Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: /KKKqB6bNj2+EtFdClUToyfV8mQ/b5JJpwi6g0Pr1nQ=
Subject key identifier: 2B:9C:AC:12:A6:00:6E:32:89:40:72:29:76:A6:6B:A5:82:A3:F4:50
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 0197B70E9F81BDF6B8446C7CE434A53F53FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 0951
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: 9AG_khzlUq_52M_uwAyAT--X2D8.roa (hash: j5npHva08ps2FjnGO8hTZ3BTaOYOIDt9K8fTqv+VPPw=)
2: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: r36H6v/gj8uBCeyj+pqNJckTj0FSE1XMpyVleBsO1rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9f:81:bd:f6:b8:44:6c:7c:e4:34:a5:3f:53:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=2b9cac12a6006e328940722976a66ba582a3f450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:94:50:86:e7:a9:32:e9:1f:ac:6c:9c:74:
ad:4e:00:43:d0:b3:f0:6b:f4:ac:f4:6b:42:e0:1d:
10:79:9c:c0:b2:e7:2f:5e:4b:a2:3f:bf:28:2c:1c:
f3:2e:4b:eb:f8:92:3e:55:2b:a1:70:23:e8:dc:41:
71:d3:b6:5e:6c:60:ac:ab:07:23:e9:d8:c2:41:68:
bd:13:9b:89:69:80:45:fb:a9:e2:da:c8:dd:d4:2c:
7d:9a:c4:c9:d1:11:02:97:23:52:c1:ba:e8:37:52:
6d:2d:4e:52:a1:0c:75:64:c2:44:57:1a:81:23:4a:
51:a2:f8:80:08:5b:76:70:b8:d2:40:1a:77:29:dc:
05:a2:bf:cb:d0:ff:7c:a4:57:7b:9f:66:0f:60:2c:
dc:20:2b:a6:23:66:ec:9b:17:01:a9:9a:12:1e:02:
c9:68:6e:be:44:4f:1f:4e:9f:88:b5:2d:cc:28:5d:
15:6d:d6:3e:34:5c:8a:47:6a:7d:6c:85:1e:b3:cc:
7d:33:c7:4d:b9:bc:76:bc:6b:dd:a4:5b:73:8a:dd:
58:e1:b4:39:d9:ac:dc:cf:55:b7:e6:13:37:14:a3:
4a:8e:aa:c4:40:6e:17:51:cb:98:24:04:35:9c:f6:
ce:40:65:12:65:14:27:3a:e1:a2:d2:35:72:4e:98:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:AC:12:A6:00:6E:32:89:40:72:29:76:A6:6B:A5:82:A3:F4:50
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c0:b9:60:e9:54:21:87:8d:e0:d5:28:c5:ce:20:1c:85:29:
fb:16:9c:17:4c:4a:37:f9:07:5f:48:5f:f5:e7:a0:93:11:0b:
ff:d9:eb:e2:41:3f:67:dd:c3:8e:9d:e1:2c:1e:f5:5c:f9:09:
46:9d:d8:f0:b5:84:e5:1d:9f:ef:c2:cf:36:04:c1:f3:2a:0b:
5a:a7:d8:65:b4:e9:0d:f5:62:8b:cc:db:0e:90:df:9e:52:4b:
5a:bf:21:c8:6c:b5:37:5e:2b:13:ec:4c:54:78:ab:8a:88:fe:
95:86:44:58:a7:f7:5b:17:62:ad:1e:e8:92:2c:6c:c3:be:5b:
36:e1:4e:42:58:c6:59:69:67:aa:78:87:9c:84:f7:a2:cf:dd:
53:c2:95:0e:7e:0a:53:88:e6:58:a2:c1:bc:04:49:48:1f:c0:
8d:50:c0:b6:be:d0:63:84:a9:7d:2d:a0:c2:63:b9:cf:1c:cf:
ee:25:c4:c2:16:60:f4:c8:01:7b:ab:37:c9:aa:35:ff:05:e1:
30:bf:87:e1:86:0a:24:92:1c:37:63:5e:9a:b2:ae:69:df:10:
b2:57:0b:35:7b:52:57:66:02:cb:09:86:1e:6a:6a:f4:6e:84:
9c:61:98:9d:a6:6a:c0:47:ff:40:98:8b:b1:75:b6:ac:c4:68:
c2:f0:b1:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dp+Bvfa4RGx85DSlP1P7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTgwZDhjYTQ2NGFlNDQzMzBjMDJkNjA5N2QxYjNlMzQ2
N2UwODUwHhcNMjUwNjI4MTUwMTE4WhcNMjUwNjI5MTUwMTE4WjAzMTEwLwYDVQQD
EygyYjljYWMxMmE2MDA2ZTMyODk0MDcyMjk3NmE2NmJhNTgyYTNmNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLGUUIbnqTLpH6xsnHStTgBD0LPw
a/Ss9GtC4B0QeZzAsucvXkuiP78oLBzzLkvr+JI+VSuhcCPo3EFx07ZebGCsqwcj
6djCQWi9E5uJaYBF+6ni2sjd1Cx9msTJ0REClyNSwbroN1JtLU5SoQx1ZMJEVxqB
I0pRoviACFt2cLjSQBp3KdwFor/L0P98pFd7n2YPYCzcICumI2bsmxcBqZoSHgLJ
aG6+RE8fTp+ItS3MKF0VbdY+NFyKR2p9bIUes8x9M8dNubx2vGvdpFtzit1Y4bQ5
2azcz1W35hM3FKNKjqrEQG4XUcuYJAQ1nPbOQGUSZRQnOuGi0jVyTpijRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCucrBKmAG4yiUByKXama6WCo/RQMB8GA1UdIwQY
MBaAFA2YDYykZK5EMwwC1gl9Gz40Z+CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUt
ZjZmZjI4MWZiYzMyLzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUtZjZmZjI4MWZiYzMy
LzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8C5YOlU
IYeN4NUoxc4gHIUp+xacF0xKN/kHX0hf9eegkxEL/9nr4kE/Z93Djp3hLB71XPkJ
Rp3Y8LWE5R2f78LPNgTB8yoLWqfYZbTpDfVii8zbDpDfnlJLWr8hyGy1N14rE+xM
VHirioj+lYZEWKf3WxdirR7okixsw75bNuFOQljGWWlnqniHnIT3os/dU8KVDn4K
U4jmWKLBvARJSB/AjVDAtr7QY4SpfS2gwmO5zxzP7iXEwhZg9MgBe6s3yao1/wXh
ML+H4YYKJJIcN2NemrKuad8QslcLNXtSV2YCywmGHmpq9G6EnGGYnaZqwEf/QJiL
sXW2rMRowvCxGA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:18 2025 by rpki-client