Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: lqZG+IWsJ9pXAOSqr6UdvInX/Vz0O/A5rw4Seo59pC8=
Subject key identifier: 03:69:2A:9F:F8:BC:BC:5E:EE:F7:34:BB:5D:97:95:48:5B:C4:01:6E
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 019894B6B359366FA773DE33D22D8F34BF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 0409
Signing time: Sun 10 Aug 2025 16:00:58 +0000
Manifest this update: Sun 10 Aug 2025 16:00:58 +0000
Manifest next update: Mon 11 Aug 2025 16:00:58 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: YSuhtS0B501nrSJkTC95IZQdjDQhLarWoyh5DD1Hi0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:b3:59:36:6f:a7:73:de:33:d2:2d:8f:34:bf:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: Aug 10 16:00:58 2025 GMT
Not After : Aug 11 16:00:58 2025 GMT
Subject: CN=03692a9ff8bcbc5eeef734bb5d9795485bc4016e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:6a:66:8a:b2:e5:90:2d:a7:7e:7a:95:80:
ab:ef:ba:6b:70:32:0b:10:e3:36:b8:66:c4:4c:e0:
81:50:1b:00:14:59:18:41:ed:f6:39:d3:d9:ed:34:
54:bd:69:d5:ee:a7:4d:37:d9:e3:ac:9a:e5:07:a2:
10:47:4f:95:cb:8b:a9:a7:89:99:8a:9a:ea:b4:c9:
df:c7:d6:99:af:3b:b1:dc:08:07:80:7d:62:1c:5e:
b9:5e:81:1c:51:a3:4f:ba:fd:58:09:6b:2e:da:6c:
36:6f:c3:18:81:13:1c:fc:0c:94:70:32:90:2f:04:
fa:0e:cd:03:44:10:0a:40:9a:aa:cb:32:0b:40:33:
31:b1:3f:4f:57:4b:9a:06:ee:36:ab:40:b6:c6:9c:
0a:98:ca:7d:3f:10:8d:c1:8b:cb:48:f2:bf:ce:4c:
1f:a8:f0:f6:52:17:de:8f:86:fa:1c:7c:1f:eb:d9:
bd:17:43:78:cb:da:74:13:84:ff:c6:ff:4d:22:82:
d7:54:de:a2:02:45:7b:b7:22:2f:f4:f1:a3:cc:8a:
34:5f:ba:fd:c8:ee:0d:00:e3:c6:5c:23:f1:a4:5f:
dd:19:1a:2a:f9:e2:cb:47:e9:4e:0f:31:73:1b:29:
8c:66:46:bd:2f:00:50:2b:54:a9:ee:17:9e:0f:4b:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:69:2A:9F:F8:BC:BC:5E:EE:F7:34:BB:5D:97:95:48:5B:C4:01:6E
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e1:4c:6d:b3:0b:04:76:21:bc:6f:71:f0:31:d7:ec:a9:aa:
9e:1c:a1:58:60:e5:de:4e:9b:a5:aa:fa:51:59:a0:6b:bd:48:
68:eb:7e:7e:8e:2c:8d:fd:0c:78:53:57:7e:b1:1e:3c:ba:6b:
08:ea:70:27:9e:11:f2:df:e0:1a:2e:18:42:d5:be:06:7e:f3:
ec:9c:55:58:77:e3:d9:06:bc:8d:7e:16:00:fc:f1:e9:1e:28:
c5:dc:22:cd:df:3a:db:31:3d:b6:7a:c9:04:b2:7a:a0:bd:56:
e9:7d:39:92:21:57:87:12:f4:ad:3b:60:7f:75:c5:aa:c9:37:
9d:39:a5:22:10:02:ba:bd:a4:0f:aa:f0:0f:2b:86:da:d5:8a:
e9:20:fc:20:3b:dc:69:cb:c4:fa:d2:ff:6c:d4:41:d5:6b:7b:
85:c3:90:52:03:77:ac:6f:8b:0d:0a:65:33:7c:9a:6e:8d:29:
b7:71:25:96:a8:2e:46:db:7c:be:7b:54:7e:bf:da:30:22:6d:
4d:3d:b8:a9:f6:22:b2:66:54:69:ca:d9:9f:eb:61:7e:90:a4:
b9:cc:1b:8c:37:84:18:79:c1:39:d4:35:cc:2d:76:94:f3:21:
e9:8f:c2:2c:22:84:dc:2a:d2:8f:8c:28:19:46:d6:9b:0d:ba:
3d:29:fa:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUtrNZNm+nc94z0i2PNL9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZDk1MWI0M2FiOTcxZmQ5MmViNjNlYzI2YTViMjI2ZWQx
M2M3NTIwHhcNMjUwODEwMTYwMDU4WhcNMjUwODExMTYwMDU4WjAzMTEwLwYDVQQD
EygwMzY5MmE5ZmY4YmNiYzVlZWVmNzM0YmI1ZDk3OTU0ODViYzQwMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQpqZoqy5ZAtp356lYCr77prcDIL
EOM2uGbETOCBUBsAFFkYQe32OdPZ7TRUvWnV7qdNN9njrJrlB6IQR0+Vy4upp4mZ
iprqtMnfx9aZrzux3AgHgH1iHF65XoEcUaNPuv1YCWsu2mw2b8MYgRMc/AyUcDKQ
LwT6Ds0DRBAKQJqqyzILQDMxsT9PV0uaBu42q0C2xpwKmMp9PxCNwYvLSPK/zkwf
qPD2Uhfej4b6HHwf69m9F0N4y9p0E4T/xv9NIoLXVN6iAkV7tyIv9PGjzIo0X7r9
yO4NAOPGXCPxpF/dGRoq+eLLR+lODzFzGymMZka9LwBQK1Sp7heeD0tDFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANpKp/4vLxe7vc0u12XlUhbxAFuMB8GA1UdIwQY
MBaAFA7ZUbQ6uXH9kutj7CalsibtE8dSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mYjE0N2YtMDRlZS00OGYwLTgwN2Qt
ZmUzZGI1MjUzZWIwLzEvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mYjE0N2YtMDRlZS00OGYwLTgwN2QtZmUzZGI1MjUzZWIw
LzEvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOFMbbML
BHYhvG9x8DHX7KmqnhyhWGDl3k6bpar6UVmga71IaOt+fo4sjf0MeFNXfrEePLpr
COpwJ54R8t/gGi4YQtW+Bn7z7JxVWHfj2Qa8jX4WAPzx6R4oxdwizd862zE9tnrJ
BLJ6oL1W6X05kiFXhxL0rTtgf3XFqsk3nTmlIhACur2kD6rwDyuG2tWK6SD8IDvc
acvE+tL/bNRB1Wt7hcOQUgN3rG+LDQplM3yabo0pt3EllqguRtt8vntUfr/aMCJt
TT24qfYismZUacrZn+thfpCkucwbjDeEGHnBOdQ1zC12lPMh6Y/CLCKE3CrSj4wo
GUbWmw26PSn6Qw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:02 2025 by rpki-client