Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
File: DdbvvlRnHXGlkFHimiRIzWr41Gc.mft (raw, json)
Hash identifier: UPdSKcwT457UqmelhMYxm8xrlVvcJ2btWZfnfbBqZLE=
Subject key identifier: E2:6D:E6:08:27:DE:9E:34:79:CB:85:A1:C2:7D:93:5A:B1:81:C6:2E
Authority key identifier: 0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
Certificate issuer: /CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Certificate serial: 0197B7EAA96E00DE64F095118ED7FBA3108E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 19:01:38 +0000
Manifest this update: Sat 28 Jun 2025 19:01:38 +0000
Manifest next update: Sun 29 Jun 2025 19:01:38 +0000
Files and hashes: 1: DdbvvlRnHXGlkFHimiRIzWr41Gc.crl (hash: D3aYvjucdOL0YyQo0b65WriyifhvwCWJBO6q1tl+4ak=)
2: OjPZ4w3uav1AVJBNGLzE1iWEjns.roa (hash: RZ3Fh/xDlYW1Zzf/BAcP7d2zU9c7pD1bl+u8+XwewFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a9:6e:00:de:64:f0:95:11:8e:d7:fb:a3:10:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Validity
Not Before: Jun 28 19:01:38 2025 GMT
Not After : Jun 29 19:01:38 2025 GMT
Subject: CN=e26de60827de9e3479cb85a1c27d935ab181c62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a4:58:bd:ce:9e:33:e9:9b:78:0a:eb:84:7e:
2b:b5:9c:47:2e:7d:a6:7f:bf:2b:dd:ec:a0:bb:0d:
ea:6c:36:8f:cc:2e:ed:20:ae:e7:54:d5:d0:8b:7a:
60:54:4c:88:cb:46:a7:31:75:40:64:9c:1f:a8:82:
f6:23:bd:80:e0:0f:d8:65:2c:bd:f2:99:8d:a4:c3:
d9:4f:5c:51:81:20:3c:09:c2:b5:a8:22:5c:19:3e:
44:e5:bb:a1:5d:23:f9:f7:66:c8:96:16:32:9c:dc:
55:ed:ef:c8:d3:3d:3c:a5:50:83:03:1a:a4:7f:6c:
33:af:55:c6:87:29:43:9f:42:98:8e:ae:79:cf:1e:
21:bc:4d:db:70:f9:3d:97:56:63:81:7d:a7:92:8b:
2b:fe:ef:28:3b:d1:e8:71:aa:2f:63:f8:0d:20:aa:
f2:3d:d9:f1:af:de:82:a7:fd:cb:25:10:e1:55:78:
c9:96:64:cd:70:17:89:d1:bf:8d:23:86:95:08:b0:
f1:c1:53:6a:12:27:3b:98:a9:6c:ce:f0:df:8f:59:
73:99:67:c1:f4:06:96:32:04:94:b4:34:b3:98:a4:
97:36:3f:0e:2c:00:31:86:af:72:f7:c8:36:5c:73:
a5:0a:f6:74:83:72:b6:23:49:b6:d9:7f:78:a8:ec:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6D:E6:08:27:DE:9E:34:79:CB:85:A1:C2:7D:93:5A:B1:81:C6:2E
X509v3 Authority Key Identifier:
keyid:0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:12:0b:c6:36:4c:13:ae:05:ae:2b:8d:2f:20:b2:9a:47:92:
92:69:f5:28:b6:0d:f9:89:6e:99:d9:bb:ca:b7:fc:d7:a5:a7:
74:e2:ba:31:ad:d1:ab:6a:21:12:0d:dc:bf:fd:d2:31:0a:ab:
