Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: c/gV11Bvfs4ur0Q53LJKHK98hIaMJ0H/pEmZ0ZSV6vo=
Subject key identifier: 04:5B:5E:7D:23:D5:1A:40:3C:6C:58:85:A0:46:A1:B0:07:38:54:B6
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 01989F3A1E1A41AC8189C440C9D72F680A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 1620
Signing time: Tue 12 Aug 2025 17:00:42 +0000
Manifest this update: Tue 12 Aug 2025 17:00:42 +0000
Manifest next update: Wed 13 Aug 2025 17:00:42 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: aEW9DSPDLqz51NSmbyF9fRNzcpF1w/+fF8iwGbX09jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:1e:1a:41:ac:81:89:c4:40:c9:d7:2f:68:0a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Aug 12 17:00:42 2025 GMT
Not After : Aug 13 17:00:42 2025 GMT
Subject: CN=045b5e7d23d51a403c6c5885a046a1b0073854b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:ba:5e:57:b4:8c:51:65:18:5a:fa:0b:bb:
ee:67:93:7e:23:1c:2b:bf:ee:46:99:09:f0:3a:ff:
83:11:f6:91:5a:42:d2:6d:b2:1f:ec:aa:27:fc:f6:
ef:5b:b9:40:a6:18:6e:c0:37:4a:2b:05:03:a1:64:
ee:2c:b4:98:33:32:58:7b:d1:4f:c7:da:16:c3:11:
ce:52:22:ab:dd:50:45:0e:8d:7e:f8:0c:0f:13:9d:
43:45:65:ed:d3:d4:bd:64:09:df:2f:b6:ee:4f:a6:
86:33:dd:74:19:57:0a:5c:13:a1:19:b8:1f:b5:cc:
64:87:58:b2:ef:a9:27:9f:79:05:ac:ce:07:2b:7e:
f6:58:a4:3b:af:fd:51:cd:10:e7:c9:c9:e8:a2:e1:
86:0a:ea:47:ff:ec:41:64:cb:43:af:d6:d0:55:d3:
0c:ad:ad:fb:30:bc:13:c0:d9:f7:bf:2a:be:f0:fd:
ae:cf:a8:e5:16:f8:58:5a:b6:61:f5:a3:9e:42:1e:
31:d9:2d:6a:e8:d8:26:72:90:76:05:c2:b6:e6:67:
63:9a:1b:cc:18:26:f6:5c:5d:83:14:1f:50:dc:f2:
77:01:76:4a:e0:67:2f:8a:db:76:8c:e9:b4:51:95:
6c:72:76:cf:3d:59:97:36:39:f8:03:1d:8f:ea:52:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5B:5E:7D:23:D5:1A:40:3C:6C:58:85:A0:46:A1:B0:07:38:54:B6
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:33:1b:18:07:48:df:46:6c:8a:0a:27:4c:ea:4d:63:84:06:
54:27:9d:72:6d:4c:f9:b1:ae:db:39:21:bc:c8:cf:87:8b:da:
4f:35:31:a6:fe:eb:5e:a6:91:89:d0:f9:14:0d:1d:eb:0e:2f:
97:66:bc:5a:c4:3d:5c:d0:7d:2a:17:50:fe:c8:2a:c5:49:14:
0b:ac:d4:a9:2a:e7:55:0c:b8:b2:c4:a3:7b:9a:45:b7:58:65:
96:9c:c3:bb:63:dd:90:fb:f4:5e:4c:cb:61:7d:f0:7f:aa:54:
ba:c3:2f:72:0c:16:ba:b0:a8:1d:d7:1a:80:19:06:20:66:6e:
ef:31:49:3b:7e:08:f1:90:1e:59:bc:f1:97:01:94:f4:3d:8a:
e0:23:db:bd:ad:c0:ff:89:8c:1f:78:80:0a:a0:25:33:a2:34:
3a:1b:0b:ed:a0:14:61:a9:4c:b5:d7:e6:f6:c1:85:07:e4:e0:
4d:58:01:95:77:96:e9:0c:07:02:7b:b1:1e:1a:ab:21:01:d3:
55:80:2e:d1:b3:83:56:8d:48:9b:4f:17:8d:ef:37:d4:36:7b:
a7:27:15:a6:17:7a:58:82:56:f1:3d:10:af:44:9e:cc:06:e9:
04:ec:b6:72:17:a3:cf:e6:f5:e1:5d:8c:49:18:31:d8:7a:30:
32:79:b0:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifOh4aQayBicRAydcvaAoYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYmYwYmRjZDkwMTYyMmIxNmZmZDQxNDRiNTg4ODcwNzMy
MmM1MzQwHhcNMjUwODEyMTcwMDQyWhcNMjUwODEzMTcwMDQyWjAzMTEwLwYDVQQD
EygwNDViNWU3ZDIzZDUxYTQwM2M2YzU4ODVhMDQ2YTFiMDA3Mzg1NGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4O6Xle0jFFlGFr6C7vuZ5N+Ixwr
v+5GmQnwOv+DEfaRWkLSbbIf7Kon/PbvW7lAphhuwDdKKwUDoWTuLLSYMzJYe9FP
x9oWwxHOUiKr3VBFDo1++AwPE51DRWXt09S9ZAnfL7buT6aGM910GVcKXBOhGbgf
tcxkh1iy76knn3kFrM4HK372WKQ7r/1RzRDnycnoouGGCupH/+xBZMtDr9bQVdMM
ra37MLwTwNn3vyq+8P2uz6jlFvhYWrZh9aOeQh4x2S1q6NgmcpB2BcK25mdjmhvM
GCb2XF2DFB9Q3PJ3AXZK4Gcvitt2jOm0UZVscnbPPVmXNjn4Ax2P6lIPywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARbXn0j1RpAPGxYhaBGobAHOFS2MB8GA1UdIwQY
MBaAFA6/C9zZAWIrFv/UFEtYiHBzIsU0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHI4TDNOa0JZaXNXXzlRVVMxaUljSE1peFRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hOWI5MWItNjg0ZS00ZDc4LWFhZTkt
YzQ0N2I0MTkzMjEwLzEvRHI4TDNOa0JZaXNXXzlRVVMxaUljSE1peFRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hOWI5MWItNjg0ZS00ZDc4LWFhZTktYzQ0N2I0MTkzMjEw
LzEvRHI4TDNOa0JZaXNXXzlRVVMxaUljSE1peFRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDMbGAdI
30ZsigonTOpNY4QGVCedcm1M+bGu2zkhvMjPh4vaTzUxpv7rXqaRidD5FA0d6w4v
l2a8WsQ9XNB9KhdQ/sgqxUkUC6zUqSrnVQy4ssSje5pFt1hllpzDu2PdkPv0XkzL
YX3wf6pUusMvcgwWurCoHdcagBkGIGZu7zFJO34I8ZAeWbzxlwGU9D2K4CPbva3A
/4mMH3iACqAlM6I0OhsL7aAUYalMtdfm9sGFB+TgTVgBlXeW6QwHAnuxHhqrIQHT
VYAu0bODVo1Im08Xje831DZ7pycVphd6WIJW8T0Qr0SezAbpBOy2chejz+b14V2M
SRgx2HowMnmwoA==
-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:01 2025 by rpki-client