Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
File: danDqBE5lKqnp7EhGTd3kbIB8Gw.mft (raw, json)
Hash identifier: HjwbCjoYQ23cN5hVbk2eCxa36gTN0XhzWDXym7OcrFA=
Subject key identifier: 72:CC:5C:CD:F6:9D:45:5E:09:4F:9E:B1:DC:79:D2:40:64:07:6F:60
Authority key identifier: 75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
Certificate issuer: /CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Certificate serial: 01989E5EC394E557AA98BC7C55CB98A59AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
Manifest number: 02FE
Signing time: Tue 12 Aug 2025 13:01:07 +0000
Manifest this update: Tue 12 Aug 2025 13:01:07 +0000
Manifest next update: Wed 13 Aug 2025 13:01:07 +0000
Files and hashes: 1: danDqBE5lKqnp7EhGTd3kbIB8Gw.crl (hash: 7UZPI2jlnihEkdKFDy51U1PSxQeBemSbKMuR6bfi04A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:c3:94:e5:57:aa:98:bc:7c:55:cb:98:a5:9a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Validity
Not Before: Aug 12 13:01:07 2025 GMT
Not After : Aug 13 13:01:07 2025 GMT
Subject: CN=72cc5ccdf69d455e094f9eb1dc79d24064076f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:93:91:84:87:9a:f9:4a:10:82:69:6c:76:
fb:6d:91:5b:3a:c1:eb:76:9c:0f:93:e6:20:4e:2a:
94:c6:87:b7:0d:f0:d4:c7:73:b9:30:2e:4b:12:2f:
c3:45:f2:ed:40:df:08:6f:e7:9d:8b:1f:ad:9c:97:
db:0c:74:27:0b:1f:b9:44:06:c2:d0:9f:2b:9f:f3:
d1:0f:d7:56:d9:ef:c3:e0:ae:34:c6:36:06:1d:2b:
38:24:30:e5:d1:23:fa:a7:32:19:f6:9c:c5:35:8d:
90:71:f7:8c:f7:8d:a6:f9:7f:06:7a:f8:4c:37:8a:
0e:a4:d5:34:ca:a8:a2:7f:e1:61:dc:c4:a7:85:c8:
60:1c:63:06:8f:60:d8:e6:51:6e:6a:fd:dc:22:68:
09:2c:36:75:0b:03:6a:b4:a0:77:28:8f:72:f2:85:
c7:52:8b:62:72:aa:1c:8b:90:ef:b8:38:38:77:8e:
37:e1:fc:30:1f:14:20:88:09:99:d3:09:97:61:be:
87:ff:06:52:0b:54:5f:0b:c0:23:30:c6:15:d0:98:
48:55:d6:88:a1:85:d0:1e:6f:eb:6c:11:0a:9d:f6:
d6:0b:64:ce:74:a0:4e:41:9c:3e:03:a1:ee:49:7c:
6a:ce:98:44:a0:99:12:bd:31:37:c2:ff:c9:cf:26:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CC:5C:CD:F6:9D:45:5E:09:4F:9E:B1:DC:79:D2:40:64:07:6F:60
X509v3 Authority Key Identifier:
keyid:75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:18:40:93:25:59:c8:74:36:35:b4:ba:ac:ce:5b:b3:b8:b8:
e4:2c:35:f6:6c:21:00:df:a7:4d:41:72:8d:02:5e:4e:4a:92:
8e:9b:bf:07:cc:0f:f0:3c:c7:3f:a5:c0:cc:3b:7f:99:d0:f5:
fd:08:58:b2:ab:29:23:8b:28:f5:64:47:d9:51:41:6c:36:36:
8e:16:1d:7b:01:37:26:68:bf:b9:de:c9:dc:ff:87:51:c1:3a:
90:9e:92:59:ed:37:b4:d6:39:b3:61:87:9c:09:f9:65:de:4d:
1c:28:51:7d:b5:17:f9:e4:dd:ec:14:b0:99:9c:99:04:8c:ad:
e3:a5:af:2e:18:43:a3:32:97:62:9b:82:fc:9c:7f:f5:e5:02:
99:e3:79:cb:96:3f:61:41:fc:ba:02:b0:e8:fb:31:02:02:f4:
23:88:f8:b6:ab:c3:29:53:22:b7:44:c9:04:22:81:32:11:d5:
16:10:55:5d:aa:89:5a:6d:7a:a8:02:a7:5e:d3:5a:37:b9:a1:
e3:c1:d3:b3:1f:2f:6a:a4:97:3a:e9:f7:06:c8:bf:82:b8:1f:
0b:b3:31:20:75:72:50:71:0b:e2:43:6d:83:fc:1b:9a:bd:6f:
3c:80:d8:39:26:0e:b8:3c:ae:97:a0:20:d3:a8:58:62:61:40:
bd:68:e5:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZieXsOU5VeqmLx8VcuYpZrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YTljM2E4MTEzOTk0YWFhN2E3YjEyMTE5Mzc3NzkxYjIw
MWYwNmMwHhcNMjUwODEyMTMwMTA3WhcNMjUwODEzMTMwMTA3WjAzMTEwLwYDVQQD
Eyg3MmNjNWNjZGY2OWQ0NTVlMDk0ZjllYjFkYzc5ZDI0MDY0MDc2ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoKTkYSHmvlKEIJpbHb7bZFbOsHr
dpwPk+YgTiqUxoe3DfDUx3O5MC5LEi/DRfLtQN8Ib+edix+tnJfbDHQnCx+5RAbC
0J8rn/PRD9dW2e/D4K40xjYGHSs4JDDl0SP6pzIZ9pzFNY2QcfeM942m+X8GevhM
N4oOpNU0yqiif+Fh3MSnhchgHGMGj2DY5lFuav3cImgJLDZ1CwNqtKB3KI9y8oXH
Uoticqoci5DvuDg4d4434fwwHxQgiAmZ0wmXYb6H/wZSC1RfC8AjMMYV0JhIVdaI
oYXQHm/rbBEKnfbWC2TOdKBOQZw+A6HuSXxqzphEoJkSvTE3wv/JzybwXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLMXM32nUVeCU+esdx50kBkB29gMB8GA1UdIwQY
MBaAFHWpw6gROZSqp6exIRk3d5GyAfBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGFuRHFCRTVsS3FucDdFaEdUZDNrYklCOEd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC84MjAzZDktN2UzZi00MGFiLWE2ZTAt
MDg1YmM3N2JjYzFjLzEvZGFuRHFCRTVsS3FucDdFaEdUZDNrYklCOEd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC84MjAzZDktN2UzZi00MGFiLWE2ZTAtMDg1YmM3N2JjYzFj
LzEvZGFuRHFCRTVsS3FucDdFaEdUZDNrYklCOEd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixhAkyVZ
yHQ2NbS6rM5bs7i45Cw19mwhAN+nTUFyjQJeTkqSjpu/B8wP8DzHP6XAzDt/mdD1
/QhYsqspI4so9WRH2VFBbDY2jhYdewE3Jmi/ud7J3P+HUcE6kJ6SWe03tNY5s2GH
nAn5Zd5NHChRfbUX+eTd7BSwmZyZBIyt46WvLhhDozKXYpuC/Jx/9eUCmeN5y5Y/
YUH8ugKw6PsxAgL0I4j4tqvDKVMit0TJBCKBMhHVFhBVXaqJWm16qAKnXtNaN7mh
48HTsx8vaqSXOun3Bsi/grgfC7MxIHVyUHEL4kNtg/wbmr1vPIDYOSYOuDyul6Ag
06hYYmFAvWjlTg==
-----END CERTIFICATE-----
Generated at Tue Aug 12 20:33:26 2025 by rpki-client