Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
File: DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json)
Hash identifier: gpjbSAA2tNYhRYIRXHxxHFvhocTzM/SEnLGP12s1N28=
Subject key identifier: 92:0E:A7:C5:63:51:6B:41:C7:74:D3:13:3D:5F:45:61:A1:E7:BE:97
Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
Certificate issuer: /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Certificate serial: 0198439A7CFCFA6CE3C22BFFBC0221F3CCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
Manifest number: 0CA2
Signing time: Fri 25 Jul 2025 22:00:54 +0000
Manifest this update: Fri 25 Jul 2025 22:00:54 +0000
Manifest next update: Sat 26 Jul 2025 22:00:54 +0000
Files and hashes: 1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: JZCY5nIK5SQplGh1OZnXtkUVsecf8Vu46DomiPtt/yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:7c:fc:fa:6c:e3:c2:2b:ff:bc:02:21:f3:cc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Validity
Not Before: Jul 25 22:00:54 2025 GMT
Not After : Jul 26 22:00:54 2025 GMT
Subject: CN=920ea7c563516b41c774d3133d5f4561a1e7be97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:93:dd:e5:40:2b:c5:48:1a:1e:27:ad:1a:
7e:56:8b:f8:e1:5a:7d:74:6c:11:47:06:49:fb:58:
86:66:2e:68:67:2e:04:ed:7d:5a:d9:67:52:13:f7:
51:18:69:eb:cf:5d:56:b3:86:e1:78:6a:4b:49:05:
65:65:f1:cb:b2:b9:bd:a0:f1:cf:e5:18:2e:de:77:
30:3e:e1:86:5d:7f:36:5c:84:34:30:98:07:a6:52:
eb:12:c8:e1:3d:41:58:a3:8b:9f:8f:5a:e7:aa:e5:
03:3a:53:30:1c:04:07:c8:92:ac:5b:6b:8e:2a:58:
e5:94:f0:99:03:b5:df:04:dc:29:71:d9:f6:1a:23:
22:1c:d5:a6:71:64:84:ce:41:37:6c:1c:ea:13:cb:
53:75:fa:4a:8f:01:4f:1b:f3:84:b0:d0:af:e4:a9:
46:03:8f:62:95:fe:75:e7:8b:f3:9b:36:74:6d:1c:
bc:69:4a:61:e6:e3:56:dc:07:d6:18:ab:0a:7a:12:
a9:af:d9:30:65:5c:08:0c:77:ba:02:0f:70:c5:bd:
5a:0b:24:3b:fd:30:42:95:d0:83:b9:35:7b:1f:03:
5a:cd:9d:2d:a8:09:44:45:c7:1a:c9:74:3f:98:ec:
4f:43:03:21:d7:bd:c4:79:66:5b:07:08:9d:6e:5a:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0E:A7:C5:63:51:6B:41:C7:74:D3:13:3D:5F:45:61:A1:E7:BE:97
X509v3 Authority Key Identifier:
keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d1:c7:5a:8c:c2:68:21:61:95:d1:97:bd:c8:3f:a7:09:c7:
64:35:3e:91:bf:db:45:ea:a6:7b:17:23:fc:c8:7a:02:21:93:
d5:72:de:7b:4a:f0:21:73:48:0c:94:4d:3d:64:44:e5:bb:05:
92:71:75:21:04:6a:75:9a:c0:69:0a:58:83:94:2b:a9:4d:af:
74:8b:cf:9e:b2:bf:9c:56:3a:dc:c2:3b:24:fc:87:1c:7f:75:
ad:51:7b:72:ff:5b:31:10:6a:0a:12:9b:e6:97:d7:3a:8c:33:
20:ca:74:60:6b:81:3d:78:0d:f5:44:f0:36:c7:94:9b:c4:b2:
a8:e8:67:4f:98:c2:68:d6:66:04:d9:a5:7a:42:a1:d9:92:28:
05:c3:c5:32:d7:fa:56:8a:80:17:25:a9:6e:4d:9d:f7:5c:da:
bb:ca:35:7a:38:fb:c7:8a:bb:c8:78:96:da:54:59:47:84:1d:
8d:09:c4:a4:e7:72:a7:a5:89:df:7e:ec:aa:5c:50:3a:74:2e:
ee:01:0d:ef:0f:33:7d:31:59:f2:0b:1c:1a:6f:61:20:26:37:
2d:b6:40:e4:78:c3:f1:8d:64:49:37:39:90:9f:9d:0f:3f:7c:
f2:2e:38:91:43:45:a9:df:19:01:be:23:29:5a:ff:ec:d6:c3:
90:44:70:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhDmnz8+mzjwiv/vAIh88zHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMWVlZmIxOTIzOGJlOWFlZTM3OTk1YmVmNGQyYWZkMTc5
ZmYyY2MwHhcNMjUwNzI1MjIwMDU0WhcNMjUwNzI2MjIwMDU0WjAzMTEwLwYDVQQD
Eyg5MjBlYTdjNTYzNTE2YjQxYzc3NGQzMTMzZDVmNDU2MWExZTdiZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOGT3eVAK8VIGh4nrRp+Vov44Vp9
dGwRRwZJ+1iGZi5oZy4E7X1a2WdSE/dRGGnrz11Ws4bheGpLSQVlZfHLsrm9oPHP
5Rgu3ncwPuGGXX82XIQ0MJgHplLrEsjhPUFYo4ufj1rnquUDOlMwHAQHyJKsW2uO
KljllPCZA7XfBNwpcdn2GiMiHNWmcWSEzkE3bBzqE8tTdfpKjwFPG/OEsNCv5KlG
A49ilf5154vzmzZ0bRy8aUph5uNW3AfWGKsKehKpr9kwZVwIDHe6Ag9wxb1aCyQ7
/TBCldCDuTV7HwNazZ0tqAlERccayXQ/mOxPQwMh173EeWZbBwidblpRNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIOp8VjUWtBx3TTEz1fRWGh576XMB8GA1UdIwQY
MBaAFA0e77GSOL6a7jeZW+9NKv0Xn/LMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lOTQ0N2EtMWU1Yy00YjFlLTgwNTYt
MzQ0OWYzM2ExODQyLzEvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lOTQ0N2EtMWU1Yy00YjFlLTgwNTYtMzQ0OWYzM2ExODQy
LzEvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtHHWozC
aCFhldGXvcg/pwnHZDU+kb/bReqmexcj/Mh6AiGT1XLee0rwIXNIDJRNPWRE5bsF
knF1IQRqdZrAaQpYg5QrqU2vdIvPnrK/nFY63MI7JPyHHH91rVF7cv9bMRBqChKb
5pfXOowzIMp0YGuBPXgN9UTwNseUm8SyqOhnT5jCaNZmBNmlekKh2ZIoBcPFMtf6
VoqAFyWpbk2d91zau8o1ejj7x4q7yHiW2lRZR4QdjQnEpOdyp6WJ337sqlxQOnQu
7gEN7w8zfTFZ8gscGm9hICY3LbZA5HjD8Y1kSTc5kJ+dDz988i44kUNFqd8ZAb4j
KVr/7NbDkERwOg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:35:53 2025 by rpki-client