Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: CJI6TyCE6EVXpln1tyqB+sEF7c3TPqRUffklxWIR9ZQ=
Subject key identifier: 47:23:E6:70:5E:24:AD:2C:75:2A:2D:97:0F:70:80:BD:B8:92:EF:B5
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 0199FF22B7581F9AF3A7501209BF51ECA8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 1407
Signing time: Mon 20 Oct 2025 01:01:29 +0000
Manifest this update: Mon 20 Oct 2025 01:01:29 +0000
Manifest next update: Tue 21 Oct 2025 01:01:29 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: C2/XFZui7x57YVyzrRjeB41m1BOjfmDxdXDFMqKij+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:b7:58:1f:9a:f3:a7:50:12:09:bf:51:ec:a8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Oct 20 01:01:29 2025 GMT
Not After : Oct 21 01:01:29 2025 GMT
Subject: CN=4723e6705e24ad2c752a2d970f7080bdb892efb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:d9:46:ce:ff:e2:ab:7b:14:3c:41:96:ac:
67:a9:c5:92:81:53:58:bc:17:f6:ee:28:10:a0:27:
21:22:e1:10:02:91:da:ad:33:15:c1:29:c3:49:b5:
86:7d:cd:1c:83:ac:06:52:fa:24:0e:41:a9:c3:31:
32:91:f5:fa:ab:1c:05:73:c7:ef:69:1d:7f:d8:c9:
69:31:77:99:22:bd:0b:6d:61:46:08:98:86:4d:e6:
16:09:02:dc:03:b5:af:d5:08:6b:ad:dd:db:49:74:
bc:9c:15:a1:b3:b1:aa:88:17:e5:38:79:29:ce:fa:
ae:1d:b5:16:1f:56:fa:f1:26:6b:70:bd:32:bd:5c:
1e:60:7a:51:ec:0e:25:26:8f:8f:13:5a:6b:1a:37:
af:f0:c6:0d:75:4d:26:28:11:0e:10:53:fe:06:5b:
b5:98:38:87:29:9a:fe:53:cc:e7:1b:a2:d3:0c:38:
f8:86:8f:71:4d:13:36:38:89:7c:58:ae:a3:51:fc:
14:4e:c9:0b:b6:54:c4:d7:28:51:0c:54:fa:b2:5d:
99:f4:49:60:2e:ee:d2:d7:56:25:87:ca:34:6c:8d:
81:15:49:f1:a1:dc:33:36:38:27:6d:ee:58:27:19:
9d:13:93:c1:59:be:00:fd:e4:ab:cf:cd:5e:e9:07:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:23:E6:70:5E:24:AD:2C:75:2A:2D:97:0F:70:80:BD:B8:92:EF:B5
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:06:d3:8a:78:0e:e5:61:b7:cb:df:d5:3f:f2:04:35:7b:d3:
f9:11:bc:91:2d:bc:10:fa:58:ef:14:5b:61:cf:ff:16:6e:c0:
a9:2a:2d:41:22:7a:85:87:42:4a:8a:d4:d0:ff:09:9c:f7:07:
82:b9:f7:7a:bc:83:e6:4f:6e:2f:23:05:62:ae:7e:73:fc:6d:
9b:de:13:75:20:1e:94:bf:95:b8:e7:8e:0b:44:00:6f:a7:36:
6c:9c:ab:4a:39:b2:83:48:12:fd:98:e6:64:52:21:15:15:14:
49:5a:a4:aa:10:bc:f3:8d:ac:15:65:ac:a8:57:40:b4:06:21:
b8:42:8f:38:23:83:d6:3a:04:37:42:66:5b:29:bf:c0:83:5f:
c2:0f:f0:3f:a5:07:47:82:a1:40:a6:8a:2d:7d:e7:08:fd:cf:
a9:2c:c0:45:6c:70:43:f7:d5:e7:c7:9e:43:ab:b8:84:21:f3:
fa:af:9f:77:66:c6:55:f7:e4:c9:8e:68:f5:f4:d5:95:1b:49:
03:50:25:b2:55:62:05:b4:72:96:d1:c2:5b:80:4d:3c:99:0e:
43:b1:b2:d5:79:f4:09:4f:1b:cc:05:0b:18:de:e4:9d:ae:09:
fe:b3:98:9f:40:c4:3e:93:fb:10:47:55:c4:fa:e2:2d:da:5e:
34:41:d6:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IrdYH5rzp1ASCb9R7KjVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNmJkYTFkYmZhNzdjNzRkYTcyODA1ZWVlNTQxOGQzZjBj
YzUzOWQwHhcNMjUxMDIwMDEwMTI5WhcNMjUxMDIxMDEwMTI5WjAzMTEwLwYDVQQD
Eyg0NzIzZTY3MDVlMjRhZDJjNzUyYTJkOTcwZjcwODBiZGI4OTJlZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxvZRs7/4qt7FDxBlqxnqcWSgVNY
vBf27igQoCchIuEQApHarTMVwSnDSbWGfc0cg6wGUvokDkGpwzEykfX6qxwFc8fv
aR1/2MlpMXeZIr0LbWFGCJiGTeYWCQLcA7Wv1Qhrrd3bSXS8nBWhs7GqiBflOHkp
zvquHbUWH1b68SZrcL0yvVweYHpR7A4lJo+PE1prGjev8MYNdU0mKBEOEFP+Blu1
mDiHKZr+U8znG6LTDDj4ho9xTRM2OIl8WK6jUfwUTskLtlTE1yhRDFT6sl2Z9Elg
Lu7S11Ylh8o0bI2BFUnxodwzNjgnbe5YJxmdE5PBWb4A/eSrz81e6Qd5qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcj5nBeJK0sdSotlw9wgL24ku+1MB8GA1UdIwQY
MBaAFA9r2h2/p3x02nKAXu5UGNPwzFOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYt
ZTA4MTJkZjEyMjFmLzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYtZTA4MTJkZjEyMjFm
LzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQbTingO
5WG3y9/VP/IENXvT+RG8kS28EPpY7xRbYc//Fm7AqSotQSJ6hYdCSorU0P8JnPcH
grn3eryD5k9uLyMFYq5+c/xtm94TdSAelL+VuOeOC0QAb6c2bJyrSjmyg0gS/Zjm
ZFIhFRUUSVqkqhC8842sFWWsqFdAtAYhuEKPOCOD1joEN0JmWym/wINfwg/wP6UH
R4KhQKaKLX3nCP3PqSzARWxwQ/fV58eeQ6u4hCHz+q+fd2bGVffkyY5o9fTVlRtJ
A1AlslViBbRyltHCW4BNPJkOQ7Gy1Xn0CU8bzAULGN7kna4J/rOYn0DEPpP7EEdV
xPriLdpeNEHWZw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:59 2025 by rpki-client