Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: 1PZJZZ/kQZBweqjMu6gLveD+Xr9WUGITDWPqzAVnWuA=
Subject key identifier: 43:B8:6C:7F:82:FC:0E:53:EF:F9:83:18:C4:7F:B5:49:4E:42:BB:FA
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 01984B54C5130923DC825FB9190DCF238EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 10:01:43 +0000
Manifest this update: Sun 27 Jul 2025 10:01:43 +0000
Manifest next update: Mon 28 Jul 2025 10:01:43 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: 6nU7IINo+Y2Emx88aFQCIhrz+NDwtcpQx36ys9ujR2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:c5:13:09:23:dc:82:5f:b9:19:0d:cf:23:8e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Jul 27 10:01:43 2025 GMT
Not After : Jul 28 10:01:43 2025 GMT
Subject: CN=43b86c7f82fc0e53eff98318c47fb5494e42bbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c3:a2:61:53:2c:35:5f:ff:e8:9d:59:61:d5:
32:25:0e:cb:37:40:0a:d1:2d:35:3b:c7:7c:20:70:
cd:68:77:bb:13:80:30:f0:ca:54:0a:ee:49:a6:54:
af:6b:3a:ae:74:e1:7d:5d:b4:29:1c:05:e5:a2:f3:
ca:10:91:fc:a4:df:5e:26:26:ac:4d:ee:32:54:7f:
e4:cf:93:dc:65:62:af:20:66:82:20:a2:e1:97:24:
a8:3d:a8:7d:58:b4:dc:09:8c:38:5a:e0:b2:4a:69:
1c:07:b5:51:ab:ff:1b:a7:5f:23:24:36:27:9e:c3:
71:d1:ba:3c:b6:26:18:28:b7:67:e2:0c:ce:6c:e5:
ef:56:63:c9:57:ec:1a:67:e2:4c:38:2b:68:e0:04:
7c:d4:d6:16:b9:fe:d0:cc:54:18:9f:a1:54:19:e4:
9a:36:c4:60:ff:77:b1:55:69:89:30:20:91:c7:ef:
5d:28:8a:fe:fa:45:22:3e:63:da:3a:cb:e8:14:c3:
39:78:1f:01:0e:80:ca:a2:5a:ef:0a:87:a7:19:d9:
30:1e:3d:9c:a6:3a:bd:b6:2b:58:d4:cf:aa:12:33:
8e:7e:b2:73:dc:d3:56:ff:fa:c5:2d:b6:fe:7b:cd:
f9:d0:67:d1:f9:3e:2f:5e:ec:25:c2:1a:ef:54:a1:
64:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B8:6C:7F:82:FC:0E:53:EF:F9:83:18:C4:7F:B5:49:4E:42:BB:FA
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:eb:b0:e5:3f:47:e2:80:1b:90:99:ca:d4:3b:a3:b3:3b:25:
5b:61:2d:03:f0:bd:60:70:7c:81:56:9c:4d:25:46:cf:66:18:
c8:c4:b9:85:3e:9f:d2:7b:35:30:e2:02:ec:46:cb:2f:32:a7:
67:f8:56:bb:63:71:80:1c:f1:5b:28:32:f9:53:cf:12:94:5c:
03:2c:30:74:6b:2e:20:17:0b:c7:60:9e:19:93:31:0f:31:42:
3e:44:e7:91:b0:fd:62:05:d8:07:fc:4c:19:7e:54:e5:92:64:
2d:14:b7:62:e3:89:81:0c:a9:fa:a7:01:fd:d6:1f:52:d3:0c:
0e:66:72:b3:38:13:17:29:45:8a:76:0c:ec:2d:43:44:39:87:
74:31:65:d8:42:b7:f8:b5:a4:f3:23:09:8f:5b:3a:15:39:fe:
8a:c0:47:50:66:1d:58:fe:62:a5:15:ff:b8:9a:ff:c5:9c:dd:
ef:9c:8d:23:27:db:7d:20:74:40:55:82:6d:cd:3b:d2:4b:08:
8f:11:39:a9:6b:28:c4:90:de:6f:90:11:09:2f:d0:a4:c5:24:
a8:7b:76:96:a9:92:65:c6:e9:b1:a3:39:cc:0d:ed:63:47:86:
63:aa:0e:4b:ab:26:3d:0d:0a:39:eb:f5:c6:6f:40:bb:56:83:
07:ea:ce:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVMUTCSPcgl+5GQ3PI47nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDZmMWViNmRkZDRmZmVmZTE4MzgwMDMwMmJlNjM2Y2Zl
OTY1MzcwHhcNMjUwNzI3MTAwMTQzWhcNMjUwNzI4MTAwMTQzWjAzMTEwLwYDVQQD
Eyg0M2I4NmM3ZjgyZmMwZTUzZWZmOTgzMThjNDdmYjU0OTRlNDJiYmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MOiYVMsNV//6J1ZYdUyJQ7LN0AK
0S01O8d8IHDNaHe7E4Aw8MpUCu5JplSvazqudOF9XbQpHAXlovPKEJH8pN9eJias
Te4yVH/kz5PcZWKvIGaCIKLhlySoPah9WLTcCYw4WuCySmkcB7VRq/8bp18jJDYn
nsNx0bo8tiYYKLdn4gzObOXvVmPJV+waZ+JMOCto4AR81NYWuf7QzFQYn6FUGeSa
NsRg/3exVWmJMCCRx+9dKIr++kUiPmPaOsvoFMM5eB8BDoDKolrvCoenGdkwHj2c
pjq9titY1M+qEjOOfrJz3NNW//rFLbb+e8350GfR+T4vXuwlwhrvVKFkpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO4bH+C/A5T7/mDGMR/tUlOQrv6MB8GA1UdIwQY
MBaAFA5G8ett3U/+/hg4ADAr5jbP6WU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81NThhZmUtNDlmZS00MzhlLWJkMzct
ZjRmY2VkMzViMzUyLzEvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81NThhZmUtNDlmZS00MzhlLWJkMzctZjRmY2VkMzViMzUy
LzEvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuuw5T9H
4oAbkJnK1DujszslW2EtA/C9YHB8gVacTSVGz2YYyMS5hT6f0ns1MOIC7EbLLzKn
Z/hWu2NxgBzxWygy+VPPEpRcAywwdGsuIBcLx2CeGZMxDzFCPkTnkbD9YgXYB/xM
GX5U5ZJkLRS3YuOJgQyp+qcB/dYfUtMMDmZyszgTFylFinYM7C1DRDmHdDFl2EK3
+LWk8yMJj1s6FTn+isBHUGYdWP5ipRX/uJr/xZzd75yNIyfbfSB0QFWCbc070ksI
jxE5qWsoxJDeb5ARCS/QpMUkqHt2lqmSZcbpsaM5zA3tY0eGY6oOS6smPQ0KOev1
xm9Au1aDB+rOHw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:48 2025 by rpki-client