Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier: 5/rzJfgEDteGPvg9tyIcbvIsLzZ1Ts/d5p9Tw3OFhkM=
Subject key identifier: 8E:22:7C:A0:B9:62:BE:25:37:56:6C:CD:87:53:AF:68:25:BF:BF:F6
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial: 019892C9D1F27A0555DD75011DC2A33B8CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 07:02:36 +0000
Manifest this update: Sun 10 Aug 2025 07:02:36 +0000
Manifest next update: Mon 11 Aug 2025 07:02:36 +0000
Files and hashes: 1: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: xFXx3/76RjDAZBws9yvJKZnZPeyFgG7we5cQBxtM12s=)
2: Kw07JxAM6PIjr2ZZEDMn7JfYALU.roa (hash: 7yLwIb1VffX9y/T7PbcK03UjKmQOn5ktXM/NbKeEUqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:d1:f2:7a:05:55:dd:75:01:1d:c2:a3:3b:8c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Validity
Not Before: Aug 10 07:02:36 2025 GMT
Not After : Aug 11 07:02:36 2025 GMT
Subject: CN=8e227ca0b962be2537566ccd8753af6825bfbff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:eb:a0:9d:a5:51:6f:11:39:25:c6:94:31:
b8:8d:bb:d2:db:73:81:4e:83:9c:74:d6:7c:58:93:
73:40:2c:83:06:72:3a:41:05:fe:95:78:5b:58:59:
2b:61:df:58:7f:db:50:4e:d5:d7:90:09:8e:92:29:
f1:0e:d7:0c:b2:5e:e8:6b:32:a3:ba:8c:64:18:9d:
1d:fb:7d:d6:59:1e:84:70:ce:d2:f8:f9:1d:02:a3:
3a:0e:cd:62:5c:5c:7c:75:66:8a:b0:8a:37:14:72:
30:0b:4b:da:62:e9:36:7c:67:fe:54:8f:87:30:17:
a1:5f:97:ac:85:00:fb:02:02:1b:3d:65:60:d3:0f:
69:39:46:d8:5c:02:cd:cf:ad:88:ea:ca:4f:5c:47:
b6:1f:30:70:93:0b:3e:c6:9a:31:98:36:a4:3e:43:
83:e5:c5:11:4e:a4:fe:06:a7:d8:aa:c1:80:46:75:
4c:bf:68:34:34:61:6b:a4:d8:ea:88:62:e3:a3:33:
d7:ae:8c:15:ee:41:15:20:fa:d3:20:d6:0a:37:ca:
57:31:0d:7b:c8:be:01:23:7a:a8:bc:0b:6f:94:c1:
ce:c0:9c:ac:13:ca:ba:4b:46:09:4a:ec:81:39:1a:
72:c0:74:96:9d:90:61:08:75:2c:9e:d4:96:61:c3:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:22:7C:A0:B9:62:BE:25:37:56:6C:CD:87:53:AF:68:25:BF:BF:F6
X509v3 Authority Key Identifier:
keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7f:d9:6a:b9:7f:e5:35:76:e1:78:1b:7a:b4:f1:c2:ed:fe:
cf:fc:c1:62:9d:89:51:83:f7:12:7e:0d:f5:c9:6f:c4:74:5e:
fd:45:55:ff:ae:86:07:d4:ac:29:69:19:41:eb:c7:51:3f:4b:
0a:3d:b0:05:e5:fa:d7:2d:43:d1:1b:e1:7f:d0:20:2a:13:dd:
74:c0:1f:cc:bc:49:72:b5:b1:b2:5c:e0:7b:5b:8c:72:24:7d:
19:f6:f4:85:a2:1a:b7:13:5c:46:35:d9:f6:36:bd:58:02:e3:
ad:b9:6a:0e:2a:a5:e2:c5:94:44:5e:8b:6c:91:4b:13:a1:5d:
18:e2:7b:33:e5:91:88:6a:40:25:b0:3c:67:05:aa:cd:bc:3b:
54:93:7d:3d:12:e7:26:a3:44:71:00:37:e9:73:e0:ba:7c:5c:
59:30:3e:e6:76:28:56:83:c3:48:7b:64:5c:02:82:c9:ea:4e:
6e:31:f4:66:f0:bc:5a:98:16:92:4d:d6:22:73:a0:fe:59:fd:
4c:56:f6:2f:b1:63:cb:20:42:d0:7b:92:36:13:59:d1:57:f0:
e0:b3:8d:f1:e8:c8:b5:c6:b7:80:f8:87:d6:f3:f3:ad:36:4e:
0c:d0:3f:aa:bc:dc:d6:2e:59:cb:87:d9:79:59:f6:0d:6c:30:
12:76:6c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSydHyegVV3XUBHcKjO4ygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWYxMTU0YTlhMTVkNWE4M2E5YTk4MTdhNzI0YmZjNTM5
ZGI1OTYwHhcNMjUwODEwMDcwMjM2WhcNMjUwODExMDcwMjM2WjAzMTEwLwYDVQQD
Eyg4ZTIyN2NhMGI5NjJiZTI1Mzc1NjZjY2Q4NzUzYWY2ODI1YmZiZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvLroJ2lUW8ROSXGlDG4jbvS23OB
ToOcdNZ8WJNzQCyDBnI6QQX+lXhbWFkrYd9Yf9tQTtXXkAmOkinxDtcMsl7oazKj
uoxkGJ0d+33WWR6EcM7S+PkdAqM6Ds1iXFx8dWaKsIo3FHIwC0vaYuk2fGf+VI+H
MBehX5eshQD7AgIbPWVg0w9pOUbYXALNz62I6spPXEe2HzBwkws+xpoxmDakPkOD
5cURTqT+BqfYqsGARnVMv2g0NGFrpNjqiGLjozPXrowV7kEVIPrTINYKN8pXMQ17
yL4BI3qovAtvlMHOwJysE8q6S0YJSuyBORpywHSWnZBhCHUsntSWYcP+vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4ifKC5Yr4lN1ZszYdTr2glv7/2MB8GA1UdIwQY
MBaAFAyfEVSpoV1ag6mpgXpyS/xTnbWWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREo4UlZLbWhYVnFEcWFtQmVuSkxfRk9kdFpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMGQzZDctMWMzNS00N2NiLTg1MDQt
YjlkYmE2MzliMWIxLzEvREo4UlZLbWhYVnFEcWFtQmVuSkxfRk9kdFpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMGQzZDctMWMzNS00N2NiLTg1MDQtYjlkYmE2MzliMWIx
LzEvREo4UlZLbWhYVnFEcWFtQmVuSkxfRk9kdFpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALH/Zarl/
5TV24XgberTxwu3+z/zBYp2JUYP3En4N9clvxHRe/UVV/66GB9SsKWkZQevHUT9L
Cj2wBeX61y1D0Rvhf9AgKhPddMAfzLxJcrWxslzge1uMciR9Gfb0haIatxNcRjXZ
9ja9WALjrblqDiql4sWURF6LbJFLE6FdGOJ7M+WRiGpAJbA8ZwWqzbw7VJN9PRLn
JqNEcQA36XPgunxcWTA+5nYoVoPDSHtkXAKCyepObjH0ZvC8WpgWkk3WInOg/ln9
TFb2L7FjyyBC0HuSNhNZ0Vfw4LON8ejItca3gPiH1vPzrTZODNA/qrzc1i5Zy4fZ
eVn2DWwwEnZs4Q==
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:42:05 2025 by rpki-client