Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
File: dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft (raw, json)
Hash identifier: Dq2TtB4EQPT7OllXGPfOfxsqRkCufTJ5vzrnfA23a0I=
Subject key identifier: 4D:81:AD:36:F4:8C:DA:1F:E0:66:CA:64:CB:56:35:BD:9A:DC:8C:FB
Authority key identifier: 74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
Certificate issuer: /CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Certificate serial: 019748FA28C6EA4E9E703E72401072516408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
Manifest number: 0D53
Signing time: Sat 07 Jun 2025 06:00:43 +0000
Manifest this update: Sat 07 Jun 2025 06:00:43 +0000
Manifest next update: Sun 08 Jun 2025 06:00:43 +0000
Files and hashes: 1: dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl (hash: fnWPAId7nKVKCqYtYlmmZ9kKMZ+bK1g6kK9ufKPpngQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:28:c6:ea:4e:9e:70:3e:72:40:10:72:51:64:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Validity
Not Before: Jun 7 06:00:43 2025 GMT
Not After : Jun 8 06:00:43 2025 GMT
Subject: CN=4d81ad36f48cda1fe066ca64cb5635bd9adc8cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:eb:2d:3b:8f:c5:44:1e:2d:56:af:17:18:76:
11:15:b3:5f:16:fb:5a:28:ea:17:6f:b7:9d:b6:d3:
d6:30:95:da:ed:75:6a:4f:0e:f8:c6:71:c9:96:13:
4e:63:7d:5f:97:c7:c9:d3:94:c7:35:65:7c:a6:4a:
ef:43:c3:eb:13:8d:06:2b:88:c1:8b:d9:72:53:09:
66:79:ee:81:5a:a7:6e:77:ef:74:ba:56:33:3c:ba:
70:62:e7:93:ca:bf:4b:6a:a0:68:69:9d:c0:ed:c0:
93:02:e2:e7:ba:d8:cf:3a:d5:bd:1c:6d:e2:21:69:
07:33:48:ad:c2:78:22:15:ee:70:aa:ed:65:5c:31:
04:a5:83:f3:16:5e:32:33:8d:b9:21:00:1c:17:fb:
8b:ab:d1:c2:86:54:31:ec:e5:b4:07:7d:80:50:fa:
21:31:07:2d:04:ec:ff:6f:0c:ce:af:f8:84:84:76:
1b:0e:27:28:36:01:fe:48:7d:d3:78:73:2b:a4:db:
ba:b3:3e:9d:23:34:45:b0:9d:ee:8a:8b:83:d8:d0:
1e:02:48:4a:52:42:46:0d:2e:ad:b0:6f:7d:30:4d:
17:bd:47:0a:47:b4:e2:d5:04:ac:51:1e:99:1d:95:
c3:d7:1d:6a:6d:cc:f9:58:a3:94:28:92:d0:48:1d:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:81:AD:36:F4:8C:DA:1F:E0:66:CA:64:CB:56:35:BD:9A:DC:8C:FB
X509v3 Authority Key Identifier:
keyid:74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6a:e4:9f:af:cb:cf:d7:10:b8:18:a3:92:11:3b:92:2a:bd:
ef:b4:c9:02:dc:a1:c6:1c:50:a0:ee:0e:4f:89:de:04:ba:ae:
fa:f5:b0:80:e4:98:3c:58:f9:28:4c:ec:06:42:ff:44:22:93:
3e:3d:7b:67:9d:6d:cf:99:5d:66:c7:98:bf:3d:82:70:2a:93:
57:6e:92:c0:99:a7:9f:64:47:c4:1c:4e:26:db:39:74:e0:67:
93:b1:85:74:87:d0:a2:96:7a:b3:79:ed:c1:44:08:6e:c0:44:
98:d0:2b:6e:21:36:a5:bf:ab:6f:ff:c1:7a:4f:c9:03:2c:fd:
19:86:c4:e2:af:71:3e:d0:7c:23:12:59:e5:a3:ab:9b:b0:cd:
c1:74:a2:26:d9:be:09:a1:8b:7c:4a:e5:b9:4e:c4:4a:3b:a3:
48:80:2c:9d:82:c5:74:96:5e:9d:5c:1c:58:05:e5:e6:cc:e0:
f6:d5:cd:fc:38:7f:c1:63:b2:6e:5a:15:cb:f9:2b:55:89:53:
a2:c4:89:2c:10:c6:d8:e0:d9:f3:a4:35:81:a4:37:c9:c4:14:
19:7c:30:d4:f6:2c:b9:b8:85:6a:06:b6:8f:21:06:04:0b:14:
e6:82:03:9d:f0:4b:06:b8:00:69:9e:1b:1c:ae:70:64:34:d5:
b9:56:98:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+ijG6k6ecD5yQBByUWQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MjJmOTg1Y2IzNGEwM2M3YzU1ODE2NDJjNmQ2ZWI0MzJj
ODNlOTQwHhcNMjUwNjA3MDYwMDQzWhcNMjUwNjA4MDYwMDQzWjAzMTEwLwYDVQQD
Eyg0ZDgxYWQzNmY0OGNkYTFmZTA2NmNhNjRjYjU2MzViZDlhZGM4Y2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OstO4/FRB4tVq8XGHYRFbNfFvta
KOoXb7edttPWMJXa7XVqTw74xnHJlhNOY31fl8fJ05THNWV8pkrvQ8PrE40GK4jB
i9lyUwlmee6BWqdud+90ulYzPLpwYueTyr9LaqBoaZ3A7cCTAuLnutjPOtW9HG3i
IWkHM0itwngiFe5wqu1lXDEEpYPzFl4yM425IQAcF/uLq9HChlQx7OW0B32AUPoh
MQctBOz/bwzOr/iEhHYbDicoNgH+SH3TeHMrpNu6sz6dIzRFsJ3uiouD2NAeAkhK
UkJGDS6tsG99ME0XvUcKR7Ti1QSsUR6ZHZXD1x1qbcz5WKOUKJLQSB1TBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2BrTb0jNof4GbKZMtWNb2a3Iz7MB8GA1UdIwQY
MBaAFHQi+YXLNKA8fFWBZCxtbrQyyD6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENMNWhjczBvRHg4VllGa0xHMXV0RExJUHBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNDllYzItMzdkYS00MWE5LTk2ZmIt
NTE0MWZhMzkwODBhLzEvZENMNWhjczBvRHg4VllGa0xHMXV0RExJUHBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jNDllYzItMzdkYS00MWE5LTk2ZmItNTE0MWZhMzkwODBh
LzEvZENMNWhjczBvRHg4VllGa0xHMXV0RExJUHBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWrkn6/L
z9cQuBijkhE7kiq977TJAtyhxhxQoO4OT4neBLqu+vWwgOSYPFj5KEzsBkL/RCKT
Pj17Z51tz5ldZseYvz2CcCqTV26SwJmnn2RHxBxOJts5dOBnk7GFdIfQopZ6s3nt
wUQIbsBEmNArbiE2pb+rb//Bek/JAyz9GYbE4q9xPtB8IxJZ5aOrm7DNwXSiJtm+
CaGLfErluU7ESjujSIAsnYLFdJZenVwcWAXl5szg9tXN/Dh/wWOybloVy/krVYlT
osSJLBDG2ODZ86Q1gaQ3ycQUGXww1PYsubiFaga2jyEGBAsU5oIDnfBLBrgAaZ4b
HK5wZDTVuVaYRg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:32 2025 by rpki-client