Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: 7ayr/EiGW0u66KYFzsT+Xz5PvmBFmKcSZMZXyr59aYw=
Subject key identifier: 72:8E:29:8E:3D:D6:C1:62:F3:80:B8:8F:7B:78:56:AF:18:9A:4B:CF
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 0198D5BB8AFEB6864CF373F968EE4A8223D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 09CE
Signing time: Sat 23 Aug 2025 07:01:34 +0000
Manifest this update: Sat 23 Aug 2025 07:01:34 +0000
Manifest next update: Sun 24 Aug 2025 07:01:34 +0000
Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: Gd8p0EaxzDYv+s6z28e8n0wPp9osBgJGlmr3+e+OK2I=)
2: LaWeTZCAr-HUhZ4sGwn2UEM8UYc.roa (hash: B2sPWyas3UEyy6EkjCL1gILAFxuUkQj9iQf0YdV0Fw4=)
3: _2hrxKKbdmRyLOnHUiOQipQACXY.roa (hash: DxOyoU679BPpOs0ffrHVPaZuK8yvllJ+3WIdB3uJM5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8a:fe:b6:86:4c:f3:73:f9:68:ee:4a:82:23:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Aug 23 07:01:34 2025 GMT
Not After : Aug 24 07:01:34 2025 GMT
Subject: CN=728e298e3dd6c162f380b88f7b7856af189a4bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:0b:ea:9e:0e:68:f8:9a:ef:20:85:ad:f8:
ef:ad:f5:7b:79:ae:fa:0b:f4:08:a4:e2:1d:48:42:
2b:09:20:ec:5a:83:e9:c9:48:d4:1b:80:b0:ff:a9:
15:ba:75:2f:95:05:6a:10:d6:d1:70:35:c9:0c:0d:
8c:1a:cc:2e:1a:b8:15:8d:b7:4a:db:b6:9b:44:78:
cd:30:32:7b:5b:90:a1:79:29:54:06:0c:75:87:7c:
7a:be:d6:a7:44:07:91:35:3a:67:8f:de:7f:f0:15:
b5:08:dd:59:64:82:58:d2:cf:69:fe:3a:36:6f:8d:
b9:35:6b:da:33:ff:a4:d2:d9:aa:90:95:d7:d1:fe:
dc:76:1a:13:ba:e1:e5:7c:ef:8f:3a:a2:b4:d0:71:
fe:c2:fc:20:e8:80:84:f6:6b:c2:e8:4f:a7:1b:86:
1f:8a:e3:68:a2:6a:49:25:02:e9:19:ab:69:ce:b5:
ec:4d:cd:31:a9:44:28:ee:c2:1b:d8:51:12:93:36:
0f:dd:3c:d1:a8:63:bc:11:aa:22:48:d0:00:f1:9f:
5b:9a:5a:78:87:0b:dd:78:36:54:e6:09:ad:70:95:
c0:02:0b:88:c0:45:08:ba:87:a0:45:29:58:45:20:
9b:32:5f:d4:3c:40:54:dc:11:2a:77:6e:4b:4d:7b:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8E:29:8E:3D:D6:C1:62:F3:80:B8:8F:7B:78:56:AF:18:9A:4B:CF
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4d:59:f6:80:68:bc:1b:29:b7:fd:1a:1b:dd:c5:e5:79:2a:
7e:59:b4:0b:d5:03:8f:77:89:3b:3c:6b:98:6d:e1:e4:1c:aa:
b6:04:04:41:0f:b3:b4:78:5b:ab:17:bf:dc:98:77:a6:47:4d:
9e:d6:86:43:40:bc:4f:46:7f:c5:78:96:9e:ef:6f:54:d9:ff:
a3:09:c9:45:e3:96:71:72:52:4e:f2:5c:1b:74:bd:17:75:f5:
de:ff:32:42:a4:88:85:1f:48:7f:6c:30:f1:15:08:32:02:36:
2e:be:62:fe:af:13:70:bb:39:75:37:7f:6c:3f:32:90:25:75:
2a:79:ca:6e:86:1a:f3:3a:c2:ff:2d:3d:94:fc:8d:b2:68:7e:
c9:0b:b5:9c:82:6e:f5:87:8a:39:12:3d:ad:f5:b5:cf:d2:a4:
91:78:81:07:c1:ce:00:a0:e3:7d:79:64:65:db:73:22:02:4e:
9e:e6:34:af:a0:5d:40:09:e5:55:65:8d:e5:9a:df:0c:87:a2:
66:2d:e4:d5:55:06:d4:b1:c5:d9:ec:ce:0e:64:0f:11:fb:8a:
63:de:21:18:a3:88:78:31:89:7c:4b:14:31:91:6f:43:8e:8f:
ea:6c:aa:cd:89:b5:b5:b2:1d:25:9c:15:ec:b5:3a:aa:6e:65:
bc:24:8a:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu4r+toZM83P5aO5KgiPYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDVjYTExMWMwMDkzYjU2NTE0MjE1YmU0NjdiNTE1ZGRh
NTZjMDYwHhcNMjUwODIzMDcwMTM0WhcNMjUwODI0MDcwMTM0WjAzMTEwLwYDVQQD
Eyg3MjhlMjk4ZTNkZDZjMTYyZjM4MGI4OGY3Yjc4NTZhZjE4OWE0YmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTwL6p4OaPia7yCFrfjvrfV7ea76
C/QIpOIdSEIrCSDsWoPpyUjUG4Cw/6kVunUvlQVqENbRcDXJDA2MGswuGrgVjbdK
27abRHjNMDJ7W5CheSlUBgx1h3x6vtanRAeRNTpnj95/8BW1CN1ZZIJY0s9p/jo2
b425NWvaM/+k0tmqkJXX0f7cdhoTuuHlfO+POqK00HH+wvwg6ICE9mvC6E+nG4Yf
iuNoompJJQLpGatpzrXsTc0xqUQo7sIb2FESkzYP3TzRqGO8EaoiSNAA8Z9bmlp4
hwvdeDZU5gmtcJXAAguIwEUIuoegRSlYRSCbMl/UPEBU3BEqd25LTXv2zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKOKY491sFi84C4j3t4Vq8YmkvPMB8GA1UdIwQY
MBaAFAwFyhEcAJO1ZRQhW+RntRXdpWwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQt
NmEzNjcwNWJiYTZmLzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQtNmEzNjcwNWJiYTZm
LzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdE1Z9oBo
vBspt/0aG93F5Xkqflm0C9UDj3eJOzxrmG3h5ByqtgQEQQ+ztHhbqxe/3Jh3pkdN
ntaGQ0C8T0Z/xXiWnu9vVNn/ownJReOWcXJSTvJcG3S9F3X13v8yQqSIhR9If2ww
8RUIMgI2Lr5i/q8TcLs5dTd/bD8ykCV1KnnKboYa8zrC/y09lPyNsmh+yQu1nIJu
9YeKORI9rfW1z9KkkXiBB8HOAKDjfXlkZdtzIgJOnuY0r6BdQAnlVWWN5ZrfDIei
Zi3k1VUG1LHF2ezODmQPEfuKY94hGKOIeDGJfEsUMZFvQ46P6myqzYm1tbIdJZwV
7LU6qm5lvCSKbg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:15 2025 by rpki-client