Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
File: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft (raw, json)
Hash identifier: Eo36Gz21Bpiq3wQrQvWH+9PtGnbpAtQ5oVhNdh5gNTo=
Subject key identifier: C6:E2:A3:FD:92:23:8A:A2:4F:F6:18:9E:74:6D:C7:C6:8C:FC:DC:B4
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 0198884446DF81C15F48D3F2E3727E379587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
Manifest number: 1349
Signing time: Fri 08 Aug 2025 06:00:32 +0000
Manifest this update: Fri 08 Aug 2025 06:00:32 +0000
Manifest next update: Sat 09 Aug 2025 06:00:32 +0000
Files and hashes: 1: DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl (hash: XsGakZRw9nw7Y6XFhVArp303ZFaNgqXuRVHedNSevfc=)
2: v5vd3x3XjeefXJEwufhUGGb4X2s.roa (hash: Q56G00WWpMRZXSZJI+Ae5yRJxVdvk5MUrhK76sZeFtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:46:df:81:c1:5f:48:d3:f2:e3:72:7e:37:95:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Aug 8 06:00:32 2025 GMT
Not After : Aug 9 06:00:32 2025 GMT
Subject: CN=c6e2a3fd92238aa24ff6189e746dc7c68cfcdcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:6e:ab:7d:4b:28:e4:28:f9:0f:ef:c9:b6:
29:95:41:a7:a9:0a:44:09:de:f9:82:31:55:29:42:
ca:46:21:1f:71:a4:bb:63:36:13:31:1f:0a:83:5b:
1e:5c:44:3e:fd:3b:1c:43:a3:14:ed:a2:e6:bb:56:
d4:da:cb:c2:f1:de:1c:d2:97:0a:b2:78:18:5a:b1:
10:bc:9f:68:6f:85:ef:22:9f:e9:d1:5b:74:42:16:
4b:27:f4:7e:85:7b:4f:74:f5:bf:77:31:b4:65:34:
55:48:08:7f:20:9f:eb:ad:92:67:20:e1:27:75:fb:
4c:58:2e:78:44:4c:61:cf:05:d7:10:49:e9:c1:b9:
f2:71:f8:df:2c:e0:1e:d4:80:fe:d1:8a:df:0d:10:
1d:21:f8:26:ba:71:23:79:36:44:61:dd:d9:db:c4:
4e:29:ac:d8:8f:95:d9:c2:d6:be:03:12:1c:ee:b4:
28:0d:b3:30:d7:2d:8f:47:b6:71:81:40:96:83:51:
77:27:02:fb:a9:6b:87:2f:ae:54:29:58:a0:95:8f:
36:06:a1:a2:85:0a:89:81:85:4b:6f:b5:fc:69:6c:
cc:32:fc:32:33:ab:d7:40:e1:21:d5:40:73:51:de:
3b:a7:d9:b7:3c:4b:4d:4e:3e:53:8e:bd:16:02:e2:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E2:A3:FD:92:23:8A:A2:4F:F6:18:9E:74:6D:C7:C6:8C:FC:DC:B4
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:de:c2:77:de:c1:94:74:80:1c:cb:32:87:b2:c8:81:e7:d8:
95:35:c9:19:62:22:1e:af:33:51:ec:6a:41:ed:96:1f:0f:c3:
cc:74:44:3b:93:55:33:81:0c:ed:2e:6d:85:c0:5c:c2:91:98:
47:08:fd:e5:0c:12:ab:96:b6:a3:61:12:99:1f:5d:4b:73:3d:
f9:78:42:5f:e1:60:68:49:7a:f2:c7:f3:4b:48:80:e9:7c:b3:
8a:6a:9d:57:05:0a:7b:86:42:4b:d0:da:e1:ab:42:a5:a8:1c:
e8:95:b3:f2:3c:d6:ab:35:34:c5:cf:49:e7:3b:6a:5f:8e:8a:
21:dc:70:73:4b:fe:a7:10:f3:8c:26:93:64:b4:73:9d:6e:32:
78:1d:fd:c8:de:6c:19:35:61:76:34:9e:4e:4c:00:5a:f6:ce:
94:23:4a:ba:de:cd:af:28:50:1a:77:7f:ac:4c:c6:ac:7b:d3:
9c:bf:bd:0c:17:fc:10:01:e8:73:2f:57:b5:70:08:4f:d7:40:
11:27:7c:60:9f:61:f7:79:70:ed:a9:d7:12:6f:d2:96:4a:0a:
fa:a1:14:ed:cd:96:88:e1:ba:b2:19:db:8b:34:00:0f:27:90:
3e:da:72:58:9a:aa:04:77:9a:05:16:b6:ce:23:a2:e5:cd:4c:
e8:eb:8f:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIREbfgcFfSNPy43J+N5WHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNzE2MWU2MjJmNjNjMGRiODU2OGQ4Y2I0YzRkN2MwZDk4
MDgzNDYwHhcNMjUwODA4MDYwMDMyWhcNMjUwODA5MDYwMDMyWjAzMTEwLwYDVQQD
EyhjNmUyYTNmZDkyMjM4YWEyNGZmNjE4OWU3NDZkYzdjNjhjZmNkY2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcVuq31LKOQo+Q/vybYplUGnqQpE
Cd75gjFVKULKRiEfcaS7YzYTMR8Kg1seXEQ+/TscQ6MU7aLmu1bU2svC8d4c0pcK
sngYWrEQvJ9ob4XvIp/p0Vt0QhZLJ/R+hXtPdPW/dzG0ZTRVSAh/IJ/rrZJnIOEn
dftMWC54RExhzwXXEEnpwbnycfjfLOAe1ID+0YrfDRAdIfgmunEjeTZEYd3Z28RO
KazYj5XZwta+AxIc7rQoDbMw1y2PR7ZxgUCWg1F3JwL7qWuHL65UKViglY82BqGi
hQqJgYVLb7X8aWzMMvwyM6vXQOEh1UBzUd47p9m3PEtNTj5Tjr0WAuLliQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbio/2SI4qiT/YYnnRtx8aM/Ny0MB8GA1UdIwQY
MBaAFAxxYeYi9jwNuFaNjLTE18DZgINGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMWYwOGMtMDY1ZS00YWMxLThlODAt
YjE1ZTNmMDllMDFiLzEvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMWYwOGMtMDY1ZS00YWMxLThlODAtYjE1ZTNmMDllMDFi
LzEvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMt7Cd97B
lHSAHMsyh7LIgefYlTXJGWIiHq8zUexqQe2WHw/DzHREO5NVM4EM7S5thcBcwpGY
Rwj95QwSq5a2o2ESmR9dS3M9+XhCX+FgaEl68sfzS0iA6XyzimqdVwUKe4ZCS9Da
4atCpagc6JWz8jzWqzU0xc9J5ztqX46KIdxwc0v+pxDzjCaTZLRznW4yeB39yN5s
GTVhdjSeTkwAWvbOlCNKut7NryhQGnd/rEzGrHvTnL+9DBf8EAHocy9XtXAIT9dA
ESd8YJ9h93lw7anXEm/SlkoK+qEU7c2WiOG6shnbizQADyeQPtpyWJqqBHeaBRa2
ziOi5c1M6OuPYw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:49:27 2025 by rpki-client