Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
File: dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft (raw, json)
Hash identifier: uxSus1NUYcmtuZIqtZRw+TVPSnfZJ2vqXTEJC9dizeI=
Subject key identifier: 31:42:B0:08:62:EC:80:63:2D:45:AC:38:1F:D8:3C:88:4C:D9:A7:D9
Authority key identifier: 76:57:21:1F:8A:66:56:1B:57:70:FF:19:B4:71:AE:F5:11:E8:37:78
Certificate issuer: /CN=7657211f8a66561b5770ff19b471aef511e83778
Certificate serial: 0197BA7D4706AFA80CCD09054F1B048B3D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
Manifest number: 0472
Signing time: Sun 29 Jun 2025 07:01:01 +0000
Manifest this update: Sun 29 Jun 2025 07:01:01 +0000
Manifest next update: Mon 30 Jun 2025 07:01:01 +0000
Files and hashes: 1: dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl (hash: SmLt0+EV3x9PsO1BiIbbmI20mIn8pfWGfOg8DpLS0J0=)
2: yLtjzto1Tw0b7DlDBQrKX87uiq0.roa (hash: qEZ4slqleS/pMqHZqm26TIAeJ329Oueymvehs7DZe3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:47:06:af:a8:0c:cd:09:05:4f:1b:04:8b:3d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7657211f8a66561b5770ff19b471aef511e83778
Validity
Not Before: Jun 29 07:01:01 2025 GMT
Not After : Jun 30 07:01:01 2025 GMT
Subject: CN=3142b00862ec80632d45ac381fd83c884cd9a7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:4d:4c:ef:2d:bf:c6:49:30:f4:06:d6:bf:
b6:d2:98:94:f2:eb:3c:b4:00:fb:73:65:91:6c:ca:
ba:b7:4a:e5:d2:27:b1:bf:4f:3b:88:fa:81:59:d4:
ca:70:ca:19:c0:ab:03:63:a8:35:04:ab:53:b0:4c:
8a:5d:2b:ed:d9:f4:ef:88:1e:69:81:7c:fd:0a:45:
37:1c:91:71:16:81:55:30:03:3e:3f:df:d6:65:ff:
d3:76:66:36:5a:50:d9:1e:e5:37:26:f3:c7:7f:57:
fb:f4:f1:40:0b:ff:ae:1a:81:b0:28:5d:2c:34:dd:
89:0e:14:1e:50:52:bd:61:58:5e:9b:8b:19:43:74:
6b:c1:52:22:40:53:18:e1:03:56:22:99:1c:b0:7c:
d3:d2:6c:96:3a:81:52:9b:9a:a8:ca:0e:b6:5d:d8:
f3:e1:51:5f:c5:3d:0c:59:db:2b:5a:b0:9e:7d:15:
c6:a1:77:44:14:4c:bf:18:cd:91:67:6e:e6:a4:48:
db:84:7e:e0:58:60:87:db:08:53:84:98:75:d6:52:
79:71:7c:0c:82:b8:6e:d4:6a:1b:2e:e9:ba:08:fc:
4f:94:91:84:4e:d4:b9:f3:4f:81:b4:47:41:25:e1:
02:93:d3:3c:0e:dc:04:c4:e3:1f:30:99:98:cf:11:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:42:B0:08:62:EC:80:63:2D:45:AC:38:1F:D8:3C:88:4C:D9:A7:D9
X509v3 Authority Key Identifier:
keyid:76:57:21:1F:8A:66:56:1B:57:70:FF:19:B4:71:AE:F5:11:E8:37:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1b:43:8b:4b:a3:62:75:b2:f1:34:ca:53:ac:c3:f4:3a:0f:
