Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier: 7EHFFVYIL0gf6EgzRjz9VFDuzPcncgRcXFljjcBsa+8=
Subject key identifier: 0F:8F:5F:30:C5:87:51:87:E0:2C:B1:D7:65:71:A7:0F:87:07:31:1F
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial: 0197B77C4BB9E990D54D2C92F07B97ECFDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 17:01:05 +0000
Manifest this update: Sat 28 Jun 2025 17:01:05 +0000
Manifest next update: Sun 29 Jun 2025 17:01:05 +0000
Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: 0OJTEDpNzz499fEzUTCEfFbzZElOaHyvHhNI0D/Y378=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:4b:b9:e9:90:d5:4d:2c:92:f0:7b:97:ec:fd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Validity
Not Before: Jun 28 17:01:05 2025 GMT
Not After : Jun 29 17:01:05 2025 GMT
Subject: CN=0f8f5f30c5875187e02cb1d76571a70f8707311f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:aa:99:34:bb:6a:59:11:cb:e7:10:9f:23:
e1:3c:f8:b0:29:0a:96:18:90:9e:7f:12:c6:b7:e8:
3e:74:07:e6:9c:92:6e:1f:2b:c8:3e:2c:22:d4:00:
d0:83:1f:76:80:87:96:a9:f0:63:ca:c1:11:03:f6:
2f:3c:52:0f:10:a0:53:77:ec:8c:4d:90:1e:85:09:
41:fe:91:cf:d7:62:4e:be:cd:8f:4f:fe:5f:3b:9c:
06:f8:8e:b2:46:f4:40:7b:cb:d1:fc:c2:10:f4:af:
f6:a3:d8:06:18:55:19:3b:d7:35:bd:99:11:1e:6a:
31:54:eb:28:f6:c1:76:af:97:1c:72:f5:ad:4a:ad:
6c:62:93:20:33:34:45:ce:9e:46:3a:cf:49:b3:3f:
a1:dc:d6:b9:3f:b6:9b:69:6a:90:ff:ec:db:62:81:
30:78:f0:81:48:b3:4b:db:ef:4d:a4:5e:5d:65:1c:
93:22:a1:01:cc:f1:77:b7:8f:c8:fd:bd:45:05:29:
c0:7b:cd:2a:cb:02:d1:f1:78:79:c1:9a:41:e9:cd:
e2:81:f8:0d:ec:c7:18:fc:ca:88:f8:8a:a6:6e:8f:
51:4d:35:a1:72:ca:d2:9f:ec:c8:af:f9:13:c6:1b:
05:b6:7a:e9:88:d5:78:6f:25:34:94:c6:d0:72:f5:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8F:5F:30:C5:87:51:87:E0:2C:B1:D7:65:71:A7:0F:87:07:31:1F
X509v3 Authority Key Identifier:
keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2b:59:82:c1:d7:d1:f7:92:35:98:c1:dc:8b:ce:de:fe:2a:
4c:4a:0a:34:e1:7b:bc:2d:65:23:4b:fa:a2:2b:f2:6e:be:f2:
21:ec:34:cf:df:0f:79:67:00:fc:85:bc:1a:d0:cf:b2:96:c5:
23:55:07:85:81:00:e9:a3:4a:3d:58:f6:44:0e:51:ae:00:38:
50:5b:1a:9a:d8:5c:b2:53:05:ad:43:6e:e2:bb:e7:eb:5a:c4:
63:c6:c9:a7:1c:ee:37:d1:ba:45:f9:9a:bc:11:b0:06:93:95:
d5:65:6e:98:89:35:0d:ae:25:ba:e3:f8:38:18:df:3a:86:e9:
39:67:0b:6d:53:3b:ed:8f:80:ed:06:ac:5b:20:6d:51:ee:64:
c8:b2:cb:21:d6:6a:7a:1e:48:d8:ea:38:a5:96:e0:7f:db:a8:
1c:75:4b:cd:b5:33:c6:3a:15:b3:1e:2f:6b:9c:4f:60:7d:4d:
e3:69:21:03:53:27:dc:24:6b:fa:0a:0b:f6:44:38:66:7f:7e:
23:85:24:04:3f:d3:8a:24:a3:f7:2d:06:7e:b0:0e:09:c4:48:
f1:d2:36:34:cd:c6:f4:7f:f7:a6:b7:76:0f:06:69:21:74:95:
17:2d:83:24:b1:61:eb:7f:2f:92:fc:f6:aa:aa:cc:5e:6b:0a:
0a:37:e7:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fEu56ZDVTSyS8HuX7P3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjM2JjOGNlYWIxZTc5M2EyMTAzOWNkMGIxZTU0NzJjNzI2
NDFmNjgwHhcNMjUwNjI4MTcwMTA1WhcNMjUwNjI5MTcwMTA1WjAzMTEwLwYDVQQD
EygwZjhmNWYzMGM1ODc1MTg3ZTAyY2IxZDc2NTcxYTcwZjg3MDczMTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7mqmTS7alkRy+cQnyPhPPiwKQqW
GJCefxLGt+g+dAfmnJJuHyvIPiwi1ADQgx92gIeWqfBjysERA/YvPFIPEKBTd+yM
TZAehQlB/pHP12JOvs2PT/5fO5wG+I6yRvRAe8vR/MIQ9K/2o9gGGFUZO9c1vZkR
HmoxVOso9sF2r5cccvWtSq1sYpMgMzRFzp5GOs9Jsz+h3Na5P7abaWqQ/+zbYoEw
ePCBSLNL2+9NpF5dZRyTIqEBzPF3t4/I/b1FBSnAe80qywLR8Xh5wZpB6c3igfgN
7McY/MqI+Iqmbo9RTTWhcsrSn+zIr/kTxhsFtnrpiNV4byU0lMbQcvWTIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+PXzDFh1GH4Cyx12Vxpw+HBzEfMB8GA1UdIwQY
MBaAFAw7yM6rHnk6IQOc0LHlRyxyZB9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQt
ZjhiYWM0ZmI4ZjhhLzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQtZjhiYWM0ZmI4Zjhh
LzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCtZgsHX
0feSNZjB3IvO3v4qTEoKNOF7vC1lI0v6oivybr7yIew0z98PeWcA/IW8GtDPspbF
I1UHhYEA6aNKPVj2RA5RrgA4UFsamthcslMFrUNu4rvn61rEY8bJpxzuN9G6Rfma
vBGwBpOV1WVumIk1Da4luuP4OBjfOobpOWcLbVM77Y+A7QasWyBtUe5kyLLLIdZq
eh5I2Oo4pZbgf9uoHHVLzbUzxjoVsx4va5xPYH1N42khA1Mn3CRr+goL9kQ4Zn9+
I4UkBD/TiiSj9y0GfrAOCcRI8dI2NM3G9H/3prd2DwZpIXSVFy2DJLFh638vkvz2
qqrMXmsKCjfnlA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:09 2025 by rpki-client