Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
File: dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json)
Hash identifier: LLQnsrSXUEiHHyzmiWBkcy7CXGD/LL0kumhTp1PAzpY=
Subject key identifier: 9D:44:47:11:19:35:AE:85:B7:56:A6:44:49:F6:9E:B2:65:32:DD:D1
Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
Certificate issuer: /CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Certificate serial: 0198D473DC39EC21902BD8FF7CCE51497A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
Manifest number: 0DA9
Signing time: Sat 23 Aug 2025 01:03:39 +0000
Manifest this update: Sat 23 Aug 2025 01:03:39 +0000
Manifest next update: Sun 24 Aug 2025 01:03:39 +0000
Files and hashes: 1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: q8Y9shixkcoi+QcLPTrDNvS1EX8Rf4ZKkEAbY6DH7pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:dc:39:ec:21:90:2b:d8:ff:7c:ce:51:49:7a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Validity
Not Before: Aug 23 01:03:39 2025 GMT
Not After : Aug 24 01:03:39 2025 GMT
Subject: CN=9d4447111935ae85b756a64449f69eb26532ddd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:c2:44:45:fb:59:e5:06:b2:f1:82:b4:f7:
c9:bb:da:f2:3d:d3:af:8c:29:96:42:ed:82:f1:8d:
c3:18:70:99:fb:82:67:d5:3d:cf:0b:ce:bf:89:eb:
7c:60:b9:49:74:f6:76:6d:1e:d6:80:97:7d:15:60:
76:c4:38:b4:f9:ee:0a:de:47:12:2a:11:f5:4a:f9:
3f:65:0c:af:0c:07:33:a3:e8:c3:1d:90:6f:36:6d:
57:31:b8:38:d3:21:f5:ee:00:c6:36:43:a3:0f:27:
dd:e3:4d:1a:07:60:21:b5:3c:c1:60:46:26:d0:bb:
db:16:68:9c:24:7e:ae:6d:f0:cc:ce:68:ed:48:a1:
f8:a3:02:e0:4b:53:ed:39:8d:e1:d9:3c:d1:73:74:
b8:b8:49:df:a7:6e:05:f9:db:72:3e:45:84:4f:27:
7d:7f:75:97:33:ea:8f:0e:35:9e:b9:e1:89:60:fc:
ae:2d:eb:a0:0c:57:2c:5f:77:4d:dc:fd:1b:c7:c4:
02:30:29:d8:9f:c8:88:1f:fc:90:f3:0a:a0:b5:16:
f2:ba:cc:e7:bd:35:80:97:25:07:38:de:b7:c0:81:
8d:c0:11:89:51:d8:10:88:27:4c:94:5d:fe:da:c7:
e0:23:59:60:ad:a5:db:1d:62:c9:e2:c7:46:fe:c8:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:44:47:11:19:35:AE:85:B7:56:A6:44:49:F6:9E:B2:65:32:DD:D1
X509v3 Authority Key Identifier:
keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a3:f7:74:de:38:a8:0a:76:dd:e0:b0:69:27:8a:80:58:46:
93:33:d7:fc:03:3f:7d:37:a9:26:b6:cd:c7:b0:aa:88:d0:9c:
36:63:5c:e7:1e:9d:81:10:42:3c:cb:e9:0f:bb:0f:5f:1a:1f:
7f:1b:5e:c7:f9:1a:83:ee:93:c3:7b:47:17:a6:b9:90:49:66:
02:47:13:d1:82:16:1b:38:c9:f8:a8:b0:4e:a3:c4:27:7b:d9:
9f:99:76:47:39:f5:ab:65:a9:41:72:e9:fc:81:1d:8c:ae:1e:
90:9d:64:0c:d0:2f:2c:99:1c:73:6d:7f:14:3f:46:1e:60:10:
4f:61:d8:d8:aa:35:42:18:5d:8e:d2:7d:dd:55:cb:d4:15:41:
3d:4d:fb:23:c9:d0:7c:4d:5b:b7:f1:16:58:4c:ad:07:dd:e6:
77:84:81:8c:83:2b:d6:cd:c3:84:d3:34:69:96:b6:c7:14:d1:
ad:d7:e2:0d:15:36:90:ec:71:94:5c:cf:09:ec:9c:c1:2d:60:
95:1d:10:00:54:7d:9a:08:e0:3a:ba:54:f6:a1:f7:ef:46:6a:
d8:6a:f9:8b:a4:1b:b6:fe:24:37:b8:80:63:0a:8b:0c:6f:5d:
8a:af:72:71:7c:8a:3d:dd:39:a4:da:f8:3a:7f:53:c5:a7:2c:
83:89:8c:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc9w57CGQK9j/fM5RSXqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjQxNzhhNTc0YTI2MDliYjZlZmYxY2M1MjFiNDUzZDc1
Yzg3ZGMwHhcNMjUwODIzMDEwMzM5WhcNMjUwODI0MDEwMzM5WjAzMTEwLwYDVQQD
Eyg5ZDQ0NDcxMTE5MzVhZTg1Yjc1NmE2NDQ0OWY2OWViMjY1MzJkZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ3CREX7WeUGsvGCtPfJu9ryPdOv
jCmWQu2C8Y3DGHCZ+4Jn1T3PC86/iet8YLlJdPZ2bR7WgJd9FWB2xDi0+e4K3kcS
KhH1Svk/ZQyvDAczo+jDHZBvNm1XMbg40yH17gDGNkOjDyfd400aB2AhtTzBYEYm
0LvbFmicJH6ubfDMzmjtSKH4owLgS1PtOY3h2TzRc3S4uEnfp24F+dtyPkWETyd9
f3WXM+qPDjWeueGJYPyuLeugDFcsX3dN3P0bx8QCMCnYn8iIH/yQ8wqgtRbyuszn
vTWAlyUHON63wIGNwBGJUdgQiCdMlF3+2sfgI1lgraXbHWLJ4sdG/sj46wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1ERxEZNa6Ft1amREn2nrJlMt3RMB8GA1UdIwQY
MBaAFHVkF4pXSiYJu27/HMUhtFPXXIfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wY2M4NzUtNjEwZi00YWRkLWE3MTkt
M2NhYWY5MDVjZmM2LzEvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wY2M4NzUtNjEwZi00YWRkLWE3MTktM2NhYWY5MDVjZmM2
LzEvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKP3dN44
qAp23eCwaSeKgFhGkzPX/AM/fTepJrbNx7CqiNCcNmNc5x6dgRBCPMvpD7sPXxof
fxtex/kag+6Tw3tHF6a5kElmAkcT0YIWGzjJ+KiwTqPEJ3vZn5l2Rzn1q2WpQXLp
/IEdjK4ekJ1kDNAvLJkcc21/FD9GHmAQT2HY2Ko1QhhdjtJ93VXL1BVBPU37I8nQ
fE1bt/EWWEytB93md4SBjIMr1s3DhNM0aZa2xxTRrdfiDRU2kOxxlFzPCeycwS1g
lR0QAFR9mgjgOrpU9qH370Zq2Gr5i6Qbtv4kN7iAYwqLDG9diq9ycXyKPd05pNr4
On9Txacsg4mMFg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:25 2025 by rpki-client