04 Jul 2025 04:01:01 +0000
Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: FHXf40gz89f0eIYf022nXs+HdUOPRFpoEH1v80w5IhA=)
2: ffTvs6YF_hXAEglDFhneoTAWA7Y.roa (hash: McS9n7bcKq8O21qZ8IIp3IHODw/eCLO/50XCpVXjy20=)
3: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:71:eb:69:b4:16:eb:47:42:be:89:ef:4d:90:7e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Jul 3 04:01:01 2025 GMT
Not After : Jul 4 04:01:01 2025 GMT
Subject: CN=c02611389ca0504ebc9c13772e2e212ce23f7580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:5b:3c:82:8c:f8:3e:53:f0:c2:5e:06:68:
13:98:2c:b5:e9:95:8a:83:d7:69:6a:b7:23:fd:5f:
d7:69:95:cc:4c:02:32:3c:ee:34:b1:b6:2c:59:dc:
2f:c5:af:14:8e:8c:b2:32:cb:70:09:36:31:b5:49:
68:80:ab:d6:e6:41:b3:da:ad:04:57:ae:4e:fb:5b:
03:a9:7f:36:89:47:fb:ce:0e:81:2e:de:04:c9:f0:
77:58:6c:c9:ee:87:2c:ad:23:93:b2:36:f1:0e:60:
34:8f:a3:1e:c3:e1:cf:82:ca:79:05:13:ac:b0:02:
ba:b0:69:e0:43:ac:8e:2d:c0:e0:c4:c2:16:13:b1:
b1:fc:a7:5f:44:e3:dd:b1:4b:13:d8:63:6a:2b:5a:
51:dc:b3:e0:4f:90:9b:a8:3d:ab:4f:ac:5f:4f:12:
c5:cb:fa:e9:30:80:24:78:b6:ea:31:6d:67:28:40:
7c:18:6b:a8:4d:cb:5c:48:2c:6d:80:b2:65:d2:c9:
54:ff:bf:bb:67:49:d4:be:5c:cf:0a:2f:f1:9b:86:
85:4e:2e:80:6d:f0:0d:e0:36:c2:ce:d6:90:1d:ad:
8b:da:c2:30:5b:be:0d:a1:10:66:a7:50:19:6f:eb:
d4:b9:b2:5a:91:24:3b:ba:d1:93:0b:2e:f5:54:b9:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:11:38:9C:A0:50:4E:BC:9C:13:77:2E:2E:21:2C:E2:3F:75:80
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f2:01:1d:ca:a6:f2:e1:d0:a0:45:6d:17:0b:d6:b7:3c:56:
91:f7:e8:95:73:d0:6a:13:60:32:83:7c:e5:2b:86:0a:fb:d6:
bd:79:01:c0:5d:ff:00:e1:6c:d7:16:55:d8:36:ed:b2:2f:c1:
45:f9:34:28:0a:7f:38:8d:5a:d4:9c:74:96:0f:12:59:3a:c5:
76:dd:90:34:78:ce:90:0a:13:fc:b1:ba:b7:cd:d5:33:15:03:
0f:05:5b:c7:4a:b5:6f:52:e1:68:c7:4b:24:9b:1d:b7:5f:9f:
b0:89:fc:d0:e5:7c:7b:5f:05:b4:58:f3:a5:40:6d:3b:0c:8f:
32:5c:07:86:ea:be:f5:ef:4f:cb:5b:71:26:2c:46:21:68:d4:
85:25:9f:4e:c3:c4:71:7c:51:df:fb:64:79:f6:3b:0d:0b:ab:
ad:72:55:15:97:be:bc:85:6e:81:e2:1e:aa:41:a6:38:41:13:
f7:b1:45:7b:0c:e7:c9:4f:4f:db:ed:cc:fb:a6:30:4a:fd:39:
0c:65:e2:9a:ae:bb:e4:a3:25:86:69:29:e4:19:08:6c:e8:90:
4c:fc:48:23:67:c8:71:1f:c6:42:81:73:a1:84:19:a8:4f:42:
77:84:35:6c:9d:03:e4:12:9e:e1:40:23:78:e0:4f:90:d4:da:
89:e7:8f:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfOcetptBbrR0K+ie9NkH52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2MxNzY2ZmJiZGNmZjY4YmJjMzRhM2M2YmU2OWEwYzhh
MDNhYjkwHhcNMjUwNzAzMDQwMTAxWhcNMjUwNzA0MDQwMTAxWjAzMTEwLwYDVQQD
EyhjMDI2MTEzODljYTA1MDRlYmM5YzEzNzcyZTJlMjEyY2UyM2Y3NTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwetbPIKM+D5T8MJeBmgTmCy16ZWK
g9dparcj/V/XaZXMTAIyPO40sbYsWdwvxa8UjoyyMstwCTYxtUlogKvW5kGz2q0E
V65O+1sDqX82iUf7zg6BLt4EyfB3WGzJ7ocsrSOTsjbxDmA0j6Mew+HPgsp5BROs
sAK6sGngQ6yOLcDgxMIWE7Gx/KdfROPdsUsT2GNqK1pR3LPgT5CbqD2rT6xfTxLF
y/rpMIAkeLbqMW1nKEB8GGuoTctcSCxtgLJl0slU/7+7Z0nUvlzPCi/xm4aFTi6A
bfAN4DbCztaQHa2L2sIwW74NoRBmp1AZb+vUubJakSQ7utGTCy71VLmJHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAmETicoFBOvJwTdy4uISziP3WAMB8GA1UdIwQY
MBaAFHZ8F2b7vc/2i7w0o8a+aaDIoDq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQt
MzU2OGUxZDI5ZDRhLzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQtMzU2OGUxZDI5ZDRh
LzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfIBHcqm
8uHQoEVtFwvWtzxWkffolXPQahNgMoN85SuGCvvWvXkBwF3/AOFs1xZV2Dbtsi/B
Rfk0KAp/OI1a1Jx0lg8SWTrFdt2QNHjOkAoT/LG6t83VMxUDDwVbx0q1b1LhaMdL
JJsdt1+fsIn80OV8e18FtFjzpUBtOwyPMlwHhuq+9e9Py1txJixGIWjUhSWfTsPE
cXxR3/tkefY7DQurrXJVFZe+vIVugeIeqkGmOEET97FFewznyU9P2+3M+6YwSv05
DGXimq675KMlhmkp5BkIbOiQTPxII2fIcR/GQoFzoYQZqE9Cd4Q1bJ0D5BKe4UAj
eOBPkNTaieePiw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:22:52 2025 by rpki-client