5c:70:d1:2c:b3:34:d3:42:fb:c4:ae:13:fe:5a:d0:04:22:b3:
2c:19:60:12:20:8c:fd:dd:30:15:89:06:06:b1:e9:de:67:6d:
db:8b:e4:e7:9d:2f:df:ea:63:16:a8:bf:f1:b7:f8:c8:52:51:
6d:df:f4:cc:6e:58:c2:95:19:59:29:bc:28:b1:da:60:26:c7:
40:cb:92:7f:e9:3e:9c:12:76:7d:21:a6:6e:df:04:45:d3:18:
06:2f:c8:ae:a7:e5:08:40:d8:20:62:0c:70:93:92:a7:a7:69:
88:41:97:e1:5d:ab:19:b2:a7:e1:ae:e6:7c:32:c6:c7:d9:6e:
86:b3:5e:ed:1f:ef:63:88:45:8d:a1:75:da:10:a2:b0:19:0a:
b0:f2:60:30:bd:13:95:61:ea:fd:bc:21:95:ff:38:84:b8:d4:
93:f7:10:2c:71:33:bf:30:39:40:35:0f:24:00:eb:00:d2:26:
dc:b3:9a:77:68:38:d4:03:7e:0c:3d:4a:c8:49:39:57:5d:cf:
ba:31:6b:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36qluAN5k8JURjtf7oxCOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDZlZmJlNTQ2NzFkNzFhNTkwNTFlMjlhMjQ0OGNkNmFm
OGQ0NjcwHhcNMjUwNjI4MTkwMTM4WhcNMjUwNjI5MTkwMTM4WjAzMTEwLwYDVQQD
EyhlMjZkZTYwODI3ZGU5ZTM0NzljYjg1YTFjMjdkOTM1YWIxODFjNjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aRYvc6eM+mbeArrhH4rtZxHLn2m
f78r3eyguw3qbDaPzC7tIK7nVNXQi3pgVEyIy0anMXVAZJwfqIL2I72A4A/YZSy9
8pmNpMPZT1xRgSA8CcK1qCJcGT5E5buhXSP592bIlhYynNxV7e/I0z08pVCDAxqk
f2wzr1XGhylDn0KYjq55zx4hvE3bcPk9l1ZjgX2nkosr/u8oO9HocaovY/gNIKry
Pdnxr96Cp/3LJRDhVXjJlmTNcBeJ0b+NI4aVCLDxwVNqEic7mKlszvDfj1lzmWfB
9AaWMgSUtDSzmKSXNj8OLAAxhq9y98g2XHOlCvZ0g3K2I0m22X94qOzsZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJt5ggn3p40ecuFocJ9k1qxgcYuMB8GA1UdIwQY
MBaAFA3W775UZx1xpZBR4pokSM1q+NRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRidnZsUm5IWEdsa0ZIaW1pUkl6V3I0MUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zZWE0NzgtYTUwMy00N2QzLTg4ZjUt
NDliZThkOTBmNTllLzEvRGRidnZsUm5IWEdsa0ZIaW1pUkl6V3I0MUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8zZWE0NzgtYTUwMy00N2QzLTg4ZjUtNDliZThkOTBmNTll
LzEvRGRidnZsUm5IWEdsa0ZIaW1pUkl6V3I0MUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghILxjZM
E64FriuNLyCymkeSkmn1KLYN+Ylumdm7yrf816WndOK6Ma3Rq2ohEg3cv/3SMQqr
XHDRLLM000L7xK4T/lrQBCKzLBlgEiCM/d0wFYkGBrHp3mdt24vk550v3+pjFqi/
8bf4yFJRbd/0zG5YwpUZWSm8KLHaYCbHQMuSf+k+nBJ2fSGmbt8ERdMYBi/Irqfl
CEDYIGIMcJOSp6dpiEGX4V2rGbKn4a7mfDLGx9luhrNe7R/vY4hFjaF12hCisBkK
sPJgML0TlWHq/bwhlf84hLjUk/cQLHEzvzA5QDUPJADrANIm3LOad2g41AN+DD1K
yEk5V13PujFrgg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:21 2025 by rpki-client