Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: jLTpLcjrmUSu4K6PXXwdk+93DyeIZAaE0pSUDEmkO1I=
Subject key identifier: 9B:12:D2:6A:C5:79:DC:51:70:9C:06:DF:7E:B0:3A:01:18:AD:AA:53
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 0198D66002A0D76A5AB91217F810678C5614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 0206
Signing time: Sat 23 Aug 2025 10:01:12 +0000
Manifest this update: Sat 23 Aug 2025 10:01:12 +0000
Manifest next update: Sun 24 Aug 2025 10:01:12 +0000
Files and hashes: 1: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: C1qva3Sm5gz/+IZOffrhYPkMfO9ur+K0bkNJVhNNFKc=)
2: cZNRC54iklgNWYm4bOxRUrThNWU.roa (hash: 7TUW8rEcRA76OYIr9WRYyb0EVyDB9PyjFL1/RYt7YQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:02:a0:d7:6a:5a:b9:12:17:f8:10:67:8c:56:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Aug 23 10:01:12 2025 GMT
Not After : Aug 24 10:01:12 2025 GMT
Subject: CN=9b12d26ac579dc51709c06df7eb03a0118adaa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7d:d7:e8:e5:be:b7:c8:f5:de:95:5a:56:e1:
9b:5a:aa:e2:ff:de:f2:6e:4f:a6:13:ee:25:45:9f:
4c:19:23:23:56:d1:64:0d:c3:3b:e1:d4:ac:65:db:
de:9e:f3:61:92:49:4f:9c:db:bc:bb:8e:60:83:f9:
46:fe:39:fb:86:5a:b2:ad:25:95:67:d9:15:be:d7:
4a:40:b4:16:6b:d8:47:3c:0e:42:4c:0c:7c:4e:03:
11:45:3e:8f:b4:49:ae:77:7a:b1:56:c4:15:54:f4:
56:59:1f:2e:b1:60:fe:f0:5f:98:91:fc:ec:8a:72:
98:95:02:5b:7f:62:46:4e:0e:51:4e:ae:ff:ec:28:
b5:d5:c6:b2:de:3b:07:9c:7c:ce:ef:cd:b7:94:c3:
7d:37:49:fe:03:50:ff:46:0d:bc:e7:32:73:d3:8e:
45:13:a5:c0:ba:43:49:6d:a0:5d:f4:3a:d6:b9:2a:
9d:ff:d4:ee:4d:46:51:f5:32:b0:2c:7e:7e:9f:37:
ed:a0:87:35:8d:4b:d8:6a:89:21:8e:00:2a:59:16:
61:1f:a2:e2:25:2b:59:22:b0:7a:7b:ff:23:1a:93:
d6:0b:4a:9d:63:e0:98:49:b0:49:9d:89:49:f8:48:
7b:02:81:69:82:89:20:b5:13:a0:0e:9d:18:c6:fc:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:12:D2:6A:C5:79:DC:51:70:9C:06:DF:7E:B0:3A:01:18:AD:AA:53
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a3:04:69:05:9f:c2:7e:d7:33:57:fa:88:9d:24:f1:43:c2:
7b:54:b2:0a:b7:c9:56:b9:31:db:02:4d:82:25:c4:16:54:2b:
74:49:ac:81:2d:8e:0f:a7:6d:6c:39:84:7e:25:0d:d0:19:0a:
f7:c4:06:24:34:c7:aa:9f:19:68:06:f1:ac:08:ae:39:45:e8:
92:1e:23:82:b8:14:44:7d:0b:0f:44:64:2f:9f:4a:4e:44:46:
08:1e:68:de:f0:5b:85:89:d3:a8:7f:52:cd:b7:2e:ff:e2:56:
cb:90:0b:03:9e:f7:d0:80:bd:80:09:85:b3:78:8e:dd:f4:ef:
7b:b4:41:b3:53:f8:c9:7b:50:5c:ec:e1:97:d8:6e:b7:74:0a:
a0:b0:4f:48:86:4e:1c:ae:ec:d3:50:c5:3e:64:2c:85:d2:23:
68:74:fb:33:49:d3:9d:e5:bd:61:71:ae:2f:45:7a:24:33:59:
a2:01:e1:22:b1:8f:35:b1:bf:f7:95:92:7f:48:3d:0b:4e:b5:
6c:bd:4b:4b:03:63:7a:1b:a1:87:26:59:04:01:52:da:bd:d6:
bf:44:c4:55:a6:e0:53:2b:e4:55:95:4c:84:a7:ec:6d:f0:8f:
72:44:42:53:13:15:79:71:0b:8e:7f:a3:4a:da:27:aa:34:f1:
f5:98:2a:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYAKg12pauRIX+BBnjFYUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjM2NiNjFhYjRmNDNmMDdlMzc4MzMwN2RkMzM4NGY5ZGNj
MWMzMWEwHhcNMjUwODIzMTAwMTEyWhcNMjUwODI0MTAwMTEyWjAzMTEwLwYDVQQD
Eyg5YjEyZDI2YWM1NzlkYzUxNzA5YzA2ZGY3ZWIwM2EwMTE4YWRhYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6X3X6OW+t8j13pVaVuGbWqri/97y
bk+mE+4lRZ9MGSMjVtFkDcM74dSsZdvenvNhkklPnNu8u45gg/lG/jn7hlqyrSWV
Z9kVvtdKQLQWa9hHPA5CTAx8TgMRRT6PtEmud3qxVsQVVPRWWR8usWD+8F+Ykfzs
inKYlQJbf2JGTg5RTq7/7Ci11cay3jsHnHzO7823lMN9N0n+A1D/Rg285zJz045F
E6XAukNJbaBd9DrWuSqd/9TuTUZR9TKwLH5+nzftoIc1jUvYaokhjgAqWRZhH6Li
JStZIrB6e/8jGpPWC0qdY+CYSbBJnYlJ+Eh7AoFpgokgtROgDp0YxvzBIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsS0mrFedxRcJwG336wOgEYrapTMB8GA1UdIwQY
MBaAFAw8thq09D8H43gzB90zhPncwcMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc4NDItY2Q0Yy00N2ZhLTg1MWEt
MmM2NjRjZTA4MDc3LzEvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTc4NDItY2Q0Yy00N2ZhLTg1MWEtMmM2NjRjZTA4MDc3
LzEvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6MEaQWf
wn7XM1f6iJ0k8UPCe1SyCrfJVrkx2wJNgiXEFlQrdEmsgS2OD6dtbDmEfiUN0BkK
98QGJDTHqp8ZaAbxrAiuOUXokh4jgrgURH0LD0RkL59KTkRGCB5o3vBbhYnTqH9S
zbcu/+JWy5ALA5730IC9gAmFs3iO3fTve7RBs1P4yXtQXOzhl9hut3QKoLBPSIZO
HK7s01DFPmQshdIjaHT7M0nTneW9YXGuL0V6JDNZogHhIrGPNbG/95WSf0g9C061
bL1LSwNjehuhhyZZBAFS2r3Wv0TEVabgUyvkVZVMhKfsbfCPckRCUxMVeXELjn+j
StonqjTx9ZgqKA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:40 2025 by rpki-client