e0:17:35:cd:f4:1f:ec:27:e5:fa:40:a0:7a:d1:0f:79:53:42:
2a:1a:8c:ab:c2:d7:69:63:d1:3f:5a:c0:01:a8:08:c6:53:02:
75:c0:a2:1a:83:a5:01:6e:38:63:8c:da:0b:e8:a3:70:43:b4:
e6:31:f9:fc:6a:c3:6a:0d:e7:23:b5:4f:90:e4:a5:27:5b:67:
9f:17:22:70:7f:2f:eb:15:0a:aa:08:af:35:ea:2b:eb:ab:63:
e1:e6:aa:f8:65:f7:c8:af:73:8f:56:fa:d2:1c:89:60:d6:f0:
88:d9:7a:2f:5d:4c:c6:94:59:20:2c:92:4b:c7:a2:6a:23:f2:
ec:e2:d9:c7:58:f5:88:89:6a:13:99:39:7b:3c:c5:07:06:b1:
cf:c9:6b:e7:89:6c:21:2e:d6:05:40:14:2a:89:6e:d4:b5:f7:
8c:a0:09:3e:eb:46:08:3a:46:34:13:2c:cf:49:e2:06:c1:90:
bd:2e:ec:3c:4c:48:53:d5:67:26:83:6a:eb:55:43:d4:10:b2:
29:66:9e:11:27:9f:ee:d4:38:1e:b5:89:a5:06:08:ca:18:c2:
a1:cf:6e:b5:7b:41:2d:e3:cd:59:a3:01:0e:ed:66:c7:0c:44:
40:74:01:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fUcGr6gMzQkFTxsEiz1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTcyMTFmOGE2NjU2MWI1NzcwZmYxOWI0NzFhZWY1MTFl
ODM3NzgwHhcNMjUwNjI5MDcwMTAxWhcNMjUwNjMwMDcwMTAxWjAzMTEwLwYDVQQD
EygzMTQyYjAwODYyZWM4MDYzMmQ0NWFjMzgxZmQ4M2M4ODRjZDlhN2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnZNTO8tv8ZJMPQG1r+20piU8us8
tAD7c2WRbMq6t0rl0iexv087iPqBWdTKcMoZwKsDY6g1BKtTsEyKXSvt2fTviB5p
gXz9CkU3HJFxFoFVMAM+P9/WZf/TdmY2WlDZHuU3JvPHf1f79PFAC/+uGoGwKF0s
NN2JDhQeUFK9YVhem4sZQ3RrwVIiQFMY4QNWIpkcsHzT0myWOoFSm5qoyg62Xdjz
4VFfxT0MWdsrWrCefRXGoXdEFEy/GM2RZ27mpEjbhH7gWGCH2whThJh11lJ5cXwM
grhu1GobLum6CPxPlJGETtS580+BtEdBJeECk9M8DtwExOMfMJmYzxGF6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFCsAhi7IBjLUWsOB/YPIhM2afZMB8GA1UdIwQY
MBaAFHZXIR+KZlYbV3D/GbRxrvUR6Dd4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxjaEg0cG1WaHRYY1A4WnRIR3U5UkhvTjNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xZTA2YmUtNDUxMS00NWZjLTg5NDkt
NzQzMWQ2ODlhOGU4LzEvZGxjaEg0cG1WaHRYY1A4WnRIR3U5UkhvTjNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xZTA2YmUtNDUxMS00NWZjLTg5NDktNzQzMWQ2ODlhOGU4
LzEvZGxjaEg0cG1WaHRYY1A4WnRIR3U5UkhvTjNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBtDi0uj
YnWy8TTKU6zD9DoP4Bc1zfQf7Cfl+kCgetEPeVNCKhqMq8LXaWPRP1rAAagIxlMC
dcCiGoOlAW44Y4zaC+ijcEO05jH5/GrDag3nI7VPkOSlJ1tnnxcicH8v6xUKqgiv
Neor66tj4eaq+GX3yK9zj1b60hyJYNbwiNl6L11MxpRZICySS8eiaiPy7OLZx1j1
iIlqE5k5ezzFBwaxz8lr54lsIS7WBUAUKolu1LX3jKAJPutGCDpGNBMsz0niBsGQ
vS7sPExIU9VnJoNq61VD1BCyKWaeESef7tQ4HrWJpQYIyhjCoc9utXtBLePNWaMB
Du1mxwxEQHQBpQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:00:58 2025 by rpki-client