Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
File: DpXDrONm20G83CVsXVs75JCk92E.mft (raw, json)
Hash identifier: g40kXxx60Ax3opwF7Lvmmevc8CITxyuKihRdrcrKLRo=
Subject key identifier: DF:C6:3E:2D:A5:9A:F0:FC:36:A2:9A:42:7C:BD:C9:9F:FF:4C:C0:13
Authority key identifier: 0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
Certificate issuer: /CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Certificate serial: 0197B6D76284A7C0D03744C2CE458BD17A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
Manifest number: 0A0D
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: 1ILl-_jBl8vTjilNwWyLb_6kN84.roa (hash: ecF4kJW8L9z29VWA5l2Xp4iuCOJ3lYvBbDFUMxXyKfo=)
2: DpXDrONm20G83CVsXVs75JCk92E.crl (hash: LM9gQZnCMB+F/EPkvgK5EF+VYjJzq7I6NPouJDRur6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:62:84:a7:c0:d0:37:44:c2:ce:45:8b:d1:7a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=dfc63e2da59af0fc36a29a427cbdc99fff4cc013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:37:5f:a5:94:c1:22:d3:cf:39:b9:aa:25:
de:39:8d:12:0b:09:29:41:27:65:62:67:e1:dd:c0:
2b:26:1c:ad:c3:e8:38:cf:5e:3d:66:cb:b8:95:d0:
d9:f1:e2:fe:a4:9d:0b:c7:13:72:f1:f7:c7:4b:7b:
bd:b6:5f:ca:39:60:9d:02:51:7e:ed:1f:08:ac:e3:
e3:5b:e3:34:7f:06:29:4f:cc:3e:37:d5:53:fb:46:
6c:87:30:26:f6:04:69:06:26:09:ef:72:fa:66:02:
68:8a:7d:9b:31:46:7f:af:c8:b0:c4:5d:70:4b:07:
14:b2:ac:f3:7a:c6:5c:19:10:05:df:07:19:5b:24:
51:e4:e8:81:af:98:c1:35:d7:f5:c0:fd:e1:5f:45:
7a:9d:44:8e:88:11:78:b7:a6:46:17:70:16:99:22:
ce:45:2b:47:0c:2a:66:22:2c:e7:b1:cb:22:fc:5a:
37:1c:f4:36:bc:ac:3f:1d:8e:37:98:2c:0d:89:f1:
6c:82:e3:bf:73:7e:3e:f1:d2:01:44:37:38:1f:3c:
08:db:24:09:c0:58:f1:4a:d2:a8:b9:e0:eb:b2:22:
d6:81:30:98:30:73:ab:cf:d9:24:7d:a3:d5:0b:c4:
b8:e7:29:26:d0:ec:7e:fc:40:bd:52:65:ea:28:9c:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C6:3E:2D:A5:9A:F0:FC:36:A2:9A:42:7C:BD:C9:9F:FF:4C:C0:13
X509v3 Authority Key Identifier:
keyid:0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:dd:2b:f5:e2:4a:98:5f:c9:2f:42:7e:67:8d:fc:3d:b1:f3:
29:85:72:8a:b9:64:5c:3a:50:8b:72:16:eb:38:d8:ec:b7:72:
86:22:aa:3e:47:61:c9:e9:b1:fa:aa:52:4b:16:0f:23:d4:60:
d9:79:f2:86:e3:1c:a3:11:e1:6b:95:6b:21:41:cf:5a:16:f5:
af:c4:18:75:67:64:a5:fb:5e:42:c7:3b:e1:fb:fd:da:d5:5c:
e0:33:e5:e2:3c:01:a1:74:93:f1:9c:17:36:79:51:f5:52:e6:
10:b9:55:0b:5c:c7:c0:d9:24:2a:c2:e3:7b:d7:1c:e8:21:48:
70:f7:a4:fb:2a:f3:b7:93:a9:c4:9a:88:81:98:05:b1:41:92:
5d:00:e4:77:cc:b1:2a:37:38:39:f4:95:33:d0:e6:2b:dc:82:
98:77:32:f7:74:53:ea:94:4c:82:6e:9f:cb:52:57:a2:15:4f:
d5:4e:70:39:f7:74:cd:56:67:36:89:4b:cd:49:f5:bf:05:8a:
02:e1:47:6c:ef:73:cf:01:4f:d1:29:4d:cf:4e:8b:4d:42:e1:
0d:a3:9a:50:5f:75:7c:58:1a:d8:28:be:12:70:1d:24:e4:c6:
d1:57:64:00:56:4a:9e:c7:96:7f:02:27:ec:27:eb:1d:d6:fe:
e1:70:90:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe212KEp8DQN0TCzkWL0XprMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOTVjM2FjZTM2NmRiNDFiY2RjMjU2YzVkNWIzYmU0OTBh
NGY3NjEwHhcNMjUwNjI4MTQwMDU4WhcNMjUwNjI5MTQwMDU4WjAzMTEwLwYDVQQD
EyhkZmM2M2UyZGE1OWFmMGZjMzZhMjlhNDI3Y2JkYzk5ZmZmNGNjMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlU3X6WUwSLTzzm5qiXeOY0SCwkp
QSdlYmfh3cArJhytw+g4z149Zsu4ldDZ8eL+pJ0LxxNy8ffHS3u9tl/KOWCdAlF+
7R8IrOPjW+M0fwYpT8w+N9VT+0ZshzAm9gRpBiYJ73L6ZgJoin2bMUZ/r8iwxF1w
SwcUsqzzesZcGRAF3wcZWyRR5OiBr5jBNdf1wP3hX0V6nUSOiBF4t6ZGF3AWmSLO
RStHDCpmIiznscsi/Fo3HPQ2vKw/HY43mCwNifFsguO/c34+8dIBRDc4HzwI2yQJ
wFjxStKoueDrsiLWgTCYMHOrz9kkfaPVC8S45ykm0Ox+/EC9UmXqKJxIqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/GPi2lmvD8NqKaQny9yZ//TMATMB8GA1UdIwQY
MBaAFA6Vw6zjZttBvNwlbF1bO+SQpPdhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHBYRHJPTm0yMEc4M0NWc1hWczc1SkNrOTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xY2Q5MDctNDRkMi00NmIxLThiZWMt
ZjUzZTUxYzA5NzRmLzEvRHBYRHJPTm0yMEc4M0NWc1hWczc1SkNrOTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xY2Q5MDctNDRkMi00NmIxLThiZWMtZjUzZTUxYzA5NzRm
LzEvRHBYRHJPTm0yMEc4M0NWc1hWczc1SkNrOTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmt0r9eJK
mF/JL0J+Z438PbHzKYVyirlkXDpQi3IW6zjY7LdyhiKqPkdhyemx+qpSSxYPI9Rg
2XnyhuMcoxHha5VrIUHPWhb1r8QYdWdkpfteQsc74fv92tVc4DPl4jwBoXST8ZwX
NnlR9VLmELlVC1zHwNkkKsLje9cc6CFIcPek+yrzt5OpxJqIgZgFsUGSXQDkd8yx
Kjc4OfSVM9DmK9yCmHcy93RT6pRMgm6fy1JXohVP1U5wOfd0zVZnNolLzUn1vwWK
AuFHbO9zzwFP0SlNz06LTULhDaOaUF91fFga2Ci+EnAdJOTG0VdkAFZKnseWfwIn
7CfrHdb+4XCQGw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:38 2025 by rpki-client