Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: JRQ8AFXvUrn6wL5AG6jhOyPaLsFbgZxhKrY23mIuhkQ=
Subject key identifier: 00:89:7F:F9:97:D0:17:63:92:1E:49:CD:C1:E6:49:EA:26:57:3B:2E
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 0198D54E605FA2F2545ACF3D0727FC9503B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 01E1
Signing time: Sat 23 Aug 2025 05:02:20 +0000
Manifest this update: Sat 23 Aug 2025 05:02:20 +0000
Manifest next update: Sun 24 Aug 2025 05:02:20 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: fPg6XuLZt66Rmy2SWcShSqV4DLPhRgzmi4dreuZ3jJQ=)
2: _Lwar98mX_HPuZ6I_iBOIoPweAU.roa (hash: Q4wLDgz1BPTM2gYviJRrmaBtuFqzTEu5NxXR8pya5BA=)
3: uLyoln8iUo21XJeVRG0IGUytncA.roa (hash: rExu+xv1UDsqwxWWN3KFhMpN7PoTmi5ksePI6jLVE7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:60:5f:a2:f2:54:5a:cf:3d:07:27:fc:95:03:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Aug 23 05:02:20 2025 GMT
Not After : Aug 24 05:02:20 2025 GMT
Subject: CN=00897ff997d01763921e49cdc1e649ea26573b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:7d:b0:a5:bc:f4:a8:16:4b:e7:4e:84:e9:
21:49:69:aa:ab:80:c3:b9:c5:76:46:ab:3a:e5:d8:
d4:e1:29:c3:fd:5c:5d:e3:48:5a:6c:4f:e4:16:e5:
c7:ca:c2:f8:be:17:07:4e:c6:78:e6:f4:b6:9d:57:
4d:71:ca:6c:06:2b:cb:1d:c9:3d:5b:69:19:6e:7d:
6b:91:ed:b7:7d:f4:01:c8:f5:63:e2:f0:a7:7a:e9:
1c:64:42:ff:bb:ad:7e:7d:42:c5:6b:cb:84:29:00:
f6:7c:50:41:36:13:25:78:80:27:80:0e:3d:47:fc:
0b:ab:c6:4e:ec:b1:9f:16:b7:99:4d:81:42:57:df:
70:a2:ae:e3:d3:b8:83:9e:e3:8f:d1:62:30:df:13:
c1:14:1e:03:00:40:50:c8:cd:07:8f:9f:bf:90:db:
82:d0:60:26:10:57:46:90:a5:0d:75:0b:d7:a6:67:
23:f1:36:18:fd:8d:72:60:b8:7f:cb:27:a9:47:bf:
94:43:8e:92:3d:01:b1:f1:17:80:d9:ad:8c:b1:3a:
2f:5d:73:cf:b7:1c:34:e9:1f:69:24:13:ae:b5:2a:
1a:1e:cf:3a:9e:6d:67:65:b4:b8:c6:a3:08:e7:7e:
a7:0a:df:da:d4:24:84:c3:11:db:ec:10:69:e1:e0:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:89:7F:F9:97:D0:17:63:92:1E:49:CD:C1:E6:49:EA:26:57:3B:2E
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c1:bc:0a:fd:4d:f3:b3:16:0b:b3:fc:49:3d:bf:6a:00:c4:
87:87:03:3d:4b:a6:79:67:01:be:cc:79:ca:b6:47:c4:94:5a:
97:8d:5d:0c:d4:11:fd:9a:fc:7a:25:0b:42:23:ac:9b:61:af:
94:8c:59:9d:15:92:44:3e:db:ed:06:a6:10:fa:66:1b:3e:be:
d5:4e:99:cb:6d:1e:80:9d:d0:c9:58:5c:76:90:63:39:c3:87:
f0:04:17:4e:27:a7:5e:30:3b:82:12:85:d1:0a:3d:11:63:f3:
c5:55:b9:1e:21:a7:dc:4b:4f:00:4f:c3:63:46:4a:ad:68:b7:
4a:a1:fe:50:9c:aa:30:8d:f4:22:98:31:b3:e3:9b:51:25:04:
f2:0d:52:fb:82:81:70:7a:25:64:88:9f:01:af:f4:95:b7:54:
82:c8:48:45:8c:e8:de:ea:df:77:fe:15:7f:60:3f:d4:91:2c:
f0:ac:4e:1f:81:c1:d6:95:97:af:cd:21:99:ab:b8:fe:ac:71:
f7:02:0f:a8:3e:58:10:e5:0e:52:60:1a:e7:55:df:4e:fe:91:
0f:09:81:03:18:d9:c5:f3:33:96:8f:1b:c7:0b:5e:38:41:5e:
4b:a4:70:58:d9:1e:74:91:05:d4:c0:82:90:84:8a:42:2e:60:
db:5c:f5:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTmBfovJUWs89Byf8lQOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzhmOWVkNzFjYTNhNDk2YjhkNTRiOTdmMTQ3OTE4ZGFk
YjljNTQwHhcNMjUwODIzMDUwMjIwWhcNMjUwODI0MDUwMjIwWjAzMTEwLwYDVQQD
EygwMDg5N2ZmOTk3ZDAxNzYzOTIxZTQ5Y2RjMWU2NDllYTI2NTczYjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvh9sKW89KgWS+dOhOkhSWmqq4DD
ucV2Rqs65djU4SnD/Vxd40habE/kFuXHysL4vhcHTsZ45vS2nVdNccpsBivLHck9
W2kZbn1rke23ffQByPVj4vCneukcZEL/u61+fULFa8uEKQD2fFBBNhMleIAngA49
R/wLq8ZO7LGfFreZTYFCV99woq7j07iDnuOP0WIw3xPBFB4DAEBQyM0Hj5+/kNuC
0GAmEFdGkKUNdQvXpmcj8TYY/Y1yYLh/yyepR7+UQ46SPQGx8ReA2a2MsTovXXPP
txw06R9pJBOutSoaHs86nm1nZbS4xqMI536nCt/a1CSEwxHb7BBp4eCg0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACJf/mX0Bdjkh5JzcHmSeomVzsuMB8GA1UdIwQY
MBaAFA14+e1xyjpJa41UuX8UeRja25xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQt
OGU4Njc1Y2IwOTJmLzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQtOGU4Njc1Y2IwOTJm
LzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsG8Cv1N
87MWC7P8ST2/agDEh4cDPUumeWcBvsx5yrZHxJRal41dDNQR/Zr8eiULQiOsm2Gv
lIxZnRWSRD7b7QamEPpmGz6+1U6Zy20egJ3QyVhcdpBjOcOH8AQXTienXjA7ghKF
0Qo9EWPzxVW5HiGn3EtPAE/DY0ZKrWi3SqH+UJyqMI30Ipgxs+ObUSUE8g1S+4KB
cHolZIifAa/0lbdUgshIRYzo3urfd/4Vf2A/1JEs8KxOH4HB1pWXr80hmau4/qxx
9wIPqD5YEOUOUmAa51XfTv6RDwmBAxjZxfMzlo8bxwteOEFeS6RwWNkedJEF1MCC
kISKQi5g21z1gA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:54 2025 by rpki-client