Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier: 7jO2lRE4e7AU2Kjpnul3i/V4R2nsGjbKCgtiuIWYGcg=
Subject key identifier: 45:22:F0:77:DC:1B:B1:21:DB:68:17:54:D5:67:ED:21:BE:A0:51:E7
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 019887A014580D77CBE95059F4B7D08DC641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number: 0435
Signing time: Fri 08 Aug 2025 03:01:11 +0000
Manifest this update: Fri 08 Aug 2025 03:01:11 +0000
Manifest next update: Sat 09 Aug 2025 03:01:11 +0000
Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: aHbrLIAgA/S3GSbjrY3dlEFNlvPeYQKlz9Ms5rR310M=)
2: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (hash: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:a0:14:58:0d:77:cb:e9:50:59:f4:b7:d0:8d:c6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Aug 8 03:01:11 2025 GMT
Not After : Aug 9 03:01:11 2025 GMT
Subject: CN=4522f077dc1bb121db681754d567ed21bea051e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:34:f6:48:4d:c4:45:76:9b:0f:32:3f:68:
62:d0:1e:c1:5c:35:36:7c:16:ae:a6:ab:63:1f:18:
64:cc:47:5c:70:3c:c9:de:e5:b1:5d:e1:09:2a:69:
33:e3:55:26:4f:27:9b:0e:e0:34:c8:cb:42:a6:7c:
8a:2f:a1:ac:82:64:ec:6e:94:98:90:62:55:83:a9:
48:a3:c4:53:7a:40:46:2a:de:0b:93:5e:8d:9e:42:
76:78:eb:2a:fe:f2:69:f5:6e:25:ae:0c:fd:ce:53:
42:0b:cd:9b:7b:a2:8d:8d:43:1b:0b:09:0c:03:60:
0a:77:9e:ae:ba:f0:12:2c:54:7a:34:30:cd:e0:5a:
7b:e6:4b:af:9d:38:3e:35:44:8d:fb:ed:61:55:ef:
f8:7b:d1:7a:d4:0b:6d:65:db:c0:bb:7d:a8:c8:f9:
52:de:17:68:42:8e:76:62:6a:54:df:0c:ae:18:61:
8a:dc:19:13:6f:68:3a:a3:3a:79:64:43:41:15:a3:
97:ae:a6:a9:b7:1e:ff:15:d1:36:8f:5f:b8:90:36:
fe:44:b3:87:ec:13:77:c6:d2:41:4c:a8:43:20:8d:
33:b6:1b:44:ef:6f:fb:88:ef:ea:58:14:b7:12:41:
a7:6c:00:7d:06:5e:b2:24:7d:c0:68:4a:4b:71:3c:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:22:F0:77:DC:1B:B1:21:DB:68:17:54:D5:67:ED:21:BE:A0:51:E7
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7f:cd:38:96:aa:80:7b:bb:47:96:5a:07:a7:25:1c:83:1a:
4b:0b:e5:4f:f1:07:3c:4c:82:36:25:b5:98:a7:92:fa:8b:81:
3d:6e:43:2d:d7:45:05:c7:c2:97:8e:44:29:1c:64:01:82:3c:
af:7e:b0:c5:10:68:b7:18:59:b1:87:bb:10:97:02:cc:7e:e2:
23:fb:0f:07:16:65:ca:5a:d4:5a:64:b3:62:7e:81:e1:9c:5a:
ed:b3:b1:02:d7:5d:45:ca:e0:ff:45:09:34:70:f9:4d:43:cc:
e6:82:b6:54:c1:68:d5:ea:be:57:ab:8f:d8:a5:ef:c2:75:27:
8b:b9:8b:8d:22:c1:f8:fd:a3:f9:77:18:aa:cc:29:83:34:8a:
0a:52:af:3d:93:cb:e4:a9:e9:3a:2c:62:bf:9e:1b:2c:fd:73:
c6:e2:44:c2:e8:e1:51:45:05:f6:b5:87:50:84:2c:de:46:c8:
78:e1:98:a6:8a:77:1d:d1:76:ff:f1:48:9b:44:cb:49:93:82:
0f:9e:7d:d1:cd:af:7a:83:cd:de:8c:15:f9:27:f8:f8:66:88:
89:f7:1c:69:b5:f0:12:24:75:90:af:b6:d2:9a:73:98:07:64:
45:e4:6e:20:38:f3:be:24:6d:fb:d2:ee:67:45:20:d9:00:d2:
49:16:92:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiHoBRYDXfL6VBZ9LfQjcZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MThjMjI3M2FkNzQzNjQ2NDliY2IyZTJkMzRmYjcwN2Y1
ZDViOTQwHhcNMjUwODA4MDMwMTExWhcNMjUwODA5MDMwMTExWjAzMTEwLwYDVQQD
Eyg0NTIyZjA3N2RjMWJiMTIxZGI2ODE3NTRkNTY3ZWQyMWJlYTA1MWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfs09khNxEV2mw8yP2hi0B7BXDU2
fBaupqtjHxhkzEdccDzJ3uWxXeEJKmkz41UmTyebDuA0yMtCpnyKL6GsgmTsbpSY
kGJVg6lIo8RTekBGKt4Lk16NnkJ2eOsq/vJp9W4lrgz9zlNCC82be6KNjUMbCwkM
A2AKd56uuvASLFR6NDDN4Fp75kuvnTg+NUSN++1hVe/4e9F61AttZdvAu32oyPlS
3hdoQo52YmpU3wyuGGGK3BkTb2g6ozp5ZENBFaOXrqaptx7/FdE2j1+4kDb+RLOH
7BN3xtJBTKhDII0zthtE72/7iO/qWBS3EkGnbAB9Bl6yJH3AaEpLcTwGeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUi8HfcG7Eh22gXVNVn7SG+oFHnMB8GA1UdIwQY
MBaAFHUYwic610NkZJvLLi00+3B/XVuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUt
ZDNkMzBlYmMzNmFjLzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUtZDNkMzBlYmMzNmFj
LzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3/NOJaq
gHu7R5ZaB6clHIMaSwvlT/EHPEyCNiW1mKeS+ouBPW5DLddFBcfCl45EKRxkAYI8
r36wxRBotxhZsYe7EJcCzH7iI/sPBxZlylrUWmSzYn6B4Zxa7bOxAtddRcrg/0UJ
NHD5TUPM5oK2VMFo1eq+V6uP2KXvwnUni7mLjSLB+P2j+XcYqswpgzSKClKvPZPL
5KnpOixiv54bLP1zxuJEwujhUUUF9rWHUIQs3kbIeOGYpop3HdF2//FIm0TLSZOC
D5590c2veoPN3owV+Sf4+GaIifccabXwEiR1kK+20ppzmAdkReRuIDjzviRt+9Lu
Z0Ug2QDSSRaStg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:24:09 2025 by rpki-client