Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: 50UuXgccKtbWiGg0GZE0dEgsxGzGG7pNhPg03f9S/hQ=
Subject key identifier: 60:24:B6:39:EB:C5:5F:9A:20:6E:9E:DE:C4:CD:8C:3B:20:45:CD:B0
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 019868827EA62FEECFC6384B861BBA6568E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 1612
Signing time: Sat 02 Aug 2025 02:00:39 +0000
Manifest this update: Sat 02 Aug 2025 02:00:39 +0000
Manifest next update: Sun 03 Aug 2025 02:00:39 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: BxFPfLDbm6hY+UE3e8l75OYRyqXM1Y9FseshQdj4KYA=)
2: WtAp0tL-l96y_gbMlR5puzdruQc.roa (hash: xRGTdhiVzbN5no9s0pfriVSMuD8OBdniQOQSDlzn9q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:68:82:7e:a6:2f:ee:cf:c6:38:4b:86:1b:ba:65:68:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Aug 2 02:00:39 2025 GMT
Not After : Aug 3 02:00:39 2025 GMT
Subject: CN=6024b639ebc55f9a206e9edec4cd8c3b2045cdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:c6:a6:21:8e:81:aa:65:f7:f5:8a:a0:ab:
37:66:61:ae:da:76:df:f9:c0:74:11:32:2e:5e:74:
4f:b8:6f:18:0d:a5:ab:d5:eb:3d:44:13:c1:9a:bb:
98:68:42:fc:4c:74:5e:51:d6:e7:a7:67:26:c2:6c:
84:73:97:dc:bc:57:03:3f:05:b3:28:3a:e7:fa:6c:
aa:1e:1c:49:41:a4:3b:ce:ed:0d:35:77:79:29:3f:
77:4b:31:a7:e5:f3:1b:f4:ba:27:77:b6:04:8c:27:
d3:82:ae:6c:c5:98:84:8d:e8:03:7a:ee:15:b5:87:
44:90:aa:fc:94:32:f9:6c:87:21:63:ec:c1:35:2e:
4c:c5:b3:c9:08:2f:f2:5c:f2:35:12:7d:7e:e6:8e:
34:47:e5:75:13:8d:36:c7:49:9f:8d:92:1b:52:eb:
2b:48:81:5d:4d:65:9f:aa:6e:41:93:39:a7:29:e5:
32:40:fc:df:58:ec:72:19:18:20:6e:a5:49:ad:c2:
7b:0b:0c:ff:c2:3b:de:53:33:99:75:c0:fa:1f:e5:
55:02:a9:c4:9d:fa:75:ba:5b:8f:b3:01:6e:4c:ec:
04:88:94:e1:f0:5f:49:2e:c8:99:02:77:64:42:60:
df:bf:91:ac:9a:f7:16:72:50:97:97:59:0e:9c:a1:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:24:B6:39:EB:C5:5F:9A:20:6E:9E:DE:C4:CD:8C:3B:20:45:CD:B0
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:1f:4a:cc:a9:4c:76:98:83:34:22:ea:b1:b1:70:bc:d1:5c:
59:d8:4a:d1:ae:1e:6f:85:00:d5:6d:0c:7a:1d:63:8f:51:e1:
a1:0d:10:e9:d0:dd:ae:23:70:62:9e:4a:dd:32:bb:ae:b6:0a:
79:d2:56:ec:3f:3c:ad:62:47:75:a7:3b:78:3b:db:82:b3:06:
e4:3f:08:a2:09:40:68:12:83:33:6b:4b:e0:e7:82:02:a2:4b:
bf:3e:94:6e:23:f2:3e:aa:a7:0b:97:8f:68:2d:09:d7:da:06:
95:ad:96:6e:cd:a0:f0:a3:8e:4f:f4:01:77:a9:f4:6a:9c:65:
dd:26:7a:fe:d3:39:1b:0a:37:70:ac:5a:8f:26:ac:8f:a6:6b:
b4:12:51:84:11:bf:71:18:0d:98:46:94:54:5e:07:a9:c4:bf:
2c:4d:4a:50:74:59:64:0d:06:3c:df:02:9d:21:e6:b6:09:64:
28:53:b1:4e:f1:fa:bb:03:4f:d4:a0:8e:77:ed:33:02:a3:f9:
a4:35:b5:7f:a5:9b:08:53:37:04:97:70:64:1b:e7:40:3a:57:
dd:06:ba:09:1f:03:50:65:d4:b4:ab:9f:1b:be:7a:63:0e:73:
fd:26:b1:e5:3e:ed:6c:65:eb:62:4d:8a:05:02:31:b0:84:aa:
90:c9:a0:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhogn6mL+7PxjhLhhu6ZWjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOGFhZTE4OWM2M2NlYjU2NDNjYjA4MDMyN2JjYWEzYjBl
ZjhhNTkwHhcNMjUwODAyMDIwMDM5WhcNMjUwODAzMDIwMDM5WjAzMTEwLwYDVQQD
Eyg2MDI0YjYzOWViYzU1ZjlhMjA2ZTllZGVjNGNkOGMzYjIwNDVjZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZPGpiGOgapl9/WKoKs3ZmGu2nbf
+cB0ETIuXnRPuG8YDaWr1es9RBPBmruYaEL8THReUdbnp2cmwmyEc5fcvFcDPwWz
KDrn+myqHhxJQaQ7zu0NNXd5KT93SzGn5fMb9Lond7YEjCfTgq5sxZiEjegDeu4V
tYdEkKr8lDL5bIchY+zBNS5MxbPJCC/yXPI1En1+5o40R+V1E402x0mfjZIbUusr
SIFdTWWfqm5BkzmnKeUyQPzfWOxyGRggbqVJrcJ7Cwz/wjveUzOZdcD6H+VVAqnE
nfp1uluPswFuTOwEiJTh8F9JLsiZAndkQmDfv5GsmvcWclCXl1kOnKEQiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAktjnrxV+aIG6e3sTNjDsgRc2wMB8GA1UdIwQY
MBaAFAyKrhicY861ZDywgDJ7yqOw74pZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQt
YjZiYTg2Y2YzMWY5LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQtYjZiYTg2Y2YzMWY5
LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxR9KzKlM
dpiDNCLqsbFwvNFcWdhK0a4eb4UA1W0Meh1jj1HhoQ0Q6dDdriNwYp5K3TK7rrYK
edJW7D88rWJHdac7eDvbgrMG5D8IoglAaBKDM2tL4OeCAqJLvz6UbiPyPqqnC5eP
aC0J19oGla2Wbs2g8KOOT/QBd6n0apxl3SZ6/tM5Gwo3cKxajyasj6ZrtBJRhBG/
cRgNmEaUVF4HqcS/LE1KUHRZZA0GPN8CnSHmtglkKFOxTvH6uwNP1KCOd+0zAqP5
pDW1f6WbCFM3BJdwZBvnQDpX3Qa6CR8DUGXUtKufG756Yw5z/Sax5T7tbGXrYk2K
BQIxsISqkMmgVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 2 05:53:21 2025 by rpki-client