Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
File: dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json)
Hash identifier: YDSdP3eYio6EVczMaW4Om1PAsCdJmz/kxVmqcrdxAk4=
Subject key identifier: 5D:5F:36:FC:55:EA:3B:4D:51:0B:EB:D4:C2:6D:C0:73:03:1E:5E:CB
Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
Certificate issuer: /CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Certificate serial: 019923A02FDF2195FC3354BE9B5E795139F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
Manifest number: 0DD2
Signing time: Sun 07 Sep 2025 10:02:04 +0000
Manifest this update: Sun 07 Sep 2025 10:02:04 +0000
Manifest next update: Mon 08 Sep 2025 10:02:04 +0000
Files and hashes: 1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: GopCAAVtMQNpcL0VpbE3Tx9D54U8O7TNQul3iZjrKsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:2f:df:21:95:fc:33:54:be:9b:5e:79:51:39:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Validity
Not Before: Sep 7 10:02:04 2025 GMT
Not After : Sep 8 10:02:04 2025 GMT
Subject: CN=5d5f36fc55ea3b4d510bebd4c26dc073031e5ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:55:57:37:28:43:ab:98:73:22:de:d3:8c:
02:39:0a:0a:cc:a4:42:3f:d7:cf:b3:77:14:72:bb:
2e:22:11:26:23:ec:1d:46:84:a7:f3:36:fa:db:b3:
8e:fb:43:2f:df:9a:1f:26:9a:8f:43:4e:b0:1e:8e:
ab:2e:bc:d0:5b:89:2d:9c:5f:ec:50:f0:83:d2:6c:
6d:2a:8f:56:df:c5:f7:2f:f2:19:3c:e2:64:60:6b:
c5:71:33:b5:7d:56:81:ff:8d:3e:8d:8d:9f:84:24:
e6:a9:49:d8:a4:53:3e:7c:21:f9:61:3b:7c:e1:9d:
95:ca:2d:9e:be:35:fb:e6:a3:2c:64:05:96:dd:c3:
80:7a:ba:ee:97:cc:60:0f:d9:dd:2d:50:14:d6:dd:
6f:75:f4:92:e4:95:f3:59:2e:fa:8f:0d:a9:e4:ed:
4a:f8:f4:ce:cd:e2:f2:55:55:00:12:e1:7c:a6:77:
c6:80:4c:30:e1:11:cd:6a:b2:15:c7:5d:54:3a:8e:
30:13:18:4f:1a:66:be:6a:57:eb:0c:a7:1e:e3:42:
58:85:fc:3c:c1:08:65:57:bf:9a:6e:60:ad:be:cf:
95:7a:ad:9c:83:f8:58:2c:35:36:df:3b:70:fd:0a:
2b:4b:3e:2a:12:6d:f9:4d:6c:f6:1a:39:ef:77:9b:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5F:36:FC:55:EA:3B:4D:51:0B:EB:D4:C2:6D:C0:73:03:1E:5E:CB
X509v3 Authority Key Identifier:
keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:52:2a:7b:77:a6:65:3c:56:7c:3c:aa:15:12:ba:f6:2f:f8:
30:cb:35:53:0b:da:32:cd:67:d6:f2:42:4b:5b:6b:1f:9a:7f:
3a:ef:35:b0:23:a7:6f:f4:5e:d7:81:6e:82:fa:0b:1b:9d:a1:
56:52:31:cc:5d:06:eb:51:9d:43:09:da:08:bd:5d:e6:c6:1c:
b9:18:85:05:35:c6:2d:3d:1e:a9:55:73:70:5a:9a:02:50:05:
f7:9b:52:41:aa:cc:63:22:a8:76:30:8e:84:fc:8c:d3:26:c9:
1e:d3:89:e3:f7:9a:ad:01:91:99:c3:46:05:24:96:f2:fe:e0:
d1:15:67:79:98:f0:6d:9a:76:f2:a7:7b:19:e7:7d:fe:c3:09:
54:8c:f7:44:91:c9:ef:fa:ba:46:e7:8d:0c:b0:10:2b:8a:e7:
bd:07:c0:79:74:de:02:ba:83:96:e6:df:14:0c:87:1f:82:fc:
22:4e:c6:56:c5:3d:29:21:5c:c1:81:2e:18:be:8c:83:eb:d7:
6d:5b:b1:89:61:fe:01:42:dc:f0:4c:a7:6b:cd:f8:c3:dc:8b:
f8:7e:87:59:77:4f:9c:f2:a7:f6:68:41:7d:ac:81:9a:f5:d0:
6b:07:c5:a8:9d:94:df:50:8f:23:11:ae:6e:0d:e0:3a:52:9c:
15:b8:b3:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoC/fIZX8M1S+m155UTnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjQxNzhhNTc0YTI2MDliYjZlZmYxY2M1MjFiNDUzZDc1
Yzg3ZGMwHhcNMjUwOTA3MTAwMjA0WhcNMjUwOTA4MTAwMjA0WjAzMTEwLwYDVQQD
Eyg1ZDVmMzZmYzU1ZWEzYjRkNTEwYmViZDRjMjZkYzA3MzAzMWU1ZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3RVVzcoQ6uYcyLe04wCOQoKzKRC
P9fPs3cUcrsuIhEmI+wdRoSn8zb627OO+0Mv35ofJpqPQ06wHo6rLrzQW4ktnF/s
UPCD0mxtKo9W38X3L/IZPOJkYGvFcTO1fVaB/40+jY2fhCTmqUnYpFM+fCH5YTt8
4Z2Vyi2evjX75qMsZAWW3cOAerrul8xgD9ndLVAU1t1vdfSS5JXzWS76jw2p5O1K
+PTOzeLyVVUAEuF8pnfGgEww4RHNarIVx11UOo4wExhPGma+alfrDKce40JYhfw8
wQhlV7+abmCtvs+Veq2cg/hYLDU23ztw/QorSz4qEm35TWz2Gjnvd5vGIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1fNvxV6jtNUQvr1MJtwHMDHl7LMB8GA1UdIwQY
MBaAFHVkF4pXSiYJu27/HMUhtFPXXIfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wY2M4NzUtNjEwZi00YWRkLWE3MTkt
M2NhYWY5MDVjZmM2LzEvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wY2M4NzUtNjEwZi00YWRkLWE3MTktM2NhYWY5MDVjZmM2
LzEvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlIqe3em
ZTxWfDyqFRK69i/4MMs1UwvaMs1n1vJCS1trH5p/Ou81sCOnb/Re14FugvoLG52h
VlIxzF0G61GdQwnaCL1d5sYcuRiFBTXGLT0eqVVzcFqaAlAF95tSQarMYyKodjCO
hPyM0ybJHtOJ4/earQGRmcNGBSSW8v7g0RVneZjwbZp28qd7Ged9/sMJVIz3RJHJ
7/q6RueNDLAQK4rnvQfAeXTeArqDlubfFAyHH4L8Ik7GVsU9KSFcwYEuGL6Mg+vX
bVuxiWH+AULc8Eyna834w9yL+H6HWXdPnPKn9mhBfayBmvXQawfFqJ2U31CPIxGu
bg3gOlKcFbizXg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:00 2025 by rpki-client