Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: jbTMWu4hOfeCJmmD6G98VUNYEduV7RDKKiRxTzbtLn0=
Subject key identifier: 0F:F1:94:1C:32:D4:15:66:73:E1:FA:44:EB:95:53:DB:23:D9:9D:F5
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 0198D4DFF41D95C78C50B9FC07B148975E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: NDoLaARg0yPQL3UO1lErARDZUQLG6f9SM2oN5K9VF+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f4:1d:95:c7:8c:50:b9:fc:07:b1:48:97:5e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=0ff1941c32d4156673e1fa44eb9553db23d99df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f9:59:27:56:22:ba:b6:c8:3a:6f:8a:89:cc:
26:a0:80:1d:a4:6c:57:c8:e8:de:ad:fb:2a:92:a5:
4a:e6:81:a6:89:fa:89:55:e2:4c:74:07:f6:91:0c:
97:b1:d2:28:3d:96:aa:8a:ad:88:28:8a:4b:ae:37:
13:03:9e:4e:8b:8a:a2:f2:33:3b:bf:e1:08:c8:e6:
b2:b5:6c:6b:34:b2:ab:5e:18:3e:ec:6e:42:d5:70:
6c:3f:b0:19:2d:10:be:3f:fa:49:95:d8:cc:ba:f1:
b1:fe:2b:15:9a:29:a1:29:ef:4a:0d:12:04:ff:1a:
e7:8e:d4:13:a1:58:46:ce:30:45:fd:cd:65:f6:24:
4d:81:a2:60:2c:5c:e0:72:57:bf:1c:9f:45:0e:db:
e5:70:24:23:6e:b1:36:e0:cf:17:39:60:06:13:86:
c9:47:2a:48:a0:c2:ae:7b:da:e1:00:e7:47:02:29:
76:dc:81:57:52:b0:f6:28:d1:6f:5f:58:96:5a:9f:
1e:d5:d2:61:5f:d7:2e:5f:af:36:ed:d9:e1:5c:ae:
62:39:2f:8b:24:e6:32:52:a9:48:c2:35:2a:7d:91:
10:af:d9:3e:09:a7:38:ea:80:7b:6d:bd:22:ba:13:
84:61:5f:6b:b4:b2:ff:34:49:f9:80:40:9b:42:b4:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F1:94:1C:32:D4:15:66:73:E1:FA:44:EB:95:53:DB:23:D9:9D:F5
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c8:54:54:3d:92:4a:27:4f:8a:6e:b6:3b:fb:77:f1:e4:fe:
86:e1:9c:48:9c:96:b4:4d:d9:f7:73:51:5c:a2:7b:d0:38:00:
3f:ff:cb:db:c3:84:d4:40:69:b2:e0:ba:30:52:31:85:80:ab:
dd:35:25:03:c4:73:ed:9c:39:11:40:2c:87:ff:02:81:57:5c:
dc:22:87:48:a2:bc:2a:a7:31:cd:34:a7:d6:61:04:71:a3:55:
aa:b2:fe:c7:ef:2c:2f:a0:f5:f6:d1:19:fe:5d:fe:e6:86:56:
e5:86:e8:92:14:71:80:ba:0d:96:88:c4:d8:ba:b7:31:14:da:
ad:5e:94:7f:a2:ad:e3:4a:ff:69:95:de:35:a9:62:26:0c:b7:
e9:3b:a5:75:29:4c:1e:4d:7d:2b:85:2c:3b:c5:ba:ea:88:46:
85:64:23:e9:84:f1:2e:28:48:15:d9:53:b2:58:8d:1e:d9:6b:
bc:52:77:f0:de:05:e3:fa:ff:df:a1:c5:11:92:1f:7e:1f:69:
c2:cf:60:e3:e2:8a:87:1b:c1:19:cf:f1:9c:e0:55:b1:9b:00:
20:d2:07:7c:16:1c:d8:fd:3b:a3:24:1b:9e:17:d1:cc:1d:be:
5f:72:7f:7a:45:d9:b3:f2:bd:78:e0:2e:0d:be:0c:3f:61:2f:
bb:55:5d:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/QdlceMULn8B7FIl15DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZTc0ZDE4YzQwNDlhMmQ5YjgxMmMyYTU4NTVjZmViNzVh
ZmE2NjcwHhcNMjUwODIzMDMwMTQzWhcNMjUwODI0MDMwMTQzWjAzMTEwLwYDVQQD
EygwZmYxOTQxYzMyZDQxNTY2NzNlMWZhNDRlYjk1NTNkYjIzZDk5ZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/lZJ1YiurbIOm+KicwmoIAdpGxX
yOjerfsqkqVK5oGmifqJVeJMdAf2kQyXsdIoPZaqiq2IKIpLrjcTA55Oi4qi8jM7
v+EIyOaytWxrNLKrXhg+7G5C1XBsP7AZLRC+P/pJldjMuvGx/isVmimhKe9KDRIE
/xrnjtQToVhGzjBF/c1l9iRNgaJgLFzgcle/HJ9FDtvlcCQjbrE24M8XOWAGE4bJ
RypIoMKue9rhAOdHAil23IFXUrD2KNFvX1iWWp8e1dJhX9cuX6827dnhXK5iOS+L
JOYyUqlIwjUqfZEQr9k+Cac46oB7bb0iuhOEYV9rtLL/NEn5gECbQrQydwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/xlBwy1BVmc+H6ROuVU9sj2Z31MB8GA1UdIwQY
MBaAFA7nTRjEBJotm4EsKlhVz+t1r6ZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yYzhkYmMtNDBhZS00OWM2LThkZDMt
YzI1ZGViY2IxMTk3LzEvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yYzhkYmMtNDBhZS00OWM2LThkZDMtYzI1ZGViY2IxMTk3
LzEvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjchUVD2S
SidPim62O/t38eT+huGcSJyWtE3Z93NRXKJ70DgAP//L28OE1EBpsuC6MFIxhYCr
3TUlA8Rz7Zw5EUAsh/8CgVdc3CKHSKK8KqcxzTSn1mEEcaNVqrL+x+8sL6D19tEZ
/l3+5oZW5YbokhRxgLoNlojE2Lq3MRTarV6Uf6Kt40r/aZXeNaliJgy36TuldSlM
Hk19K4UsO8W66ohGhWQj6YTxLihIFdlTsliNHtlrvFJ38N4F4/r/36HFEZIffh9p
ws9g4+KKhxvBGc/xnOBVsZsAINIHfBYc2P07oyQbnhfRzB2+X3J/ekXZs/K9eOAu
Db4MP2Evu1Vdqg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:22 2025 by rpki-client