Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: 3zy7/BVqy1g8akukpx8UGDZHz+Fm0IdxWDnzXLWhaeA=
Subject key identifier: DB:3B:0B:59:1E:10:89:5F:88:D1:F2:4B:67:07:5D:08:57:52:85:0F
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 019849671861DF010938CDCDC364EB9ABA87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 15FC
Signing time: Sun 27 Jul 2025 01:02:29 +0000
Manifest this update: Sun 27 Jul 2025 01:02:29 +0000
Manifest next update: Mon 28 Jul 2025 01:02:29 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: kw5uKctFFym+Cc3aEweXnEDe5tP80semsItjl/clR7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:67:18:61:df:01:09:38:cd:cd:c3:64:eb:9a:ba:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Jul 27 01:02:29 2025 GMT
Not After : Jul 28 01:02:29 2025 GMT
Subject: CN=db3b0b591e10895f88d1f24b67075d085752850f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:94:19:28:fc:10:15:d9:8b:06:3e:a6:92:
bc:15:66:b2:dc:cb:c5:5c:fa:4e:a2:65:4d:94:d6:
5d:99:d2:db:26:3e:d5:37:53:4e:9c:23:ea:bc:e6:
48:db:77:7d:8f:1f:d8:f7:33:7c:4b:d2:7b:1f:6f:
14:3f:e9:b8:75:f0:d9:f9:b9:50:57:62:82:14:29:
60:ba:69:d3:fe:f4:10:51:f3:b4:48:3c:98:5e:07:
e5:23:ee:0b:d8:ad:8f:dc:9f:68:fb:6e:e4:c8:d8:
ea:70:35:57:59:44:dd:4e:e1:a4:c9:13:9e:cd:6c:
0c:90:39:24:ca:a4:ba:99:ab:9d:4f:a0:93:ff:8e:
0f:98:9c:5d:03:f3:20:41:81:7b:14:f8:96:e3:53:
93:0e:4d:36:26:64:b6:31:19:1d:a7:5e:6a:6e:49:
95:59:4e:82:ad:96:4b:dd:dd:84:67:ae:23:1a:1f:
7f:10:68:63:4e:ae:66:ec:60:73:01:de:bb:10:34:
d7:92:2f:42:9b:23:57:f3:a7:5b:3f:86:44:74:aa:
3d:62:2d:a6:14:d3:db:4f:4f:c6:01:a0:37:79:a3:
24:ee:11:94:28:39:59:c0:46:6a:a6:7e:36:ab:83:
8a:e3:0f:bb:50:8b:94:97:ae:75:d8:b9:b9:0e:24:
11:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3B:0B:59:1E:10:89:5F:88:D1:F2:4B:67:07:5D:08:57:52:85:0F
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a9:88:e5:fe:fa:05:03:09:95:54:f6:26:f6:26:09:b2:72:
63:6d:ed:92:5a:23:01:cc:1a:a6:c5:29:97:67:6e:6a:f3:8b:
b1:4f:bf:ac:89:c6:58:d6:4e:2e:c7:c3:80:46:51:72:bd:e9:
bd:91:6b:3d:18:f2:3e:4f:04:7d:ef:5b:3d:66:1d:99:84:35:
0c:8f:14:00:ea:c1:b5:44:90:03:01:75:a2:a8:28:ef:e9:a5:
4c:8f:1e:46:8e:d4:33:11:d5:8e:ea:47:b6:27:d0:17:8f:c6:
73:49:3f:96:0c:80:f2:15:32:9a:06:ae:27:f1:6a:4d:de:a7:
57:74:3c:f0:ef:b5:a5:f7:d8:d8:5a:d2:ca:24:8b:e1:df:cc:
b5:ee:bc:52:ec:f7:4a:1f:f9:38:6d:f6:92:fc:d8:11:a5:10:
00:0a:57:55:f5:84:fb:5a:4f:81:da:0e:4f:62:7b:a7:d9:4e:
a1:3b:8e:9a:f8:e0:2c:82:1f:f0:2a:f9:88:bf:8b:9d:07:ad:
a0:a8:d7:b5:9c:a9:a3:41:6b:45:4f:6e:55:b3:4e:41:fd:26:
c3:3a:8f:bf:0a:9a:32:e9:07:16:ec:20:95:9f:93:18:18:7e:
a5:45:86:3a:f9:34:f0:c4:2e:d7:0c:1f:84:04:eb:f3:8b:aa:
f0:94:9e:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZxhh3wEJOM3Nw2TrmrqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZDhjOWExNjE5NzJkNjhiNDQ1MzNlMGUzMWY1MWU0ZGNl
NWJhNzUwHhcNMjUwNzI3MDEwMjI5WhcNMjUwNzI4MDEwMjI5WjAzMTEwLwYDVQQD
EyhkYjNiMGI1OTFlMTA4OTVmODhkMWYyNGI2NzA3NWQwODU3NTI4NTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkCUGSj8EBXZiwY+ppK8FWay3MvF
XPpOomVNlNZdmdLbJj7VN1NOnCPqvOZI23d9jx/Y9zN8S9J7H28UP+m4dfDZ+blQ
V2KCFClgumnT/vQQUfO0SDyYXgflI+4L2K2P3J9o+27kyNjqcDVXWUTdTuGkyROe
zWwMkDkkyqS6maudT6CT/44PmJxdA/MgQYF7FPiW41OTDk02JmS2MRkdp15qbkmV
WU6CrZZL3d2EZ64jGh9/EGhjTq5m7GBzAd67EDTXki9CmyNX86dbP4ZEdKo9Yi2m
FNPbT0/GAaA3eaMk7hGUKDlZwEZqpn42q4OK4w+7UIuUl6512Lm5DiQRhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNs7C1keEIlfiNHyS2cHXQhXUoUPMB8GA1UdIwQY
MBaAFA7YyaFhly1otEUz4OMfUeTc5bp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTIt
ZGE4NWM1NzMyYjg1LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTItZGE4NWM1NzMyYjg1
LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKmI5f76
BQMJlVT2JvYmCbJyY23tklojAcwapsUpl2duavOLsU+/rInGWNZOLsfDgEZRcr3p
vZFrPRjyPk8Efe9bPWYdmYQ1DI8UAOrBtUSQAwF1oqgo7+mlTI8eRo7UMxHVjupH
tifQF4/Gc0k/lgyA8hUymgauJ/FqTd6nV3Q88O+1pffY2FrSyiSL4d/Mte68Uuz3
Sh/5OG32kvzYEaUQAApXVfWE+1pPgdoOT2J7p9lOoTuOmvjgLIIf8Cr5iL+LnQet
oKjXtZypo0FrRU9uVbNOQf0mwzqPvwqaMukHFuwglZ+TGBh+pUWGOvk08MQu1wwf
hATr84uq8JSeUw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:56:56 2025 by rpki-client