Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier: 2Gk/26GLWf07VK27s9rdwnCeH44HeV+7oRj1jB3OneM=
Subject key identifier: 41:67:BE:49:DA:69:D5:71:93:C5:BF:0F:EE:7D:96:6C:F4:19:25:E0
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 0197BEC823A0A8F949D9122A788F7826B229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number: 0F0E
Signing time: Mon 30 Jun 2025 03:01:16 +0000
Manifest this update: Mon 30 Jun 2025 03:01:16 +0000
Manifest next update: Tue 01 Jul 2025 03:01:16 +0000
Files and hashes: 1: DqHnzYWuxMllYj4fNdyjlN5bOt8.roa (hash: Ct+oA/iZNUzEaqp34vmPr/rb2NLctNCZu0gWWKERVjE=)
2: Lf8_T-o7ZHygGu0g3mlzua1_1HA.roa (hash: CQIDTTHcfVlCnxAPq4hAkvv2QsASVNkVlmr+LBxrlLU=)
3: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: aodHZpOdQpaq4iaDaQIomBwo5twigfMZwDQr764P+mI=)
4: vYaVLKXY1-Vrl86mKkE3Y-3XdFU.roa (hash: 8y0C99LYt4H2oUrCqNFHSxS/1TMmBVBqFKxb6zfEFoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:c8:23:a0:a8:f9:49:d9:12:2a:78:8f:78:26:b2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Jun 30 03:01:16 2025 GMT
Not After : Jul 1 03:01:16 2025 GMT
Subject: CN=4167be49da69d57193c5bf0fee7d966cf41925e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:b5:d6:72:e3:1c:7d:38:f3:8f:9e:a8:f0:
3d:9c:d9:f7:ad:f4:f5:62:6f:e0:c9:93:db:74:04:
4d:de:f0:87:12:75:f9:29:55:42:99:ff:d5:6a:1a:
e4:56:61:d2:d7:8b:55:9b:9a:03:04:82:b6:86:d4:
ee:5f:78:72:81:43:0d:eb:b4:75:c1:38:d8:c7:e1:
25:0b:9f:08:69:a4:1c:ee:a7:5d:4e:8f:6b:17:65:
50:84:06:3c:d6:4a:0b:2c:da:9d:f7:cf:20:fc:87:
00:5b:f1:09:e8:92:16:47:9b:41:6e:d6:ae:6a:be:
93:65:c0:47:95:78:21:58:86:6a:95:d4:cf:62:ae:
f8:ae:40:a7:80:c8:c7:09:e5:51:f6:6d:1d:0c:e7:
4e:e6:0b:7a:5c:c8:4b:10:42:60:91:42:c5:6a:ba:
35:9a:2f:34:9a:8e:14:f0:d0:0a:26:d0:10:69:71:
99:8b:23:40:8a:7f:05:ed:25:cc:00:d6:ae:cc:83:
f9:6c:3c:94:0e:87:b2:51:89:ec:12:2a:e5:c1:e5:
b6:94:8d:e9:4f:b0:d8:5e:58:2b:5a:0c:e1:74:40:
65:7f:fe:cf:f3:40:ec:c1:26:f4:2e:0c:c5:cc:51:
a7:d0:bc:b2:76:88:e5:ab:82:38:09:67:08:99:a8:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:67:BE:49:DA:69:D5:71:93:C5:BF:0F:EE:7D:96:6C:F4:19:25:E0
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:32:7b:40:b1:1c:a5:93:64:83:ba:69:c7:b7:35:3b:5d:5f:
73:27:f6:06:52:ac:d1:56:2e:f3:8d:48:e1:ff:39:e7:15:61:
8e:8b:99:51:48:16:3d:c1:42:19:31:55:61:b7:85:44:7c:e2:
47:39:ea:f0:5e:7b:1b:f8:ff:95:f0:94:43:00:f6:c7:44:47:
8c:9a:b7:ba:c4:f8:7f:93:db:27:30:39:34:db:fe:be:c6:95:
d2:f8:87:2b:a7:c2:a7:85:7c:66:55:6e:6e:28:99:63:ed:1f:
95:4a:bf:7a:a0:c9:1a:6a:54:0f:0c:66:59:dc:61:a6:ef:04:
84:8b:eb:bc:3e:bc:07:ef:3c:f4:f6:23:94:be:e6:68:07:5d:
8a:b2:97:e1:22:b4:b1:bb:89:9d:38:b6:63:03:cc:23:b3:b6:
4b:d2:65:90:cd:50:2e:88:6a:fe:21:01:6b:18:a8:ba:86:5a:
93:e1:d5:85:36:a1:0b:78:cb:a7:38:82:e4:3d:25:3e:e0:42:
0d:b2:8e:1b:75:39:52:d0:86:d7:eb:5c:eb:89:76:0f:55:ed:
c6:85:14:a9:63:2f:29:df:54:ee:ad:bd:ef:02:de:20:5d:59:
ed:3f:d6:fd:ef:af:ff:2c:a0:bb:76:f4:88:fb:da:84:62:89:
f7:11:fe:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe+yCOgqPlJ2RIqeI94JrIpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTBjZTZiNmY4Zjc1MGUwMzU4NGViYmQ3YmRhZDBmMTFm
YmUzMWMwHhcNMjUwNjMwMDMwMTE2WhcNMjUwNzAxMDMwMTE2WjAzMTEwLwYDVQQD
Eyg0MTY3YmU0OWRhNjlkNTcxOTNjNWJmMGZlZTdkOTY2Y2Y0MTkyNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxu11nLjHH0484+eqPA9nNn3rfT1
Ym/gyZPbdARN3vCHEnX5KVVCmf/VahrkVmHS14tVm5oDBIK2htTuX3hygUMN67R1
wTjYx+ElC58IaaQc7qddTo9rF2VQhAY81koLLNqd988g/IcAW/EJ6JIWR5tBbtau
ar6TZcBHlXghWIZqldTPYq74rkCngMjHCeVR9m0dDOdO5gt6XMhLEEJgkULFaro1
mi80mo4U8NAKJtAQaXGZiyNAin8F7SXMANauzIP5bDyUDoeyUYnsEirlweW2lI3p
T7DYXlgrWgzhdEBlf/7P80DswSb0LgzFzFGn0Lyydojlq4I4CWcImajE4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFnvknaadVxk8W/D+59lmz0GSXgMB8GA1UdIwQY
MBaAFHSQzmtvj3UOA1hOu9e9rQ8R++McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAt
YzQ5NmY5Y2FmYTgzLzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAtYzQ5NmY5Y2FmYTgz
LzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzJ7QLEc
pZNkg7ppx7c1O11fcyf2BlKs0VYu841I4f855xVhjouZUUgWPcFCGTFVYbeFRHzi
Rznq8F57G/j/lfCUQwD2x0RHjJq3usT4f5PbJzA5NNv+vsaV0viHK6fCp4V8ZlVu
biiZY+0flUq/eqDJGmpUDwxmWdxhpu8EhIvrvD68B+889PYjlL7maAddirKX4SK0
sbuJnTi2YwPMI7O2S9JlkM1QLohq/iEBaxiouoZak+HVhTahC3jLpziC5D0lPuBC
DbKOG3U5UtCG1+tc64l2D1XtxoUUqWMvKd9U7q297wLeIF1Z7T/W/e+v/yygu3b0
iPvahGKJ9xH+Mw==
-----END CERTIFICATE-----
Generated at Mon Jun 30 12:22:44 2025 by rpki-client