Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: kIiE3qWGi6fqWzCD0urhhJZFEg8JUXtSEji8KcMza9E=
Subject key identifier: 9B:51:89:98:A2:6C:6F:F4:D7:29:14:3E:A0:76:74:AD:7F:8B:60:6A
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 0198D54E1A003C4E499475B0B53306DECD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 0EB1
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: JEKwsGG2PWcBCO4aheAU/bqkq1iXHtbrEEt0muiEKks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1a:00:3c:4e:49:94:75:b0:b5:33:06:de:cd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=9b518998a26c6ff4d729143ea07674ad7f8b606a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e8:e2:74:5a:82:6c:da:e5:d6:1c:5e:ce:41:
8c:43:18:f5:6e:a1:41:4e:db:f0:f9:ba:37:98:36:
21:fd:5f:f6:37:53:e7:d3:34:0e:84:c8:b9:7a:39:
29:43:33:17:ac:bc:8e:2d:27:26:db:ef:60:ee:f4:
11:58:5d:9e:c6:1b:82:c3:d9:59:1b:6f:8f:b6:89:
6e:96:51:37:e3:70:e3:65:d8:b7:2f:cb:2a:f1:8f:
d2:9b:eb:5d:6b:5e:d7:99:ee:4f:8a:e2:c5:c7:ea:
92:64:20:ca:05:ab:b0:66:b4:0e:d4:1e:5f:ec:45:
63:6a:79:d8:e4:b3:a2:db:6b:46:ce:32:23:f7:5f:
dc:1c:3e:72:17:7d:e6:7a:c2:ca:36:28:7a:5d:f6:
0d:90:f2:c4:63:9b:9f:24:87:2c:fc:9b:8f:5c:59:
20:d8:82:8d:4f:27:0a:7a:13:a2:c2:87:68:96:27:
c9:86:cc:94:20:fb:59:e1:fc:8d:4a:10:88:c6:93:
60:3d:31:44:3e:87:54:93:63:02:d3:f9:09:a6:3b:
1c:df:4d:a7:49:1e:7e:26:8b:db:3c:84:df:14:35:
03:f3:c0:55:d6:2f:f3:68:a7:25:2e:cd:e5:a9:ce:
5b:ab:c9:95:2e:5f:41:e1:18:20:95:28:7f:e2:ce:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:51:89:98:A2:6C:6F:F4:D7:29:14:3E:A0:76:74:AD:7F:8B:60:6A
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:63:64:02:c7:24:27:c5:c0:8e:18:f4:aa:65:20:75:bb:5d:
6a:71:9e:01:4b:58:2a:b9:1c:10:86:f4:fb:7a:92:be:64:5e:
ab:91:10:4c:57:87:61:65:e3:b4:fa:ab:01:20:45:91:4a:4b:
a6:a6:83:08:36:0b:0f:6a:9d:99:61:ad:fb:c2:91:01:1e:75:
59:62:13:39:2b:8d:ef:fb:2d:af:2f:87:94:c7:85:ca:44:27:
76:30:b8:5a:6d:ad:ae:d7:e8:50:bf:2d:14:c1:13:bf:ce:e9:
06:42:b2:7c:9a:b5:d6:90:8e:ad:2f:b9:0f:73:c6:fd:be:89:
a1:3e:9c:bb:37:47:68:61:c5:89:6b:b2:c6:20:b1:c2:75:c7:
03:2d:e6:1b:3e:70:39:f2:e8:48:8e:54:0a:96:68:9d:5a:64:
b9:90:a6:8b:a1:5a:fe:73:9c:f8:c4:9b:85:07:0c:54:55:c8:
2d:49:b6:de:37:71:9f:2d:80:10:98:20:f3:31:4a:37:3c:20:
a4:87:44:3e:72:02:42:ad:14:b6:7b:00:ad:8a:32:31:e6:f8:
d8:40:f4:ce:b6:63:e8:db:d7:03:1c:c0:6e:83:82:54:e1:fa:
f0:9c:49:7b:9a:0e:08:ac:f9:a5:54:9b:02:04:a0:c0:23:00:
a9:cc:ed:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVThoAPE5JlHWwtTMG3s1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTFkZmQ0NTY4MzQyODljMWZkMDNhMGZlZjFiNTJhNWVm
ZDFkOTEwHhcNMjUwODIzMDUwMjAyWhcNMjUwODI0MDUwMjAyWjAzMTEwLwYDVQQD
Eyg5YjUxODk5OGEyNmM2ZmY0ZDcyOTE0M2VhMDc2NzRhZDdmOGI2MDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkujidFqCbNrl1hxezkGMQxj1bqFB
Ttvw+bo3mDYh/V/2N1Pn0zQOhMi5ejkpQzMXrLyOLScm2+9g7vQRWF2exhuCw9lZ
G2+PtolullE343DjZdi3L8sq8Y/Sm+tda17Xme5PiuLFx+qSZCDKBauwZrQO1B5f
7EVjannY5LOi22tGzjIj91/cHD5yF33mesLKNih6XfYNkPLEY5ufJIcs/JuPXFkg
2IKNTycKehOiwodolifJhsyUIPtZ4fyNShCIxpNgPTFEPodUk2MC0/kJpjsc302n
SR5+JovbPITfFDUD88BV1i/zaKclLs3lqc5bq8mVLl9B4RgglSh/4s7ZfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtRiZiibG/01ykUPqB2dK1/i2BqMB8GA1UdIwQY
MBaAFA2R39RWg0KJwf0DoP7xtSpe/R2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mYmJlNDEtMTViNy00ZjZlLTllMDct
OGJjY2UzMDNiOTE5LzEvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mYmJlNDEtMTViNy00ZjZlLTllMDctOGJjY2UzMDNiOTE5
LzEvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWNkAsck
J8XAjhj0qmUgdbtdanGeAUtYKrkcEIb0+3qSvmReq5EQTFeHYWXjtPqrASBFkUpL
pqaDCDYLD2qdmWGt+8KRAR51WWITOSuN7/stry+HlMeFykQndjC4Wm2trtfoUL8t
FMETv87pBkKyfJq11pCOrS+5D3PG/b6JoT6cuzdHaGHFiWuyxiCxwnXHAy3mGz5w
OfLoSI5UCpZonVpkuZCmi6Fa/nOc+MSbhQcMVFXILUm23jdxny2AEJgg8zFKNzwg
pIdEPnICQq0UtnsArYoyMeb42ED0zrZj6NvXAxzAboOCVOH68JxJe5oOCKz5pVSb
AgSgwCMAqcztlQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:04 2025 by rpki-client