Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
File: DPSuqBZureCsfGkRvcnmnHB1TBQ.mft (raw, json)
Hash identifier: h6VkhxiOHjY5dhaJx2QuuHzwAAOj3UucWX50l+e4lJw=
Subject key identifier: 25:5C:26:8D:91:36:3C:E3:9B:72:83:8B:36:A1:A2:52:5A:D9:98:D1
Authority key identifier: 0C:F4:AE:A8:16:6E:AD:E0:AC:7C:69:11:BD:C9:E6:9C:70:75:4C:14
Certificate issuer: /CN=0cf4aea8166eade0ac7c6911bdc9e69c70754c14
Certificate serial: 0197B632B680F2D356804000377F5A3EB6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
Manifest number: 69
Signing time: Sat 28 Jun 2025 11:01:06 +0000
Manifest this update: Sat 28 Jun 2025 11:01:06 +0000
Manifest next update: Sun 29 Jun 2025 11:01:06 +0000
Files and hashes: 1: DPSuqBZureCsfGkRvcnmnHB1TBQ.crl (hash: AxGDa4UkkrnO2mPpRH+T0jQOqcZNOZuxVXQkAlaBdRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b6:80:f2:d3:56:80:40:00:37:7f:5a:3e:b6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cf4aea8166eade0ac7c6911bdc9e69c70754c14
Validity
Not Before: Jun 28 11:01:06 2025 GMT
Not After : Jun 29 11:01:06 2025 GMT
Subject: CN=255c268d91363ce39b72838b36a1a2525ad998d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:c9:d0:65:ef:3c:25:9d:a9:05:d8:2b:2c:
41:73:88:56:8c:16:3e:a9:93:a3:96:02:8d:d9:e4:
92:2f:7a:97:03:a3:32:ab:79:cf:d3:8f:ea:ec:91:
70:ac:a7:f2:59:0b:92:f6:cd:15:ef:6d:17:ee:75:
e6:58:a2:d7:7a:f9:f6:bb:ea:ca:f8:ce:42:b1:c8:
de:84:4e:c6:37:3d:5c:d4:a8:88:b1:8b:03:ac:c6:
54:8f:5e:76:8d:6a:8d:8f:84:08:55:fc:2d:df:78:
4b:5b:c4:58:03:67:e4:cf:e3:45:1d:53:92:da:a8:
ed:ce:90:d5:19:f0:c8:e1:37:73:44:29:ae:96:fb:
13:6d:ee:ad:ae:48:7c:4b:b2:54:ff:87:2e:13:f3:
79:a4:cd:62:99:62:6c:5d:b0:70:48:3b:fb:3a:a1:
48:63:b1:7c:61:18:71:c7:48:a0:00:d0:ed:ce:bd:
47:1b:bb:ea:d3:95:ea:f2:92:f7:df:8c:31:bb:82:
a8:5d:17:1c:a3:a4:30:2e:79:fc:d8:24:4f:0f:30:
bd:c5:ab:c3:0d:c9:0a:1c:44:57:c3:f7:b1:68:79:
cb:40:33:74:85:52:1e:01:a2:02:46:13:5c:7e:b1:
6c:af:9c:b0:ef:ea:e8:a4:5e:83:5c:da:89:6b:6e:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:26:8D:91:36:3C:E3:9B:72:83:8B:36:A1:A2:52:5A:D9:98:D1
X509v3 Authority Key Identifier:
keyid:0C:F4:AE:A8:16:6E:AD:E0:AC:7C:69:11:BD:C9:E6:9C:70:75:4C:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ef:71:8d:3d:32:44:d1:9b:38:a0:1b:a6:43:b7:0f:61:d7:
25:fb:b8:ee:e7:4e:e5:68:26:ec:47:0d:af:31:4b:dc:76:9d:
db:6f:05:77:d5:cf:e8:0b:08:cd:76:fd:74:ec:a2:01:3b:51:
99:a3:1e:eb:fb:bd:ee:6e:75:f1:72:0c:e7:82:a0:5d:0c:a5:
7c:8a:df:bf:74:30:bb:e2:23:4d:a3:7a:2a:23:68:a8:78:68:
64:d2:f4:d9:ca:23:c4:51:b9:5b:60:06:b8:b7:4b:a1:6f:1d:
8b:73:b9:cf:e0:59:05:7b:75:92:11:ca:0d:d1:71:1e:8e:7e:
31:12:f5:c7:fc:56:d2:05:30:5d:39:fb:3c:2b:e4:2f:09:17:
b6:1f:56:28:02:37:09:ce:c4:e9:42:07:a0:3a:dd:f4:49:ae:
05:6f:a1:f4:c5:c5:2b:46:76:50:4d:15:8c:76:aa:db:9e:57:
87:75:99:88:de:97:96:8a:c4:4b:41:3b:a5:4a:24:f9:61:9b:
5b:4c:62:f8:ab:a3:bd:ab:09:a6:4f:8d:7f:de:b1:d6:b5:7d:
b4:c2:76:7c:f7:73:c2:07:5d:4a:a1:1c:68:cf:84:e1:02:61:
f0:74:53:37:7c:e0:58:27:44:88:9a:10:72:40:3d:11:bc:82:
49:bc:c8:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MraA8tNWgEAAN39aPrbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZjRhZWE4MTY2ZWFkZTBhYzdjNjkxMWJkYzllNjljNzA3
NTRjMTQwHhcNMjUwNjI4MTEwMTA2WhcNMjUwNjI5MTEwMTA2WjAzMTEwLwYDVQQD
EygyNTVjMjY4ZDkxMzYzY2UzOWI3MjgzOGIzNmExYTI1MjVhZDk5OGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo/J0GXvPCWdqQXYKyxBc4hWjBY+
qZOjlgKN2eSSL3qXA6Myq3nP04/q7JFwrKfyWQuS9s0V720X7nXmWKLXevn2u+rK
+M5CscjehE7GNz1c1KiIsYsDrMZUj152jWqNj4QIVfwt33hLW8RYA2fkz+NFHVOS
2qjtzpDVGfDI4TdzRCmulvsTbe6trkh8S7JU/4cuE/N5pM1imWJsXbBwSDv7OqFI
Y7F8YRhxx0igANDtzr1HG7vq05Xq8pL334wxu4KoXRcco6QwLnn82CRPDzC9xavD
DckKHERXw/exaHnLQDN0hVIeAaICRhNcfrFsr5yw7+ropF6DXNqJa25XRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVcJo2RNjzjm3KDizaholJa2ZjRMB8GA1UdIwQY
MBaAFAz0rqgWbq3grHxpEb3J5pxwdUwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFBTdXFCWnVyZUNzZkdrUnZjbm1uSEIxVEJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84YWRmMTktMDg2OS00NmZiLTkyYjMt
ZjBkN2IyNzc0ZDNlLzEvRFBTdXFCWnVyZUNzZkdrUnZjbm1uSEIxVEJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84YWRmMTktMDg2OS00NmZiLTkyYjMtZjBkN2IyNzc0ZDNl
LzEvRFBTdXFCWnVyZUNzZkdrUnZjbm1uSEIxVEJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUO9xjT0y
RNGbOKAbpkO3D2HXJfu47udO5Wgm7EcNrzFL3Had228Fd9XP6AsIzXb9dOyiATtR
maMe6/u97m518XIM54KgXQylfIrfv3Qwu+IjTaN6KiNoqHhoZNL02cojxFG5W2AG
uLdLoW8di3O5z+BZBXt1khHKDdFxHo5+MRL1x/xW0gUwXTn7PCvkLwkXth9WKAI3
Cc7E6UIHoDrd9EmuBW+h9MXFK0Z2UE0VjHaq255Xh3WZiN6XlorES0E7pUok+WGb
W0xi+KujvasJpk+Nf96x1rV9tMJ2fPdzwgddSqEcaM+E4QJh8HRTN3zgWCdEiJoQ
ckA9EbyCSbzI+g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:15 2025 by rpki-client