Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
File: DLeircbcrxd7k6M2y47OzFrzAlg.mft (raw, json)
Hash identifier: vExud8ShX1p3S55Cx1wsQSO6JLtIYAmdlwrIhAtRHeY=
Subject key identifier: 4A:96:E5:2A:62:69:2B:A1:65:BB:B1:0D:14:C5:A9:29:55:60:59:01
Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
Certificate issuer: /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Certificate serial: 0198D54DEBB91EB78EB1ACE43204D91A6411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
Manifest number: 08F0
Signing time: Sat 23 Aug 2025 05:01:50 +0000
Manifest this update: Sat 23 Aug 2025 05:01:50 +0000
Manifest next update: Sun 24 Aug 2025 05:01:50 +0000
Files and hashes: 1: DLeircbcrxd7k6M2y47OzFrzAlg.crl (hash: bvmXrH49+GbAEvF7tkRESJrLoWl7M/MGqh4iJSGQMdA=)
2: DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa (hash: fFfPzCo7zqTjJgcKhX4SxPHlq4HGUqWFQ0c7O8IZwwY=)
3: OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa (hash: ei5vXf6WAl7FEI5d5Hm8KKAZYtO3URaho5E46M2Vof8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:eb:b9:1e:b7:8e:b1:ac:e4:32:04:d9:1a:64:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Validity
Not Before: Aug 23 05:01:50 2025 GMT
Not After : Aug 24 05:01:50 2025 GMT
Subject: CN=4a96e52a62692ba165bbb10d14c5a92955605901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:73:62:c4:58:ab:f0:0c:20:55:7c:1b:f7:
71:6f:7d:7f:63:20:b7:4d:b9:38:3a:ec:16:70:bc:
79:eb:58:6d:ba:bf:37:1e:83:94:75:d2:8e:2a:99:
27:36:3c:db:c7:bc:bd:df:e7:e9:df:5f:fb:49:4c:
a4:50:d2:0f:5a:09:a2:d9:fa:91:2e:cc:2e:e5:32:
60:ab:7c:f9:2a:21:8e:bc:aa:c6:97:c7:43:ff:34:
38:19:96:7d:4d:82:32:d3:db:9a:36:a5:9c:aa:9f:
9a:aa:ed:e5:73:e6:33:d7:25:5d:c6:b0:f8:6f:09:
b7:db:54:2f:0e:b3:eb:3c:58:df:ec:ae:3e:b4:0b:
af:86:c8:5b:8f:1c:f4:e8:36:70:95:5e:67:5c:d7:
af:e4:ef:03:22:59:66:9c:0c:5d:59:20:c8:6a:14:
75:30:b4:0a:02:13:1d:e4:ea:ed:5b:08:e7:b6:d9:
bc:66:86:25:b9:56:98:05:40:2e:2e:50:7c:f2:1e:
93:ed:f0:de:19:2a:e4:71:eb:53:d4:10:ea:6e:9f:
0d:07:38:7d:28:70:7b:ce:ec:18:5a:98:9e:25:cc:
32:b5:84:25:1f:80:b4:31:bf:57:f9:52:22:32:10:
9f:65:e4:f9:35:36:80:03:0b:ba:f7:f2:48:89:1e:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:96:E5:2A:62:69:2B:A1:65:BB:B1:0D:14:C5:A9:29:55:60:59:01
X509v3 Authority Key Identifier:
keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5f:d0:01:0b:4e:c7:f2:b3:2c:62:50:81:5b:c4:42:c1:98:
6e:35:e2:f2:c5:f1:63:3e:20:3f:6f:94:f7:6c:b7:3c:a4:5c:
3e:9a:11:d6:f9:f5:87:f8:95:d3:7d:b5:c4:cb:e6:58:dc:5b:
56:90:49:bd:fc:ad:d4:1c:09:d0:ed:28:9f:d3:de:76:0f:f2:
00:5b:77:ee:ce:26:c9:21:c7:8d:b6:61:1d:d1:95:79:f5:9b:
80:7e:91:e5:10:4f:15:9b:88:47:2d:72:94:e5:6b:63:8e:54:
aa:12:af:f6:8b:43:ad:01:e5:31:a5:ba:bd:66:08:bc:56:8a:
16:7f:f1:56:82:1c:d2:86:45:15:fc:f2:05:56:63:4f:f0:0e:
8d:da:df:f1:94:6b:f3:90:36:be:0a:24:7f:8e:fa:47:08:49:
0f:9c:05:20:42:7a:79:9e:94:13:e1:da:5a:7a:c6:20:ec:17:
27:78:76:10:f1:07:c8:f4:29:79:6e:43:33:60:a2:3d:a2:1b:
0a:bc:ab:ad:d2:f7:2e:6b:76:b0:66:27:bd:72:f6:c7:d1:a8:
7f:6b:65:ff:c3:ad:ff:51:6f:29:d7:1d:98:d9:e0:69:18:88:
1d:90:f2:0a:1f:a1:57:5e:8a:4d:af:d5:49:ef:33:df:21:a0:
ea:0e:82:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTeu5HreOsazkMgTZGmQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYjdhMmFkYzZkY2FmMTc3YjkzYTMzNmNiOGVjZWNjNWFm
MzAyNTgwHhcNMjUwODIzMDUwMTUwWhcNMjUwODI0MDUwMTUwWjAzMTEwLwYDVQQD
Eyg0YTk2ZTUyYTYyNjkyYmExNjViYmIxMGQxNGM1YTkyOTU1NjA1OTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL9zYsRYq/AMIFV8G/dxb31/YyC3
Tbk4OuwWcLx561htur83HoOUddKOKpknNjzbx7y93+fp31/7SUykUNIPWgmi2fqR
Lswu5TJgq3z5KiGOvKrGl8dD/zQ4GZZ9TYIy09uaNqWcqp+aqu3lc+Yz1yVdxrD4
bwm321QvDrPrPFjf7K4+tAuvhshbjxz06DZwlV5nXNev5O8DIllmnAxdWSDIahR1
MLQKAhMd5OrtWwjnttm8ZoYluVaYBUAuLlB88h6T7fDeGSrkcetT1BDqbp8NBzh9
KHB7zuwYWpieJcwytYQlH4C0Mb9X+VIiMhCfZeT5NTaAAwu69/JIiR6oiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqW5SpiaSuhZbuxDRTFqSlVYFkBMB8GA1UdIwQY
MBaAFAy3oq3G3K8Xe5OjNsuOzsxa8wJYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRExlaXJjYmNyeGQ3azZNMnk0N096RnJ6QWxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8yZjc4OTQtNzU2ZC00Y2JmLTk3N2Mt
M2M1YWU3NjFjYWIwLzEvRExlaXJjYmNyeGQ3azZNMnk0N096RnJ6QWxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8yZjc4OTQtNzU2ZC00Y2JmLTk3N2MtM2M1YWU3NjFjYWIw
LzEvRExlaXJjYmNyeGQ3azZNMnk0N096RnJ6QWxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1/QAQtO
x/KzLGJQgVvEQsGYbjXi8sXxYz4gP2+U92y3PKRcPpoR1vn1h/iV0321xMvmWNxb
VpBJvfyt1BwJ0O0on9Pedg/yAFt37s4mySHHjbZhHdGVefWbgH6R5RBPFZuIRy1y
lOVrY45UqhKv9otDrQHlMaW6vWYIvFaKFn/xVoIc0oZFFfzyBVZjT/AOjdrf8ZRr
85A2vgokf476RwhJD5wFIEJ6eZ6UE+HaWnrGIOwXJ3h2EPEHyPQpeW5DM2CiPaIb
CryrrdL3Lmt2sGYnvXL2x9Gof2tl/8Ot/1FvKdcdmNngaRiIHZDyCh+hV16KTa/V
Se8z3yGg6g6Crw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:37 2025 by rpki-client