Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: PODQQkASUf9dn42tXPLPEVwg/fa4F4S1hBXOPgICdbw=
Subject key identifier: C1:E8:95:B4:C7:E3:E9:C7:98:73:C9:12:77:71:9C:D8:5E:F7:36:10
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 0197B77BFE8F84BC7628FAE3A5512EFA17F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 0EDE
Signing time: Sat 28 Jun 2025 17:00:45 +0000
Manifest this update: Sat 28 Jun 2025 17:00:45 +0000
Manifest next update: Sun 29 Jun 2025 17:00:45 +0000
Files and hashes: 1: 12Zahr8ypxTDNrQSGTJX87wf4FU.roa (hash: 1xnPEzPjKosfERE7d2w2vVj9bJxLTdzPRRY8ixKvDnU=)
2: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: WJL9qxxuLiySwDdZ5DFTeVA28vKhCRDlqFwa+f/J8JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:fe:8f:84:bc:76:28:fa:e3:a5:51:2e:fa:17:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Jun 28 17:00:45 2025 GMT
Not After : Jun 29 17:00:45 2025 GMT
Subject: CN=c1e895b4c7e3e9c79873c91277719cd85ef73610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:77:cf:65:79:69:5d:ab:b2:1e:15:31:ca:
c5:ee:3a:7e:37:98:95:50:e6:33:22:8c:96:4d:a7:
a9:be:a8:ec:25:62:a2:2a:94:61:83:68:ee:04:aa:
24:5e:0f:2f:c6:ef:3a:c3:54:3e:85:fc:14:17:1f:
4b:42:5e:04:c5:41:6f:11:c9:c6:b3:51:45:48:ea:
ef:00:aa:b0:2b:4d:45:b4:f4:e2:01:b8:4f:55:e7:
d6:9b:da:7f:73:f1:0a:a7:7c:ad:5a:b6:b6:71:81:
b6:e8:7c:46:8d:6a:27:9f:11:60:31:fe:de:8c:00:
e8:dc:71:1a:c3:d3:96:e1:6e:fe:3c:98:b2:2e:07:
4b:a6:f2:39:bb:02:83:62:b1:f2:59:b5:c1:ca:a6:
6c:68:40:f4:7c:27:b8:91:e0:72:19:90:24:63:8a:
84:3e:2a:f2:4c:ab:52:7c:cb:b3:9a:07:98:d1:2c:
3a:b0:35:99:5e:c0:48:1e:15:39:2b:4c:25:c9:25:
91:62:19:f7:b7:e0:2a:42:db:ce:66:b0:33:1b:8e:
4b:a6:ff:c2:e7:90:ea:00:ac:d8:3d:e5:e2:2f:19:
bc:9b:3c:48:fa:61:01:f5:24:d4:87:ff:01:9e:6e:
46:d5:61:fb:36:b7:21:ca:f5:ef:f8:0c:f7:22:cd:
8d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E8:95:B4:C7:E3:E9:C7:98:73:C9:12:77:71:9C:D8:5E:F7:36:10
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:50:6c:1e:95:3b:57:49:a4:6a:c7:a1:cb:fd:05:5e:56:52:
da:2f:bf:52:7d:23:8a:d4:e8:9e:66:98:5d:23:3d:19:76:a8:
67:de:31:1a:bd:b6:5f:96:7d:15:93:9c:99:a1:83:c8:cd:f7:
ba:6c:7e:40:2a:44:e7:80:b9:b2:15:7e:9e:a4:53:f1:40:16:
cc:95:0a:e5:75:d4:15:09:83:97:cb:1d:53:ce:ab:93:e6:d7:
f5:4c:2c:1e:86:64:59:45:79:bb:0b:ee:82:db:1d:dc:72:b9:
e4:21:9f:7a:4d:ef:3a:71:83:22:09:fe:87:55:34:23:73:b7:
4e:a5:19:88:f1:f6:f8:d4:96:40:a9:29:a2:f9:11:3f:16:1c:
d8:79:c1:9d:fb:fc:34:88:36:41:e9:89:90:f9:e7:47:a9:72:
9f:6e:f0:25:d4:eb:a3:c1:2f:23:a4:b1:38:f1:93:48:c8:2d:
2d:64:b0:ef:52:3a:56:02:c8:14:e4:ea:95:b0:72:3b:5f:fb:
f7:87:ec:3f:80:26:f6:82:14:61:aa:ed:33:76:be:6d:ad:ef:
f7:96:af:7d:75:1e:bb:9a:f0:3b:da:a1:fc:f1:3f:06:ae:68:
fd:d4:dd:26:c9:0c:4d:e8:84:70:b6:80:ae:5a:eb:b8:38:61:
2d:d3:cf:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3e/6PhLx2KPrjpVEu+hfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMWU2ZDVlNzJkYWY0MTA4Y2Y2MGJkNDdlOTM2ZGYxYTFl
OTcyMjYwHhcNMjUwNjI4MTcwMDQ1WhcNMjUwNjI5MTcwMDQ1WjAzMTEwLwYDVQQD
EyhjMWU4OTViNGM3ZTNlOWM3OTg3M2M5MTI3NzcxOWNkODVlZjczNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysJ3z2V5aV2rsh4VMcrF7jp+N5iV
UOYzIoyWTaepvqjsJWKiKpRhg2juBKokXg8vxu86w1Q+hfwUFx9LQl4ExUFvEcnG
s1FFSOrvAKqwK01FtPTiAbhPVefWm9p/c/EKp3ytWra2cYG26HxGjWonnxFgMf7e
jADo3HEaw9OW4W7+PJiyLgdLpvI5uwKDYrHyWbXByqZsaED0fCe4keByGZAkY4qE
PiryTKtSfMuzmgeY0Sw6sDWZXsBIHhU5K0wlySWRYhn3t+AqQtvOZrAzG45Lpv/C
55DqAKzYPeXiLxm8mzxI+mEB9STUh/8Bnm5G1WH7NrchyvXv+Az3Is2NaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHolbTH4+nHmHPJEndxnNhe9zYQMB8GA1UdIwQY
MBaAFAwebV5y2vQQjPYL1H6TbfGh6XImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUt
YTI5NTgxM2YxZjgyLzEvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUtYTI5NTgxM2YxZjgy
LzEvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVBsHpU7
V0mkasehy/0FXlZS2i+/Un0jitTonmaYXSM9GXaoZ94xGr22X5Z9FZOcmaGDyM33
umx+QCpE54C5shV+nqRT8UAWzJUK5XXUFQmDl8sdU86rk+bX9UwsHoZkWUV5uwvu
gtsd3HK55CGfek3vOnGDIgn+h1U0I3O3TqUZiPH2+NSWQKkpovkRPxYc2HnBnfv8
NIg2QemJkPnnR6lyn27wJdTro8EvI6SxOPGTSMgtLWSw71I6VgLIFOTqlbByO1/7
94fsP4Am9oIUYartM3a+ba3v95avfXUeu5rwO9qh/PE/Bq5o/dTdJskMTeiEcLaA
rlrruDhhLdPPPg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:23 2025 by rpki-client