Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
File: druWg5UW9vs1BsYgZNY9YoeaUnc.mft (raw, json)
Hash identifier: KyDqHlfoitufVg5xkuxN0webXClXf4E767UiIxANiCA=
Subject key identifier: A2:FD:7A:61:88:17:1D:53:E8:01:40:84:29:6A:C8:C0:78:88:C0:13
Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277
Certificate serial: 0197BAB447E662EA31E40FC6423C4B4F47D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
Manifest number: 0FC6
Signing time: Sun 29 Jun 2025 08:01:06 +0000
Manifest this update: Sun 29 Jun 2025 08:01:06 +0000
Manifest next update: Mon 30 Jun 2025 08:01:06 +0000
Files and hashes: 1: A0Dli097tMkIVnJa3m1bqPYzScQ.roa (hash: xNtn+JNQ7hliFuQK823llLTpPPrEWU/YIk1KW2YsDWg=)
2: druWg5UW9vs1BsYgZNY9YoeaUnc.crl (hash: xL6QWQvX3uNiltw+Fk5/oluxftw0wlyhfIyBMESBqG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:47:e6:62:ea:31:e4:0f:c6:42:3c:4b:4f:47:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277
Validity
Not Before: Jun 29 08:01:06 2025 GMT
Not After : Jun 30 08:01:06 2025 GMT
Subject: CN=a2fd7a6188171d53e8014084296ac8c07888c013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:95:05:07:70:95:52:06:a1:0f:36:a5:48:
00:98:ca:45:37:9e:17:2b:a8:37:f9:d0:5d:be:78:
3a:95:19:8b:01:5c:69:b0:98:26:22:a7:24:e6:7a:
c2:ca:49:2f:2e:45:92:d8:36:aa:3e:72:d9:5d:62:
2d:b5:b0:27:96:56:ca:72:19:ce:1a:2d:2e:c2:7e:
95:a4:9e:51:1f:f2:5d:5e:ec:0a:ac:6e:87:78:bd:
bb:af:06:2c:50:a0:3f:cd:4d:0c:84:e5:b2:fe:dd:
f3:b7:70:a1:2c:a9:d7:f2:20:ef:ac:7a:f9:6b:0c:
96:b5:13:db:61:9a:0a:8e:cf:1c:d3:95:1b:31:47:
25:41:53:d2:00:04:57:41:89:65:fd:8a:db:a4:c0:
7b:55:50:2d:28:f0:af:0e:69:c6:05:ca:87:88:98:
dd:18:11:45:6e:2d:08:e2:ae:2d:94:8f:15:85:a2:
d3:52:de:12:e8:7c:72:15:ab:60:5f:fe:ec:ae:34:
04:6b:6f:70:0f:e6:ea:5f:4b:9e:42:c5:1d:06:c3:
11:45:89:31:72:d4:30:4f:1a:10:d1:05:09:4e:ff:
ef:06:21:bf:64:ac:f8:ba:93:15:03:9b:7f:39:72:
67:91:32:6c:38:0b:4c:9b:6c:a6:b1:93:8b:3b:6c:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FD:7A:61:88:17:1D:53:E8:01:40:84:29:6A:C8:C0:78:88:C0:13
X509v3 Authority Key Identifier:
keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:65:f0:21:56:9e:de:f4:56:c1:34:ac:1e:4f:4f:99:35:09:
27:b7:98:65:99:21:97:60:a5:b6:c7:eb:45:1d:8b:e0:9d:f0:
b3:1c:a7:98:df:f0:4d:6c:b4:55:71:ab:cd:9b:93:61:05:cf:
e1:0c:8e:53:0a:b7:de:75:ba:02:ea:01:7b:91:11:0b:7b:04:
c4:da:4a:13:49:ae:80:92:5f:e4:3f:14:c9:31:b8:6c:a7:6d:
1b:64:3b:33:17:1f:41:54:ae:30:98:fe:7a:a2:5b:30:fa:81:
87:e4:88:38:f4:ba:a1:d4:af:02:33:60:6e:74:20:4d:95:39:
2e:59:ae:a9:b1:6b:98:84:bb:93:8a:86:26:ea:05:a4:e4:a2:
f2:40:1c:10:f6:2f:80:94:21:06:7e:8d:51:b1:d8:21:d1:40:
ea:46:99:28:29:51:3d:08:5b:94:b2:30:9a:a7:21:bc:d0:2a:
67:5e:27:35:a6:82:2f:89:b9:f3:38:85:22:8e:3e:4e:27:c8:
ae:ff:bc:30:ca:1e:ba:59:fe:0c:16:fd:d6:13:8c:78:75:dd:
57:da:71:af:8e:96:13:db:14:74:a4:d6:c6:22:1c:03:12:49:
27:ea:2e:79:14:99:c9:2e:a3:30:49:0a:52:d6:6c:15:9b:49:
84:ca:a2:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6tEfmYuox5A/GQjxLT0fVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YmI5NjgzOTUxNmY2ZmIzNTA2YzYyMDY0ZDYzZDYyODc5
YTUyNzcwHhcNMjUwNjI5MDgwMTA2WhcNMjUwNjMwMDgwMTA2WjAzMTEwLwYDVQQD
EyhhMmZkN2E2MTg4MTcxZDUzZTgwMTQwODQyOTZhYzhjMDc4ODhjMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JqVBQdwlVIGoQ82pUgAmMpFN54X
K6g3+dBdvng6lRmLAVxpsJgmIqck5nrCykkvLkWS2DaqPnLZXWIttbAnllbKchnO
Gi0uwn6VpJ5RH/JdXuwKrG6HeL27rwYsUKA/zU0MhOWy/t3zt3ChLKnX8iDvrHr5
awyWtRPbYZoKjs8c05UbMUclQVPSAARXQYll/YrbpMB7VVAtKPCvDmnGBcqHiJjd
GBFFbi0I4q4tlI8VhaLTUt4S6HxyFatgX/7srjQEa29wD+bqX0ueQsUdBsMRRYkx
ctQwTxoQ0QUJTv/vBiG/ZKz4upMVA5t/OXJnkTJsOAtMm2ymsZOLO2x4EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKL9emGIFx1T6AFAhClqyMB4iMATMB8GA1UdIwQY
MBaAFHa7loOVFvb7NQbGIGTWPWKHmlJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2Et
MThlOGI5ODE0Njk1LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2EtMThlOGI5ODE0Njk1
LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2XwIVae
3vRWwTSsHk9PmTUJJ7eYZZkhl2CltsfrRR2L4J3wsxynmN/wTWy0VXGrzZuTYQXP
4QyOUwq33nW6AuoBe5ERC3sExNpKE0mugJJf5D8UyTG4bKdtG2Q7MxcfQVSuMJj+
eqJbMPqBh+SIOPS6odSvAjNgbnQgTZU5LlmuqbFrmIS7k4qGJuoFpOSi8kAcEPYv
gJQhBn6NUbHYIdFA6kaZKClRPQhblLIwmqchvNAqZ14nNaaCL4m58ziFIo4+TifI
rv+8MMoeuln+DBb91hOMeHXdV9pxr46WE9sUdKTWxiIcAxJJJ+oueRSZyS6jMEkK
UtZsFZtJhMqiCw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:04:21 2025 by rpki-client