Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: n/Xx6h2WnYT2ezYoZh9RaaaXgowsySATMqbfAZFq7z8=
Subject key identifier: EB:64:11:F2:74:4A:E8:E0:CA:26:06:80:C1:90:8B:97:2F:A3:62:8A
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 0198D51567B9C95EC3605737AB0EEBEB8F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 06C7
Signing time: Sat 23 Aug 2025 04:00:06 +0000
Manifest this update: Sat 23 Aug 2025 04:00:06 +0000
Manifest next update: Sun 24 Aug 2025 04:00:06 +0000
Files and hashes: 1: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: Ommq1wO8JoQ92fOhksLKJoR/bsczajfy2+yo5TX7R+g=)
2: NfNxh6P1uZhDH6XoBFouc3RXHCs.roa (hash: qkk+5kxxRuEkhJwe+gYaKfgrph8xFe5jspGXDjsvcA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:67:b9:c9:5e:c3:60:57:37:ab:0e:eb:eb:8f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Aug 23 04:00:06 2025 GMT
Not After : Aug 24 04:00:06 2025 GMT
Subject: CN=eb6411f2744ae8e0ca260680c1908b972fa3628a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:e1:1e:c3:d1:88:a3:5d:a2:88:b4:e9:dc:
e0:48:98:42:81:55:27:f8:1f:01:32:d3:a8:fa:b7:
18:d4:a6:dc:27:87:99:78:19:da:9c:22:5d:fc:6c:
d6:4c:c0:7b:ec:be:02:03:33:28:64:33:57:c7:60:
02:62:71:8f:a3:96:fb:f2:55:f4:ee:a6:64:3f:ce:
15:a8:f5:fe:03:6e:eb:a9:78:25:38:8d:0e:36:17:
f7:16:44:96:30:78:a6:33:2b:24:4b:d3:4d:24:b8:
85:e5:58:0d:06:c2:be:07:61:c3:12:0b:32:e8:1e:
03:99:5a:f7:60:5b:77:30:d5:f2:85:b0:c6:69:64:
9d:94:df:3a:01:aa:f5:d5:c5:38:f0:ec:a5:37:a1:
0a:29:9f:02:1c:79:9f:3a:e6:ed:90:c5:ea:4e:0e:
47:07:58:e8:b4:de:aa:4f:f0:42:40:4b:e6:c6:93:
7a:6c:f9:70:a8:89:9d:07:82:10:ad:22:99:b9:4c:
3e:27:46:f0:85:d6:75:de:3b:59:73:4c:e5:1b:95:
d8:b5:b4:bf:4a:72:99:5b:fe:de:b3:b8:ea:0b:8a:
54:81:c6:70:12:26:00:d2:9c:aa:ec:84:f6:82:2a:
a9:7f:e0:01:7c:87:50:d3:bc:73:1f:74:f9:bd:8e:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:64:11:F2:74:4A:E8:E0:CA:26:06:80:C1:90:8B:97:2F:A3:62:8A
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ee:45:66:a0:9d:dc:3b:dc:1d:9f:7c:18:86:3a:08:fa:ee:
70:da:57:92:3c:56:5e:ac:35:3d:1d:75:df:77:bb:78:92:04:
bb:12:27:71:a7:c1:f3:6c:63:f9:28:59:d2:b0:76:91:e1:bb:
01:77:71:1d:2a:4c:76:a7:b9:48:ae:4f:3e:5f:06:c8:fb:0c:
6f:78:5f:fd:86:0a:8f:b8:e2:cd:c1:17:92:1c:f2:44:0f:77:
c9:d3:e4:d8:e7:61:fe:0f:e7:d9:9e:ca:03:35:fc:e3:69:81:
62:55:dd:1d:cf:95:07:14:b5:72:40:0f:a2:71:61:4b:31:d8:
79:2b:50:7f:32:ef:3e:49:98:22:34:12:83:86:a5:1d:9f:e4:
ad:14:b3:3d:69:90:83:f6:74:8e:8f:5f:0b:9d:7a:3f:6c:6a:
2d:87:1a:c1:13:de:fb:6f:5a:99:89:82:f1:79:80:d1:cc:01:
07:e5:6d:f8:dc:b8:81:dd:f0:5f:3d:40:32:76:64:1a:d0:2a:
66:6a:f8:42:80:0b:29:c0:0c:b2:1e:67:43:b3:c5:04:20:17:
a0:f3:80:21:0d:c6:01:8c:2d:17:62:22:c7:21:7b:6e:eb:0b:
13:d4:5c:06:9a:92:80:e9:df:1f:b2:fd:13:69:1b:dd:00:85:
00:30:12:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFWe5yV7DYFc3qw7r6491MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGJlNDc0YzE1NWZjMTM4NDdiODU5NTAxYTU1M2NmZmMz
YWM0YjIwHhcNMjUwODIzMDQwMDA2WhcNMjUwODI0MDQwMDA2WjAzMTEwLwYDVQQD
EyhlYjY0MTFmMjc0NGFlOGUwY2EyNjA2ODBjMTkwOGI5NzJmYTM2MjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny/hHsPRiKNdooi06dzgSJhCgVUn
+B8BMtOo+rcY1KbcJ4eZeBnanCJd/GzWTMB77L4CAzMoZDNXx2ACYnGPo5b78lX0
7qZkP84VqPX+A27rqXglOI0ONhf3FkSWMHimMyskS9NNJLiF5VgNBsK+B2HDEgsy
6B4DmVr3YFt3MNXyhbDGaWSdlN86Aar11cU48OylN6EKKZ8CHHmfOubtkMXqTg5H
B1jotN6qT/BCQEvmxpN6bPlwqImdB4IQrSKZuUw+J0bwhdZ13jtZc0zlG5XYtbS/
SnKZW/7es7jqC4pUgcZwEiYA0pyq7IT2giqpf+ABfIdQ07xzH3T5vY7a+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtkEfJ0SujgyiYGgMGQi5cvo2KKMB8GA1UdIwQY
MBaAFA2L5HTBVfwThHuFlQGlU8/8OsSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZDJlZmUtMTQ3MS00MmQ4LTkzNDct
NDg2MWQ0M2UyNGVmLzEvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mZDJlZmUtMTQ3MS00MmQ4LTkzNDctNDg2MWQ0M2UyNGVm
LzEvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOu5FZqCd
3DvcHZ98GIY6CPrucNpXkjxWXqw1PR1133e7eJIEuxIncafB82xj+ShZ0rB2keG7
AXdxHSpMdqe5SK5PPl8GyPsMb3hf/YYKj7jizcEXkhzyRA93ydPk2Odh/g/n2Z7K
AzX842mBYlXdHc+VBxS1ckAPonFhSzHYeStQfzLvPkmYIjQSg4alHZ/krRSzPWmQ
g/Z0jo9fC516P2xqLYcawRPe+29amYmC8XmA0cwBB+Vt+Ny4gd3wXz1AMnZkGtAq
Zmr4QoALKcAMsh5nQ7PFBCAXoPOAIQ3GAYwtF2IixyF7busLE9RcBpqSgOnfH7L9
E2kb3QCFADASaw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:19 2025 by rpki-client