Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: SsZfogAyPEpFCEKKHozfura8IywuvloqxFM/yKa08Cc=
Subject key identifier: B8:25:A6:2E:D7:3C:26:EF:DB:9D:0F:77:E7:8D:C8:FF:34:C7:1A:FA
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 01976DAB29DA234C0016926B9A4635F74F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 123D
Signing time: Sat 14 Jun 2025 09:00:23 +0000
Manifest this update: Sat 14 Jun 2025 09:00:23 +0000
Manifest next update: Sun 15 Jun 2025 09:00:23 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: /kiGgSqcQP/sSjwmJsJhhEM5OTDZT9k2eYd9UsPMFvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:29:da:23:4c:00:16:92:6b:9a:46:35:f7:4f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Jun 14 09:00:23 2025 GMT
Not After : Jun 15 09:00:23 2025 GMT
Subject: CN=b825a62ed73c26efdb9d0f77e78dc8ff34c71afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:98:8e:f8:f2:fe:c3:96:f4:d0:2f:0b:b6:
52:46:2c:67:92:d8:cb:de:58:f0:1a:7d:dd:fe:66:
72:e6:4f:2e:01:6b:7f:4c:11:0f:ce:e7:60:91:8f:
40:8d:ba:35:64:7e:b1:24:aa:e0:67:be:03:93:8d:
7c:19:0c:85:95:f2:3e:0c:08:af:51:5b:86:db:93:
73:06:49:fa:db:58:ca:98:a6:1f:28:ab:d2:fa:12:
ca:1f:36:f9:11:22:6a:42:fc:a1:2e:14:4e:23:f6:
66:ae:a0:f0:4b:08:03:54:62:8a:3c:b8:f9:8b:30:
44:c8:5b:08:d9:0f:50:db:45:6c:32:ee:c3:a9:43:
b9:3b:ec:8a:7b:65:79:4e:cb:84:b2:86:47:96:a5:
21:ed:0c:23:cd:7c:5f:43:58:c7:98:e6:2f:74:10:
71:4f:bf:f7:3c:83:87:a3:ad:e5:67:ae:50:21:e9:
35:b3:88:ef:e3:d2:9a:69:47:1e:41:8e:98:9e:71:
ce:f1:35:ce:4d:49:a3:60:60:bc:60:7f:12:c9:a8:
6a:6b:d9:aa:20:48:1b:40:fc:99:c4:db:31:fa:61:
d9:1d:d5:43:b4:19:19:ed:4d:a7:5a:f0:3b:d3:02:
90:cc:a5:87:31:87:5c:b0:72:0f:18:73:8d:e0:8d:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:A6:2E:D7:3C:26:EF:DB:9D:0F:77:E7:8D:C8:FF:34:C7:1A:FA
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e4:9f:37:63:c0:f1:ec:40:61:92:a9:f7:29:ad:44:92:f0:
c0:46:15:e6:91:c4:5d:19:4c:15:9e:5c:e4:8a:cd:01:b0:d5:
45:6f:8a:95:0b:51:80:3d:f9:c6:f1:d6:ee:aa:35:2a:14:49:
da:24:e8:1d:9a:5e:a2:05:cc:be:97:38:c2:34:55:d2:f1:93:
3f:b4:4b:54:8a:ca:81:ad:49:d9:cc:59:40:8b:50:86:1f:ae:
55:67:13:df:8e:d4:8e:68:4f:58:95:7f:71:09:3d:ba:68:de:
d5:3d:24:fb:37:df:00:59:3c:f4:b2:1f:a5:1c:ee:55:92:4a:
2e:c1:1b:4e:4f:25:a0:c9:6a:d1:ab:8a:8a:b9:df:5e:78:52:
9a:d8:a5:ef:c6:9d:cb:e0:1d:4d:1b:fa:07:3a:09:0b:2e:61:
7a:a4:68:70:d2:39:04:81:6d:37:52:59:fa:35:b2:b1:bf:24:
f8:17:61:29:29:53:e0:62:0e:08:1d:b8:f9:a6:98:2e:9d:d0:
47:07:69:94:58:17:24:e7:6a:d6:24:17:81:89:34:d1:13:bc:
41:13:cd:90:11:78:70:c7:54:81:7b:5d:21:b6:dc:4c:49:82:
cb:49:7f:0a:d9:9b:15:64:fa:b7:0d:a6:b8:0e:57:61:65:a7:
92:5c:ba:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtqynaI0wAFpJrmkY1909cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDgwODlhYWE3YzI4MzY1NGJjZGE1MGE5MzM0NjRlNzEy
NzkxYjAwHhcNMjUwNjE0MDkwMDIzWhcNMjUwNjE1MDkwMDIzWjAzMTEwLwYDVQQD
EyhiODI1YTYyZWQ3M2MyNmVmZGI5ZDBmNzdlNzhkYzhmZjM0YzcxYWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRmYjvjy/sOW9NAvC7ZSRixnktjL
3ljwGn3d/mZy5k8uAWt/TBEPzudgkY9Ajbo1ZH6xJKrgZ74Dk418GQyFlfI+DAiv
UVuG25NzBkn621jKmKYfKKvS+hLKHzb5ESJqQvyhLhROI/ZmrqDwSwgDVGKKPLj5
izBEyFsI2Q9Q20VsMu7DqUO5O+yKe2V5TsuEsoZHlqUh7QwjzXxfQ1jHmOYvdBBx
T7/3PIOHo63lZ65QIek1s4jv49KaaUceQY6YnnHO8TXOTUmjYGC8YH8Syahqa9mq
IEgbQPyZxNsx+mHZHdVDtBkZ7U2nWvA70wKQzKWHMYdcsHIPGHON4I2OjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLglpi7XPCbv250Pd+eNyP80xxr6MB8GA1UdIwQY
MBaAFA8ICJqqfCg2VLzaUKkzRk5xJ5GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgt
NjMwNDIzMmJlYzNjLzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgtNjMwNDIzMmJlYzNj
LzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOSfN2PA
8exAYZKp9ymtRJLwwEYV5pHEXRlMFZ5c5IrNAbDVRW+KlQtRgD35xvHW7qo1KhRJ
2iToHZpeogXMvpc4wjRV0vGTP7RLVIrKga1J2cxZQItQhh+uVWcT347UjmhPWJV/
cQk9umje1T0k+zffAFk89LIfpRzuVZJKLsEbTk8loMlq0auKirnfXnhSmtil78ad
y+AdTRv6BzoJCy5heqRocNI5BIFtN1JZ+jWysb8k+BdhKSlT4GIOCB24+aaYLp3Q
RwdplFgXJOdq1iQXgYk00RO8QRPNkBF4cMdUgXtdIbbcTEmCy0l/CtmbFWT6tw2m
uA5XYWWnkly6kQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:04:09 2025 by rpki-client