Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: DsbnU0d6knTvd4IEZBb8N3U7oIxXV2bJ6YNOO2JND+c=
Subject key identifier: B3:38:B3:9E:6D:2B:4A:D7:D1:E4:5A:5D:C2:08:AF:2B:4F:51:ED:E6
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 0197CB02D91265236222968D8EEEE17C51A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 0464
Signing time: Wed 02 Jul 2025 12:00:50 +0000
Manifest this update: Wed 02 Jul 2025 12:00:50 +0000
Manifest next update: Thu 03 Jul 2025 12:00:50 +0000
Files and hashes: 1: A_Ig0V6t3ntCxD7PTccbnIguTs8.roa (hash: x63polo4t0dGd0M1xxigrw4CFjSi7R4AExIbYtwQIRY=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: Gv7wXVqUej9gdeMeE7GSVhy7rkv7fasHFR5GadecIGo=)
3: Zj1rmMEpOraplrkaquOM2ubO6Mc.roa (hash: oIS73RHQscBvRjMMzd2FUWBDj9UGJrVmsW4v2M6hJEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:02:d9:12:65:23:62:22:96:8d:8e:ee:e1:7c:51:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Jul 2 12:00:50 2025 GMT
Not After : Jul 3 12:00:50 2025 GMT
Subject: CN=b338b39e6d2b4ad7d1e45a5dc208af2b4f51ede6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:cf:21:4f:5f:bb:8d:0f:22:7d:e4:ab:9a:
a3:29:a1:00:38:fa:00:04:c3:6b:75:0d:92:94:81:
58:73:0a:9b:bd:c2:95:8d:4a:a5:3e:7b:ee:0c:69:
e4:d9:63:43:1a:aa:45:5e:78:a7:ca:fa:ff:aa:a3:
4b:05:0d:15:6f:c6:b5:14:50:09:41:7a:2f:ae:e5:
99:ff:14:51:2a:fa:bf:d2:51:8a:9f:a4:6b:75:27:
61:e5:a5:4d:c1:22:fe:57:42:63:e5:f8:a4:ca:1c:
3f:5e:b1:fc:36:f4:23:50:ac:75:08:c0:d6:0f:05:
a9:45:c7:7c:f9:18:78:0a:81:28:1d:6e:e7:9a:11:
b4:bd:f9:e5:04:8e:4f:77:07:f0:62:2d:a8:2d:10:
f9:ad:5f:90:2f:92:df:45:f8:29:4a:84:d8:39:cf:
26:7d:e8:a2:70:81:87:35:d6:04:0d:81:97:11:d6:
22:84:d6:e5:6b:91:12:be:b5:2d:58:a3:89:26:41:
7f:04:64:4e:d7:ea:07:87:ec:09:91:05:20:53:b7:
8e:a6:10:98:86:47:d6:13:94:92:e9:d3:f6:f4:3f:
7e:8a:7b:d7:52:3e:7c:80:18:0c:75:cb:1f:4d:d1:
f2:af:a9:28:54:9a:fa:81:c6:1a:1d:c7:01:80:5c:
bc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:38:B3:9E:6D:2B:4A:D7:D1:E4:5A:5D:C2:08:AF:2B:4F:51:ED:E6
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:55:95:e1:02:ce:df:ba:02:e8:3d:e9:83:0f:7c:2b:f8:5c:
79:aa:6c:2b:0e:c9:c0:c3:e2:87:4e:5f:65:f4:8d:83:68:a6:
c1:8f:11:27:ae:14:f1:7d:04:a2:eb:c7:f2:27:d5:31:63:03:
be:a3:79:b4:a4:2f:d3:7d:98:aa:5e:05:6d:39:d2:7b:8a:76:
d4:d6:50:b9:a5:fb:0d:75:3d:6e:81:99:de:d4:6e:2b:77:19:
16:c3:cb:93:09:fd:5f:35:d9:38:1e:d0:08:97:57:2a:64:2d:
df:91:22:d4:8c:05:cd:90:75:f3:5b:e8:8b:d8:24:d0:7a:21:
d1:23:bd:0e:74:1e:f6:aa:b2:c2:8d:a8:8f:f3:ab:11:0f:4b:
fa:ec:59:d7:6a:b0:cf:69:b9:98:4a:95:0e:09:dd:39:fa:b7:
ad:cc:87:d8:17:e3:e2:da:67:47:27:b2:91:96:26:ba:7a:30:
47:ca:12:40:d3:86:27:f7:f3:f9:f4:a9:4c:cd:d6:5e:93:f4:
3d:99:21:9e:a5:9f:4f:4f:c0:7e:12:de:5e:6c:c8:9d:31:18:
1c:a3:ba:8d:06:c7:90:54:5b:89:7b:17:98:ec:71:fb:2d:f3:
50:0f:3d:36:3c:b9:d4:77:40:6f:25:92:c7:c0:5e:02:22:ca:
93:bb:19:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLAtkSZSNiIpaNju7hfFGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNjg1OWZlYmE3ODM0YzkzMjJiN2M2ZjZiZDgxYmQzYmVm
NWNlNTEwHhcNMjUwNzAyMTIwMDUwWhcNMjUwNzAzMTIwMDUwWjAzMTEwLwYDVQQD
EyhiMzM4YjM5ZTZkMmI0YWQ3ZDFlNDVhNWRjMjA4YWYyYjRmNTFlZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjTPIU9fu40PIn3kq5qjKaEAOPoA
BMNrdQ2SlIFYcwqbvcKVjUqlPnvuDGnk2WNDGqpFXninyvr/qqNLBQ0Vb8a1FFAJ
QXovruWZ/xRRKvq/0lGKn6RrdSdh5aVNwSL+V0Jj5fikyhw/XrH8NvQjUKx1CMDW
DwWpRcd8+Rh4CoEoHW7nmhG0vfnlBI5PdwfwYi2oLRD5rV+QL5LfRfgpSoTYOc8m
feiicIGHNdYEDYGXEdYihNbla5ESvrUtWKOJJkF/BGRO1+oHh+wJkQUgU7eOphCY
hkfWE5SS6dP29D9+invXUj58gBgMdcsfTdHyr6koVJr6gcYaHccBgFy83QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLM4s55tK0rX0eRaXcIIrytPUe3mMB8GA1UdIwQY
MBaAFAxoWf66eDTJMit8b2vYG9O+9c5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAt
NzdmY2E3YTMwYjlmLzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAtNzdmY2E3YTMwYjlm
LzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1WV4QLO
37oC6D3pgw98K/hceapsKw7JwMPih05fZfSNg2imwY8RJ64U8X0EouvH8ifVMWMD
vqN5tKQv032Yql4FbTnSe4p21NZQuaX7DXU9boGZ3tRuK3cZFsPLkwn9XzXZOB7Q
CJdXKmQt35Ei1IwFzZB181voi9gk0Hoh0SO9DnQe9qqywo2oj/OrEQ9L+uxZ12qw
z2m5mEqVDgndOfq3rcyH2Bfj4tpnRyeykZYmunowR8oSQNOGJ/fz+fSpTM3WXpP0
PZkhnqWfT0/AfhLeXmzInTEYHKO6jQbHkFRbiXsXmOxx+y3zUA89Njy51HdAbyWS
x8BeAiLKk7sZpw==
-----END CERTIFICATE-----
Generated at Wed Jul 2 19:30:39 2025 by rpki-client