Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
File: DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json)
Hash identifier: xQ+NmOUBUwCBzZuTPD1eEAEiB0Pj0LFCyQHK8jS5Xf4=
Subject key identifier: 1D:F3:66:16:FC:28:51:C2:57:7F:F1:7D:22:F4:E7:BF:4F:A2:F8:37
Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945
Certificate serial: 0197B6A0CC1C4BEEC9AD18C23E20D63F1C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
Manifest number: 0A99
Signing time: Sat 28 Jun 2025 13:01:20 +0000
Manifest this update: Sat 28 Jun 2025 13:01:20 +0000
Manifest next update: Sun 29 Jun 2025 13:01:20 +0000
Files and hashes: 1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: sPFja88cYk+7v3Yk4LZgFIpLoSqk8Qgk5uGgb0e3Fm8=)
2: s3TIKJMGO-H8fbbN5SX9DjrKZbg.roa (hash: nJZCH4ElBXirrkbsvqmvn6OniRKSBo6O3OjFqSqnuAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:cc:1c:4b:ee:c9:ad:18:c2:3e:20:d6:3f:1c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945
Validity
Not Before: Jun 28 13:01:20 2025 GMT
Not After : Jun 29 13:01:20 2025 GMT
Subject: CN=1df36616fc2851c2577ff17d22f4e7bf4fa2f837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:fc:2a:1d:20:37:3b:f9:01:0f:3a:71:ad:
0f:56:a6:22:46:15:19:04:40:b5:13:71:17:a2:94:
0b:af:ba:76:8a:9c:fe:66:f0:9f:17:4f:e6:3a:5e:
b6:01:96:ac:4e:ad:81:e6:50:b5:ec:10:78:84:69:
ea:40:7a:76:18:4d:9b:c9:5b:34:b5:b7:a7:59:7a:
e7:6d:e5:03:8a:cf:03:c2:c7:ac:5b:1e:e8:71:d4:
2b:20:78:ed:3a:95:d3:cd:e0:97:09:91:03:1a:95:
ec:d5:54:6d:c7:1c:73:1d:64:6b:92:a7:e0:14:0b:
60:16:f3:5c:e0:9c:61:6a:7e:7e:58:10:ea:32:3c:
85:9e:24:4a:fc:79:c3:be:bb:ee:e8:2c:0f:d8:e8:
f1:2e:bd:62:58:c4:1d:a0:cf:00:68:ca:8f:0b:6a:
1f:53:23:8b:17:f0:00:33:a9:06:c5:63:13:ba:ed:
32:86:f8:92:88:92:b5:17:44:34:78:7d:f5:38:45:
dd:e6:7c:05:bb:1f:54:77:b3:6b:00:be:aa:cb:6c:
eb:0e:02:62:70:d3:1e:48:df:ca:13:66:75:d4:c0:
31:33:f4:82:59:d5:a8:0e:b3:50:46:97:e6:a9:77:
9e:8b:c7:25:b3:f4:9e:f0:cd:89:fb:04:4e:d4:c8:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F3:66:16:FC:28:51:C2:57:7F:F1:7D:22:F4:E7:BF:4F:A2:F8:37
X509v3 Authority Key Identifier:
keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b1:36:41:ea:47:b1:2d:71:91:f7:1c:9e:53:cf:3f:b8:d1:
ef:16:80:bd:93:48:4b:c6:b4:64:8d:1e:fd:8e:de:02:65:12:
b1:f7:9b:01:d7:ca:0d:5f:74:fc:76:d0:ab:e3:01:21:bd:04:
a6:73:6d:32:7d:05:6c:1d:4d:be:6a:5e:ba:b2:f1:7c:04:a8:
2d:b1:2f:6d:89:db:23:67:ca:7a:66:72:a9:bf:22:a6:06:c3:
c9:b2:65:ea:df:13:78:d4:a7:24:31:4e:28:ab:da:a9:af:ee:
76:ee:78:00:ab:07:48:48:00:0e:af:81:48:6a:81:5c:2a:b0:
77:a7:14:5c:b9:2b:0a:3d:c7:41:e7:49:ae:30:96:b3:f3:f5:
83:87:3c:87:1d:33:94:d9:27:18:f4:8b:a3:6b:1f:0f:52:a6:
10:8c:04:0e:4f:4c:4a:b6:9c:f3:2e:99:f2:8e:25:db:64:4a:
24:d6:df:de:9b:96:09:0b:e9:5e:f8:00:f6:34:e6:90:a8:d0:
5e:f1:73:2a:90:13:f3:a7:e7:01:5b:e4:8a:9a:7a:e3:44:11:
74:ca:5b:f1:9f:10:d7:e0:9e:ac:59:9d:82:80:3f:3b:b2:79:
39:b5:a8:eb:3f:53:e1:10:c6:95:d9:b8:0f:c3:a8:5e:fd:26:
05:d8:3b:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oMwcS+7JrRjCPiDWPxwIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjBmOWY3NTViMGUzMDNjYzE2ZDFhNjMzZjk1OGMwMzYw
MzQ5NDUwHhcNMjUwNjI4MTMwMTIwWhcNMjUwNjI5MTMwMTIwWjAzMTEwLwYDVQQD
EygxZGYzNjYxNmZjMjg1MWMyNTc3ZmYxN2QyMmY0ZTdiZjRmYTJmODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FT8Kh0gNzv5AQ86ca0PVqYiRhUZ
BEC1E3EXopQLr7p2ipz+ZvCfF0/mOl62AZasTq2B5lC17BB4hGnqQHp2GE2byVs0
tbenWXrnbeUDis8DwsesWx7ocdQrIHjtOpXTzeCXCZEDGpXs1VRtxxxzHWRrkqfg
FAtgFvNc4Jxhan5+WBDqMjyFniRK/HnDvrvu6CwP2OjxLr1iWMQdoM8AaMqPC2of
UyOLF/AAM6kGxWMTuu0yhviSiJK1F0Q0eH31OEXd5nwFux9Ud7NrAL6qy2zrDgJi
cNMeSN/KE2Z11MAxM/SCWdWoDrNQRpfmqXeei8cls/Se8M2J+wRO1Mjd8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3zZhb8KFHCV3/xfSL0579Povg3MB8GA1UdIwQY
MBaAFA2w+fdVsOMDzBbRpjP5WMA2A0lFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUt
NjRjOWMyY2M5NjA5LzEvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUtNjRjOWMyY2M5NjA5
LzEvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrE2QepH
sS1xkfccnlPPP7jR7xaAvZNIS8a0ZI0e/Y7eAmUSsfebAdfKDV90/HbQq+MBIb0E
pnNtMn0FbB1NvmpeurLxfASoLbEvbYnbI2fKemZyqb8ipgbDybJl6t8TeNSnJDFO
KKvaqa/udu54AKsHSEgADq+BSGqBXCqwd6cUXLkrCj3HQedJrjCWs/P1g4c8hx0z
lNknGPSLo2sfD1KmEIwEDk9MSrac8y6Z8o4l22RKJNbf3puWCQvpXvgA9jTmkKjQ
XvFzKpAT86fnAVvkipp640QRdMpb8Z8Q1+CerFmdgoA/O7J5ObWo6z9T4RDGldm4
D8OoXv0mBdg7lw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:47 2025 by rpki-client