Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier: BtgjP+DwjYAJuWJVHFM/m4pskGCJl3FV6I0N4SehIyk=
Subject key identifier: E5:EF:2D:E0:DC:F7:B9:B9:BB:F5:0D:FD:6E:B1:CD:17:8B:58:E1:C5
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial: 0199228C3CB48F2D1919EB3D22EEE75A0282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 05:00:39 +0000
Manifest this update: Sun 07 Sep 2025 05:00:39 +0000
Manifest next update: Mon 08 Sep 2025 05:00:39 +0000
Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: x2qpv58u3BqOtpnFa6Wex3JlNqifqH2gbpkKiiBk300=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:3c:b4:8f:2d:19:19:eb:3d:22:ee:e7:5a:02:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Validity
Not Before: Sep 7 05:00:39 2025 GMT
Not After : Sep 8 05:00:39 2025 GMT
Subject: CN=e5ef2de0dcf7b9b9bbf50dfd6eb1cd178b58e1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:4a:83:f0:ae:b8:05:3d:91:b7:b3:ed:e3:
93:9a:fe:18:df:78:49:e0:04:af:06:a0:04:35:42:
3b:88:d0:06:08:4f:f6:57:3d:26:af:34:9f:4d:90:
4c:dd:56:3c:85:bd:bd:75:d1:16:29:d2:36:cf:6f:
f9:42:71:d2:5f:58:99:64:6a:8e:5c:a2:af:2c:b1:
b6:d1:88:d7:87:5e:f8:14:74:cf:0c:c5:e0:a7:d2:
d6:a4:ec:97:2e:03:36:0d:70:c1:26:97:a4:09:15:
f8:2b:e4:88:be:d9:3a:a3:90:2d:10:96:c2:8a:58:
6b:76:0e:11:da:93:b8:08:54:a4:f1:23:2f:3b:16:
1a:86:05:24:6a:a0:9d:fb:9d:c6:28:04:8d:ad:13:
4a:5c:6c:e3:37:9a:0b:e6:9f:3e:64:03:0b:fc:c9:
11:8f:20:64:75:3a:38:02:48:70:1d:4a:ca:e5:65:
c5:f9:49:5e:9d:90:72:bb:35:fe:ee:e4:7d:47:0d:
3f:9d:c4:7b:b7:1f:3e:0a:c9:7a:9e:af:c1:d6:68:
49:82:e1:b8:10:fb:ac:33:80:80:d1:0c:0b:47:33:
48:f8:47:8a:5e:00:41:6f:b2:14:71:d0:08:df:c7:
0f:1c:bc:83:49:ff:49:d0:27:f9:e6:12:55:5e:06:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EF:2D:E0:DC:F7:B9:B9:BB:F5:0D:FD:6E:B1:CD:17:8B:58:E1:C5
X509v3 Authority Key Identifier:
keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:53:3c:2c:5e:64:4a:fc:02:61:3d:45:dc:12:c7:2f:0a:d9:
1d:c3:6b:2a:0a:4a:c1:b8:6c:f9:96:79:cb:a3:ea:04:13:03:
84:1e:fa:69:7d:82:d8:33:e1:63:50:45:4c:98:66:14:4f:46:
b6:75:30:f1:c7:04:a9:b4:55:4c:24:d3:0a:1e:b7:10:3e:10:
f5:f8:44:18:7d:70:b5:ee:f8:03:37:06:0b:04:d4:f1:50:2c:
dd:bd:5b:71:c4:1c:1c:61:dd:a4:1c:a6:3a:c8:48:0a:f1:af:
f7:dc:30:20:77:80:e2:09:29:64:0e:28:93:36:bc:59:86:fb:
c4:3b:7d:44:1a:e1:2c:ee:1c:ed:23:81:68:43:ec:5f:36:40:
bf:c9:0a:a5:77:83:15:f1:b5:a4:5d:34:27:27:2f:c4:74:79:
20:49:b2:5b:f1:33:63:1d:15:f0:5e:2d:68:9c:81:ad:2a:c0:
2b:22:90:89:48:da:98:c1:e4:79:a1:b8:e1:40:54:d3:6f:a2:
bf:a7:c7:a6:22:f0:68:ce:75:33:de:e9:86:12:aa:72:97:5e:
12:b4:cb:9c:2d:6d:fb:82:be:92:9b:a1:01:f8:c7:1e:6c:ec:
33:bf:36:5e:2d:d0:53:fa:ed:63:90:00:39:cd:1b:0d:5a:7d:
76:20:b1:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijDy0jy0ZGes9Iu7nWgKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjM2JjOGNlYWIxZTc5M2EyMTAzOWNkMGIxZTU0NzJjNzI2
NDFmNjgwHhcNMjUwOTA3MDUwMDM5WhcNMjUwOTA4MDUwMDM5WjAzMTEwLwYDVQQD
EyhlNWVmMmRlMGRjZjdiOWI5YmJmNTBkZmQ2ZWIxY2QxNzhiNThlMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gRKg/CuuAU9kbez7eOTmv4Y33hJ
4ASvBqAENUI7iNAGCE/2Vz0mrzSfTZBM3VY8hb29ddEWKdI2z2/5QnHSX1iZZGqO
XKKvLLG20YjXh174FHTPDMXgp9LWpOyXLgM2DXDBJpekCRX4K+SIvtk6o5AtEJbC
ilhrdg4R2pO4CFSk8SMvOxYahgUkaqCd+53GKASNrRNKXGzjN5oL5p8+ZAML/MkR
jyBkdTo4AkhwHUrK5WXF+UlenZByuzX+7uR9Rw0/ncR7tx8+Csl6nq/B1mhJguG4
EPusM4CA0QwLRzNI+EeKXgBBb7IUcdAI38cPHLyDSf9J0Cf55hJVXgYgLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXvLeDc97m5u/UN/W6xzReLWOHFMB8GA1UdIwQY
MBaAFAw7yM6rHnk6IQOc0LHlRyxyZB9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQt
ZjhiYWM0ZmI4ZjhhLzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQtZjhiYWM0ZmI4Zjhh
LzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFM8LF5k
SvwCYT1F3BLHLwrZHcNrKgpKwbhs+ZZ5y6PqBBMDhB76aX2C2DPhY1BFTJhmFE9G
tnUw8ccEqbRVTCTTCh63ED4Q9fhEGH1wte74AzcGCwTU8VAs3b1bccQcHGHdpBym
OshICvGv99wwIHeA4gkpZA4okza8WYb7xDt9RBrhLO4c7SOBaEPsXzZAv8kKpXeD
FfG1pF00JycvxHR5IEmyW/EzYx0V8F4taJyBrSrAKyKQiUjamMHkeaG44UBU02+i
v6fHpiLwaM51M97phhKqcpdeErTLnC1t+4K+kpuhAfjHHmzsM782Xi3QU/rtY5AA
Oc0bDVp9diCxsg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:16 2025 by rpki-client