Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: O53uHy8yG/wOCw+8rYS51anFet05tHMiXb4jRhYt8QM=
Subject key identifier: A1:DF:03:8C:82:44:F3:53:F6:80:64:4A:55:EB:78:8B:23:BB:F5:FB
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 0199240CBC0945B56B3591572CB28B47F2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0C86
Signing time: Sun 07 Sep 2025 12:00:38 +0000
Manifest this update: Sun 07 Sep 2025 12:00:38 +0000
Manifest next update: Mon 08 Sep 2025 12:00:38 +0000
Files and hashes: 1: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: 5XM9LYJoo660JkXso9nt1Z4K61I+2tyZ8Te90JWXIRQ=)
2: VZiF-Ol32xpPvgDNLsgn8o2ll8Q.roa (hash: jUXaFXCucr/kHxmzz2/hS3PZ0b17pBJZMH+/2Ezk2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:bc:09:45:b5:6b:35:91:57:2c:b2:8b:47:f2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Sep 7 12:00:38 2025 GMT
Not After : Sep 8 12:00:38 2025 GMT
Subject: CN=a1df038c8244f353f680644a55eb788b23bbf5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:b5:fb:9e:cf:74:99:bd:51:0f:f4:7f:10:
dc:9b:af:17:82:d6:f6:24:2e:99:46:f7:4b:8a:94:
d7:4a:08:77:89:a7:0e:ed:ae:59:64:6f:a9:7c:4c:
59:4e:fb:66:f1:21:f2:ff:29:ee:ea:70:9a:23:39:
5c:ed:98:15:a4:0e:5a:c5:9f:f3:df:38:33:0e:23:
8d:86:a8:29:31:10:68:c9:35:c2:a2:68:e7:db:01:
40:52:84:57:15:5e:7a:8f:f1:33:4c:78:78:a8:03:
bd:fd:7f:32:65:53:67:f1:42:44:f3:12:4e:81:78:
04:0c:9e:1c:73:f5:cc:81:d1:af:1a:27:3c:ef:da:
2e:6c:5d:af:04:bb:b9:7d:59:0a:04:e0:43:3c:be:
97:ee:d2:cb:22:f4:94:28:d8:60:f3:58:2c:0c:8e:
cb:dc:e2:1f:e6:c0:92:aa:31:a3:ed:a4:f6:ee:70:
d6:37:3b:26:7f:98:a4:8c:b9:1c:3e:12:21:78:46:
27:a1:f5:b4:4c:2e:04:01:8c:58:0e:dd:01:80:ba:
a1:f4:14:1b:54:a8:d3:5c:01:80:0d:54:2a:99:58:
43:8e:69:10:4f:f8:5b:db:54:d2:f3:1e:74:5c:e8:
f0:09:7a:78:3f:a3:0d:66:bf:8e:56:f4:56:69:ff:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DF:03:8C:82:44:F3:53:F6:80:64:4A:55:EB:78:8B:23:BB:F5:FB
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:86:b0:97:21:2a:05:4b:eb:02:ab:d1:a6:27:5e:23:f6:53:
cc:10:a7:05:91:36:38:fa:fe:2b:e7:59:c9:29:8c:9e:cc:31:
06:f7:e5:6c:a1:73:fa:84:29:4e:04:8b:b8:8c:27:66:16:50:
2e:25:1f:70:cc:6c:f8:52:06:5e:3c:a8:3f:eb:4d:b8:11:f5:
3d:7d:6f:e6:10:a6:27:6e:ea:68:eb:d5:23:77:ec:91:c9:88:
39:41:bc:d3:80:55:69:d2:93:ee:f6:97:62:6e:90:be:b2:83:
48:c4:d7:99:97:55:92:a1:5a:dc:4e:7d:89:e9:19:f5:95:52:
7b:40:c6:5e:1b:19:70:ba:db:91:db:e7:71:19:14:c0:33:ae:
67:47:55:57:d5:a8:f1:1a:bd:26:a8:d9:f0:cc:f2:f5:ba:22:
c7:75:44:96:45:b2:5a:ae:96:bc:c0:6a:ef:6d:74:44:85:7f:
18:24:cf:71:b2:a4:8c:ba:5c:29:d2:37:0d:d1:49:3c:a3:96:
a4:80:39:67:ab:c0:d0:3a:8a:45:48:11:d0:2f:c1:11:60:57:
93:d6:22:c1:39:36:c9:e7:42:40:6a:d4:e9:32:a1:c1:9d:fd:
34:0f:87:b2:cd:2f:a7:54:cb:e5:67:40:58:06:1b:f3:d6:fe:
c4:62:dc:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDLwJRbVrNZFXLLKLR/LGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzU1NzIxM2E2NzI1MjgyYjI0YTY4NTMwOGU5Y2Y4NDEw
N2FjN2QwHhcNMjUwOTA3MTIwMDM4WhcNMjUwOTA4MTIwMDM4WjAzMTEwLwYDVQQD
EyhhMWRmMDM4YzgyNDRmMzUzZjY4MDY0NGE1NWViNzg4YjIzYmJmNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn21+57PdJm9UQ/0fxDcm68Xgtb2
JC6ZRvdLipTXSgh3iacO7a5ZZG+pfExZTvtm8SHy/ynu6nCaIzlc7ZgVpA5axZ/z
3zgzDiONhqgpMRBoyTXComjn2wFAUoRXFV56j/EzTHh4qAO9/X8yZVNn8UJE8xJO
gXgEDJ4cc/XMgdGvGic879oubF2vBLu5fVkKBOBDPL6X7tLLIvSUKNhg81gsDI7L
3OIf5sCSqjGj7aT27nDWNzsmf5ikjLkcPhIheEYnofW0TC4EAYxYDt0BgLqh9BQb
VKjTXAGADVQqmVhDjmkQT/hb21TS8x50XOjwCXp4P6MNZr+OVvRWaf8BcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHfA4yCRPNT9oBkSlXreIsju/X7MB8GA1UdIwQY
MBaAFAw1VyE6ZyUoKySmhTCOnPhBB6x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjct
ZjZlZDgzZTc4ZWY1LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjctZjZlZDgzZTc4ZWY1
LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4awlyEq
BUvrAqvRpideI/ZTzBCnBZE2OPr+K+dZySmMnswxBvflbKFz+oQpTgSLuIwnZhZQ
LiUfcMxs+FIGXjyoP+tNuBH1PX1v5hCmJ27qaOvVI3fskcmIOUG804BVadKT7vaX
Ym6QvrKDSMTXmZdVkqFa3E59iekZ9ZVSe0DGXhsZcLrbkdvncRkUwDOuZ0dVV9Wo
8Rq9JqjZ8Mzy9boix3VElkWyWq6WvMBq7210RIV/GCTPcbKkjLpcKdI3DdFJPKOW
pIA5Z6vA0DqKRUgR0C/BEWBXk9YiwTk2yedCQGrU6TKhwZ39NA+Hss0vp1TL5WdA
WAYb89b+xGLc9A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:16 2025 by rpki-client