Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier: qXuD+OB4MgZpGcNZrVA1sismx5qNb3IaQoNHVcLg0+8=
Subject key identifier: 2A:F4:ED:14:84:18:27:58:08:C1:C1:FF:C1:80:A8:D8:9F:3F:A0:AE
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial: 0198D5F182689762F09DBBD4FFF2D9521AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number: 141C
Signing time: Sat 23 Aug 2025 08:00:31 +0000
Manifest this update: Sat 23 Aug 2025 08:00:31 +0000
Manifest next update: Sun 24 Aug 2025 08:00:31 +0000
Files and hashes: 1: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: hFRMneAIQ8pE5g72C4GV2r5snhPaE3MOIxDShKg7jd4=)
2: xjZ1XJhW_cFPR3oT-Y__-eT7BLU.roa (hash: iqLiaW6nsbh481RYQHU8cc/w97YkMP9DpENBWhWu8os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:82:68:97:62:f0:9d:bb:d4:ff:f2:d9:52:1a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Validity
Not Before: Aug 23 08:00:31 2025 GMT
Not After : Aug 24 08:00:31 2025 GMT
Subject: CN=2af4ed148418275808c1c1ffc180a8d89f3fa0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:b1:a9:4b:74:0b:21:9f:27:33:a0:6b:2f:
84:0b:c1:f0:f4:c1:05:58:99:82:81:6e:58:f3:f3:
e7:80:63:fe:4e:e2:38:0d:74:9c:87:b1:12:0a:8e:
3a:69:e6:b4:dd:ea:76:7b:fa:63:a4:d8:be:e4:57:
54:f8:0a:63:44:89:9f:8a:85:06:e7:09:ad:fe:fd:
4e:b0:ff:09:90:d0:f9:ad:12:b3:fa:21:e9:95:9b:
53:97:0f:43:09:ff:d3:cc:66:3f:1c:f1:ce:4e:dd:
99:f7:ba:8a:33:b1:50:93:55:30:11:22:08:f3:be:
68:91:22:f5:83:6c:8b:ad:bb:d5:33:e9:b6:49:6e:
6e:54:ae:27:3f:8e:41:0b:02:46:0c:87:78:db:d1:
82:aa:22:76:1a:ee:00:86:89:88:c6:b3:03:d1:54:
a2:ca:19:cb:25:6d:30:95:41:03:a0:5f:e3:b2:1b:
40:9e:5e:c6:2a:aa:89:96:7e:bd:f0:47:a9:d7:8e:
c3:01:92:40:3d:be:bd:d2:78:2d:4b:db:8e:f4:cd:
86:88:32:ec:8d:18:02:82:4f:50:e9:cc:c6:b7:23:
2a:6d:af:13:70:8a:16:92:02:28:34:ed:1b:39:57:
68:94:b0:41:dc:1b:c4:55:7e:9f:45:b6:b5:27:74:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:ED:14:84:18:27:58:08:C1:C1:FF:C1:80:A8:D8:9F:3F:A0:AE
X509v3 Authority Key Identifier:
keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5c:08:c5:36:c1:67:d9:39:a7:15:22:5e:0a:9c:7e:be:7e:
9a:a2:f7:02:d0:b8:b0:7a:a8:87:f1:f7:b5:a2:42:28:80:04:
83:18:c3:97:da:8c:df:6e:4e:b3:2d:0c:83:28:0e:ab:83:da:
41:44:74:a4:70:68:b9:57:86:cb:9a:4f:cc:77:a9:3b:48:7d:
81:3f:ed:ad:24:61:fe:25:e8:d1:34:bb:85:4a:6b:a2:48:0c:
1a:f0:43:85:60:f2:b1:cd:f3:8a:41:47:da:3d:57:b8:34:98:
95:74:a3:d4:ef:03:bf:87:52:57:a6:3b:fc:5b:07:5f:5d:83:
84:77:d5:00:54:bd:d0:4e:62:8e:ed:8c:37:34:05:e1:80:1e:
e3:c7:85:32:b7:17:81:9b:32:4d:e9:7d:48:7f:8c:dd:1f:f4:
d6:cc:c0:95:ad:67:da:36:46:ce:31:5c:8e:e8:15:c7:68:cb:
8e:b4:37:3e:e9:20:1c:61:d8:9d:95:e3:d5:96:37:a0:23:53:
a1:9b:55:1a:0f:ed:7c:4a:7e:b6:2d:dc:d1:69:bd:e6:dd:22:
00:dd:b9:0f:ef:a9:61:7a:6d:27:98:60:dc:19:89:60:1c:a9:
15:c7:5d:04:6b:9f:be:7c:dd:6b:af:90:3f:e9:cf:25:c3:ec:
10:79:40:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8YJol2LwnbvU//LZUhryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZWJiZmFhZWMyNDAzOWI0MWViYTU2YmIxY2FhNTE2Nzdk
MjFjNzAwHhcNMjUwODIzMDgwMDMxWhcNMjUwODI0MDgwMDMxWjAzMTEwLwYDVQQD
EygyYWY0ZWQxNDg0MTgyNzU4MDhjMWMxZmZjMTgwYThkODlmM2ZhMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHuxqUt0CyGfJzOgay+EC8Hw9MEF
WJmCgW5Y8/PngGP+TuI4DXSch7ESCo46aea03ep2e/pjpNi+5FdU+ApjRImfioUG
5wmt/v1OsP8JkND5rRKz+iHplZtTlw9DCf/TzGY/HPHOTt2Z97qKM7FQk1UwESII
875okSL1g2yLrbvVM+m2SW5uVK4nP45BCwJGDId429GCqiJ2Gu4AhomIxrMD0VSi
yhnLJW0wlUEDoF/jshtAnl7GKqqJln698Eep147DAZJAPb690ngtS9uO9M2GiDLs
jRgCgk9Q6czGtyMqba8TcIoWkgIoNO0bOVdolLBB3BvEVX6fRba1J3Qr9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr07RSEGCdYCMHB/8GAqNifP6CuMB8GA1UdIwQY
MBaAFAzrv6rsJAObQeula7HKpRZ30hxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jMjNjYTMtYjMyNy00ZWQyLWE1YmIt
YjE2ZTY4M2RiZTI3LzEvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9jMjNjYTMtYjMyNy00ZWQyLWE1YmItYjE2ZTY4M2RiZTI3
LzEvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1wIxTbB
Z9k5pxUiXgqcfr5+mqL3AtC4sHqoh/H3taJCKIAEgxjDl9qM325Osy0MgygOq4Pa
QUR0pHBouVeGy5pPzHepO0h9gT/trSRh/iXo0TS7hUprokgMGvBDhWDysc3zikFH
2j1XuDSYlXSj1O8Dv4dSV6Y7/FsHX12DhHfVAFS90E5iju2MNzQF4YAe48eFMrcX
gZsyTel9SH+M3R/01szAla1n2jZGzjFcjugVx2jLjrQ3PukgHGHYnZXj1ZY3oCNT
oZtVGg/tfEp+ti3c0Wm95t0iAN25D++pYXptJ5hg3BmJYBypFcddBGufvnzda6+Q
P+nPJcPsEHlAkw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:04:48 2025 by rpki-client