Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
File: D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json)
Hash identifier: bhUff9Ncd9+VGSmGKEpshQnbC5FUYhq2D7N3GCenTdc=
Subject key identifier: D5:DB:87:50:9F:8A:7B:D1:B9:0B:DC:37:90:91:AC:16:34:D3:CD:84
Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
Certificate issuer: /CN=0f554afe672744742b4e35027b402e8613c20377
Certificate serial: 01992255C807A3845C7DB56B0FF667AB2DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
Manifest number: 1560
Signing time: Sun 07 Sep 2025 04:01:10 +0000
Manifest this update: Sun 07 Sep 2025 04:01:10 +0000
Manifest next update: Mon 08 Sep 2025 04:01:10 +0000
Files and hashes: 1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: xrgGDKROvvgdZ0E7/IKZs0uN7dbmRuQQQ8F781faF8Y=)
2: JILzl612YbahGyGIhRmTzqH6qN0.roa (hash: KYoAnBG9y6ABJD4N2SyEiYvwxlPEdpp7VacwTGrZd0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c8:07:a3:84:5c:7d:b5:6b:0f:f6:67:ab:2d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f554afe672744742b4e35027b402e8613c20377
Validity
Not Before: Sep 7 04:01:10 2025 GMT
Not After : Sep 8 04:01:10 2025 GMT
Subject: CN=d5db87509f8a7bd1b90bdc379091ac1634d3cd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:61:9f:91:59:79:07:28:bc:1d:8a:5c:c1:
00:00:f8:dd:4a:dc:3b:d7:c9:00:16:2c:d2:73:93:
5f:e5:9a:d0:b7:bb:f0:3f:4b:fd:d0:d9:b2:6c:17:
a1:b1:3c:39:41:0e:05:15:07:9f:f8:5f:82:45:74:
36:29:f1:c1:cf:70:5f:af:39:45:f0:3b:8c:26:77:
3d:0b:b6:13:2d:a8:ee:21:33:1a:cb:02:f1:7a:1e:
72:98:31:e7:f7:e4:a9:8c:44:80:8c:b6:21:a4:ed:
0d:76:08:38:32:ed:df:79:4c:8b:75:e5:39:a2:c4:
08:e0:9e:d7:fa:21:82:ed:c8:56:bc:b8:dd:e9:c4:
81:4d:6f:da:00:f6:cc:cd:90:4a:a4:31:4b:9c:45:
ce:80:37:08:44:20:36:69:91:30:44:0a:34:5f:12:
a2:c3:58:fb:b9:1a:77:01:41:5f:6b:5f:ff:a5:92:
b6:b4:77:69:81:38:d2:c0:ef:88:e9:36:ae:4b:2f:
59:b2:68:5a:ff:79:eb:00:f5:6c:27:cd:c5:98:3d:
8b:54:70:fb:4d:b1:9b:d7:67:01:e7:2b:1a:e0:2a:
dd:51:68:ec:c3:34:32:43:a8:03:0c:26:5d:ec:0f:
c5:77:7a:9d:be:95:76:ca:84:a2:f3:78:a0:11:56:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DB:87:50:9F:8A:7B:D1:B9:0B:DC:37:90:91:AC:16:34:D3:CD:84
X509v3 Authority Key Identifier:
keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:20:20:33:95:ab:e4:9a:2b:36:a1:a0:41:3b:fe:57:8b:86:
20:88:af:99:1e:ce:73:9f:c0:a9:22:b2:c9:44:83:e8:a2:67:
5d:bc:1c:45:e3:97:5f:66:1d:60:5f:cb:b7:64:e8:bf:23:0f:
e9:05:85:0e:62:6b:88:f4:a0:d3:bd:da:c7:f0:e4:3d:ef:39:
d2:4d:41:ab:b4:dd:b4:b0:ff:44:1e:42:ee:76:b2:ae:ce:4f:
30:79:73:ef:62:38:6d:b3:93:f4:00:e1:80:14:8f:17:98:cb:
33:5e:74:a1:d1:72:9c:d5:24:53:71:cb:e7:76:6d:3f:ba:1e:
ae:e5:c9:96:01:48:8c:ae:2e:88:be:b8:bc:08:a0:e1:3a:fb:
cf:f4:84:a4:f0:2c:86:03:55:ee:77:9d:95:c2:72:81:87:4c:
4e:06:89:39:e8:83:ce:d4:04:60:ff:79:82:1a:33:28:4e:fa:
40:ce:d2:d7:37:2a:42:f7:9f:f0:76:a3:f7:7a:f3:ed:fe:1c:
ac:61:76:01:9b:51:20:7c:23:6d:b4:82:65:39:1d:37:bb:0a:
d0:e0:1b:c2:05:a4:9f:12:45:8a:00:c1:d2:91:e5:18:69:97:
18:f5:96:d2:93:a4:97:5b:ba:84:aa:8e:51:b1:5a:b5:23:99:
66:c7:19:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVcgHo4RcfbVrD/Znqy2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTU0YWZlNjcyNzQ0NzQyYjRlMzUwMjdiNDAyZTg2MTNj
MjAzNzcwHhcNMjUwOTA3MDQwMTEwWhcNMjUwOTA4MDQwMTEwWjAzMTEwLwYDVQQD
EyhkNWRiODc1MDlmOGE3YmQxYjkwYmRjMzc5MDkxYWMxNjM0ZDNjZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs91hn5FZeQcovB2KXMEAAPjdStw7
18kAFizSc5Nf5ZrQt7vwP0v90NmybBehsTw5QQ4FFQef+F+CRXQ2KfHBz3BfrzlF
8DuMJnc9C7YTLajuITMaywLxeh5ymDHn9+SpjESAjLYhpO0Ndgg4Mu3feUyLdeU5
osQI4J7X+iGC7chWvLjd6cSBTW/aAPbMzZBKpDFLnEXOgDcIRCA2aZEwRAo0XxKi
w1j7uRp3AUFfa1//pZK2tHdpgTjSwO+I6TauSy9Zsmha/3nrAPVsJ83FmD2LVHD7
TbGb12cB5ysa4CrdUWjswzQyQ6gDDCZd7A/Fd3qdvpV2yoSi83igEVa3uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXbh1CfinvRuQvcN5CRrBY0082EMB8GA1UdIwQY
MBaAFA9VSv5nJ0R0K041AntALoYTwgN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUt
YzBhZTgwYjc0MmIwLzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUtYzBhZTgwYjc0MmIw
LzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiAgM5Wr
5JorNqGgQTv+V4uGIIivmR7Oc5/AqSKyyUSD6KJnXbwcReOXX2YdYF/Lt2TovyMP
6QWFDmJriPSg073ax/DkPe850k1Bq7TdtLD/RB5C7nayrs5PMHlz72I4bbOT9ADh
gBSPF5jLM150odFynNUkU3HL53ZtP7oeruXJlgFIjK4uiL64vAig4Tr7z/SEpPAs
hgNV7nedlcJygYdMTgaJOeiDztQEYP95ghozKE76QM7S1zcqQvef8Haj93rz7f4c
rGF2AZtRIHwjbbSCZTkdN7sK0OAbwgWknxJFigDB0pHlGGmXGPWW0pOkl1u6hKqO
UbFatSOZZscZ9g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:00 2025 by rpki-client