Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier: Xxh70/40lBd+UJrRv7bP1gV2Lr6aLww+sfrCJBciS0U=
Subject key identifier: BD:18:16:8F:E5:59:17:DF:FE:FD:FB:06:4D:AD:56:F8:0C:7A:CB:B5
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 01984B53DCA950266A8596DFA8C908FAE28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number: DA
Signing time: Sun 27 Jul 2025 10:00:43 +0000
Manifest this update: Sun 27 Jul 2025 10:00:43 +0000
Manifest next update: Mon 28 Jul 2025 10:00:43 +0000
Files and hashes: 1: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: 0Nub7A//DTkM5FKKPc9rOiYMz2C/4ZYUIQXmzbAofww=)
2: U1RYzEbHmiXutqW8M0GkGkDLUKA.roa (hash: 8576dkRYk3dW0Y6uWzvcN1Y2+IXW0jM0HiarzKgHeX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:dc:a9:50:26:6a:85:96:df:a8:c9:08:fa:e2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Jul 27 10:00:43 2025 GMT
Not After : Jul 28 10:00:43 2025 GMT
Subject: CN=bd18168fe55917dffefdfb064dad56f80c7acbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:e6:e3:ea:bf:68:7a:5b:b5:e1:bb:33:b8:
1f:c4:c8:01:19:da:00:09:18:43:11:70:fa:c8:15:
e3:39:85:51:dc:c3:31:33:b7:da:a4:a2:76:2c:c0:
9e:39:73:61:fe:c8:ef:74:24:d6:83:62:cf:35:90:
49:34:1a:39:84:4f:09:af:05:cb:82:1e:f1:a0:05:
a8:86:e1:0b:ed:80:7e:ad:63:3b:40:05:40:f1:e6:
3c:d0:46:c5:d8:88:34:a5:95:d9:79:6c:ba:fb:4f:
13:b9:31:7b:be:82:3f:14:0d:c9:9c:d3:ae:7f:fd:
1c:9e:7a:18:cb:7c:20:14:1c:f7:57:92:10:fa:ab:
30:10:bb:11:84:4d:61:bc:d5:19:64:4f:03:aa:2c:
3c:a1:ae:61:9e:2e:db:32:94:93:0c:bc:0e:0a:37:
b2:7f:50:b3:ed:39:ee:b2:c7:7a:3f:03:69:22:15:
97:31:e8:67:f2:48:1e:cc:5c:61:67:bc:82:7a:ae:
ff:1b:13:eb:cc:d4:b4:af:1c:0f:93:5b:a9:2d:07:
30:ce:94:35:8c:9d:c5:9f:56:6b:cc:7f:4f:18:62:
fb:e4:fd:66:f8:bc:f3:f7:55:94:e9:1e:18:fa:91:
2b:96:ed:fb:d3:7a:28:35:a0:f8:93:47:60:32:85:
81:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:18:16:8F:E5:59:17:DF:FE:FD:FB:06:4D:AD:56:F8:0C:7A:CB:B5
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:85:fa:72:ad:21:98:51:21:e9:71:de:fc:6a:35:95:bf:67:
0f:21:4e:8d:ea:7d:63:02:4c:85:c4:5f:6b:48:6e:48:02:10:
b1:25:f6:a2:ce:f0:5d:d9:e4:73:85:85:8c:61:6d:65:97:3a:
62:83:2b:a0:4e:cf:75:cb:ab:fc:70:f3:ce:69:8d:e8:bb:c1:
fd:27:65:f8:46:58:16:4f:70:e4:2b:11:85:58:43:83:0f:34:
27:8f:c9:87:da:52:6f:4f:45:53:56:92:8c:38:84:0a:a2:43:
25:8d:4a:5c:63:95:cb:cb:f3:b6:24:44:63:a9:dc:9b:e1:9e:
35:86:9a:73:c4:18:3a:61:bf:51:97:b3:fb:9d:28:87:8b:1c:
ba:63:b3:94:f2:ef:ce:03:74:a2:df:a1:42:f7:a7:2b:14:00:
72:71:f2:48:f4:f5:b3:65:cf:ea:5d:20:88:5a:27:f7:e0:05:
a5:d1:0c:8c:99:3b:24:c4:ff:55:52:fc:3b:ef:dd:3a:86:18:
3f:3b:d1:28:42:77:6f:c5:35:e3:e4:74:e4:2a:0f:bd:c5:a4:
c1:ab:39:0d:70:e8:76:26:c7:03:1e:74:6d:99:c8:3d:a7:dc:
2f:a7:02:87:9d:6b:cc:83:12:fe:38:65:87:26:52:b4:18:1d:
a5:bd:50:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLU9ypUCZqhZbfqMkI+uKOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGQzY2VkMzJlMzYwZmNkNDZjMTYzNTU2ZGUyOGFhMjgy
NGIxOWIwHhcNMjUwNzI3MTAwMDQzWhcNMjUwNzI4MTAwMDQzWjAzMTEwLwYDVQQD
EyhiZDE4MTY4ZmU1NTkxN2RmZmVmZGZiMDY0ZGFkNTZmODBjN2FjYmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppvm4+q/aHpbteG7M7gfxMgBGdoA
CRhDEXD6yBXjOYVR3MMxM7fapKJ2LMCeOXNh/sjvdCTWg2LPNZBJNBo5hE8JrwXL
gh7xoAWohuEL7YB+rWM7QAVA8eY80EbF2Ig0pZXZeWy6+08TuTF7voI/FA3JnNOu
f/0cnnoYy3wgFBz3V5IQ+qswELsRhE1hvNUZZE8Dqiw8oa5hni7bMpSTDLwOCjey
f1Cz7Tnussd6PwNpIhWXMehn8kgezFxhZ7yCeq7/GxPrzNS0rxwPk1upLQcwzpQ1
jJ3Fn1ZrzH9PGGL75P1m+Lzz91WU6R4Y+pErlu3703ooNaD4k0dgMoWBjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0YFo/lWRff/v37Bk2tVvgMesu1MB8GA1UdIwQY
MBaAFA2NPO0y42D81GwWNVbeKKooJLGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jYjZmN2UtZTNiOC00ZDBjLTgyOTMt
YTQ5N2I4Y2JmMTc3LzEvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jYjZmN2UtZTNiOC00ZDBjLTgyOTMtYTQ5N2I4Y2JmMTc3
LzEvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIX6cq0h
mFEh6XHe/Go1lb9nDyFOjep9YwJMhcRfa0huSAIQsSX2os7wXdnkc4WFjGFtZZc6
YoMroE7Pdcur/HDzzmmN6LvB/Sdl+EZYFk9w5CsRhVhDgw80J4/Jh9pSb09FU1aS
jDiECqJDJY1KXGOVy8vztiREY6ncm+GeNYaac8QYOmG/UZez+50oh4scumOzlPLv
zgN0ot+hQvenKxQAcnHySPT1s2XP6l0giFon9+AFpdEMjJk7JMT/VVL8O+/dOoYY
PzvRKEJ3b8U14+R05CoPvcWkwas5DXDodibHAx50bZnIPafcL6cCh51rzIMS/jhl
hyZStBgdpb1Q2w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:48:18 2025 by rpki-client