Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: u85hgLqdaWvQaPVj0oIfyOoQIR/c7z/Fu9L3zzM8IcM=
Subject key identifier: 5D:FC:B3:D5:04:40:DE:06:B9:6B:D3:40:EE:79:4E:1A:77:3B:EC:C4
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 019921B1B2BA4C08973F092E3149C94DF31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0A7D
Signing time: Sun 07 Sep 2025 01:01:57 +0000
Manifest this update: Sun 07 Sep 2025 01:01:57 +0000
Manifest next update: Mon 08 Sep 2025 01:01:57 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: 6aapfF9rsa3BjwhwGU2c6qODis6eelASz64itmLp+7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:b2:ba:4c:08:97:3f:09:2e:31:49:c9:4d:f3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Sep 7 01:01:57 2025 GMT
Not After : Sep 8 01:01:57 2025 GMT
Subject: CN=5dfcb3d50440de06b96bd340ee794e1a773becc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:d8:e0:f2:4f:6d:a0:a6:84:fd:08:fd:9a:
a0:98:58:61:b3:73:50:f9:e9:e1:68:cd:00:4e:db:
1e:04:ae:30:b3:69:6c:57:a9:04:dd:36:bb:b7:b8:
96:f2:2c:f6:20:86:27:5f:f8:1e:6d:af:78:05:71:
2c:26:f1:cd:bb:5a:93:15:e3:43:36:12:39:bf:0c:
8e:93:ab:63:9a:65:29:c6:5d:4f:7a:e5:fb:8b:72:
38:4d:9d:67:d9:f0:b4:a5:d2:7f:5b:39:eb:a1:9b:
d6:d4:25:81:bb:a2:d2:c8:e5:22:2e:65:1a:85:d4:
bd:eb:16:47:f9:45:58:51:71:5b:af:7f:45:fc:9c:
ad:48:9c:ee:35:7c:c6:d3:09:e8:7f:7e:d1:2e:23:
e2:22:41:02:74:ac:69:30:9b:fb:c5:44:5f:6f:08:
f2:d2:23:9a:53:d8:f2:37:59:81:a3:52:3c:17:17:
cc:bb:53:10:7c:92:46:e2:57:ae:c5:0f:44:ee:03:
9a:75:4e:ad:a3:66:b8:37:72:4f:80:73:a4:63:d1:
ab:a5:ba:97:19:d2:c3:69:87:37:e1:cf:2a:5e:29:
61:76:60:a5:15:44:09:db:c1:a7:49:51:d3:eb:f7:
d1:00:00:9d:f3:8e:ea:d0:49:31:96:40:75:49:85:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FC:B3:D5:04:40:DE:06:B9:6B:D3:40:EE:79:4E:1A:77:3B:EC:C4
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:47:d3:c8:cc:83:39:48:71:cc:40:12:bc:8f:b2:4a:07:47:
3b:78:8f:04:20:e6:c0:91:d2:76:83:a1:29:18:42:f4:90:85:
86:88:d7:eb:2e:f4:15:88:1c:24:45:b1:c1:42:2f:d4:d8:bd:
35:dc:97:14:04:92:8d:3b:e8:5f:61:65:9d:64:59:0d:85:e7:
34:13:29:d9:d2:7e:e8:14:c3:c1:f9:e4:70:0d:5f:45:b4:d8:
19:40:3e:7b:15:3f:f0:0c:c2:37:5a:27:2a:23:e0:fc:b8:1f:
9a:ef:03:bf:34:b6:6c:fb:94:42:01:0e:7a:c3:87:7e:96:1e:
42:2a:53:38:b9:a4:2b:a4:9f:0e:10:70:bc:d7:1e:bd:46:dc:
75:c5:72:08:dd:ab:8d:40:30:5f:8b:8d:3b:3d:f0:33:c0:4d:
cb:2c:b9:0a:3a:bd:a5:83:ec:fe:6a:b8:8b:18:c5:d3:63:ed:
21:46:86:1c:36:ae:62:c9:a0:53:d6:24:f7:52:03:c1:cf:77:
5a:62:0e:3a:10:d2:10:ef:fc:88:c4:dc:b1:30:1e:be:36:53:
1c:8e:42:72:2c:2b:30:cb:d6:cf:c3:46:3e:da:78:c5:17:2f:
a6:c6:9f:08:ab:67:a9:3a:42:1a:34:c5:d6:0a:0c:d0:cc:b7:
0b:9c:5e:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsbK6TAiXPwkuMUnJTfMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWQxYjZjY2E1MzA5MWY2ZjkwZDFhNTk1MGNlYjZkNTNi
MDNhYWQwHhcNMjUwOTA3MDEwMTU3WhcNMjUwOTA4MDEwMTU3WjAzMTEwLwYDVQQD
Eyg1ZGZjYjNkNTA0NDBkZTA2Yjk2YmQzNDBlZTc5NGUxYTc3M2JlY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06DY4PJPbaCmhP0I/ZqgmFhhs3NQ
+enhaM0ATtseBK4ws2lsV6kE3Ta7t7iW8iz2IIYnX/geba94BXEsJvHNu1qTFeND
NhI5vwyOk6tjmmUpxl1PeuX7i3I4TZ1n2fC0pdJ/WznroZvW1CWBu6LSyOUiLmUa
hdS96xZH+UVYUXFbr39F/JytSJzuNXzG0wnof37RLiPiIkECdKxpMJv7xURfbwjy
0iOaU9jyN1mBo1I8FxfMu1MQfJJG4leuxQ9E7gOadU6to2a4N3JPgHOkY9GrpbqX
GdLDaYc34c8qXilhdmClFUQJ28GnSVHT6/fRAACd847q0EkxlkB1SYUT2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF38s9UEQN4GuWvTQO55Thp3O+zEMB8GA1UdIwQY
MBaAFNLtG2zKUwkfb5DRpZUM621TsDqtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNjFkZGItYjNlNS00MGIwLWFiYmUt
OTQzN2U1ZmU2ZGI0LzEvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kNjFkZGItYjNlNS00MGIwLWFiYmUtOTQzN2U1ZmU2ZGI0
LzEvMHUwYmJNcFRDUjl2a05HbGxRenJiVk93T3EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEfTyMyD
OUhxzEASvI+ySgdHO3iPBCDmwJHSdoOhKRhC9JCFhojX6y70FYgcJEWxwUIv1Ni9
NdyXFASSjTvoX2FlnWRZDYXnNBMp2dJ+6BTDwfnkcA1fRbTYGUA+exU/8AzCN1on
KiPg/Lgfmu8DvzS2bPuUQgEOesOHfpYeQipTOLmkK6SfDhBwvNcevUbcdcVyCN2r
jUAwX4uNOz3wM8BNyyy5Cjq9pYPs/mq4ixjF02PtIUaGHDauYsmgU9Yk91IDwc93
WmIOOhDSEO/8iMTcsTAevjZTHI5CciwrMMvWz8NGPtp4xRcvpsafCKtnqTpCGjTF
1goM0My3C5xelg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:12 2025 by rpki-client