Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: lRwoSigDs94aPjl6yw840ZCUjCulS8VYxZQeh/LvdZI=
Subject key identifier: 84:F6:E0:84:66:48:5A:D3:D2:7C:D0:BE:83:AF:64:24:4B:AA:95:3F
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 0197B5C4D7B9B81AE8F7807A6AD58F2B50E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 0337
Signing time: Sat 28 Jun 2025 09:01:05 +0000
Manifest this update: Sat 28 Jun 2025 09:01:05 +0000
Manifest next update: Sun 29 Jun 2025 09:01:05 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: Rqsoup7CNltgjfZxfoElU9HNkR4bkDMcVde6KiKkf/o=)
2: PPz_1wH3hqFDjLC-MrIMRrZJxeQ.roa (hash: ZY1q21nV+Hi/oVRVSMTtHd27zoQ6myzruEINZqqxjKM=)
3: fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa (hash: 6em1xLWv3WGsIAinbV2APlVzvS3mzKB3u+DwFqIP/5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:d7:b9:b8:1a:e8:f7:80:7a:6a:d5:8f:2b:50:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Jun 28 09:01:05 2025 GMT
Not After : Jun 29 09:01:05 2025 GMT
Subject: CN=84f6e08466485ad3d27cd0be83af64244baa953f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:36:8b:e8:98:84:96:ad:bf:7e:72:e1:2d:
df:2a:f5:29:43:27:44:c3:91:39:c0:fb:ea:d2:27:
c6:0b:2c:c1:41:f9:c6:6d:3c:63:6b:58:40:72:e4:
3b:e3:0d:15:02:3e:0f:33:70:4f:80:e0:fa:c8:23:
15:59:cc:b1:ea:e5:4c:12:e2:78:6f:76:72:cb:03:
3a:8d:da:2d:b1:f3:9b:63:34:87:70:24:a5:33:f0:
e3:3e:6a:51:e8:b0:e3:80:1c:e2:07:4e:57:6e:41:
86:c5:9b:e5:55:3e:ce:e1:28:5f:ca:61:0b:32:2e:
d8:b3:88:14:57:79:1f:7f:3a:c2:33:c3:3c:71:27:
9c:d2:db:15:be:95:dd:8d:d8:ee:30:21:7b:23:5f:
43:8a:1e:df:01:9a:7a:fb:88:10:5d:b4:ed:4d:f9:
f2:64:f7:67:c3:43:2d:c1:0f:f2:5e:9c:21:86:56:
fd:81:fa:93:eb:bd:60:84:e2:ff:9e:9e:30:07:d4:
1b:4c:3e:f5:f3:fa:3d:a2:78:d3:69:8a:39:f3:86:
41:a3:f6:1f:7f:95:2f:bf:81:44:66:e9:7c:b5:a9:
4d:e7:a8:93:b2:d9:1b:0e:84:eb:b8:f9:b2:b5:db:
80:35:98:c2:a7:15:45:0b:65:bf:e5:a3:bb:50:69:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F6:E0:84:66:48:5A:D3:D2:7C:D0:BE:83:AF:64:24:4B:AA:95:3F
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cb:f0:4d:c8:b6:c1:68:08:c1:f9:de:da:cc:53:0e:a7:71:
60:e7:59:aa:10:8e:6f:d4:1c:9a:be:90:d9:52:3b:99:c9:a1:
10:56:79:ec:a2:ff:10:5f:b4:f0:17:78:8c:38:b6:ce:d6:ce:
71:64:3c:69:e6:7d:13:40:0d:a8:0e:2d:30:ba:d0:ef:97:3d:
61:cc:bb:84:87:48:b5:41:ca:69:7a:44:c0:d6:c0:bd:95:27:
93:7d:e5:ac:6d:19:f6:ec:1c:44:dd:af:ff:b1:2d:02:31:76:
82:19:e1:c6:74:6d:5c:e3:f0:ea:41:57:dd:fc:8d:1a:0f:8f:
ac:e7:a6:bf:60:89:b1:d8:8a:bf:74:c3:c9:13:5d:ee:9f:3d:
2a:6b:ee:e5:3a:3d:eb:90:cd:8c:53:3d:0d:18:5d:d8:56:2f:
a4:bc:60:2e:8d:17:c9:7c:ae:04:86:54:35:d6:15:04:bc:01:
c0:3e:42:49:02:41:7d:53:3b:d1:88:a7:e8:2d:59:96:f8:bf:
fd:62:55:6b:08:fa:7a:a5:9c:f2:c3:4e:14:54:fb:77:9d:f5:
8d:b5:03:83:f7:69:6f:cf:b4:c0:f3:1f:e1:db:4d:8d:7c:33:
97:62:0e:1e:b3:fd:3d:96:86:41:bf:00:8f:c6:b0:4b:64:80:
d6:48:9d:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xNe5uBro94B6atWPK1DiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDI1ZmEzNTdjMjBhYmJmMTE4NDI2MjM0NjU4ZTYyZDdk
YzcwNzYwHhcNMjUwNjI4MDkwMTA1WhcNMjUwNjI5MDkwMTA1WjAzMTEwLwYDVQQD
Eyg4NGY2ZTA4NDY2NDg1YWQzZDI3Y2QwYmU4M2FmNjQyNDRiYWE5NTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIo2i+iYhJatv35y4S3fKvUpQydE
w5E5wPvq0ifGCyzBQfnGbTxja1hAcuQ74w0VAj4PM3BPgOD6yCMVWcyx6uVMEuJ4
b3ZyywM6jdotsfObYzSHcCSlM/DjPmpR6LDjgBziB05XbkGGxZvlVT7O4ShfymEL
Mi7Ys4gUV3kffzrCM8M8cSec0tsVvpXdjdjuMCF7I19Dih7fAZp6+4gQXbTtTfny
ZPdnw0MtwQ/yXpwhhlb9gfqT671ghOL/np4wB9QbTD718/o9onjTaYo584ZBo/Yf
f5Uvv4FEZul8talN56iTstkbDoTruPmytduANZjCpxVFC2W/5aO7UGniXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIT24IRmSFrT0nzQvoOvZCRLqpU/MB8GA1UdIwQY
MBaAFA8CX6NXwgq78RhCYjRljmLX3HB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2Ut
ZDRkNTlhMDk1YzdmLzEvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2UtZDRkNTlhMDk1Yzdm
LzEvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcvwTci2
wWgIwfne2sxTDqdxYOdZqhCOb9Qcmr6Q2VI7mcmhEFZ57KL/EF+08Bd4jDi2ztbO
cWQ8aeZ9E0ANqA4tMLrQ75c9Ycy7hIdItUHKaXpEwNbAvZUnk33lrG0Z9uwcRN2v
/7EtAjF2ghnhxnRtXOPw6kFX3fyNGg+PrOemv2CJsdiKv3TDyRNd7p89Kmvu5To9
65DNjFM9DRhd2FYvpLxgLo0XyXyuBIZUNdYVBLwBwD5CSQJBfVM70Yin6C1Zlvi/
/WJVawj6eqWc8sNOFFT7d531jbUDg/dpb8+0wPMf4dtNjXwzl2IOHrP9PZaGQb8A
j8awS2SA1kidsw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:28 2025 by rpki-client