Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: ix7Q+5Gc7MafWutlcBL6wvnbhvDqkBPkuyTQ1jGHY5M=
Subject key identifier: A4:E1:E1:AC:BA:45:5E:EB:5C:15:DE:E8:1A:1C:FD:60:07:A4:E6:D5
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 0197B6A07FFCC6C739EEE3A8E9AA1BA925E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 0396
Signing time: Sat 28 Jun 2025 13:01:01 +0000
Manifest this update: Sat 28 Jun 2025 13:01:01 +0000
Manifest next update: Sun 29 Jun 2025 13:01:01 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: orKntMMop0nMixErDUHArE0fL4DgoJM3xHrSJJLx6rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:7f:fc:c6:c7:39:ee:e3:a8:e9:aa:1b:a9:25:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: Jun 28 13:01:01 2025 GMT
Not After : Jun 29 13:01:01 2025 GMT
Subject: CN=a4e1e1acba455eeb5c15dee81a1cfd6007a4e6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:7e:a8:3d:7a:9f:82:ac:55:0c:86:3d:c7:
46:1b:0b:3d:58:0c:b0:d5:b3:0d:1a:06:d2:8b:b8:
07:23:34:b2:d5:50:c7:24:ac:9b:14:e9:a2:6b:53:
53:ce:ab:ff:da:07:a4:5b:79:41:c9:90:53:f0:76:
75:58:fc:89:25:f4:b8:7d:cb:0a:f2:b0:cf:a6:4a:
11:cc:a0:9b:3b:39:3b:e8:3e:c4:be:3b:b4:b1:54:
f1:b5:58:7b:33:79:e4:34:27:26:b8:1f:1c:d9:7d:
9b:a6:59:5d:cd:43:4f:62:9f:c1:af:95:ec:52:53:
fd:44:9c:48:09:47:ae:fa:9c:f7:ba:5f:8e:0a:e5:
9a:79:35:1c:88:0c:0a:67:ed:81:57:bc:7c:eb:c3:
3b:03:58:98:6a:b2:f4:b7:d2:f4:2b:d2:e3:66:2a:
07:b5:cb:28:c8:68:31:be:8f:6c:89:8d:b0:e6:32:
4e:4b:5b:09:22:76:77:00:65:0e:7a:8f:50:4a:04:
41:c3:a7:e3:a7:7d:53:85:02:96:3f:34:ec:a0:04:
2c:39:5c:48:1c:1e:ea:01:3f:bc:35:07:30:4f:2c:
05:9f:58:e7:94:a1:8f:a7:8a:c1:a9:5e:e8:d3:26:
b2:b6:82:7a:c8:67:c9:60:a7:10:38:6e:d7:fa:69:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E1:E1:AC:BA:45:5E:EB:5C:15:DE:E8:1A:1C:FD:60:07:A4:E6:D5
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5c:1b:9f:a9:c5:51:0e:88:a8:bb:f8:09:a3:3f:b5:08:97:
d0:0a:a8:61:de:20:6a:de:52:8f:ca:ac:ed:6d:a5:76:eb:5d:
2f:8c:db:0d:38:65:b8:02:6c:6a:fa:71:7a:27:45:3a:62:2e:
31:3d:f0:af:cb:71:9d:64:37:0c:7b:4e:ed:13:eb:d8:f4:35:
71:65:1b:dc:86:27:58:08:fb:8c:ed:e4:dd:c5:5b:74:90:f1:
c1:dd:06:ef:f8:51:9a:a0:cf:d0:29:30:4b:ad:90:2d:1d:7d:
fb:7c:6b:5f:41:ee:a3:a2:45:e5:25:1d:1d:be:18:60:f8:77:
ec:41:ae:02:fe:c1:77:66:49:84:fd:81:b2:eb:b5:09:9e:75:
7f:73:9a:06:72:d9:22:76:e7:16:34:94:0b:fb:eb:1a:bb:ee:
e1:05:32:dd:f8:e1:b2:dd:27:24:89:92:85:51:2a:f2:0f:26:
24:22:7c:29:33:39:11:58:12:ed:22:3a:f7:5b:e4:dc:a0:0a:
19:2b:5c:9f:0b:6a:a2:a9:02:ed:e0:fd:54:38:3d:d4:2e:05:
a4:63:e1:da:ea:fc:fd:7f:c0:24:7d:ba:fc:fa:6b:0e:bb:d6:
a8:42:b3:e3:4d:35:48:20:d7:90:6e:9d:27:3b:de:be:77:73:
a9:5f:7a:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oH/8xsc57uOo6aobqSXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZDk1MWI0M2FiOTcxZmQ5MmViNjNlYzI2YTViMjI2ZWQx
M2M3NTIwHhcNMjUwNjI4MTMwMTAxWhcNMjUwNjI5MTMwMTAxWjAzMTEwLwYDVQQD
EyhhNGUxZTFhY2JhNDU1ZWViNWMxNWRlZTgxYTFjZmQ2MDA3YTRlNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphJ+qD16n4KsVQyGPcdGGws9WAyw
1bMNGgbSi7gHIzSy1VDHJKybFOmia1NTzqv/2gekW3lByZBT8HZ1WPyJJfS4fcsK
8rDPpkoRzKCbOzk76D7Evju0sVTxtVh7M3nkNCcmuB8c2X2bplldzUNPYp/Br5Xs
UlP9RJxICUeu+pz3ul+OCuWaeTUciAwKZ+2BV7x868M7A1iYarL0t9L0K9LjZioH
tcsoyGgxvo9siY2w5jJOS1sJInZ3AGUOeo9QSgRBw6fjp31ThQKWPzTsoAQsOVxI
HB7qAT+8NQcwTywFn1jnlKGPp4rBqV7o0yaytoJ6yGfJYKcQOG7X+mmVOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTh4ay6RV7rXBXe6Boc/WAHpObVMB8GA1UdIwQY
MBaAFA7ZUbQ6uXH9kutj7CalsibtE8dSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mYjE0N2YtMDRlZS00OGYwLTgwN2Qt
ZmUzZGI1MjUzZWIwLzEvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mYjE0N2YtMDRlZS00OGYwLTgwN2QtZmUzZGI1MjUzZWIw
LzEvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArVwbn6nF
UQ6IqLv4CaM/tQiX0AqoYd4gat5Sj8qs7W2ldutdL4zbDThluAJsavpxeidFOmIu
MT3wr8txnWQ3DHtO7RPr2PQ1cWUb3IYnWAj7jO3k3cVbdJDxwd0G7/hRmqDP0Ckw
S62QLR19+3xrX0Huo6JF5SUdHb4YYPh37EGuAv7Bd2ZJhP2Bsuu1CZ51f3OaBnLZ
InbnFjSUC/vrGrvu4QUy3fjhst0nJImShVEq8g8mJCJ8KTM5EVgS7SI691vk3KAK
GStcnwtqoqkC7eD9VDg91C4FpGPh2ur8/X/AJH26/PprDrvWqEKz4001SCDXkG6d
JzvevndzqV96tQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:20 2025 by rpki-client