Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
File: Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json)
Hash identifier: Vv4745YvpsTDWeQ9YH4ycG93KRma5/F9rPbCVx4YVJ4=
Subject key identifier: 0F:CA:C1:7E:DB:13:05:07:79:A0:98:C4:3A:EF:82:59:61:95:88:66
Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Certificate issuer: /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Certificate serial: 0197B89015B4DEC4A3DE5B34474B00B53655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
Manifest number: 13F3
Signing time: Sat 28 Jun 2025 22:02:19 +0000
Manifest this update: Sat 28 Jun 2025 22:02:19 +0000
Manifest next update: Sun 29 Jun 2025 22:02:19 +0000
Files and hashes: 1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: AStyRLNc/zcvLrfmjRFY7YGmuAT8MiyymzATfCBfRoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:15:b4:de:c4:a3:de:5b:34:47:4b:00:b5:36:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Validity
Not Before: Jun 28 22:02:19 2025 GMT
Not After : Jun 29 22:02:19 2025 GMT
Subject: CN=0fcac17edb13050779a098c43aef825961958866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:27:16:62:6a:e3:3a:00:39:c9:cb:ba:ea:
2f:e3:d6:82:0e:77:7f:59:92:57:3a:96:25:e8:14:
8d:3b:58:5f:3f:a9:39:ee:d6:1e:e4:ef:9b:51:c7:
4c:84:21:93:dc:6e:9b:04:dd:aa:1d:d3:bb:c5:71:
94:24:92:bd:fd:03:65:c0:a5:e9:b8:fb:1a:72:c7:
7e:de:52:66:89:ca:1d:6c:d3:5c:2c:c5:08:48:5c:
0b:27:44:5a:fb:90:0e:3f:dd:d6:c5:94:6b:d7:85:
1e:8b:79:da:1d:31:67:80:79:be:39:13:8f:ae:1e:
38:f9:28:f7:74:65:05:ba:18:7d:33:7d:b5:27:f3:
4d:56:c9:64:e5:51:64:11:8d:60:8d:de:1a:2f:9d:
1e:25:53:5c:04:f5:25:41:c6:83:b0:d9:b2:7e:bd:
4f:8a:84:25:9a:a6:48:d5:31:05:90:5b:1a:e5:cb:
21:82:9a:8c:7f:7a:ae:7a:22:df:dc:8f:a6:3c:98:
04:8c:70:a2:9f:be:15:26:a2:5e:8f:a8:ee:86:79:
fd:64:bc:be:00:7b:75:27:b6:6e:51:11:84:65:d3:
8b:ca:55:75:13:e3:d9:e0:96:4f:12:4e:b6:90:ba:
a4:a8:68:45:e5:9a:7b:a1:11:fa:a4:48:dc:d4:48:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CA:C1:7E:DB:13:05:07:79:A0:98:C4:3A:EF:82:59:61:95:88:66
X509v3 Authority Key Identifier:
keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:13:67:49:b5:c6:84:99:94:db:f8:f5:a0:96:78:10:1a:c8:
ba:35:b0:49:35:dd:88:2d:f2:11:3b:fe:8c:d3:17:db:77:05:
03:07:ce:1a:3c:26:e1:63:b3:18:80:8c:08:57:e5:1e:b0:8d:
b9:f0:f3:f8:65:eb:e6:76:9b:7d:2f:ec:ec:cc:ff:e7:95:b1:
6c:0e:58:44:8a:f0:a3:b8:01:5b:3d:e6:56:48:b6:15:83:ee:
3b:5a:56:8a:32:d7:84:a1:00:9f:e4:90:b5:cd:c1:63:ca:b1:
81:72:9e:d2:da:06:a5:72:f7:de:79:bf:c1:4d:cd:9a:3f:c3:
f0:4a:cd:f0:00:21:86:bf:48:e3:98:cc:8a:20:f2:ca:a5:1b:
ab:bb:ed:47:63:92:70:c5:b8:9a:a7:b3:70:a8:a2:2b:05:8c:
1b:36:22:7a:36:d9:31:75:24:89:a8:be:0e:26:d9:3f:7b:8f:
aa:a6:14:b1:fe:a3:d4:dc:85:6b:cb:cf:74:9f:ad:84:dc:db:
b6:d5:49:65:68:7f:7c:23:84:d2:75:c8:47:f0:93:22:c0:d5:
ac:a8:3b:06:b2:4f:d3:90:f8:09:bb:e4:c4:da:7b:a1:07:89:
b1:73:9a:43:51:de:a3:62:b3:0b:30:48:df:e2:9b:28:3c:44:
44:85:c3:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kBW03sSj3ls0R0sAtTZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOGNlMGE2YWJiOGVlNTBkNDRiM2JhZTQyZDRhMjU0OWZm
YjgyNDAwHhcNMjUwNjI4MjIwMjE5WhcNMjUwNjI5MjIwMjE5WjAzMTEwLwYDVQQD
EygwZmNhYzE3ZWRiMTMwNTA3NzlhMDk4YzQzYWVmODI1OTYxOTU4ODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutknFmJq4zoAOcnLuuov49aCDnd/
WZJXOpYl6BSNO1hfP6k57tYe5O+bUcdMhCGT3G6bBN2qHdO7xXGUJJK9/QNlwKXp
uPsacsd+3lJmicodbNNcLMUISFwLJ0Ra+5AOP93WxZRr14Uei3naHTFngHm+OROP
rh44+Sj3dGUFuhh9M321J/NNVslk5VFkEY1gjd4aL50eJVNcBPUlQcaDsNmyfr1P
ioQlmqZI1TEFkFsa5cshgpqMf3queiLf3I+mPJgEjHCin74VJqJej6juhnn9ZLy+
AHt1J7ZuURGEZdOLylV1E+PZ4JZPEk62kLqkqGhF5Zp7oRH6pEjc1EgiuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/KwX7bEwUHeaCYxDrvgllhlYhmMB8GA1UdIwQY
MBaAFA6M4KaruO5Q1Es7rkLUolSf+4JAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85ZjIwNzctZGY0Zi00OTdlLThlOTAt
YzQ5OTc1NWEyNjg5LzEvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85ZjIwNzctZGY0Zi00OTdlLThlOTAtYzQ5OTc1NWEyNjg5
LzEvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxNnSbXG
hJmU2/j1oJZ4EBrIujWwSTXdiC3yETv+jNMX23cFAwfOGjwm4WOzGICMCFflHrCN
ufDz+GXr5nabfS/s7Mz/55WxbA5YRIrwo7gBWz3mVki2FYPuO1pWijLXhKEAn+SQ
tc3BY8qxgXKe0toGpXL33nm/wU3Nmj/D8ErN8AAhhr9I45jMiiDyyqUbq7vtR2OS
cMW4mqezcKiiKwWMGzYiejbZMXUkiai+DibZP3uPqqYUsf6j1NyFa8vPdJ+thNzb
ttVJZWh/fCOE0nXIR/CTIsDVrKg7BrJP05D4CbvkxNp7oQeJsXOaQ1Heo2KzCzBI
3+KbKDxERIXD0g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:22 2025 by rpki-client