Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
File: dn62YZNtyV2j7MTKPq9YE4nA2FU.mft (raw, json)
Hash identifier: GJ5WAavJvySiWetT4wAN9B7KttTq5E4yT+aJRWrNXPg=
Subject key identifier: 33:C7:9F:67:DF:9F:6C:F4:8F:93:9A:9B:1F:1B:A5:5F:29:49:99:29
Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
Certificate issuer: /CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Certificate serial: 0197B9A1E7935EEA09B4CEF5FF414F4CF53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
Manifest number: 15BC
Signing time: Sun 29 Jun 2025 03:01:24 +0000
Manifest this update: Sun 29 Jun 2025 03:01:24 +0000
Manifest next update: Mon 30 Jun 2025 03:01:24 +0000
Files and hashes: 1: 1-1fD9INC6tdul0-Zxx4kw5UQaSA.roa (hash: xArWY+ZJbdFaL3BIojqGwzrX81Sbjb4pJCyT9h2MU5E=)
2: dn62YZNtyV2j7MTKPq9YE4nA2FU.crl (hash: QFZM3vm6BJ1GP4T4m4sM/Yu/WwziwGxKaFnllo3ESLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:e7:93:5e:ea:09:b4:ce:f5:ff:41:4f:4c:f5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Validity
Not Before: Jun 29 03:01:24 2025 GMT
Not After : Jun 30 03:01:24 2025 GMT
Subject: CN=33c79f67df9f6cf48f939a9b1f1ba55f29499929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:01:36:c0:69:ba:fd:0c:b6:04:e4:ea:df:0b:
1f:0e:9b:4e:37:13:82:e1:fc:04:b2:ff:b1:d5:bb:
f5:17:79:c9:c9:e2:9f:bd:ca:6d:cd:25:68:76:d9:
c7:17:87:00:d7:7d:b9:b3:00:e9:cc:70:53:06:5e:
9b:66:67:e9:af:8b:57:d6:09:91:df:48:a0:21:a1:
97:c7:99:b4:d4:6c:cb:29:55:6b:07:96:38:13:a2:
9e:e6:d9:88:ed:d7:99:ae:e1:e0:4c:6d:15:e1:64:
7c:e4:2f:6b:94:d7:cc:97:8e:c8:2d:ea:89:ec:cd:
ef:ab:35:7e:23:88:3f:5b:40:74:64:db:99:1b:83:
cc:66:33:1e:4d:57:5f:f0:d6:c5:51:5f:0b:2e:55:
e4:35:8f:46:d6:ea:a3:20:4e:59:17:e4:d9:8f:dc:
2c:4b:51:d5:1e:7d:49:94:c8:8b:48:d4:d8:b7:bf:
48:2a:10:93:28:1f:aa:1a:a4:64:25:79:6f:99:6b:
56:24:27:30:dd:c5:45:9f:9c:12:f8:f5:54:f6:fb:
1a:81:52:db:db:ec:4e:ea:a7:d5:7f:4e:ae:dd:bf:
3c:04:77:7f:44:1f:31:1b:b9:2d:6d:13:1d:d4:60:
d3:92:b7:fd:b2:a4:1c:19:26:1f:b5:a2:bf:30:0f:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:9F:67:DF:9F:6C:F4:8F:93:9A:9B:1F:1B:A5:5F:29:49:99:29
X509v3 Authority Key Identifier:
keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:55:ac:4f:9a:20:08:b9:88:e4:54:60:cf:d5:f7:b9:81:ac:
76:15:e2:f1:a4:e4:9d:98:64:fb:1f:fb:24:05:b9:45:e5:1e:
2d:3a:59:82:74:21:a4:c1:a9:84:a3:61:24:fd:a3:cc:bf:39:
6d:17:be:b4:98:42:73:19:8d:0f:b6:47:77:d7:d9:74:bd:23:
b7:fe:20:5e:a0:d2:6b:bb:e1:df:7c:aa:5e:5f:85:4b:68:98:
ef:cc:a5:5a:69:4c:d3:94:9e:08:d7:92:0a:ca:ff:d7:ac:30:
82:c7:05:8a:97:18:b8:c0:fa:94:6b:d6:1a:e3:33:be:a3:cb:
b4:e7:b5:81:2c:2d:91:a4:1d:10:e9:dd:30:1a:e8:e9:30:ec:
1c:43:40:8e:82:7d:15:9d:ad:4d:aa:4e:86:ac:6e:cf:27:3e:
86:4b:13:46:66:f1:86:9e:7d:44:15:da:52:db:ea:dd:cf:8c:
f9:91:4d:94:2d:01:af:13:f2:a5:b4:df:51:3d:81:c9:13:7e:
9f:8e:a0:69:59:6f:b8:6d:f3:63:ba:f1:c2:9e:ed:2e:8f:92:
9b:a2:87:7c:f8:a6:bb:ad:35:41:07:a9:fa:e5:f5:99:02:25:
a1:63:26:f1:24:f8:6a:99:70:6b:ae:1e:2c:97:8e:0e:c0:d3:
19:96:a6:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oeeTXuoJtM71/0FPTPU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2ViNjYxOTM2ZGM5NWRhM2VjYzRjYTNlYWY1ODEzODlj
MGQ4NTUwHhcNMjUwNjI5MDMwMTI0WhcNMjUwNjMwMDMwMTI0WjAzMTEwLwYDVQQD
EygzM2M3OWY2N2RmOWY2Y2Y0OGY5MzlhOWIxZjFiYTU1ZjI5NDk5OTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AE2wGm6/Qy2BOTq3wsfDptONxOC
4fwEsv+x1bv1F3nJyeKfvcptzSVodtnHF4cA1325swDpzHBTBl6bZmfpr4tX1gmR
30igIaGXx5m01GzLKVVrB5Y4E6Ke5tmI7deZruHgTG0V4WR85C9rlNfMl47ILeqJ
7M3vqzV+I4g/W0B0ZNuZG4PMZjMeTVdf8NbFUV8LLlXkNY9G1uqjIE5ZF+TZj9ws
S1HVHn1JlMiLSNTYt79IKhCTKB+qGqRkJXlvmWtWJCcw3cVFn5wS+PVU9vsagVLb
2+xO6qfVf06u3b88BHd/RB8xG7ktbRMd1GDTkrf9sqQcGSYftaK/MA9JJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPHn2ffn2z0j5Oamx8bpV8pSZkpMB8GA1UdIwQY
MBaAFHZ+tmGTbcldo+zEyj6vWBOJwNhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yYTVhOWMtYmRmOS00ZWQwLWFkMzMt
ZjQ1NzU0NDM2M2VmLzEvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yYTVhOWMtYmRmOS00ZWQwLWFkMzMtZjQ1NzU0NDM2M2Vm
LzEvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1WsT5og
CLmI5FRgz9X3uYGsdhXi8aTknZhk+x/7JAW5ReUeLTpZgnQhpMGphKNhJP2jzL85
bRe+tJhCcxmND7ZHd9fZdL0jt/4gXqDSa7vh33yqXl+FS2iY78ylWmlM05SeCNeS
Csr/16wwgscFipcYuMD6lGvWGuMzvqPLtOe1gSwtkaQdEOndMBro6TDsHENAjoJ9
FZ2tTapOhqxuzyc+hksTRmbxhp59RBXaUtvq3c+M+ZFNlC0BrxPypbTfUT2ByRN+
n46gaVlvuG3zY7rxwp7tLo+Sm6KHfPimu601QQep+uX1mQIloWMm8ST4aplwa64e
LJeODsDTGZamrA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:03:49 2025 by rpki-client