Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
File: DdgdNYjH4QqJmw0EgVZubZSNrdA.mft (raw, json)
Hash identifier: nunCNiKVoLSWy6glxuUo7SjRpUO/n4luEjxWfaOPKEQ=
Subject key identifier: 92:EE:2B:2E:B5:56:15:14:97:93:87:C3:36:91:DC:0E:26:02:EC:C1
Authority key identifier: 0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
Certificate issuer: /CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Certificate serial: 0198733D3C71B6025267ADBAABBAEDE09402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 04:00:49 +0000
Manifest this update: Mon 04 Aug 2025 04:00:49 +0000
Manifest next update: Tue 05 Aug 2025 04:00:49 +0000
Files and hashes: 1: DdgdNYjH4QqJmw0EgVZubZSNrdA.crl (hash: nVU7FnlHoodYmGNHESm72BgJiAbgC31v9s9jdPniuH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:3c:71:b6:02:52:67:ad:ba:ab:ba:ed:e0:94:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd81d3588c7e10a899b0d0481566e6d948dadd0
Validity
Not Before: Aug 4 04:00:49 2025 GMT
Not After : Aug 5 04:00:49 2025 GMT
Subject: CN=92ee2b2eb5561514979387c33691dc0e2602ecc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3e:34:4e:dd:a2:09:07:24:ae:94:18:77:17:
b5:4c:8e:1c:70:29:ac:71:bb:86:eb:07:dd:66:14:
4d:9b:00:f3:c7:e5:7b:a6:6a:2a:38:b0:61:e5:5c:
c1:94:02:e7:05:79:b2:70:28:85:f3:98:02:bf:bf:
70:e8:58:82:c9:f8:87:5c:4d:a2:4a:b1:db:a9:46:
d0:47:47:b4:a8:c3:5f:4f:57:2d:23:72:45:86:97:
98:76:2d:0e:22:25:01:60:3d:03:77:0e:d1:6b:75:
03:7b:21:54:3e:a7:ea:93:d9:22:f0:82:b2:db:58:
ae:cf:72:f4:4f:64:45:51:0a:c1:41:a5:6a:c8:c6:
76:3c:a5:e6:dd:41:e8:ee:5e:bf:04:52:50:cc:dc:
49:21:79:f7:b2:bb:54:fc:35:64:28:42:b1:5f:e6:
9d:4a:a7:91:6d:e5:71:ed:ac:0d:a7:88:d1:67:36:
ea:fd:91:48:19:fd:5f:68:45:b8:0d:21:25:5a:f1:
64:f7:63:e4:1e:0f:d7:60:d8:f7:5a:3e:84:b7:74:
84:2e:22:6f:53:a9:bf:d8:da:f2:5b:e6:22:4c:be:
33:65:57:0a:a1:96:fb:c7:b5:16:97:a3:49:b1:e9:
6c:8f:7c:58:d7:a8:42:28:ae:9e:21:b3:f6:7b:79:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EE:2B:2E:B5:56:15:14:97:93:87:C3:36:91:DC:0E:26:02:EC:C1
X509v3 Authority Key Identifier:
keyid:0D:D8:1D:35:88:C7:E1:0A:89:9B:0D:04:81:56:6E:6D:94:8D:AD:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdgdNYjH4QqJmw0EgVZubZSNrdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e86f5f-115e-4e92-ac39-c76b8db5ad14/1/DdgdNYjH4QqJmw0EgVZubZSNrdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:99:a9:53:20:bd:49:e9:93:33:aa:88:ce:23:61:a1:5c:39:
