Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json)
Hash identifier: hOS93tv5BoVHEaC4hZ94fqMbosIk4g/nvxCsM2CwB3k=
Subject key identifier: B6:AB:F9:18:B6:9A:E5:77:6D:28:93:F9:7A:D9:4D:A8:05:FD:0E:25
Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Certificate serial: 019847E503465BD9C54AC3364BF130FDF93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 18:00:47 +0000
Manifest this update: Sat 26 Jul 2025 18:00:47 +0000
Manifest next update: Sun 27 Jul 2025 18:00:47 +0000
Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: zQyCDhE1XSSSsGFGqPhaI75FZDZa73QBBmc+zhB9Zw0=)
2: dl4ybKFr-mjNJ3kV-IfkyZfwx44.roa (hash: /jV0BskL+oSsTISEbyqI8M7CEUXp7IlGvyGOrlDZbmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:03:46:5b:d9:c5:4a:c3:36:4b:f1:30:fd:f9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c
Validity
Not Before: Jul 26 18:00:47 2025 GMT
Not After : Jul 27 18:00:47 2025 GMT
Subject: CN=b6abf918b69ae5776d2893f97ad94da805fd0e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:fe:78:c8:e2:56:11:a0:c8:31:55:2c:5e:
41:e8:e1:d1:a1:6d:e5:ab:77:65:24:30:ad:70:7d:
ef:01:04:17:a9:bb:5e:84:e2:37:eb:17:d9:54:45:
18:97:8d:8f:9f:4a:a7:2b:e4:6d:18:b1:98:3c:39:
7f:f1:63:59:70:13:87:c1:4b:e7:ad:9a:68:53:7f:
ce:a7:1f:8c:f7:9f:a1:67:d8:62:27:32:4d:85:26:
92:42:31:5e:69:55:b1:34:f3:0b:a7:ee:3e:79:cf:
eb:c0:f0:d0:b5:b6:2d:2f:ca:be:ec:fe:64:81:a4:
30:66:ed:2b:f2:64:2f:18:15:3d:2d:af:02:e6:38:
c3:27:4f:95:fe:87:4e:83:b5:96:4f:7c:28:b8:16:
ee:cd:fe:18:5d:56:32:bd:9d:90:7a:30:37:f4:53:
ef:37:7d:2a:5d:48:ae:c6:41:58:85:8c:4a:ad:b7:
35:fc:12:f7:ac:6a:1e:89:1f:2c:89:b1:7f:8b:49:
a1:b5:99:f8:9c:69:3e:26:dc:75:ae:00:4b:88:1b:
40:c7:de:6a:aa:d8:5b:fc:de:27:83:34:2e:81:5a:
66:a5:97:84:bc:02:1b:13:ee:32:7f:00:95:96:32:
d4:d4:ad:b3:12:fa:49:e3:34:20:c5:f9:98:8b:70:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AB:F9:18:B6:9A:E5:77:6D:28:93:F9:7A:D9:4D:A8:05:FD:0E:25
X509v3 Authority Key Identifier:
keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:86:3b:00:33:00:5d:64:59:12:97:b9:87:12:2f:2b:83:f0:
bc:5e:99:13:e1:e7:e7:46:1c:ce:a4:40:3b:40:f1:0e:ba:e3:
81:be:e0:99:62:2a:7d:4a:11:f9:3f:5e:11:09:82:a5:26:c3:
93:f1:7e:4a:ae:a7:07:bf:ca:43:fc:2e:b6:36:9e:af:98:6a:
b0:04:b8:67:08:11:17:69:34:1c:bb:a0:fc:0a:64:c4:dd:12:
3b:4b:06:03:ce:f4:ba:b7:c5:77:8d:56:80:a4:2a:2a:16:ff:
81:50:6d:fd:4d:d5:5e:bf:e7:72:8e:91:15:20:98:8b:9e:24:
b0:33:09:9c:d0:7c:06:99:87:76:5d:80:09:4f:1b:3d:56:05:
c4:eb:17:5d:82:3f:3b:02:ea:d0:dd:4f:ed:9f:2a:d2:c9:4b:
56:70:19:54:e8:80:5f:ff:aa:a4:89:3f:9c:4e:c3:70:09:f6:
e5:7b:b9:c0:f9:59:b7:92:b2:6e:77:d9:fc:a9:02:d4:45:b3:
5d:e0:b4:7d:3a:60:26:b6:67:13:31:3d:4c:d3:63:ab:b7:2f:
1c:73:d7:9a:a6:a7:32:d8:5e:a0:24:22:a8:96:01:1a:12:a8:
17:67:fb:98:36:9f:b5:98:ed:bf:cc:d3:3b:02:06:d6:d1:18:
a9:85:10:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5QNGW9nFSsM2S/Ew/fk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZTI5NmI2MGMwMzhjZGM2YmZlZjRjMDYwYjE0MDYxNjRl
Yzg2OGMwHhcNMjUwNzI2MTgwMDQ3WhcNMjUwNzI3MTgwMDQ3WjAzMTEwLwYDVQQD
EyhiNmFiZjkxOGI2OWFlNTc3NmQyODkzZjk3YWQ5NGRhODA1ZmQwZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJr+eMjiVhGgyDFVLF5B6OHRoW3l
q3dlJDCtcH3vAQQXqbtehOI36xfZVEUYl42Pn0qnK+RtGLGYPDl/8WNZcBOHwUvn
rZpoU3/Opx+M95+hZ9hiJzJNhSaSQjFeaVWxNPMLp+4+ec/rwPDQtbYtL8q+7P5k
gaQwZu0r8mQvGBU9La8C5jjDJ0+V/odOg7WWT3wouBbuzf4YXVYyvZ2QejA39FPv
N30qXUiuxkFYhYxKrbc1/BL3rGoeiR8sibF/i0mhtZn4nGk+Jtx1rgBLiBtAx95q
qthb/N4ngzQugVpmpZeEvAIbE+4yfwCVljLU1K2zEvpJ4zQgxfmYi3DHhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLar+Ri2muV3bSiT+XrZTagF/Q4lMB8GA1UdIwQY
MBaAFA7ilrYMA4zca/70wGCxQGFk7IaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHVLV3Rnd0RqTnhyX3ZUQVlMRkFZV1RzaG93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wY2QwZTctMmRhOS00MDJiLThhNDkt
ZjVjODA1ZjAyNTViLzEvRHVLV3Rnd0RqTnhyX3ZUQVlMRkFZV1RzaG93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wY2QwZTctMmRhOS00MDJiLThhNDktZjVjODA1ZjAyNTVi
LzEvRHVLV3Rnd0RqTnhyX3ZUQVlMRkFZV1RzaG93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIY7ADMA
XWRZEpe5hxIvK4PwvF6ZE+Hn50YczqRAO0DxDrrjgb7gmWIqfUoR+T9eEQmCpSbD
k/F+Sq6nB7/KQ/wutjaer5hqsAS4ZwgRF2k0HLug/ApkxN0SO0sGA870urfFd41W
gKQqKhb/gVBt/U3VXr/nco6RFSCYi54ksDMJnNB8BpmHdl2ACU8bPVYFxOsXXYI/
OwLq0N1P7Z8q0slLVnAZVOiAX/+qpIk/nE7DcAn25Xu5wPlZt5KybnfZ/KkC1EWz
XeC0fTpgJrZnEzE9TNNjq7cvHHPXmqanMtheoCQiqJYBGhKoF2f7mDaftZjtv8zT
OwIG1tEYqYUQ1Q==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:00 2025 by rpki-client