Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier: GF9KT8FjTk5mrZj+v0rWtZtpmh8YrgrTGyS3SORqIPM=
Subject key identifier: D4:CE:E9:96:9D:BF:55:EB:03:2B:EE:13:08:31:C6:81:64:24:36:A4
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial: 0198D5F1AB77E43271F47F7BFBF7A2812FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number: 0529
Signing time: Sat 23 Aug 2025 08:00:41 +0000
Manifest this update: Sat 23 Aug 2025 08:00:41 +0000
Manifest next update: Sun 24 Aug 2025 08:00:41 +0000
Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: DaH04JlwXsjPO15+K0kfavF3BBCMxEohGtFgBroXQk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ab:77:e4:32:71:f4:7f:7b:fb:f7:a2:81:2f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Validity
Not Before: Aug 23 08:00:41 2025 GMT
Not After : Aug 24 08:00:41 2025 GMT
Subject: CN=d4cee9969dbf55eb032bee130831c681642436a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:e7:de:6d:ee:ec:74:23:f4:54:7c:69:2e:
0a:43:1e:32:6f:e7:c7:60:c0:21:0b:d0:99:ec:f3:
bd:db:43:8f:5c:f0:05:b5:e1:a1:b3:22:ec:79:98:
67:1b:57:00:c8:e1:98:60:b6:42:2c:f0:ee:e7:cc:
86:17:50:1f:0e:06:9c:6d:a6:36:1f:7a:ec:4f:3e:
ac:c5:f2:3c:38:cc:6b:54:17:74:da:aa:83:5e:cc:
74:c0:5d:40:26:a8:7c:60:40:1e:b5:d8:40:21:a2:
2e:d1:d7:d0:f5:8e:94:b9:e2:3c:4b:17:7e:4e:80:
a6:72:4c:00:44:e2:c0:05:85:a3:3a:16:9f:0d:9b:
0b:c8:74:ef:03:72:c2:65:85:61:c0:50:68:f8:79:
d3:d7:38:d2:c7:d0:f7:57:cb:12:71:1c:e8:e5:5e:
08:32:f0:e5:19:03:1f:4d:3c:c5:9d:3d:4c:c9:c8:
6d:1f:75:4d:99:b4:3a:b4:bf:46:23:b6:5f:7a:47:
ad:1b:95:e0:c1:d8:03:6e:90:05:6e:e0:5d:16:8f:
09:df:f9:75:4c:9c:ee:10:60:44:4d:d5:e1:e9:18:
24:f9:b1:48:7b:01:19:83:71:1e:b0:8e:63:fc:61:
f6:2b:fd:2a:65:8e:e5:91:85:5f:88:22:e6:04:79:
fe:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CE:E9:96:9D:BF:55:EB:03:2B:EE:13:08:31:C6:81:64:24:36:A4
X509v3 Authority Key Identifier:
keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9d:92:ec:7d:a7:fd:a7:6d:df:56:a3:2e:ae:8e:1f:4c:3b:
b1:58:2d:75:a1:99:53:69:27:64:20:eb:98:3c:82:58:f9:49:
2a:60:a2:89:dc:86:0d:6b:0a:3d:a3:35:4a:db:dd:60:86:42:
f3:3b:cd:b1:ba:60:07:9d:11:48:8c:0a:36:2a:39:ba:1a:0e:
ea:01:4a:c0:55:c0:f4:50:6a:04:48:e7:e8:51:8d:17:fc:18:
ac:be:b0:d2:55:a9:1a:a9:a5:1a:b4:11:05:d3:28:a7:a8:ef:
a2:40:a1:11:31:a4:1f:71:2b:90:6e:0e:3d:ef:35:d1:22:8e:
8e:fc:26:61:52:05:ca:d7:04:56:78:b6:ef:67:8f:1c:a8:da:
cd:e0:d4:f0:0c:f5:74:c4:fe:35:f8:41:e4:56:76:12:7c:14:
e8:ff:db:58:0c:10:b7:db:84:e3:51:1c:23:8e:8f:8d:0d:7e:
d1:e0:bb:be:88:4f:32:34:67:6a:b3:2c:8d:e7:7a:04:3d:ef:
08:a3:1f:bc:af:ab:ec:87:06:36:68:a8:15:60:fb:05:a2:04:
36:71:9f:72:47:bf:f4:19:fc:37:a7:ff:2d:73:d2:ac:a6:ae:
cf:36:04:5f:74:7e:0a:a9:0b:7c:e8:ab:0b:b0:8c:55:e0:08:
05:f5:7b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8at35DJx9H97+/eigS/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZmU1MjQ4YzFmYjY5YjM4YTMxODhkZjk0NzJlOGNkYmM4
NWMxOTMwHhcNMjUwODIzMDgwMDQxWhcNMjUwODI0MDgwMDQxWjAzMTEwLwYDVQQD
EyhkNGNlZTk5NjlkYmY1NWViMDMyYmVlMTMwODMxYzY4MTY0MjQzNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0Xn3m3u7HQj9FR8aS4KQx4yb+fH
YMAhC9CZ7PO920OPXPAFteGhsyLseZhnG1cAyOGYYLZCLPDu58yGF1AfDgacbaY2
H3rsTz6sxfI8OMxrVBd02qqDXsx0wF1AJqh8YEAetdhAIaIu0dfQ9Y6UueI8Sxd+
ToCmckwAROLABYWjOhafDZsLyHTvA3LCZYVhwFBo+HnT1zjSx9D3V8sScRzo5V4I
MvDlGQMfTTzFnT1MychtH3VNmbQ6tL9GI7ZfeketG5XgwdgDbpAFbuBdFo8J3/l1
TJzuEGBETdXh6Rgk+bFIewEZg3EesI5j/GH2K/0qZY7lkYVfiCLmBHn+NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTO6Zadv1XrAyvuEwgxxoFkJDakMB8GA1UdIwQY
MBaAFA3+UkjB+2mzijGI35Ry6M28hcGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82YTc1Y2UtM2MxNi00MzAwLWEzMzIt
NTQ4ZDA4NWI0NTVkLzEvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82YTc1Y2UtM2MxNi00MzAwLWEzMzItNTQ4ZDA4NWI0NTVk
LzEvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALp2S7H2n
/adt31ajLq6OH0w7sVgtdaGZU2knZCDrmDyCWPlJKmCiidyGDWsKPaM1StvdYIZC
8zvNsbpgB50RSIwKNio5uhoO6gFKwFXA9FBqBEjn6FGNF/wYrL6w0lWpGqmlGrQR
BdMop6jvokChETGkH3ErkG4OPe810SKOjvwmYVIFytcEVni272ePHKjazeDU8Az1
dMT+NfhB5FZ2EnwU6P/bWAwQt9uE41EcI46PjQ1+0eC7vohPMjRnarMsjed6BD3v
CKMfvK+r7IcGNmioFWD7BaIENnGfcke/9Bn8N6f/LXPSrKauzzYEX3R+CqkLfOir
C7CMVeAIBfV7Fg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:38 2025 by rpki-client