Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
File: DlNS2UQbZcIBbtjrfi8jWVRDT10.mft (raw, json)
Hash identifier: nevkZLx0egtUSlYlCF0PP/hDe7ZGG3ZUr5tcg+FYmVQ=
Subject key identifier: EA:78:B5:E2:53:5E:62:13:74:9D:C4:1D:78:E2:8A:4A:0A:15:A5:39
Authority key identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
Certificate issuer: /CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Certificate serial: 0198D4DFE18355336431B3FCEB3565544C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
Manifest number: 01F0
Signing time: Sat 23 Aug 2025 03:01:38 +0000
Manifest this update: Sat 23 Aug 2025 03:01:38 +0000
Manifest next update: Sun 24 Aug 2025 03:01:38 +0000
Files and hashes: 1: DlNS2UQbZcIBbtjrfi8jWVRDT10.crl (hash: b/Et2WH2wsSkV0UTYCnscg8WWEqZtAZh5ui4QL5drDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e1:83:55:33:64:31:b3:fc:eb:35:65:54:4c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Validity
Not Before: Aug 23 03:01:38 2025 GMT
Not After : Aug 24 03:01:38 2025 GMT
Subject: CN=ea78b5e2535e6213749dc41d78e28a4a0a15a539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:d3:a5:33:df:74:4e:d9:15:0a:4b:37:cd:
66:1f:e5:dc:cf:9a:00:db:2b:9c:07:69:51:85:e9:
f0:11:d5:66:87:28:24:11:de:7a:a7:a5:d8:f9:09:
e2:2d:17:6f:e0:52:ff:73:14:1f:e2:07:cf:75:5c:
7f:dd:8b:88:b2:ad:a2:bd:d3:93:b1:45:f2:32:03:
de:4b:1c:14:b0:a1:4c:55:57:59:74:68:a7:51:8f:
b4:e9:43:1d:ad:1f:bf:3a:c0:c5:3c:f7:ff:47:d2:
6a:e9:c1:d5:b6:e1:f4:01:37:89:e9:2e:ec:82:b1:
2b:bd:89:36:6e:b3:c9:3a:ae:92:49:13:dd:4a:53:
e4:94:f2:11:9a:09:b4:86:ba:51:36:03:96:5b:de:
03:71:a8:de:46:63:66:5c:66:f5:80:26:c0:c5:18:
c5:13:87:d8:43:cf:42:39:af:7d:e1:f8:00:1f:d2:
db:b5:0f:59:ea:fb:6f:61:4a:54:9a:c6:4a:c1:bd:
a4:52:d1:0a:cc:bf:f0:20:ac:82:0f:45:81:7a:70:
1d:0c:13:6c:8c:5a:12:93:26:94:87:95:9f:12:39:
17:d9:da:f3:2f:32:b7:7d:80:cd:06:00:a1:cb:51:
90:70:50:2c:7f:72:cb:59:3f:6a:90:7a:a2:5e:3e:
b6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:78:B5:E2:53:5E:62:13:74:9D:C4:1D:78:E2:8A:4A:0A:15:A5:39
X509v3 Authority Key Identifier:
keyid:0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cc:3c:7b:ac:39:5a:2b:41:61:8a:9a:44:a9:64:df:05:9a:
e9:d2:58:66:f2:e1:48:82:4d:4a:bf:6b:45:ef:11:b7:93:b1:
43:6a:16:a1:26:69:d7:c7:8a:4d:e7:02:9e:86:91:0c:70:94:
a7:5b:99:40:40:0b:34:53:c7:bd:56:25:2b:df:50:9e:f1:b4:
ea:e1:a3:10:98:ad:fa:7c:d9:ed:40:6e:ff:42:78:7b:0b:7e:
25:3b:c4:44:3c:a0:0d:b0:b6:f3:e1:54:08:f0:80:a9:12:8a:
36:6b:6e:0d:07:76:25:b5:99:6f:3d:56:6b:bd:eb:aa:f4:05:
a2:9f:2a:d9:e8:6e:f9:57:f6:77:23:13:77:1c:86:05:fa:9c:
e9:8e:4a:8c:c6:2f:45:53:0c:51:bb:b0:b8:52:4d:0a:86:10:
07:9f:8b:a0:60:82:72:b1:12:80:92:31:cd:e9:9c:f2:f3:03:
53:78:ea:9c:33:f2:b7:52:5e:0c:ea:60:eb:99:14:83:f2:8c:
64:2c:cf:ff:09:32:55:37:53:41:74:43:ad:16:9d:b4:9b:d9:
0d:18:49:b9:b3:2a:a8:88:96:63:17:15:e0:c9:12:1b:be:de:
b1:7b:ff:6f:d4:87:d4:1f:2b:74:fb:4e:9f:b7:07:09:de:f2:
82:f6:1f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3+GDVTNkMbP86zVlVEw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNTM1MmQ5NDQxYjY1YzIwMTZlZDhlYjdlMmYyMzU5NTQ0
MzRmNWQwHhcNMjUwODIzMDMwMTM4WhcNMjUwODI0MDMwMTM4WjAzMTEwLwYDVQQD
EyhlYTc4YjVlMjUzNWU2MjEzNzQ5ZGM0MWQ3OGUyOGE0YTBhMTVhNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxezTpTPfdE7ZFQpLN81mH+Xcz5oA
2yucB2lRhenwEdVmhygkEd56p6XY+QniLRdv4FL/cxQf4gfPdVx/3YuIsq2ivdOT
sUXyMgPeSxwUsKFMVVdZdGinUY+06UMdrR+/OsDFPPf/R9Jq6cHVtuH0ATeJ6S7s
grErvYk2brPJOq6SSRPdSlPklPIRmgm0hrpRNgOWW94DcajeRmNmXGb1gCbAxRjF
E4fYQ89COa994fgAH9LbtQ9Z6vtvYUpUmsZKwb2kUtEKzL/wIKyCD0WBenAdDBNs
jFoSkyaUh5WfEjkX2drzLzK3fYDNBgChy1GQcFAsf3LLWT9qkHqiXj62LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOp4teJTXmITdJ3EHXjiikoKFaU5MB8GA1UdIwQY
MBaAFA5TUtlEG2XCAW7Y634vI1lUQ09dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGxOUzJVUWJaY0lCYnRqcmZpOGpXVlJEVDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xZjU2ODEtYjEwNS00ZmYxLTliZjQt
YWRjNTZkNDNlMGM0LzEvRGxOUzJVUWJaY0lCYnRqcmZpOGpXVlJEVDEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xZjU2ODEtYjEwNS00ZmYxLTliZjQtYWRjNTZkNDNlMGM0
LzEvRGxOUzJVUWJaY0lCYnRqcmZpOGpXVlJEVDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisw8e6w5
WitBYYqaRKlk3wWa6dJYZvLhSIJNSr9rRe8Rt5OxQ2oWoSZp18eKTecCnoaRDHCU
p1uZQEALNFPHvVYlK99QnvG06uGjEJit+nzZ7UBu/0J4ewt+JTvERDygDbC28+FU
CPCAqRKKNmtuDQd2JbWZbz1Wa73rqvQFop8q2ehu+Vf2dyMTdxyGBfqc6Y5KjMYv
RVMMUbuwuFJNCoYQB5+LoGCCcrESgJIxzemc8vMDU3jqnDPyt1JeDOpg65kUg/KM
ZCzP/wkyVTdTQXRDrRadtJvZDRhJubMqqIiWYxcV4MkSG77esXv/b9SH1B8rdPtO
n7cHCd7ygvYf5w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:16 2025 by rpki-client