Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: LfPswQnKrk/D3JSc1ZRk8x+Gl4/Po0LIbMUzXFB8Ni8=
Subject key identifier: 31:84:6C:D1:FB:8F:88:AF:CD:3F:C3:8F:A8:7A:E6:32:71:B4:BA:32
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 0198D4732BF3833EEBB689D6C764F2631E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 0DC0
Signing time: Sat 23 Aug 2025 01:02:54 +0000
Manifest this update: Sat 23 Aug 2025 01:02:54 +0000
Manifest next update: Sun 24 Aug 2025 01:02:54 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: g7QeB4qy//iBQMfA/v1V+Mjtw5jtouiZ+DFToWOuZAQ=)
2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:2b:f3:83:3e:eb:b6:89:d6:c7:64:f2:63:1e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Aug 23 01:02:54 2025 GMT
Not After : Aug 24 01:02:54 2025 GMT
Subject: CN=31846cd1fb8f88afcd3fc38fa87ae63271b4ba32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:1e:2a:74:77:55:e2:1f:10:46:4f:ab:e6:
00:69:cd:e1:1c:7a:1e:a2:52:80:ea:0a:60:b9:09:
20:52:92:6f:f2:24:e0:2f:b5:73:53:dc:1e:48:3a:
ea:ed:72:d4:f8:8f:b7:33:3c:ce:6c:c1:de:52:80:
4c:85:f7:fe:20:90:a6:b9:89:fc:2a:5a:8e:d9:b3:
35:2d:31:eb:88:14:c0:b0:10:a7:a2:f1:20:18:2a:
d5:ee:19:06:f9:17:39:90:12:f0:0a:d3:4e:3b:d3:
8f:e5:6a:b3:b3:3b:39:51:56:03:88:24:4f:2f:15:
97:14:44:bb:92:0e:8d:e2:c4:c6:4c:cc:5e:2a:95:
ff:de:ab:8f:07:31:60:63:d7:46:58:30:6c:ce:79:
14:e2:b4:2e:3a:65:ad:97:2a:fc:b4:ac:77:08:49:
4e:be:ef:05:a4:56:5e:ed:87:12:b4:63:8e:6b:9c:
c6:47:89:68:79:04:40:63:c1:c8:21:71:61:98:01:
14:b3:ef:20:63:4b:b6:02:76:0a:4a:ba:d4:57:ed:
36:70:b5:ae:32:06:f3:62:b2:06:38:55:95:dd:0d:
68:50:b6:8a:b1:b3:90:29:61:a7:78:83:a7:a1:5e:
c9:9f:86:4e:02:08:56:c9:ad:90:00:53:32:eb:e6:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:84:6C:D1:FB:8F:88:AF:CD:3F:C3:8F:A8:7A:E6:32:71:B4:BA:32
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d1:c9:3d:05:22:0e:a9:47:a6:fb:76:19:4b:2a:ea:03:f7:
78:62:2b:8d:c8:9e:23:96:e1:a3:9a:71:a3:e7:4b:2a:15:68:
2d:30:ca:7b:c5:fb:6c:d1:f3:9e:d7:9f:ae:96:5e:4d:b5:9e:
38:db:d1:0f:4c:f5:02:06:0e:9c:83:50:d3:81:c3:b4:5d:cf:
b9:86:63:fc:70:95:1f:e6:d3:47:cd:4d:77:7a:ee:dc:21:9b:
36:70:6a:6c:79:08:b8:8b:bf:d4:30:11:37:b6:f3:cf:24:b6:
50:7b:06:7d:02:72:c6:ea:6e:d7:65:96:aa:3c:1a:de:7a:90:
fd:d5:d4:53:84:15:9a:dd:5c:f8:a6:f2:c4:0b:8e:ef:00:ec:
68:b7:ce:fc:6c:00:83:f4:b6:8c:df:b6:8d:15:ba:7b:48:3a:
3c:09:7e:c6:a8:86:d2:3c:ff:3c:e2:a9:28:58:a9:e6:e7:46:
1f:02:4c:69:4e:e6:c9:23:ce:2c:ee:df:ec:36:f4:57:a2:8a:
d8:52:c1:62:df:50:26:4e:d5:ed:a3:d4:09:5e:70:9e:1c:54:
4a:66:7a:fc:57:7b:77:4b:9e:0b:fd:a7:53:64:fd:03:be:da:
cf:a6:7a:08:a2:70:e9:97:2c:ed:2e:88:a9:f7:85:9d:7a:e3:
9a:db:b3:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcyvzgz7rtonWx2TyYx4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx
NjYwMDgwHhcNMjUwODIzMDEwMjU0WhcNMjUwODI0MDEwMjU0WjAzMTEwLwYDVQQD
EygzMTg0NmNkMWZiOGY4OGFmY2QzZmMzOGZhODdhZTYzMjcxYjRiYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo58eKnR3VeIfEEZPq+YAac3hHHoe
olKA6gpguQkgUpJv8iTgL7VzU9weSDrq7XLU+I+3MzzObMHeUoBMhff+IJCmuYn8
KlqO2bM1LTHriBTAsBCnovEgGCrV7hkG+Rc5kBLwCtNOO9OP5Wqzszs5UVYDiCRP
LxWXFES7kg6N4sTGTMxeKpX/3quPBzFgY9dGWDBsznkU4rQuOmWtlyr8tKx3CElO
vu8FpFZe7YcStGOOa5zGR4loeQRAY8HIIXFhmAEUs+8gY0u2AnYKSrrUV+02cLWu
MgbzYrIGOFWV3Q1oULaKsbOQKWGneIOnoV7Jn4ZOAghWya2QAFMy6+ZsiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGEbNH7j4ivzT/Dj6h65jJxtLoyMB8GA1UdIwQY
MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt
NmY3YzBlYzkxZDhhLzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh
LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtHJPQUi
DqlHpvt2GUsq6gP3eGIrjcieI5bho5pxo+dLKhVoLTDKe8X7bNHzntefrpZeTbWe
ONvRD0z1AgYOnINQ04HDtF3PuYZj/HCVH+bTR81Nd3ru3CGbNnBqbHkIuIu/1DAR
N7bzzyS2UHsGfQJyxupu12WWqjwa3nqQ/dXUU4QVmt1c+KbyxAuO7wDsaLfO/GwA
g/S2jN+2jRW6e0g6PAl+xqiG0jz/POKpKFip5udGHwJMaU7mySPOLO7f7Db0V6KK
2FLBYt9QJk7V7aPUCV5wnhxUSmZ6/Fd7d0ueC/2nU2T9A77az6Z6CKJw6Zcs7S6I
qfeFnXrjmtuzSA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:14 2025 by rpki-client