Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier: 4Bgmde4QfdM3MtXsR+t41DQiBnSnamTClYrJj93YCmQ=
Subject key identifier: 1C:11:AB:9F:E1:FE:10:A8:3D:1B:67:C8:E7:B0:A1:44:75:37:7E:79
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial: 0198745078B33803D02CEDB98F613F40ABF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number: 0585
Signing time: Mon 04 Aug 2025 09:01:27 +0000
Manifest this update: Mon 04 Aug 2025 09:01:27 +0000
Manifest next update: Tue 05 Aug 2025 09:01:27 +0000
Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: +DmVWVhc6Yi1mb0Ne8+N9clxQbOqJpwvn1OjpHjG+3Q=)
2: wTSz4RaVBPCmK0HhyQREVFlvLYM.roa (hash: wdXTmnLgaVa+d8xmW5YsOirXRbVi1BqCeeIaYwQr+Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:78:b3:38:03:d0:2c:ed:b9:8f:61:3f:40:ab:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Validity
Not Before: Aug 4 09:01:27 2025 GMT
Not After : Aug 5 09:01:27 2025 GMT
Subject: CN=1c11ab9fe1fe10a83d1b67c8e7b0a14475377e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:2b:e7:f0:14:62:e9:28:82:80:2f:c0:03:
6e:80:12:32:ad:ad:c3:68:a1:96:de:62:ea:e6:0b:
df:ed:11:29:b8:2d:5c:bd:90:1c:0b:5b:c2:ba:49:
21:fc:02:bd:04:43:99:fb:e6:63:45:05:41:e7:cc:
aa:ae:05:18:54:90:e5:a0:0e:6c:15:7b:6c:3d:1c:
ad:6b:49:d7:a1:50:34:94:9d:c9:7a:ba:89:bd:ad:
03:fa:6b:1b:16:ca:b2:01:b9:2c:d9:ab:d2:0f:7b:
fd:3f:11:23:cb:d2:00:4a:6a:e7:97:5f:0f:8c:c3:
25:b5:f5:cf:a2:e3:44:a3:9c:85:cb:c7:bf:38:78:
4f:43:f5:eb:86:5a:1e:3c:40:e2:0a:77:27:61:0d:
e4:c3:bd:24:42:b0:a6:0b:26:a7:07:39:05:a4:a0:
07:aa:1e:6c:78:a2:07:a9:04:f7:ff:f9:10:28:89:
20:58:ca:b0:04:48:8d:b3:4a:c5:0b:e0:5d:f0:73:
24:14:bc:97:9f:4d:07:4b:ef:1b:ed:bb:30:9e:49:
1d:d6:64:1f:59:bc:32:2e:6e:92:09:5e:63:4b:1a:
b6:a4:56:a1:34:e1:2f:38:d0:cc:9c:7e:0a:6d:8e:
19:82:03:08:b5:c7:16:8f:50:16:63:f6:2e:9f:53:
ef:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:11:AB:9F:E1:FE:10:A8:3D:1B:67:C8:E7:B0:A1:44:75:37:7E:79
X509v3 Authority Key Identifier:
keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8f:31:a5:12:85:41:b0:5c:69:7a:e6:00:98:b0:4b:a5:3a:
d2:e6:82:c3:b6:14:c9:24:c0:69:31:16:c2:d8:e4:b8:f7:2e:
31:c3:af:78:b3:9d:48:91:1c:8b:a7:e5:aa:46:27:cc:07:d1:
9d:6f:f1:56:eb:78:2e:3a:7d:ad:bc:81:41:5a:ed:d7:c9:68:
33:c7:40:df:5c:0e:3a:36:02:96:8a:98:03:1a:8c:f1:ff:07:
87:2a:24:99:b7:1f:05:53:99:f9:0d:cc:b4:45:e4:89:90:75:
89:d5:ab:db:47:21:f4:1f:90:97:9d:01:09:4e:af:2d:30:75:
6d:ff:b4:41:2f:0c:61:fb:1b:9a:ce:75:db:d8:46:81:f7:d2:
ae:ed:5d:69:52:14:f5:ea:36:a8:44:0b:26:19:18:26:9b:a5:
ef:4a:35:50:e0:63:f1:b2:4a:d0:cd:64:b8:f3:50:4f:65:40:
59:b2:0b:38:6a:09:25:20:67:2e:d9:77:0c:84:ba:3f:c8:26:
be:db:07:c4:22:cb:ef:f7:0f:61:1f:e5:67:1f:cd:e5:53:eb:
b9:4a:3d:ea:e9:c1:bf:9a:f8:e5:27:db:52:2f:0a:bb:23:2a:
cf:ab:24:31:f6:e5:74:8e:b7:a4:56:4d:cf:07:63:b0:b0:00:
12:72:16:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UHizOAPQLO25j2E/QKv2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MjQ4OGYwZDliNGIxNzFhMmUyZjBmYTU1OWI0M2Y5YTVi
MzJlMjYwHhcNMjUwODA0MDkwMTI3WhcNMjUwODA1MDkwMTI3WjAzMTEwLwYDVQQD
EygxYzExYWI5ZmUxZmUxMGE4M2QxYjY3YzhlN2IwYTE0NDc1Mzc3ZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTIr5/AUYukogoAvwANugBIyra3D
aKGW3mLq5gvf7REpuC1cvZAcC1vCukkh/AK9BEOZ++ZjRQVB58yqrgUYVJDloA5s
FXtsPRyta0nXoVA0lJ3JerqJva0D+msbFsqyAbks2avSD3v9PxEjy9IASmrnl18P
jMMltfXPouNEo5yFy8e/OHhPQ/XrhloePEDiCncnYQ3kw70kQrCmCyanBzkFpKAH
qh5seKIHqQT3//kQKIkgWMqwBEiNs0rFC+Bd8HMkFLyXn00HS+8b7bswnkkd1mQf
WbwyLm6SCV5jSxq2pFahNOEvONDMnH4KbY4ZggMItccWj1AWY/Yun1Pv0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwRq5/h/hCoPRtnyOewoUR1N355MB8GA1UdIwQY
MBaAFHQkiPDZtLFxouLw+lWbQ/mlsy4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTkt
ZjJiYmZiYTcxYTI4LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTktZjJiYmZiYTcxYTI4
LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp48xpRKF
QbBcaXrmAJiwS6U60uaCw7YUySTAaTEWwtjkuPcuMcOveLOdSJEci6flqkYnzAfR
nW/xVut4Ljp9rbyBQVrt18loM8dA31wOOjYCloqYAxqM8f8HhyokmbcfBVOZ+Q3M
tEXkiZB1idWr20ch9B+Ql50BCU6vLTB1bf+0QS8MYfsbms5129hGgffSru1daVIU
9eo2qEQLJhkYJpul70o1UOBj8bJK0M1kuPNQT2VAWbILOGoJJSBnLtl3DIS6P8gm
vtsHxCLL7/cPYR/lZx/N5VPruUo96unBv5r45SfbUi8KuyMqz6skMfbldI63pFZN
zwdjsLAAEnIWbw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:19 2025 by rpki-client