Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: 47R7yeEXFjZ1FNUr0niNjTM8daRRteOAU0kSbzAOpMw=
Subject key identifier: CD:EA:7A:AA:84:9E:B0:6E:4D:A9:5E:0E:4E:6F:90:F9:C9:A0:7A:C7
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 01988B7CDC5BE31EB1A0137F2D53B36684D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 21:01:12 +0000
Manifest this update: Fri 08 Aug 2025 21:01:12 +0000
Manifest next update: Sat 09 Aug 2025 21:01:12 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: MPZ5NEa/9OZkCr/sI0WQLOBn8NeeDiOA6FqCk4TlqM0=)
2: buG6SoB8WcvMJVkAM0M1bD-X7DY.roa (hash: 4+Zsq3JV6DU94isVPAz6RpxYAcC5faMNhVluTUisCrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:dc:5b:e3:1e:b1:a0:13:7f:2d:53:b3:66:84:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Aug 8 21:01:12 2025 GMT
Not After : Aug 9 21:01:12 2025 GMT
Subject: CN=cdea7aaa849eb06e4da95e0e4e6f90f9c9a07ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:21:5a:cd:7e:1c:26:43:87:da:81:fa:a0:
94:65:dd:43:b3:17:b2:93:32:33:d9:3a:88:0a:5a:
dc:a0:e9:88:95:4c:8a:2f:26:8c:08:34:b9:dc:75:
49:63:1b:c9:64:4b:76:41:5c:4a:e2:b5:5f:0d:db:
9d:23:da:5e:24:7c:67:f8:db:af:84:f2:0b:c2:d2:
77:24:8f:f4:16:8b:ba:8e:54:11:95:be:4b:d7:b7:
ee:45:c1:f0:b2:09:3b:11:37:b7:69:c9:f1:d4:f5:
99:db:04:96:be:7c:f0:ae:f3:0e:d8:07:11:87:34:
15:b3:24:ff:89:d8:02:4b:58:d6:f7:e1:c2:ce:01:
22:5f:91:7f:dc:57:c6:a4:a3:ab:74:c4:68:e4:16:
a0:c0:1c:85:ca:37:ef:ac:90:72:77:ca:61:bf:cf:
14:7d:af:45:9e:fa:b9:49:2b:99:d3:68:c5:5f:55:
fd:0f:cf:18:c0:70:37:29:c5:29:15:08:46:e2:33:
3f:fe:47:e5:df:28:e7:47:74:cf:12:9b:53:a2:56:
5e:10:25:51:95:a0:6c:28:3d:79:03:75:70:33:00:
f5:8e:0f:43:e7:12:9e:b8:bd:fc:0e:07:2d:e1:9d:
2f:a1:10:e0:f1:75:7a:fd:d0:bc:35:42:76:0d:7d:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EA:7A:AA:84:9E:B0:6E:4D:A9:5E:0E:4E:6F:90:F9:C9:A0:7A:C7
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cf:f3:f8:a8:8a:da:15:7d:12:6f:97:e0:bb:c2:25:fd:43:
d9:6a:6a:b9:2d:67:a0:72:b9:92:68:da:32:89:7d:7c:23:ba:
31:4a:b4:1a:a2:b8:eb:2e:a0:8d:3c:e5:c1:63:b7:d4:e7:3a:
9e:ca:59:ad:b2:46:d1:9a:06:d8:ad:26:0f:a0:a7:82:30:59:
2b:9e:5c:b7:b4:b8:ea:fa:ce:4c:79:07:89:52:3d:6c:0b:17:
68:48:96:e7:32:6e:78:1f:b6:50:ab:51:d4:b8:39:ca:5b:25:
fc:9d:4b:25:6d:53:cd:bd:b9:f9:93:70:64:2a:64:68:04:1a:
2a:cb:6f:8a:21:82:95:1b:c7:12:e2:31:c4:45:4d:92:35:02:
7d:2a:bf:8d:54:b4:38:8d:81:f0:5d:20:38:96:d5:f5:5f:b6:
3f:78:f2:c2:bd:f3:a7:24:57:b1:59:b2:3f:64:75:b9:44:0a:
08:8a:fb:14:5f:09:cc:e7:5e:cd:46:37:39:2f:8f:55:a1:22:
f7:24:07:31:c5:76:25:a0:ff:90:01:5f:20:cd:56:f1:71:63:
2e:e3:43:2c:0b:f3:f6:34:39:76:1a:be:e4:58:e3:38:05:de:
31:09:cf:00:fc:11:79:9b:48:fb:bd:8f:f0:35:fe:5b:34:aa:
69:fd:a7:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfNxb4x6xoBN/LVOzZoTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMjYyNWJkZmZhOTQzN2RjMmI5NmQ4YWUwMjMxMDBiYzg4
ZTZmZTMwHhcNMjUwODA4MjEwMTEyWhcNMjUwODA5MjEwMTEyWjAzMTEwLwYDVQQD
EyhjZGVhN2FhYTg0OWViMDZlNGRhOTVlMGU0ZTZmOTBmOWM5YTA3YWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VghWs1+HCZDh9qB+qCUZd1Dsxey
kzIz2TqIClrcoOmIlUyKLyaMCDS53HVJYxvJZEt2QVxK4rVfDdudI9peJHxn+Nuv
hPILwtJ3JI/0Fou6jlQRlb5L17fuRcHwsgk7ETe3acnx1PWZ2wSWvnzwrvMO2AcR
hzQVsyT/idgCS1jW9+HCzgEiX5F/3FfGpKOrdMRo5BagwByFyjfvrJByd8phv88U
fa9Fnvq5SSuZ02jFX1X9D88YwHA3KcUpFQhG4jM//kfl3yjnR3TPEptTolZeECVR
laBsKD15A3VwMwD1jg9D5xKeuL38Dgct4Z0voRDg8XV6/dC8NUJ2DX1bNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3qeqqEnrBuTaleDk5vkPnJoHrHMB8GA1UdIwQY
MBaAFAwmJb3/qUN9wrltiuAjEAvIjm/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85Yzc4YjktZGEzOS00NTBmLWJiOTYt
MDc4MDRhZmY0OTBmLzEvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85Yzc4YjktZGEzOS00NTBmLWJiOTYtMDc4MDRhZmY0OTBm
LzEvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGs/z+KiK
2hV9Em+X4LvCJf1D2WpquS1noHK5kmjaMol9fCO6MUq0GqK46y6gjTzlwWO31Oc6
nspZrbJG0ZoG2K0mD6CngjBZK55ct7S46vrOTHkHiVI9bAsXaEiW5zJueB+2UKtR
1Lg5ylsl/J1LJW1Tzb25+ZNwZCpkaAQaKstviiGClRvHEuIxxEVNkjUCfSq/jVS0
OI2B8F0gOJbV9V+2P3jywr3zpyRXsVmyP2R1uUQKCIr7FF8JzOdezUY3OS+PVaEi
9yQHMcV2JaD/kAFfIM1W8XFjLuNDLAvz9jQ5dhq+5FjjOAXeMQnPAPwReZtI+72P
8DX+WzSqaf2nsQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:32 2025 by rpki-client