Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: TX7yr5Hzf1E/F4uDa6ZrtBhFWhWo5njSL2/YcHS0PZw=
Subject key identifier: 59:DF:C4:9F:C1:3D:76:EA:EA:94:58:C0:43:1E:23:1A:C9:51:D6:76
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 0198733D5A5758848AC766767D48056DC4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 04:00:57 +0000
Manifest this update: Mon 04 Aug 2025 04:00:57 +0000
Manifest next update: Tue 05 Aug 2025 04:00:57 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: 1eV9M2W0EdIu0httwhq6qGvUSzr9aBIxdYgfeeIi/8E=)
2: ZfyPZAhLEDJfbRWOZTPW6i5uxAs.roa (hash: lVcg5S8ltJ0oxrMYvDgCBMGIQj26liJSgr9Rj1kE0c4=)
3: dywSz8RV6R_zILQ66xhZrS_rEB0.roa (hash: 9q5cK6mUpjjqk6wT4UQLlfFH4bjjllWU5kv3AHNWRgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:5a:57:58:84:8a:c7:66:76:7d:48:05:6d:c4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Aug 4 04:00:57 2025 GMT
Not After : Aug 5 04:00:57 2025 GMT
Subject: CN=59dfc49fc13d76eaea9458c0431e231ac951d676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:3e:87:8f:18:cc:d5:b1:3d:d9:29:42:c6:
94:13:d4:23:73:7d:96:7b:39:40:f0:c4:de:7e:42:
04:80:b6:27:59:8c:20:43:33:62:cd:ff:30:e4:53:
f0:cc:f4:9d:32:7b:b4:ed:45:a8:ad:23:6a:26:7d:
e8:c2:eb:ee:45:13:10:bf:c1:f6:e8:ac:35:4e:f3:
dd:2c:16:43:48:ff:d5:95:07:45:1f:ba:84:c0:aa:
be:09:49:32:35:de:7b:b6:85:dd:8c:04:f2:fb:9d:
1d:ac:e3:11:ef:73:8c:e3:a5:13:a0:32:9e:6f:6e:
5e:61:ad:26:85:5f:44:ca:e7:24:26:90:24:73:81:
79:ef:d6:a5:97:51:a2:54:94:46:79:e5:5a:0d:c4:
51:4d:bc:b8:48:dd:1d:c2:8b:f3:2b:3f:69:7e:91:
37:de:38:fc:61:e5:6a:d9:a6:e3:78:8a:9f:c8:03:
2c:4c:41:16:02:50:00:56:ce:db:5d:28:61:ca:1a:
c2:2e:9b:5f:b5:11:cf:c2:c3:58:10:45:3c:53:fc:
47:f7:44:fc:2c:3d:0c:22:87:86:63:15:68:9d:6b:
c3:ef:db:9a:e4:13:55:c7:da:03:60:8d:5a:f7:f9:
f1:1e:5b:f5:f2:6c:91:0e:14:31:db:be:70:49:c1:
a3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DF:C4:9F:C1:3D:76:EA:EA:94:58:C0:43:1E:23:1A:C9:51:D6:76
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a8:8d:a9:87:25:90:62:8f:b2:8a:91:1c:5a:44:67:3f:19:
4c:39:8d:23:a8:98:f6:7c:c4:d0:60:ab:66:aa:b7:c8:05:5e:
a1:04:ce:7a:f9:48:ad:60:7b:57:dc:bc:b1:4a:96:b5:58:5e:
fd:eb:93:06:0e:bf:7f:7e:f1:2f:95:00:87:e7:7d:56:3f:d5:
13:b3:f6:78:23:3f:4b:89:06:88:e5:cb:40:39:72:11:65:52:
cc:4b:f5:34:b0:06:9d:9f:bd:c6:4c:1d:66:64:05:bf:b1:fb:
5d:ea:ce:ff:1d:e5:8a:f6:3b:42:f7:b1:52:a0:25:06:4d:6d:
85:49:55:04:12:38:c1:f4:6f:5a:58:1d:d4:40:66:63:55:f0:
48:f4:4a:d6:46:2c:ab:1a:3e:1d:21:73:be:4b:9c:66:31:46:
5a:92:af:39:8a:bd:59:3b:33:13:33:b3:0c:8a:67:64:1f:90:
c0:7f:70:74:37:0f:20:85:54:02:d4:01:28:3a:c2:3c:4b:89:
d3:93:8f:dd:66:18:47:e0:9b:dc:a9:d8:9c:8e:0c:00:9c:f4:
af:78:ba:2d:c8:e8:d5:d5:9e:df:bd:a0:d2:ca:20:4c:88:38:
d1:4b:c8:a1:e1:cd:ae:ef:5e:2c:a1:70:9a:33:c9:5a:5f:c7:
ed:34:1a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPVpXWISKx2Z2fUgFbcSsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWJlNjA1NmViMGMzNjUwYjhmZTIxZTJkNzI2YzFiODNl
YzgyYjMwHhcNMjUwODA0MDQwMDU3WhcNMjUwODA1MDQwMDU3WjAzMTEwLwYDVQQD
Eyg1OWRmYzQ5ZmMxM2Q3NmVhZWE5NDU4YzA0MzFlMjMxYWM5NTFkNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Lo+h48YzNWxPdkpQsaUE9Qjc32W
ezlA8MTefkIEgLYnWYwgQzNizf8w5FPwzPSdMnu07UWorSNqJn3owuvuRRMQv8H2
6Kw1TvPdLBZDSP/VlQdFH7qEwKq+CUkyNd57toXdjATy+50drOMR73OM46UToDKe
b25eYa0mhV9EyuckJpAkc4F579all1GiVJRGeeVaDcRRTby4SN0dwovzKz9pfpE3
3jj8YeVq2abjeIqfyAMsTEEWAlAAVs7bXShhyhrCLptftRHPwsNYEEU8U/xH90T8
LD0MIoeGYxVonWvD79ua5BNVx9oDYI1a9/nxHlv18myRDhQx275wScGjZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnfxJ/BPXbq6pRYwEMeIxrJUdZ2MB8GA1UdIwQY
MBaAFAxb5gVusMNlC4/iHi1ybBuD7IKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQt
ZmZjN2YyYTMxOThjLzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQtZmZjN2YyYTMxOThj
LzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqiNqYcl
kGKPsoqRHFpEZz8ZTDmNI6iY9nzE0GCrZqq3yAVeoQTOevlIrWB7V9y8sUqWtVhe
/euTBg6/f37xL5UAh+d9Vj/VE7P2eCM/S4kGiOXLQDlyEWVSzEv1NLAGnZ+9xkwd
ZmQFv7H7XerO/x3livY7QvexUqAlBk1thUlVBBI4wfRvWlgd1EBmY1XwSPRK1kYs
qxo+HSFzvkucZjFGWpKvOYq9WTszEzOzDIpnZB+QwH9wdDcPIIVUAtQBKDrCPEuJ
05OP3WYYR+Cb3KnYnI4MAJz0r3i6Lcjo1dWe372g0sogTIg40UvIoeHNru9eLKFw
mjPJWl/H7TQaBw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:47 2025 by rpki-client