Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier: /h/rVQXJGxgLid8/OZSHs3kWlxY0OzmrQynOanE81Ho=
Subject key identifier: D4:5B:DE:1C:8D:0D:1B:F2:9C:E1:7E:FE:2C:EE:C8:6F:F8:96:13:72
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial: 0198D583E9D9D29977877F1F946D186D0C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number: 0C45
Signing time: Sat 23 Aug 2025 06:00:48 +0000
Manifest this update: Sat 23 Aug 2025 06:00:48 +0000
Manifest next update: Sun 24 Aug 2025 06:00:48 +0000
Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: 0P4q+ctemNL4GCGDcZKpeljAFTah8f220jCGIlxINyk=)
2: kzypufx1A54QL9RnefA55meWSPM.roa (hash: cK+sc1FxI2UgckK1YuVxFsSFuYcOk8chhmHAVw1PhQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e9:d9:d2:99:77:87:7f:1f:94:6d:18:6d:0c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Validity
Not Before: Aug 23 06:00:48 2025 GMT
Not After : Aug 24 06:00:48 2025 GMT
Subject: CN=d45bde1c8d0d1bf29ce17efe2ceec86ff8961372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:e2:6b:61:c8:80:76:30:2e:48:c2:bd:3f:
8f:b5:41:1b:01:35:dc:ad:45:92:6e:08:31:15:b6:
ad:b5:5a:5f:f4:2f:1a:ae:a4:fa:5b:f2:f8:8d:11:
aa:7e:8d:37:69:59:d5:4f:71:c8:f7:32:91:41:c4:
26:97:91:2a:c2:b5:1a:b9:7c:e5:b1:6d:55:2c:79:
7f:03:ba:4c:68:4d:7d:38:2b:e6:54:5d:54:c6:07:
5b:38:29:0f:7f:a8:6e:2d:e9:7a:a1:69:73:af:34:
92:cf:19:1d:ae:bc:3a:d9:c1:82:f7:68:d4:5b:e8:
3e:db:46:fe:00:79:d6:21:e9:e5:e0:cd:8a:7a:bf:
21:64:24:bb:36:d4:32:5d:1e:c5:a3:60:70:db:32:
61:22:a8:6b:b8:6d:a4:b6:1a:6c:26:5c:9c:a7:e9:
0b:1c:07:0c:5a:d5:f3:8a:a1:72:67:a3:45:9d:45:
42:4d:54:ad:1b:9c:b9:e3:c5:e4:59:cc:62:d9:4b:
d7:8a:51:aa:96:91:1f:aa:a0:37:b1:d0:8a:26:07:
df:f9:be:fe:56:2a:eb:75:e1:76:7e:c6:2e:75:c8:
54:da:3b:77:45:8c:05:9e:ff:00:01:4e:4c:c7:f1:
1f:00:56:6c:54:8c:d8:68:7a:55:f2:09:19:28:a9:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5B:DE:1C:8D:0D:1B:F2:9C:E1:7E:FE:2C:EE:C8:6F:F8:96:13:72
X509v3 Authority Key Identifier:
keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4c:9c:04:06:3c:f2:a3:f5:68:71:d4:4b:19:4e:dc:c3:c9:
fd:89:2f:61:39:1f:12:82:9b:46:bd:ac:9d:48:fb:2d:df:46:
97:6a:52:63:40:c4:5e:89:4c:15:e1:05:52:ae:ce:3d:3e:de:
fe:cf:2c:cb:23:38:ac:ef:e2:e0:8e:01:3b:50:51:b9:33:be:
f4:75:ba:60:b5:4f:66:ea:8c:65:98:af:87:a5:70:c6:01:46:
26:da:4a:1d:44:68:dd:e9:ac:55:40:c8:16:95:f6:b8:d1:3a:
f1:13:21:78:e9:ee:1a:90:15:07:63:03:21:1a:ff:db:65:58:
cb:f2:42:b6:d4:48:a7:2f:2e:14:5c:db:9e:24:c2:6e:8c:6a:
83:8f:5e:ad:75:57:5a:a8:54:4c:97:ba:cc:72:b8:3c:e4:85:
06:91:c8:0d:d6:65:d5:bd:e1:de:64:24:10:92:65:e8:af:ac:
c6:a1:a6:01:68:58:f0:8e:ed:9c:14:f9:2f:f3:8e:5e:87:51:
3b:fd:fe:db:f7:22:f8:d9:55:70:a4:92:8d:a3:68:fc:3f:ba:
c2:5c:df:98:a3:ae:df:8b:a9:f1:e0:b5:bd:66:67:54:8c:57:
30:54:12:6e:04:47:65:c3:f3:90:6e:10:de:4b:33:86:41:63:
0c:01:af:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg+nZ0pl3h38flG0YbQySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZmQxY2FkMTIxOTAyNzU1MDg5ZTNjYTgwYmE2ZDdjY2M0
YjliNzEwHhcNMjUwODIzMDYwMDQ4WhcNMjUwODI0MDYwMDQ4WjAzMTEwLwYDVQQD
EyhkNDViZGUxYzhkMGQxYmYyOWNlMTdlZmUyY2VlYzg2ZmY4OTYxMzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oDia2HIgHYwLkjCvT+PtUEbATXc
rUWSbggxFbattVpf9C8arqT6W/L4jRGqfo03aVnVT3HI9zKRQcQml5EqwrUauXzl
sW1VLHl/A7pMaE19OCvmVF1UxgdbOCkPf6huLel6oWlzrzSSzxkdrrw62cGC92jU
W+g+20b+AHnWIenl4M2Ker8hZCS7NtQyXR7Fo2Bw2zJhIqhruG2kthpsJlycp+kL
HAcMWtXziqFyZ6NFnUVCTVStG5y548XkWcxi2UvXilGqlpEfqqA3sdCKJgff+b7+
VirrdeF2fsYudchU2jt3RYwFnv8AAU5Mx/EfAFZsVIzYaHpV8gkZKKlwyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRb3hyNDRvynOF+/izuyG/4lhNyMB8GA1UdIwQY
MBaAFA79HK0SGQJ1UInjyoC6bXzMS5txMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kZjk5ZDMtNTAyOC00MzYxLWI3OTUt
M2FmNGE5NDYzYjc3LzEvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kZjk5ZDMtNTAyOC00MzYxLWI3OTUtM2FmNGE5NDYzYjc3
LzEvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0ycBAY8
8qP1aHHUSxlO3MPJ/YkvYTkfEoKbRr2snUj7Ld9Gl2pSY0DEXolMFeEFUq7OPT7e
/s8syyM4rO/i4I4BO1BRuTO+9HW6YLVPZuqMZZivh6VwxgFGJtpKHURo3emsVUDI
FpX2uNE68RMheOnuGpAVB2MDIRr/22VYy/JCttRIpy8uFFzbniTCboxqg49erXVX
WqhUTJe6zHK4POSFBpHIDdZl1b3h3mQkEJJl6K+sxqGmAWhY8I7tnBT5L/OOXodR
O/3+2/ci+NlVcKSSjaNo/D+6wlzfmKOu34up8eC1vWZnVIxXMFQSbgRHZcPzkG4Q
3kszhkFjDAGveg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:56 2025 by rpki-client