Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: xlha7lDx+xMv6ydIz0+ixFANLf6e4ebSuOR2IosL/xk=
Subject key identifier: 1E:A7:3A:7E:4A:20:6C:79:38:F3:F2:1C:1A:5F:8D:39:E8:5B:8F:66
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 01987CE58A248A7F9AE6D75A74EDE28F2A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1623
Signing time: Wed 06 Aug 2025 01:01:14 +0000
Manifest this update: Wed 06 Aug 2025 01:01:14 +0000
Manifest next update: Thu 07 Aug 2025 01:01:14 +0000
Files and hashes: 1: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=)
2: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: GZHhThspKhTRsS9UHnJqrA2vM3l8aJkBqP5rLrHVzu4=)
3: xiLzP1pUVJ4HlLptpzl15fneHrg.roa (hash: Oybd2JrzjZp9Unasli0WI1/BduGFzHUQWKvicye2j54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:8a:24:8a:7f:9a:e6:d7:5a:74:ed:e2:8f:2a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Aug 6 01:01:14 2025 GMT
Not After : Aug 7 01:01:14 2025 GMT
Subject: CN=1ea73a7e4a206c7938f3f21c1a5f8d39e85b8f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:bc:f6:15:b6:a6:b1:1b:dc:b7:08:ac:92:
c7:b0:41:61:21:8e:78:d4:3e:a0:74:ef:2a:b4:6b:
a8:9b:13:0d:e2:e5:f1:30:75:f5:43:50:71:1a:65:
07:03:c4:57:cd:bb:f0:d6:94:dd:bb:ac:c7:5b:f4:
09:7d:cb:93:73:7b:f8:af:d9:f1:ca:14:65:c1:9d:
a5:35:bf:ad:e1:28:a8:e8:b6:13:ab:41:4e:04:b4:
da:fa:32:22:fb:99:fc:ee:78:61:0a:d3:9e:bf:4c:
e5:44:57:a0:92:eb:ef:66:73:50:8d:a9:ca:52:97:
a1:a1:d3:29:66:df:31:0b:a6:e1:fd:5a:89:16:14:
28:00:f9:e5:68:a8:f6:4b:eb:49:9e:a8:de:45:2d:
fc:68:87:29:8b:fe:d1:64:b0:f8:a8:01:82:19:fd:
56:c4:cc:40:46:50:d5:54:1f:7c:4f:13:48:e3:ca:
fd:80:f7:5c:ae:22:de:ec:2b:22:a6:3b:cb:0c:f9:
9d:30:4b:9c:48:1b:7e:a5:3c:46:1e:81:e0:57:67:
cc:90:51:d6:68:2e:11:47:b3:ce:53:4c:49:26:7e:
7d:54:64:2b:50:be:7b:b2:35:f6:10:88:37:ac:23:
54:03:5d:16:39:a9:4b:6a:1b:56:0b:6d:ad:69:b8:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A7:3A:7E:4A:20:6C:79:38:F3:F2:1C:1A:5F:8D:39:E8:5B:8F:66
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:03:fb:6d:d9:26:fc:c3:2f:be:e6:aa:4b:a5:0d:7c:6c:d0:
7c:35:b3:18:04:02:11:80:5f:b6:03:50:da:6b:42:73:48:ac:
59:d7:67:44:9b:5a:57:c9:a0:e2:56:d7:45:62:18:b9:40:46:
38:00:7b:32:91:0a:3d:db:54:f6:9f:b3:b7:b4:60:67:b3:a0:
98:7a:25:94:9a:9e:02:14:27:92:dc:f9:3d:c9:2e:0a:dd:2e:
cd:6e:fa:aa:a1:c0:37:6f:cd:6c:c1:ba:68:f5:09:72:75:f6:
40:f5:5c:5a:45:d3:d1:39:19:20:8a:49:fe:e6:2b:be:21:88:
61:1a:94:58:0f:3b:df:28:96:61:28:de:29:ca:d2:ad:ab:a1:
4e:ef:62:51:df:c8:6c:9f:36:66:9b:f4:7d:1f:95:f4:ee:8b:
40:8a:02:ef:7d:e1:27:7d:c6:d0:8e:94:2c:56:b4:48:1c:df:
5c:ed:ea:0c:5f:db:53:6a:46:f1:32:41:36:85:8a:3d:c3:ce:
eb:3d:96:cf:a8:80:c5:42:3a:ab:08:f8:d6:52:ef:a3:14:a9:
97:6a:18:89:1b:e8:6d:45:b7:b1:e6:b6:e1:47:9d:3d:ff:39:
1b:30:5e:5c:ea:a3:94:30:bf:cf:9d:5e:63:9f:34:df:1b:b6:
b6:7c:41:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh85Yokin+a5tdadO3ijyp1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWViYzE1NGE1NmM4MzAyNWNiZDg2NDFhOWFjMzE1Y2I1
NTFjMDYwHhcNMjUwODA2MDEwMTE0WhcNMjUwODA3MDEwMTE0WjAzMTEwLwYDVQQD
EygxZWE3M2E3ZTRhMjA2Yzc5MzhmM2YyMWMxYTVmOGQzOWU4NWI4ZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6u89hW2prEb3LcIrJLHsEFhIY54
1D6gdO8qtGuomxMN4uXxMHX1Q1BxGmUHA8RXzbvw1pTdu6zHW/QJfcuTc3v4r9nx
yhRlwZ2lNb+t4Sio6LYTq0FOBLTa+jIi+5n87nhhCtOev0zlRFegkuvvZnNQjanK
UpehodMpZt8xC6bh/VqJFhQoAPnlaKj2S+tJnqjeRS38aIcpi/7RZLD4qAGCGf1W
xMxARlDVVB98TxNI48r9gPdcriLe7CsipjvLDPmdMEucSBt+pTxGHoHgV2fMkFHW
aC4RR7POU0xJJn59VGQrUL57sjX2EIg3rCNUA10WOalLahtWC22tabj0TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6nOn5KIGx5OPPyHBpfjTnoW49mMB8GA1UdIwQY
MBaAFHSuvBVKVsgwJcvYZBqawxXLVRwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQt
MDdhMWQ2NTU0OGJhLzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQtMDdhMWQ2NTU0OGJh
LzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQP7bdkm
/MMvvuaqS6UNfGzQfDWzGAQCEYBftgNQ2mtCc0isWddnRJtaV8mg4lbXRWIYuUBG
OAB7MpEKPdtU9p+zt7RgZ7OgmHollJqeAhQnktz5PckuCt0uzW76qqHAN2/NbMG6
aPUJcnX2QPVcWkXT0TkZIIpJ/uYrviGIYRqUWA873yiWYSjeKcrSrauhTu9iUd/I
bJ82Zpv0fR+V9O6LQIoC733hJ33G0I6ULFa0SBzfXO3qDF/bU2pG8TJBNoWKPcPO
6z2Wz6iAxUI6qwj41lLvoxSpl2oYiRvobUW3sea24UedPf85GzBeXOqjlDC/z51e
Y5803xu2tnxB4A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:43:21 2025 by rpki-client