Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
File: DkTxM_OHWTqvor6rOIhJBPrJvRk.mft (raw, json)
Hash identifier: HFqEfL5JZm8a07NmAGoh+jWN6IMEwDZ7TY1pWStEd18=
Subject key identifier: 26:2A:3E:3A:CA:4A:B4:DE:1F:2B:2D:C5:77:DF:6D:66:A0:79:41:7E
Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
Certificate issuer: /CN=0e44f133f387593aafa2beab38884904fac9bd19
Certificate serial: 01977007E19A2BA4032089EB461C901C8874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
Manifest number: 021C
Signing time: Sat 14 Jun 2025 20:00:53 +0000
Manifest this update: Sat 14 Jun 2025 20:00:53 +0000
Manifest next update: Sun 15 Jun 2025 20:00:53 +0000
Files and hashes: 1: DkTxM_OHWTqvor6rOIhJBPrJvRk.crl (hash: LIUOziRWLmCrvAOeBZwafEW+eRV0T3ma8c30c7hfUO4=)
2: Wiv0DHdRF2zh8D5DY6J3_PLSV6Q.roa (hash: /xs5AGgsSlLOCnLD+1aaT+DfL+K36ivL9muQHygs7c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:e1:9a:2b:a4:03:20:89:eb:46:1c:90:1c:88:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19
Validity
Not Before: Jun 14 20:00:53 2025 GMT
Not After : Jun 15 20:00:53 2025 GMT
Subject: CN=262a3e3aca4ab4de1f2b2dc577df6d66a079417e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:3e:66:e5:86:93:b5:cb:09:85:75:71:e5:
13:b8:2a:00:1a:a1:2c:ee:53:db:76:cd:ab:44:a3:
0d:23:d4:79:ec:85:28:0b:e2:04:13:54:16:db:29:
d5:73:f0:58:4a:81:9b:85:33:46:f6:1b:98:1b:4c:
ff:d3:c2:d6:15:0f:9d:6f:f1:8b:ba:0f:b4:bf:e0:
c9:22:30:84:50:3f:d6:62:47:f0:08:a8:67:77:1f:
9c:31:16:78:54:5a:b0:8e:91:d1:0f:7b:33:6c:d6:
62:2e:b5:d2:d2:2e:b2:d7:58:2c:aa:7c:8d:cc:e6:
4a:65:b7:81:a3:b5:34:f9:49:81:a6:44:59:2c:4d:
40:99:2a:a8:00:43:01:ad:9a:05:09:55:bb:ef:8b:
89:b8:15:de:b1:39:5b:67:9f:4e:f5:8a:49:e4:b7:
7c:f4:62:3c:c1:55:62:a8:56:d9:0c:c7:ae:79:98:
27:c9:27:82:11:75:4e:c0:e2:81:87:32:f5:f5:76:
6f:44:fb:78:a3:c4:83:96:0d:c4:cc:2b:ce:d0:5b:
5b:ca:17:e3:2f:3a:9d:b9:81:c4:04:9d:cb:f6:93:
08:da:d1:b6:08:2f:8f:0e:40:8f:d5:f8:85:1a:f3:
80:58:ce:b7:91:6a:47:3d:0f:a6:93:c7:35:ee:98:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2A:3E:3A:CA:4A:B4:DE:1F:2B:2D:C5:77:DF:6D:66:A0:79:41:7E
X509v3 Authority Key Identifier:
keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:69:3f:74:41:c8:aa:41:38:61:b3:dc:eb:ab:a0:1a:86:1f:
b4:d7:a3:41:ce:91:a5:6c:0c:64:6c:f7:f8:7d:1b:9e:d2:ec:
d7:54:99:a2:60:e0:73:43:ad:38:26:18:7b:8e:1f:5c:ba:56:
8e:d3:b6:cc:4f:f2:b7:87:9f:cf:7d:68:61:55:b6:b4:a8:7c:
83:81:ab:a3:b0:e6:ad:6f:f1:f7:e1:86:33:20:17:ed:65:fe:
8c:cd:5e:59:7d:68:3f:43:06:19:05:22:b8:36:8d:38:eb:6e:
74:c1:c2:9a:3b:66:f4:eb:11:63:d6:fc:65:f7:73:03:00:9f:
de:cc:16:fd:33:a5:79:e6:1a:66:f6:f9:a0:56:01:33:16:0c:
d6:75:3a:05:2e:2f:22:65:6b:2b:c5:36:1d:7f:84:40:75:d2:
68:17:9b:0c:ba:60:79:1e:86:66:c2:74:59:d8:eb:43:46:e3:
43:80:ca:ae:28:bf:b8:84:95:a0:2b:62:9e:e4:b5:61:fc:b6:
f9:a0:c2:9d:78:51:b3:fb:bf:b9:e3:a9:e0:86:3b:23:fb:89:
e0:3f:47:bd:86:1b:87:b5:7f:2b:20:6e:d1:ee:3c:5a:8e:4f:
4a:2a:66:a7:da:57:18:0b:56:99:b9:6c:f8:96:5c:5e:ad:27:
2c:c8:a8:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB+GaK6QDIInrRhyQHIh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDRmMTMzZjM4NzU5M2FhZmEyYmVhYjM4ODg0OTA0ZmFj
OWJkMTkwHhcNMjUwNjE0MjAwMDUzWhcNMjUwNjE1MjAwMDUzWjAzMTEwLwYDVQQD
EygyNjJhM2UzYWNhNGFiNGRlMWYyYjJkYzU3N2RmNmQ2NmEwNzk0MTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb0+ZuWGk7XLCYV1ceUTuCoAGqEs
7lPbds2rRKMNI9R57IUoC+IEE1QW2ynVc/BYSoGbhTNG9huYG0z/08LWFQ+db/GL
ug+0v+DJIjCEUD/WYkfwCKhndx+cMRZ4VFqwjpHRD3szbNZiLrXS0i6y11gsqnyN
zOZKZbeBo7U0+UmBpkRZLE1AmSqoAEMBrZoFCVW774uJuBXesTlbZ59O9YpJ5Ld8
9GI8wVViqFbZDMeueZgnySeCEXVOwOKBhzL19XZvRPt4o8SDlg3EzCvO0Ftbyhfj
LzqduYHEBJ3L9pMI2tG2CC+PDkCP1fiFGvOAWM63kWpHPQ+mk8c17phiNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYqPjrKSrTeHystxXffbWageUF+MB8GA1UdIwQY
MBaAFA5E8TPzh1k6r6K+qziISQT6yb0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtUeE1fT0hXVHF2b3I2ck9JaEpCUHJKdlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjY4ZGMtYzVjOS00MGRkLTlkOGYt
ZGJmZjBlZTFlMDllLzEvRGtUeE1fT0hXVHF2b3I2ck9JaEpCUHJKdlJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wYjY4ZGMtYzVjOS00MGRkLTlkOGYtZGJmZjBlZTFlMDll
LzEvRGtUeE1fT0hXVHF2b3I2ck9JaEpCUHJKdlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmk/dEHI
qkE4YbPc66ugGoYftNejQc6RpWwMZGz3+H0bntLs11SZomDgc0OtOCYYe44fXLpW
jtO2zE/yt4efz31oYVW2tKh8g4Gro7DmrW/x9+GGMyAX7WX+jM1eWX1oP0MGGQUi
uDaNOOtudMHCmjtm9OsRY9b8ZfdzAwCf3swW/TOleeYaZvb5oFYBMxYM1nU6BS4v
ImVrK8U2HX+EQHXSaBebDLpgeR6GZsJ0WdjrQ0bjQ4DKrii/uISVoCtinuS1Yfy2
+aDCnXhRs/u/ueOp4IY7I/uJ4D9HvYYbh7V/KyBu0e48Wo5PSipmp9pXGAtWmbls
+JZcXq0nLMiowQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:42:14 2025 by rpki-client