Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
File: DdgdNYjH4QqJmw0EgVZubZSNrdA.mft (raw, json)
Hash identifier: jcG/O4j+0xcYGJ6YblVcbzHeZcCd4jywKXJ6rzZrsiA=
Subject key identifier: F6:8E:32:70:32:C1:DA:F3:3C:C6:40:DE:52:E3:2F:EA:66:50:59:E9
Authority key identifier: 0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
Certificate issuer: /CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Certificate serial: 019749D5843BCC3C13DCE24CED306B13137B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 10:00:18 +0000
Manifest this update: Sat 07 Jun 2025 10:00:18 +0000
Manifest next update: Sun 08 Jun 2025 10:00:18 +0000
Files and hashes: 1: DdgdNYjH4QqJmw0EgVZubZSNrdA.crl (hash: cZiuK9hXv5CMJ/isHx14bYZCarKWmXx/oVDI15fjOVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:84:3b:cc:3c:13:dc:e2:4c:ed:30:6b:13:13:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Validity
Not Before: Jun 7 10:00:18 2025 GMT
Not After : Jun 8 10:00:18 2025 GMT
Subject: CN=f68e327032c1daf33cc640de52e32fea665059e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:39:68:32:c2:5f:74:54:3a:8b:34:6a:04:
c2:c7:fa:94:1c:1c:2f:0a:b5:c0:1b:24:86:3a:c2:
4b:42:15:91:97:be:68:e5:6f:e5:ed:24:51:3b:c2:
26:df:07:12:bd:a6:fb:01:6e:49:83:aa:1f:d3:5f:
d0:1e:5a:61:53:56:ed:ce:3b:65:aa:6a:fc:81:1b:
e1:17:b6:c1:a5:1b:31:25:34:c3:e7:00:2a:4d:ff:
9d:d0:b2:28:27:44:09:f3:51:29:26:4c:98:d5:09:
42:94:7c:e5:ed:ab:ae:16:7c:80:2e:93:30:27:be:
5a:31:8c:80:f8:06:36:02:52:50:30:bf:17:b3:f5:
ca:d5:a2:bf:ce:a6:97:1e:c8:fd:2a:10:15:37:00:
3d:b3:15:1a:88:e5:8e:e5:fb:d3:cc:74:c6:ad:93:
cc:3d:23:5e:08:60:35:8d:35:db:13:c5:c0:0b:1c:
a7:b9:a7:88:3d:3c:75:2b:c9:65:ae:94:79:23:3d:
c7:b1:b1:55:44:51:d6:2f:ad:ae:7b:b5:01:26:f8:
81:80:c9:eb:4b:30:3a:21:95:f9:ec:32:73:b9:8b:
41:d5:31:08:51:76:3d:16:86:4c:df:d5:04:ed:f3:
b3:35:29:de:a5:9e:ab:02:ce:57:92:97:be:8c:e2:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8E:32:70:32:C1:DA:F3:3C:C6:40:DE:52:E3:2F:EA:66:50:59:E9
X509v3 Authority Key Identifier:
keyid:0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:74:74:e9:93:f3:36:b8:5b:10:04:00:d7:fd:a3:80:6f:f4:
0f:ec:a6:42:e2:d9:51:78:53:36:77:4d:5b:b9:6f:f3:f5:e8:
00:b2:66:49:9f:99:37:6b:51:fc:ca:94:9c:d1:a4:79:c7:f8:
07:d8:ed:6a:9d:58:62:f4:2b:94:0d:64:ba:29:46:af:00:71:
24:d2:61:b7:50:c7:0b:76:60:1f:cf:b8:5c:d9:3c:f3:0a:42:
eb:bb:2f:31:c7:4c:26:bf:e2:c8:6b:88:91:c3:52:d9:99:2a:
f4:18:69:31:d1:7b:2a:70:c3:89:af:94:d1:09:ac:0b:6a:55:
b5:93:b9:69:e3:a7:17:93:af:13:8a:bd:5b:44:bb:cf:9c:a1:
97:bd:f9:f9:d9:da:91:64:58:f5:d7:46:92:53:ef:13:41:54:
55:62:30:1c:17:59:bb:74:65:00:77:9d:04:41:57:b3:a5:b7:
60:98:60:e0:92:a1:ab:3e:f3:ee:10:f9:a5:70:70:56:11:cd:
cc:23:25:97:4c:ec:99:6d:dd:3d:e9:9d:2c:45:d2:b4:5b:41:
5a:cc:48:fc:45:b5:e5:69:fc:4a:d2:af:7c:aa:ea:1e:9e:a7:
1c:df:f5:fc:0d:68:54:5e:dc:ec:1a:cc:7d:3a:82:5c:01:a6:
a5:54:4c:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1YQ7zDwT3OJM7TBrExN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDgxZDM1ODhjN2UxMGE4OTliMGQwNDgxNTY2ZTZkOTQ4
ZGFkZDAwHhcNMjUwNjA3MTAwMDE4WhcNMjUwNjA4MTAwMDE4WjAzMTEwLwYDVQQD
EyhmNjhlMzI3MDMyYzFkYWYzM2NjNjQwZGU1MmUzMmZlYTY2NTA1OWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLo5aDLCX3RUOos0agTCx/qUHBwv
CrXAGySGOsJLQhWRl75o5W/l7SRRO8Im3wcSvab7AW5Jg6of01/QHlphU1btzjtl
qmr8gRvhF7bBpRsxJTTD5wAqTf+d0LIoJ0QJ81EpJkyY1QlClHzl7auuFnyALpMw
J75aMYyA+AY2AlJQML8Xs/XK1aK/zqaXHsj9KhAVNwA9sxUaiOWO5fvTzHTGrZPM
PSNeCGA1jTXbE8XACxynuaeIPTx1K8llrpR5Iz3HsbFVRFHWL62ue7UBJviBgMnr
SzA6IZX57DJzuYtB1TEIUXY9FoZM39UE7fOzNSnepZ6rAs5Xkpe+jOKgMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaOMnAywdrzPMZA3lLjL+pmUFnpMB8GA1UdIwQY
MBaAFA3YHTWIx+EKiZsNBIFWbm2Uja3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lODZmNWYtMTE1ZS00ZTkyLWFjMzkt
Yzc2YjhkYjVhZDE0LzEvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lODZmNWYtMTE1ZS00ZTkyLWFjMzktYzc2YjhkYjVhZDE0
LzEvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnR06ZPz
NrhbEAQA1/2jgG/0D+ymQuLZUXhTNndNW7lv8/XoALJmSZ+ZN2tR/MqUnNGkecf4
B9jtap1YYvQrlA1kuilGrwBxJNJht1DHC3ZgH8+4XNk88wpC67svMcdMJr/iyGuI
kcNS2Zkq9BhpMdF7KnDDia+U0QmsC2pVtZO5aeOnF5OvE4q9W0S7z5yhl735+dna
kWRY9ddGklPvE0FUVWIwHBdZu3RlAHedBEFXs6W3YJhg4JKhqz7z7hD5pXBwVhHN
zCMll0zsmW3dPemdLEXStFtBWsxI/EW15Wn8StKvfKrqHp6nHN/1/A1oVF7c7BrM
fTqCXAGmpVRMRA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:08:49 2025 by rpki-client