c8:18:7e:4b:9b:ef:57:41:bf:b8:6c:1d:a8:07:94:1e:aa:15:
b0:e1:41:bf:92:e9:5a:c8:2c:6c:e9:f8:1b:42:aa:25:ef:42:
7f:71:25:ff:87:f5:c3:dd:15:f4:2b:7d:18:14:e8:c1:f7:6e:
e3:0f:47:1e:69:a5:6b:29:30:42:bd:cf:c5:67:a1:bc:a3:a2:
f9:53:46:a9:83:62:ec:21:87:bd:8c:3a:9f:5c:06:ff:7d:0e:
a3:e9:fe:03:12:9b:6a:47:13:c3:e7:cb:47:74:50:de:a4:52:
65:57:f6:2d:eb:bc:e1:e1:2d:5d:ef:e7:99:3d:f1:fb:fd:51:
a6:c3:d0:f3:1b:31:8d:70:2a:6a:4d:43:92:5b:80:8f:6a:22:
a5:af:3e:4e:8e:1f:39:66:53:c5:4d:96:4b:7a:50:c7:f1:ac:
a7:85:2b:69:fc:1d:15:e0:13:6f:d1:21:e3:16:30:f4:08:85:
ef:87:45:cb:8e:3a:fa:ca:cd:81:ff:38:62:06:0a:8c:9a:02:
a8:15:1b:81:94:d1:90:8c:45:c8:e5:88:9a:58:e7:ad:86:17:
eb:2e:7a:58:4a:08:45:30:99:95:61:fa:81:37:48:d0:be:ae:
7c:de:55:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPTxxtgJSZ626q7rt4JQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDgxZDM1ODhjN2UxMGE4OTliMGQwNDgxNTY2ZTZkOTQ4
ZGFkZDAwHhcNMjUwODA0MDQwMDQ5WhcNMjUwODA1MDQwMDQ5WjAzMTEwLwYDVQQD
Eyg5MmVlMmIyZWI1NTYxNTE0OTc5Mzg3YzMzNjkxZGMwZTI2MDJlY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6z40Tt2iCQckrpQYdxe1TI4ccCms
cbuG6wfdZhRNmwDzx+V7pmoqOLBh5VzBlALnBXmycCiF85gCv79w6FiCyfiHXE2i
SrHbqUbQR0e0qMNfT1ctI3JFhpeYdi0OIiUBYD0Ddw7Ra3UDeyFUPqfqk9ki8IKy
21iuz3L0T2RFUQrBQaVqyMZ2PKXm3UHo7l6/BFJQzNxJIXn3srtU/DVkKEKxX+ad
SqeRbeVx7awNp4jRZzbq/ZFIGf1faEW4DSElWvFk92PkHg/XYNj3Wj6Et3SELiJv
U6m/2NryW+YiTL4zZVcKoZb7x7UWl6NJselsj3xY16hCKK6eIbP2e3kjyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLuKy61VhUUl5OHwzaR3A4mAuzBMB8GA1UdIwQY
MBaAFA3YHTWIx+EKiZsNBIFWbm2Uja3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lODZmNWYtMTE1ZS00ZTkyLWFjMzkt
Yzc2YjhkYjVhZDE0LzEvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lODZmNWYtMTE1ZS00ZTkyLWFjMzktYzc2YjhkYjVhZDE0
LzEvRGRnZE5Zakg0UXFKbXcwRWdWWnViWlNOcmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpmpUyC9
SemTM6qIziNhoVw5yBh+S5vvV0G/uGwdqAeUHqoVsOFBv5LpWsgsbOn4G0KqJe9C
f3El/4f1w90V9Ct9GBTowfdu4w9HHmmlaykwQr3PxWehvKOi+VNGqYNi7CGHvYw6
n1wG/30Oo+n+AxKbakcTw+fLR3RQ3qRSZVf2Leu84eEtXe/nmT3x+/1RpsPQ8xsx
jXAqak1DkluAj2oipa8+To4fOWZTxU2WS3pQx/Gsp4UrafwdFeATb9Eh4xYw9AiF
74dFy446+srNgf84YgYKjJoCqBUbgZTRkIxFyOWImljnrYYX6y56WEoIRTCZlWH6
gTdI0L6ufN5V+A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:41 2025 by rpki-client