Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
File: 0Dxztg8hA-47Kiw8vpIOISqS7mU.mft (raw, json)
Hash identifier: ioTnPq0r9Mvqt2IjBfj9uuxArg9ApQfsZS+17lD0PqQ=
Subject key identifier: 25:00:1B:21:A4:28:F5:91:12:36:C2:3E:34:3E:A2:CE:DA:DC:F8:91
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial: 0199239FD65CB0694D70FE5F753C1D4417DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
Manifest number: 05DF
Signing time: Sun 07 Sep 2025 10:01:41 +0000
Manifest this update: Sun 07 Sep 2025 10:01:41 +0000
Manifest next update: Mon 08 Sep 2025 10:01:41 +0000
Files and hashes: 1: 0Dxztg8hA-47Kiw8vpIOISqS7mU.crl (hash: yT37GOQHQx1PjNpmNcv3zZX84Uuj0R/+grsLzVqqKXQ=)
2: tDVvrqtQQCwl2jE6yV_v8vBSPyI.roa (hash: qiENM6J31Gqa4rOEk4JnN/zBbLfxSy0s2Ydx5h5QGk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:d6:5c:b0:69:4d:70:fe:5f:75:3c:1d:44:17:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Validity
Not Before: Sep 7 10:01:41 2025 GMT
Not After : Sep 8 10:01:41 2025 GMT
Subject: CN=25001b21a428f5911236c23e343ea2cedadcf891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:76:bf:ac:36:f4:8e:be:2d:1c:0c:73:b7:
b4:a7:88:2a:89:a1:1b:31:75:81:8e:94:fe:5a:5d:
ca:66:b2:df:5b:20:84:15:18:a6:6c:dd:98:ab:79:
97:a1:e6:6f:f5:43:5c:bb:88:4e:f2:9d:d1:28:04:
ba:b5:d1:44:36:a9:23:99:f4:0f:cd:d2:05:54:a5:
fb:d2:ed:32:e5:7e:72:2c:d8:ea:cd:c8:fe:3e:91:
53:9e:97:5e:58:27:d6:a7:40:fa:af:48:ab:23:42:
8e:99:57:80:c4:ac:d2:9e:2d:7d:53:dd:86:95:f8:
be:89:f3:79:8b:fc:5c:d4:13:21:a6:55:63:5b:03:
5c:ff:a4:5e:f4:af:b6:e8:18:7d:8e:0d:f0:84:c1:
ff:9a:d5:65:6a:b9:9e:da:5e:ca:2a:e8:df:1d:11:
b3:95:6d:f9:59:04:f4:b4:af:b1:2a:18:10:f0:1e:
fc:c6:f0:0b:c4:eb:73:af:d8:74:dd:25:26:f3:6e:
18:ac:70:15:42:bd:b5:e3:bf:c5:20:94:76:73:64:
d8:d1:14:68:ea:56:c6:f3:0d:c7:83:50:9c:65:9a:
2b:9e:d3:45:ec:f8:fb:a7:ab:59:68:85:fc:ef:5a:
73:7e:2b:40:90:c2:f7:72:39:f0:04:db:c4:97:3e:
91:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:00:1B:21:A4:28:F5:91:12:36:C2:3E:34:3E:A2:CE:DA:DC:F8:91
X509v3 Authority Key Identifier:
keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:74:43:52:72:2d:7f:fd:bc:af:81:1a:49:70:cf:00:45:7e:
ff:7a:63:0e:fa:3d:86:6b:54:54:21:25:fc:f0:7a:ed:05:59:
ad:df:96:85:b2:2b:d5:82:07:04:8b:c1:e1:ce:34:77:cf:b8:
81:18:3c:3b:f4:c2:12:c1:27:d6:d5:a3:ad:e6:17:79:21:fa:
4e:65:6e:10:22:9b:9c:3c:a4:4f:04:93:a6:c6:1d:4f:2f:d7:
08:3d:23:52:d8:f9:ac:f9:6f:83:8e:19:f3:e2:09:56:dc:aa:
b3:e9:8a:9e:68:13:5d:dc:0c:f4:4a:00:b7:0c:15:d6:b9:53:
59:c0:a2:df:88:ae:7c:37:c5:a4:36:8d:6f:0c:3e:b1:40:c7:
bd:01:ca:57:a0:50:f5:6e:19:c8:6a:d6:4f:cb:61:26:a3:42:
26:41:17:08:d6:a7:90:17:44:10:14:af:e2:15:9f:b2:70:3a:
da:37:e4:bc:ec:78:3b:49:a2:34:8e:a7:bb:a0:f7:f8:91:60:
92:61:29:94:0f:7a:b3:08:b8:fc:3b:7f:1c:a2:38:f3:66:a6:
c4:47:30:e2:3d:49:b7:25:a5:65:5b:84:ab:37:6c:f8:3a:07:
dc:a6:82:d2:5f:15:40:7e:2d:4c:5f:f9:a6:87:bd:66:73:b7:
40:ad:1c:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn9ZcsGlNcP5fdTwdRBfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwM2M3M2I2MGYyMTAzZWUzYjJhMmMzY2JlOTIwZTIxMmE5
MmVlNjUwHhcNMjUwOTA3MTAwMTQxWhcNMjUwOTA4MTAwMTQxWjAzMTEwLwYDVQQD
EygyNTAwMWIyMWE0MjhmNTkxMTIzNmMyM2UzNDNlYTJjZWRhZGNmODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFR2v6w29I6+LRwMc7e0p4gqiaEb
MXWBjpT+Wl3KZrLfWyCEFRimbN2Yq3mXoeZv9UNcu4hO8p3RKAS6tdFENqkjmfQP
zdIFVKX70u0y5X5yLNjqzcj+PpFTnpdeWCfWp0D6r0irI0KOmVeAxKzSni19U92G
lfi+ifN5i/xc1BMhplVjWwNc/6Re9K+26Bh9jg3whMH/mtVlarme2l7KKujfHRGz
lW35WQT0tK+xKhgQ8B78xvALxOtzr9h03SUm824YrHAVQr2147/FIJR2c2TY0RRo
6lbG8w3Hg1CcZZorntNF7Pj7p6tZaIX871pzfitAkML3cjnwBNvElz6R/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUAGyGkKPWREjbCPjQ+os7a3PiRMB8GA1UdIwQY
MBaAFNA8c7YPIQPuOyosPL6SDiEqku5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAt
NDZmMDA0YTE5NTkxLzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAtNDZmMDA0YTE5NTkx
LzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnRDUnIt
f/28r4EaSXDPAEV+/3pjDvo9hmtUVCEl/PB67QVZrd+WhbIr1YIHBIvB4c40d8+4
gRg8O/TCEsEn1tWjreYXeSH6TmVuECKbnDykTwSTpsYdTy/XCD0jUtj5rPlvg44Z
8+IJVtyqs+mKnmgTXdwM9EoAtwwV1rlTWcCi34iufDfFpDaNbww+sUDHvQHKV6BQ
9W4ZyGrWT8thJqNCJkEXCNankBdEEBSv4hWfsnA62jfkvOx4O0miNI6nu6D3+JFg
kmEplA96swi4/Dt/HKI482amxEcw4j1JtyWlZVuEqzds+DoH3KaC0l8VQH4tTF/5
poe9ZnO3QK0czA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:08 2025 by rpki-client