Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: A6MshjmvkH82PnV/oMUa4PrzF1pNWYHbCAjX3HsJ8TA=
Subject key identifier: FF:74:ED:36:D9:98:A2:46:95:5F:3C:C5:25:DA:63:8F:09:3F:12:2D
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 01984DB05D28BCBDD1CD1C07CFCBC4797B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 12B9
Signing time: Sun 27 Jul 2025 21:01:00 +0000
Manifest this update: Sun 27 Jul 2025 21:01:00 +0000
Manifest next update: Mon 28 Jul 2025 21:01:00 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: 0T0tjizkSSGmHhJSvdTvWVb/k1TImlosKzacXhETDaI=)
2: l2z6jen0BvB90JFFcv4xMvXKDU4.roa (hash: 3LW90buItGbBk8vwyzdEvNmU4J6IAwriJoEjk0Q8hlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:b0:5d:28:bc:bd:d1:cd:1c:07:cf:cb:c4:79:7b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Jul 27 21:01:00 2025 GMT
Not After : Jul 28 21:01:00 2025 GMT
Subject: CN=ff74ed36d998a246955f3cc525da638f093f122d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:df:00:2e:3b:e9:88:99:79:4b:ac:ec:d8:
73:79:25:8d:2c:39:bf:72:97:c7:5f:64:96:31:61:
34:04:68:55:61:84:2d:23:93:a7:b7:fe:dd:83:c9:
22:f3:d5:8d:4e:2c:c2:de:f3:a3:59:c8:05:1f:5c:
3f:88:95:2f:32:e3:9f:c7:ea:ff:a1:2d:4d:03:2a:
6d:c4:1b:77:01:05:9a:16:93:ea:3c:3d:b5:5a:35:
1e:af:02:86:37:22:26:57:d7:da:c6:96:88:74:0a:
1b:4e:1b:e8:65:57:36:8c:ed:87:0a:88:32:a1:8f:
c8:77:79:88:ca:6e:b3:8e:9b:08:ee:9e:7f:ab:f2:
8d:d8:a7:db:d3:a8:09:23:43:0b:5e:99:38:dc:47:
f6:b5:a3:96:c6:2c:f5:68:0e:bf:12:6a:16:56:d1:
87:9b:96:23:43:b5:be:9d:1b:63:7d:0c:f5:3e:72:
b7:49:de:fb:29:0d:e3:aa:99:93:39:10:96:4f:a9:
e0:ec:e4:16:6d:85:cc:d0:ea:d8:73:8a:16:8b:1b:
b9:ca:a0:79:6c:58:b6:1a:a9:71:48:af:9c:d0:da:
76:8e:b8:90:d9:54:aa:1d:eb:00:11:8b:22:12:9f:
1f:3f:85:11:af:57:72:b6:79:3c:31:c9:ec:11:53:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:74:ED:36:D9:98:A2:46:95:5F:3C:C5:25:DA:63:8F:09:3F:12:2D
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:6c:6a:a8:c3:4f:79:07:cd:77:7b:a0:bb:8d:ff:29:03:dc:
db:52:23:4c:38:36:1c:f7:b8:4a:cf:f0:c6:5c:69:8f:10:ce:
3f:a8:2e:8d:8e:02:5e:92:56:10:2f:07:70:27:26:8a:64:09:
b6:04:63:f0:53:5f:c7:75:17:f6:9b:47:12:79:fd:c3:8e:c7:
cb:5a:12:42:35:c4:49:83:d9:0b:47:e4:db:b0:18:2b:a0:98:
9a:a0:53:19:05:b6:81:51:d2:b8:df:4b:65:ac:d2:66:2c:9a:
f3:bc:72:d5:d4:48:a1:fb:fa:37:f1:c1:e5:f3:a8:46:62:1c:
68:e9:da:34:c8:d5:7e:75:f3:97:e0:92:5e:b9:8b:57:43:3e:
33:f5:ff:29:c5:61:e1:f8:22:86:e0:54:f8:84:c9:d0:68:92:
ca:f1:d7:4f:a5:78:16:8e:0d:39:81:d3:cb:88:ca:3d:37:ef:
f2:9f:5d:0e:93:89:2c:bc:79:d5:48:10:ef:e2:c7:39:32:db:
96:f2:9a:9c:c5:54:27:67:3b:77:32:18:ef:58:c0:89:20:40:
70:44:f9:b1:9d:ec:94:8c:d8:0b:66:b7:da:ff:17:f4:27:55:
d5:22:2e:f6:85:bb:84:9e:ae:11:70:95:10:51:35:22:de:c8:
44:d6:10:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhNsF0ovL3RzRwHz8vEeXtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMzE2NTUwMjNiZDE0MTczMWQ1NmZiODQ1M2ZmMDUxNGY3
Mjg4NjUwHhcNMjUwNzI3MjEwMTAwWhcNMjUwNzI4MjEwMTAwWjAzMTEwLwYDVQQD
EyhmZjc0ZWQzNmQ5OThhMjQ2OTU1ZjNjYzUyNWRhNjM4ZjA5M2YxMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcrfAC476YiZeUus7NhzeSWNLDm/
cpfHX2SWMWE0BGhVYYQtI5Ont/7dg8ki89WNTizC3vOjWcgFH1w/iJUvMuOfx+r/
oS1NAyptxBt3AQWaFpPqPD21WjUerwKGNyImV9faxpaIdAobThvoZVc2jO2HCogy
oY/Id3mIym6zjpsI7p5/q/KN2Kfb06gJI0MLXpk43Ef2taOWxiz1aA6/EmoWVtGH
m5YjQ7W+nRtjfQz1PnK3Sd77KQ3jqpmTORCWT6ng7OQWbYXM0OrYc4oWixu5yqB5
bFi2GqlxSK+c0Np2jriQ2VSqHesAEYsiEp8fP4URr1dytnk8McnsEVP6nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP907TbZmKJGlV88xSXaY48JPxItMB8GA1UdIwQY
MBaAFNAxZVAjvRQXMdVvuEU/8FFPcohlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5Nzkt
ZDhiZDJmNTZiYzhjLzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5NzktZDhiZDJmNTZiYzhj
LzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwmxqqMNP
eQfNd3ugu43/KQPc21IjTDg2HPe4Ss/wxlxpjxDOP6gujY4CXpJWEC8HcCcmimQJ
tgRj8FNfx3UX9ptHEnn9w47Hy1oSQjXESYPZC0fk27AYK6CYmqBTGQW2gVHSuN9L
ZazSZiya87xy1dRIofv6N/HB5fOoRmIcaOnaNMjVfnXzl+CSXrmLV0M+M/X/KcVh
4fgihuBU+ITJ0GiSyvHXT6V4Fo4NOYHTy4jKPTfv8p9dDpOJLLx51UgQ7+LHOTLb
lvKanMVUJ2c7dzIY71jAiSBAcET5sZ3slIzYC2a32v8X9CdV1SIu9oW7hJ6uEXCV
EFE1It7IRNYQdw==
-----END CERTIFICATE-----
Generated at Mon Jul 28 01:16:00 2025 by rpki-client