Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: s5asivDr1YgiFnWtcNPIKq6s0b9soHv5qO9wyfxxsOU=
Subject key identifier: C1:E5:0A:90:74:3E:EA:FD:1A:00:1D:8B:C6:4B:40:32:AD:79:9C:45
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 019872624BAA1F58814615B3A9B00F76DB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0C2A
Signing time: Mon 04 Aug 2025 00:01:41 +0000
Manifest this update: Mon 04 Aug 2025 00:01:41 +0000
Manifest next update: Tue 05 Aug 2025 00:01:41 +0000
Files and hashes: 1: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: sPmO06/hs+ncJaonQE5knj/jCv2TN6Va8fYmmh7Vfz4=)
2: VZiF-Ol32xpPvgDNLsgn8o2ll8Q.roa (hash: jUXaFXCucr/kHxmzz2/hS3PZ0b17pBJZMH+/2Ezk2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:4b:aa:1f:58:81:46:15:b3:a9:b0:0f:76:db:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Aug 4 00:01:41 2025 GMT
Not After : Aug 5 00:01:41 2025 GMT
Subject: CN=c1e50a90743eeafd1a001d8bc64b4032ad799c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:04:75:18:06:d6:5b:2d:f6:13:ac:4d:0f:6d:
f4:6e:43:4b:b3:09:c3:44:14:8e:4e:0c:b1:3b:eb:
f0:78:76:ac:51:7d:19:09:01:d2:7b:db:57:65:25:
96:67:de:25:67:33:28:d5:cc:05:7e:10:3d:ab:56:
90:8a:08:5f:99:77:98:e2:e9:23:08:17:a0:93:0f:
d3:7a:09:b0:24:3a:ce:fe:f9:76:60:86:c3:ff:53:
d6:9f:e6:50:fd:f0:20:81:6c:2d:67:e7:66:f6:c2:
58:56:9d:ac:78:3c:6f:eb:d4:fa:e8:f3:80:ad:2a:
aa:2b:49:42:66:4c:ab:07:39:4d:e0:e9:cc:67:02:
f6:64:af:3c:b1:ce:16:5d:03:fd:3e:34:e1:f4:4f:
db:8a:48:da:7c:6e:ce:33:65:4c:b2:2b:32:a9:49:
58:72:10:aa:c7:4e:55:8e:9c:e8:63:5b:40:de:64:
ad:e6:fc:af:8f:35:a5:04:ec:95:c5:da:74:c8:26:
52:19:d8:f2:df:86:59:06:98:c2:03:65:92:f0:07:
d3:16:8c:08:1e:86:cb:73:c2:9a:ba:f4:27:3d:e2:
cd:9d:e6:df:2f:a2:c6:2d:38:aa:ac:62:03:a3:92:
06:e4:0f:9c:f5:fb:c5:bc:cc:09:75:13:99:cc:73:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E5:0A:90:74:3E:EA:FD:1A:00:1D:8B:C6:4B:40:32:AD:79:9C:45
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:75:34:c9:ce:a2:34:95:35:7a:73:32:82:54:66:0c:a5:f6:
82:ac:da:6e:70:45:59:1b:de:87:6d:1e:48:db:07:d1:1d:ab:
70:4e:4e:13:b5:87:bc:6e:b3:da:78:2d:43:17:42:16:c1:6f:
63:31:89:dc:8f:95:17:c7:52:0b:9b:c0:9a:f9:65:6b:b4:2b:
31:e6:a0:f2:a6:f8:05:c3:30:ad:c9:94:06:ed:2f:58:7d:0c:
e3:35:25:1b:73:dc:81:2d:c2:8f:76:f6:23:0e:11:c4:7c:c2:
72:89:75:ae:df:47:e7:a7:49:90:63:fc:ee:41:75:63:a3:58:
b0:14:49:da:22:26:be:2d:2e:46:73:f3:30:ce:ec:a0:70:f5:
af:07:87:f2:f8:cc:d1:a2:f0:8a:04:d0:bc:43:0c:e9:98:b6:
d8:81:36:57:b9:50:32:e2:f3:a5:10:fb:1d:cc:df:03:80:4b:
60:b4:f8:7b:5e:cc:ea:d2:d9:a1:88:32:6d:d1:35:a6:c3:da:
7a:80:21:a2:17:61:b5:17:55:0f:10:bb:c4:fd:33:0b:65:3a:
9d:12:e2:a6:31:fe:a5:62:78:b7:c7:63:1c:a6:2f:4e:e4:65:
1a:fc:e7:2e:32:9b:ed:ad:60:44:da:7c:f5:a0:bc:4d:63:91:
c8:47:98:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyYkuqH1iBRhWzqbAPdtuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzU1NzIxM2E2NzI1MjgyYjI0YTY4NTMwOGU5Y2Y4NDEw
N2FjN2QwHhcNMjUwODA0MDAwMTQxWhcNMjUwODA1MDAwMTQxWjAzMTEwLwYDVQQD
EyhjMWU1MGE5MDc0M2VlYWZkMWEwMDFkOGJjNjRiNDAzMmFkNzk5YzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwR1GAbWWy32E6xND230bkNLswnD
RBSOTgyxO+vweHasUX0ZCQHSe9tXZSWWZ94lZzMo1cwFfhA9q1aQighfmXeY4ukj
CBegkw/TegmwJDrO/vl2YIbD/1PWn+ZQ/fAggWwtZ+dm9sJYVp2seDxv69T66POA
rSqqK0lCZkyrBzlN4OnMZwL2ZK88sc4WXQP9PjTh9E/bikjafG7OM2VMsisyqUlY
chCqx05VjpzoY1tA3mSt5vyvjzWlBOyVxdp0yCZSGdjy34ZZBpjCA2WS8AfTFowI
HobLc8KauvQnPeLNnebfL6LGLTiqrGIDo5IG5A+c9fvFvMwJdROZzHMUlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHlCpB0Pur9GgAdi8ZLQDKteZxFMB8GA1UdIwQY
MBaAFAw1VyE6ZyUoKySmhTCOnPhBB6x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjct
ZjZlZDgzZTc4ZWY1LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjctZjZlZDgzZTc4ZWY1
LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHU0yc6i
NJU1enMyglRmDKX2gqzabnBFWRveh20eSNsH0R2rcE5OE7WHvG6z2ngtQxdCFsFv
YzGJ3I+VF8dSC5vAmvlla7QrMeag8qb4BcMwrcmUBu0vWH0M4zUlG3PcgS3Cj3b2
Iw4RxHzCcol1rt9H56dJkGP87kF1Y6NYsBRJ2iImvi0uRnPzMM7soHD1rweH8vjM
0aLwigTQvEMM6Zi22IE2V7lQMuLzpRD7HczfA4BLYLT4e17M6tLZoYgybdE1psPa
eoAhohdhtRdVDxC7xP0zC2U6nRLipjH+pWJ4t8djHKYvTuRlGvznLjKb7a1gRNp8
9aC8TWORyEeYIg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:52 2025 by rpki-client