Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File: ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier: a7BT3LbVsrCQaDrNVr20n/ffNOeS9koGfYSjMIXsmnY=
Subject key identifier: 08:E0:E9:FA:38:71:1B:A9:59:A0:04:64:12:95:1A:CD:EA:D4:19:F1
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer: /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial: 0197B6A2435E774ED439A79599F99E8FBB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number: 14B9
Signing time: Sat 28 Jun 2025 13:02:56 +0000
Manifest this update: Sat 28 Jun 2025 13:02:56 +0000
Manifest next update: Sun 29 Jun 2025 13:02:56 +0000
Files and hashes: 1: dWLI-JznOJ2ROywILKaV2DifrkA.roa (hash: FYPcczPE3YMqGw2fpVs6YnauPQ0hzS+hgfhTmOmRVG8=)
2: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: mwmYDvEWweVkEOyq1xt+D18n5/Ejk1FdekqkVTZWiUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:43:5e:77:4e:d4:39:a7:95:99:f9:9e:8f:bb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Validity
Not Before: Jun 28 13:02:56 2025 GMT
Not After : Jun 29 13:02:56 2025 GMT
Subject: CN=08e0e9fa38711ba959a0046412951acdead419f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:80:4e:ac:97:a5:52:e0:a2:a9:12:84:7a:
eb:1c:3d:cb:9d:e7:3e:98:d5:7b:8b:fc:41:89:6e:
b2:22:e2:32:55:e7:3d:a1:75:30:cb:3c:97:92:fe:
b6:a6:e2:7f:0a:a3:d1:0a:b0:1f:2b:4b:67:63:97:
74:2e:89:00:69:ef:b9:4d:1a:ee:c8:1c:2d:2f:3d:
05:7b:e4:4e:48:46:87:de:0d:6a:74:5c:58:b4:dd:
67:36:3f:dd:74:b5:cc:7e:d4:e0:08:2d:47:79:bd:
1b:15:16:f2:b3:eb:2e:b9:19:3e:3c:4e:39:28:e1:
23:48:6e:6f:b3:c0:99:5e:c1:f9:ac:fa:ee:dc:69:
6c:18:6a:c6:e9:d7:af:db:bf:1c:25:52:61:bb:d3:
80:57:df:56:77:07:ce:f3:f2:01:4c:00:be:92:96:
a1:aa:8e:cc:fc:31:2c:2b:f2:76:29:e9:5e:c4:ab:
27:35:40:15:51:41:e4:79:70:a5:f0:7e:19:88:c0:
9d:72:bc:02:4c:21:df:06:35:0c:f1:cd:3b:34:03:
b5:e5:50:93:b1:ab:1d:77:02:ae:e0:6a:dc:12:e0:
8a:4e:c8:ad:8b:fc:4d:3f:dd:a0:6c:e7:ec:08:7e:
2d:2b:b2:40:46:a2:f9:15:79:06:11:6e:66:2d:19:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E0:E9:FA:38:71:1B:A9:59:A0:04:64:12:95:1A:CD:EA:D4:19:F1
X509v3 Authority Key Identifier:
keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a6:fb:20:de:e9:b4:0f:22:99:dd:e4:fd:18:c8:5d:d4:4b:
77:97:4d:67:21:3e:c2:80:c4:03:5e:a9:a0:5e:e2:e0:f6:27:
92:78:54:e2:dd:3f:55:58:0f:03:d8:f9:2b:73:f1:8e:a4:16:
96:10:c8:b4:97:e5:7f:16:8f:10:a0:1a:99:14:d1:c4:84:02:
56:44:6d:ed:85:ea:14:7e:55:0d:b7:1f:2b:b0:e7:3f:ab:07:
41:2a:ab:e5:e4:84:81:e5:b9:e0:d1:10:90:0c:ec:55:49:f2:
73:98:41:67:08:ec:9b:06:6d:97:b9:2d:50:5e:5f:b5:3e:dc:
64:f8:0f:a1:57:fe:7a:07:78:79:b6:f3:44:4b:39:c3:0d:48:
39:39:01:93:21:f7:b2:2c:33:d2:97:c4:44:80:14:53:be:70:
4d:83:b2:bc:41:eb:8b:db:97:4d:39:35:b2:81:48:cc:7e:28:
17:5c:50:4e:f0:87:ec:55:c0:40:d0:4e:ef:91:94:88:dd:92:
1e:4e:6b:37:45:b1:4a:72:9c:0d:a7:3c:18:2c:3e:f3:50:64:
9f:42:cc:a3:69:f2:cf:db:4f:ef:ea:83:27:9d:05:e5:94:bd:
81:ca:6f:56:6a:50:c6:d1:f3:ae:b7:eb:db:a3:f3:16:fa:7f:
a6:eb:d6:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2okNed07UOaeVmfmej7seMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZDBlYmQ4ZjU2NmUzZmFiN2UyMzU0YjcxNDA2MGM2ZmE0
N2UyNTQwHhcNMjUwNjI4MTMwMjU2WhcNMjUwNjI5MTMwMjU2WjAzMTEwLwYDVQQD
EygwOGUwZTlmYTM4NzExYmE5NTlhMDA0NjQxMjk1MWFjZGVhZDQxOWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8GATqyXpVLgoqkShHrrHD3Lnec+
mNV7i/xBiW6yIuIyVec9oXUwyzyXkv62puJ/CqPRCrAfK0tnY5d0LokAae+5TRru
yBwtLz0Fe+ROSEaH3g1qdFxYtN1nNj/ddLXMftTgCC1Heb0bFRbys+suuRk+PE45
KOEjSG5vs8CZXsH5rPru3GlsGGrG6dev278cJVJhu9OAV99WdwfO8/IBTAC+kpah
qo7M/DEsK/J2KelexKsnNUAVUUHkeXCl8H4ZiMCdcrwCTCHfBjUM8c07NAO15VCT
sasddwKu4GrcEuCKTsiti/xNP92gbOfsCH4tK7JARqL5FXkGEW5mLRlmQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjg6fo4cRupWaAEZBKVGs3q1BnxMB8GA1UdIwQY
MBaAFHXQ69j1ZuP6t+I1S3FAYMb6R+JUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80ODMyNDEtM2RiYS00MzkyLWFhYjAt
Mzk3NjVhM2Y5ZGJjLzEvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80ODMyNDEtM2RiYS00MzkyLWFhYjAtMzk3NjVhM2Y5ZGJj
LzEvZGREcjJQVm00X3EzNGpWTGNVQmd4dnBINGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANab7IN7p
tA8imd3k/RjIXdRLd5dNZyE+woDEA16poF7i4PYnknhU4t0/VVgPA9j5K3PxjqQW
lhDItJflfxaPEKAamRTRxIQCVkRt7YXqFH5VDbcfK7DnP6sHQSqr5eSEgeW54NEQ
kAzsVUnyc5hBZwjsmwZtl7ktUF5ftT7cZPgPoVf+egd4ebbzREs5ww1IOTkBkyH3
siwz0pfERIAUU75wTYOyvEHri9uXTTk1soFIzH4oF1xQTvCH7FXAQNBO75GUiN2S
Hk5rN0WxSnKcDac8GCw+81Bkn0LMo2nyz9tP7+qDJ50F5ZS9gcpvVmpQxtHzrrfr
26PzFvp/puvW/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:43 2025 by rpki-client