Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier: e2CtUWTeqrUpTY0fKhrR0NErhJqrAiHQXFbplUnGzB8=
Subject key identifier: B2:44:54:65:5C:E3:E5:02:C0:EB:CE:78:CB:E4:3F:A5:54:73:A2:4C
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 01992DB555F5AE5081B7AC796FB6A79A9FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number: 048B
Signing time: Tue 09 Sep 2025 09:01:22 +0000
Manifest this update: Tue 09 Sep 2025 09:01:22 +0000
Manifest next update: Wed 10 Sep 2025 09:01:22 +0000
Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: q3mWhyv2Urz5+l0KOuhSOIvSC1fUFgqMaby4PMU+hOM=)
2: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (hash: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b5:55:f5:ae:50:81:b7:ac:79:6f:b6:a7:9a:9f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Sep 9 09:01:22 2025 GMT
Not After : Sep 10 09:01:22 2025 GMT
Subject: CN=b24454655ce3e502c0ebce78cbe43fa55473a24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:7b:af:0d:30:a4:49:09:41:6e:68:fe:cc:
2d:93:3c:37:01:7a:eb:09:eb:99:98:95:5a:58:7c:
88:70:40:65:d3:a3:69:75:49:5a:77:a0:cb:c1:c5:
14:99:61:88:f8:34:97:40:bc:89:c1:ea:6c:ad:4d:
c6:7d:df:b3:5a:6d:34:52:e6:fd:a0:a3:b7:f0:3b:
a0:16:5c:63:7c:01:74:c9:7a:f8:c1:61:a2:a9:71:
b4:df:ef:2c:60:18:96:3a:df:9f:43:0e:07:bd:6d:
84:5e:b5:98:c0:08:67:2e:45:51:10:5d:ba:87:b7:
6b:f8:d7:48:96:21:5d:ca:cf:82:cb:25:d8:57:5c:
8a:90:9e:5c:79:2a:9f:55:d4:ba:c8:bd:36:93:fb:
32:01:14:ae:e5:9b:4a:ab:8f:4e:87:c1:60:f9:37:
f8:10:6b:36:c8:87:0e:1e:74:56:7d:2d:7e:de:b5:
93:d5:ba:bc:43:0a:8e:4a:46:c7:63:72:38:82:0f:
e1:aa:58:b5:e7:ee:9d:fa:8a:9d:d8:5c:f4:dd:f5:
30:e3:1b:d6:3b:a7:b0:fe:28:1a:3a:61:81:b4:d5:
bd:bd:7e:c3:af:7f:37:b6:ca:42:ea:0e:46:9f:5b:
5f:12:c2:5f:f2:2f:35:81:f3:15:e4:17:71:07:15:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:44:54:65:5C:E3:E5:02:C0:EB:CE:78:CB:E4:3F:A5:54:73:A2:4C
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:65:a3:47:a9:17:84:a5:f4:6a:84:5d:c6:15:cb:01:96:eb:
e2:b5:fb:03:5e:97:80:6a:e5:fe:c9:37:97:16:ee:ea:32:eb:
da:b7:39:04:70:aa:9a:e2:13:4e:87:c9:38:a7:33:ba:9b:c3:
77:49:f8:0c:24:75:97:4f:e3:c1:d3:e4:ab:b9:8f:d1:10:2c:
d0:b8:d0:cb:6c:69:5f:46:50:e4:b9:50:8f:25:f2:1f:72:61:
a6:04:c4:07:e5:6a:f0:b8:95:ba:b4:0f:3e:5b:06:cc:32:26:
5b:7a:b4:1c:bb:33:4f:19:4d:85:46:34:65:64:e7:c7:80:04:
da:61:63:2b:a8:34:28:be:5c:0d:1a:b9:11:f7:85:9c:66:37:
cf:87:de:de:08:9f:ca:6e:12:51:10:be:ad:35:99:e4:55:2b:
54:0b:e4:56:72:c5:d2:2a:7d:b8:3c:a5:21:b0:d2:7e:92:f0:
96:b7:73:7e:2e:9b:f6:e4:86:4c:d4:d1:02:49:03:fd:33:ba:
46:d7:12:ec:57:5b:2a:de:95:65:08:78:a7:28:25:ce:86:cd:
83:b5:c9:61:af:b4:76:e5:f7:b2:14:1d:30:e5:d1:31:39:9e:
ed:43:80:fb:74:b3:e1:e0:61:43:19:68:b7:a3:74:95:ce:5a:
89:24:3b:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkttVX1rlCBt6x5b7anmp/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MThjMjI3M2FkNzQzNjQ2NDliY2IyZTJkMzRmYjcwN2Y1
ZDViOTQwHhcNMjUwOTA5MDkwMTIyWhcNMjUwOTEwMDkwMTIyWjAzMTEwLwYDVQQD
EyhiMjQ0NTQ2NTVjZTNlNTAyYzBlYmNlNzhjYmU0M2ZhNTU0NzNhMjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3t7rw0wpEkJQW5o/swtkzw3AXrr
CeuZmJVaWHyIcEBl06NpdUlad6DLwcUUmWGI+DSXQLyJwepsrU3Gfd+zWm00Uub9
oKO38DugFlxjfAF0yXr4wWGiqXG03+8sYBiWOt+fQw4HvW2EXrWYwAhnLkVREF26
h7dr+NdIliFdys+CyyXYV1yKkJ5ceSqfVdS6yL02k/syARSu5ZtKq49Oh8Fg+Tf4
EGs2yIcOHnRWfS1+3rWT1bq8QwqOSkbHY3I4gg/hqli15+6d+oqd2Fz03fUw4xvW
O6ew/igaOmGBtNW9vX7Dr383tspC6g5Gn1tfEsJf8i81gfMV5BdxBxUJLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJEVGVc4+UCwOvOeMvkP6VUc6JMMB8GA1UdIwQY
MBaAFHUYwic610NkZJvLLi00+3B/XVuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUt
ZDNkMzBlYmMzNmFjLzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUtZDNkMzBlYmMzNmFj
LzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWWjR6kX
hKX0aoRdxhXLAZbr4rX7A16XgGrl/sk3lxbu6jLr2rc5BHCqmuITTofJOKczupvD
d0n4DCR1l0/jwdPkq7mP0RAs0LjQy2xpX0ZQ5LlQjyXyH3JhpgTEB+Vq8LiVurQP
PlsGzDImW3q0HLszTxlNhUY0ZWTnx4AE2mFjK6g0KL5cDRq5EfeFnGY3z4fe3gif
ym4SURC+rTWZ5FUrVAvkVnLF0ip9uDylIbDSfpLwlrdzfi6b9uSGTNTRAkkD/TO6
RtcS7FdbKt6VZQh4pyglzobNg7XJYa+0duX3shQdMOXRMTme7UOA+3Sz4eBhQxlo
t6N0lc5aiSQ7LQ==
-----END CERTIFICATE-----
Generated at Tue Sep 9 11:30:07 2025 by rpki-client