Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
File: DW3GbMOENrasMel-cS0hlAfIPPQ.mft (raw, json)
Hash identifier: cuRCD+djuzvN9Ay/ynROiBaOgYmvclQ45WK1P9o0d+w=
Subject key identifier: 98:0E:1A:A8:BD:70:E3:90:B9:D2:0A:D4:94:38:9D:8C:70:40:43:A9
Authority key identifier: 0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
Certificate issuer: /CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Certificate serial: 019892232449E4D8BE5952FC4DDF725B1C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
Manifest number: 04AA
Signing time: Sun 10 Aug 2025 04:00:33 +0000
Manifest this update: Sun 10 Aug 2025 04:00:33 +0000
Manifest next update: Mon 11 Aug 2025 04:00:33 +0000
Files and hashes: 1: DW3GbMOENrasMel-cS0hlAfIPPQ.crl (hash: espbpD4q9fOBQzHoX04p+68kc2CBdZblYCZZwKToeG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:24:49:e4:d8:be:59:52:fc:4d:df:72:5b:1c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Validity
Not Before: Aug 10 04:00:33 2025 GMT
Not After : Aug 11 04:00:33 2025 GMT
Subject: CN=980e1aa8bd70e390b9d20ad494389d8c704043a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1d:66:86:95:1c:32:3b:d6:07:f4:97:76:dd:
4b:5e:82:f9:91:e7:6a:c6:78:37:56:ec:77:0d:d0:
18:3d:87:42:a1:f5:eb:b1:35:12:6f:ee:78:f2:47:
a4:db:1c:84:cc:a0:50:0a:c9:8b:55:27:73:8c:3d:
f1:3b:fd:10:f5:15:fe:98:4b:53:9a:14:62:bc:5d:
cf:8f:4f:93:80:d4:dc:ad:c1:9e:18:4c:2e:f4:96:
0e:2a:01:16:96:5c:9c:db:1f:86:3c:da:97:02:47:
63:e0:43:59:4e:74:b2:c0:6b:75:fe:e4:6b:c2:5c:
09:4a:17:e6:80:95:3f:ea:01:b5:71:2f:e4:3e:e9:
13:c5:80:a1:9e:02:0e:04:55:8d:b6:7a:4a:d2:66:
3b:68:d6:19:13:98:08:75:96:e6:a1:b1:ea:2b:99:
4b:91:66:c6:df:7f:38:bd:88:32:ec:d6:e5:fa:5b:
40:b3:f4:73:ea:03:81:30:a4:9a:aa:be:72:0d:86:
64:d7:19:ac:65:df:f0:8c:1a:ca:6e:7e:c3:26:f1:
e6:5a:f5:35:55:92:94:07:67:8c:17:cf:85:78:5b:
d2:11:81:bb:fe:9f:6c:ee:ef:9b:b9:6a:ce:11:2a:
16:78:3c:46:ad:26:32:09:d1:ae:ee:e2:57:81:34:
25:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0E:1A:A8:BD:70:E3:90:B9:D2:0A:D4:94:38:9D:8C:70:40:43:A9
X509v3 Authority Key Identifier:
keyid:0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:79:3e:37:9e:71:25:6d:27:c7:bf:20:c6:85:41:0f:2d:4f:
3a:07:dd:89:19:df:fe:7c:36:f8:35:cc:a3:42:2c:82:56:15:
3e:a4:80:4a:9e:6e:69:6a:a1:ba:d7:57:9f:79:4e:35:8b:f5:
c5:bb:13:f4:45:1e:9b:10:f0:66:07:74:66:1b:b9:f0:b3:35:
e9:a4:3e:75:1c:8d:e6:6a:5e:01:d7:43:55:83:67:9c:a3:f8:
58:6d:cc:0c:5a:a5:a2:f6:80:a1:f3:ea:6a:bf:fa:13:8c:a8:
1f:a3:e2:b2:81:b6:80:21:a9:00:93:8b:10:97:b7:5e:a1:90:
d6:66:fe:a8:7d:86:78:a4:b3:c2:4e:09:70:74:8a:06:62:99:
30:a8:f7:db:a7:06:2a:a0:55:90:1a:a4:17:dc:18:90:ad:b4:
c1:35:17:99:0e:a8:aa:be:96:08:e7:93:08:14:18:56:1c:fe:
21:33:af:a1:67:c5:50:dd:f9:c7:7e:01:00:81:16:0c:d9:3c:
85:0e:e7:a2:ed:6e:b9:f5:53:c2:6c:b1:68:5d:18:1a:18:75:
ab:dc:58:eb:93:66:14:0f:66:6b:89:4a:b4:21:af:88:14:70:
96:af:5c:ec:67:c9:7a:87:cc:f6:3b:25:8b:c8:69:5c:15:33:
3d:f6:0d:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSIyRJ5Ni+WVL8Td9yWxx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmRjNjZjYzM4NDM2YjZhYzMxZTk3ZTcxMmQyMTk0MDdj
ODNjZjQwHhcNMjUwODEwMDQwMDMzWhcNMjUwODExMDQwMDMzWjAzMTEwLwYDVQQD
Eyg5ODBlMWFhOGJkNzBlMzkwYjlkMjBhZDQ5NDM4OWQ4YzcwNDA0M2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh1mhpUcMjvWB/SXdt1LXoL5kedq
xng3Vux3DdAYPYdCofXrsTUSb+548kek2xyEzKBQCsmLVSdzjD3xO/0Q9RX+mEtT
mhRivF3Pj0+TgNTcrcGeGEwu9JYOKgEWllyc2x+GPNqXAkdj4ENZTnSywGt1/uRr
wlwJShfmgJU/6gG1cS/kPukTxYChngIOBFWNtnpK0mY7aNYZE5gIdZbmobHqK5lL
kWbG3384vYgy7Nbl+ltAs/Rz6gOBMKSaqr5yDYZk1xmsZd/wjBrKbn7DJvHmWvU1
VZKUB2eMF8+FeFvSEYG7/p9s7u+buWrOESoWeDxGrSYyCdGu7uJXgTQlwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgOGqi9cOOQudIK1JQ4nYxwQEOpMB8GA1UdIwQY
MBaAFA1txmzDhDa2rDHpfnEtIZQHyDz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEt
OWRkNTIzMTNhZTdjLzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEtOWRkNTIzMTNhZTdj
LzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHk+N55x
JW0nx78gxoVBDy1POgfdiRnf/nw2+DXMo0IsglYVPqSASp5uaWqhutdXn3lONYv1
xbsT9EUemxDwZgd0Zhu58LM16aQ+dRyN5mpeAddDVYNnnKP4WG3MDFqlovaAofPq
ar/6E4yoH6PisoG2gCGpAJOLEJe3XqGQ1mb+qH2GeKSzwk4JcHSKBmKZMKj326cG
KqBVkBqkF9wYkK20wTUXmQ6oqr6WCOeTCBQYVhz+ITOvoWfFUN35x34BAIEWDNk8
hQ7nou1uufVTwmyxaF0YGhh1q9xY65NmFA9ma4lKtCGviBRwlq9c7GfJeofM9jsl
i8hpXBUzPfYN8A==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:07 2025 by rpki-client