Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: OFLiD053Q2v3rQH04uXix9T3rS8mG4b7AYt2jrpbrPg=
Subject key identifier: D5:73:F7:EC:8B:65:6E:42:AD:29:67:9E:DB:F9:A1:70:EF:AA:1C:10
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 01988655ED47640D41751103CAD97D0A5F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 1626
Signing time: Thu 07 Aug 2025 21:00:34 +0000
Manifest this update: Thu 07 Aug 2025 21:00:34 +0000
Manifest next update: Fri 08 Aug 2025 21:00:34 +0000
Files and hashes: 1: 1YRiu8peow1lTJm9FFHNR8FDAbc.roa (hash: M9tDjK8KKMnpI4O/RkjitSO923bPcK4J9p0X6jE60uA=)
2: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: JXROmzBmBqqm/70egSwKaHf5BugLbHWo5W7RmIhAwC0=)
3: PGW1u6hsibHWgf5RkDB15fW7nFU.roa (hash: 0InCSbIA5SExLZ91M4uEAsM9+kvbm4v2lPuTA9ZO2w0=)
4: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (hash: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=)
5: UeY-6eT8AWic-hKV67W_oibJpb0.roa (hash: P9rAEKkeAqwEaQF6epHGIcD5QsTjObpMNhsoMNWv7oU=)
6: WrHytc5z_RMrlF1ugU748saPCOY.roa (hash: aZHYeaaNVTa6TtaiWMmR/j6toZEkqeQ4kR1tqb6QqNc=)
7: Z0NstpNFGmZvTmitOe-bpzN3pog.roa (hash: vOxHYK5BHjTLsLb9PBk4RNol3oeaceKJ5r4uuQeEoSc=)
8: m6l4SopMeawwf-xaFHTLkByhnNs.roa (hash: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:55:ed:47:64:0d:41:75:11:03:ca:d9:7d:0a:5f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Aug 7 21:00:34 2025 GMT
Not After : Aug 8 21:00:34 2025 GMT
Subject: CN=d573f7ec8b656e42ad29679edbf9a170efaa1c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:0c:c6:40:ee:a3:be:ef:e5:5d:71:cf:9f:
fa:69:33:b3:d8:38:8c:bf:f1:e8:9a:4c:93:9d:e4:
db:fa:df:be:08:89:af:81:dc:25:5a:99:bb:08:9a:
98:52:50:04:81:ab:bb:4e:63:d8:47:03:cd:be:61:
e8:eb:8e:c0:a1:68:ec:b1:05:63:ad:2f:11:35:61:
24:27:ae:b5:d6:2e:6a:7a:3b:92:e1:83:79:7c:6f:
05:45:e2:28:af:5f:61:bd:1c:99:ab:65:b8:15:fe:
c6:47:bb:2a:2d:4c:c0:8b:d3:dd:1b:86:86:7e:fb:
d5:cd:6c:f4:62:88:ee:85:54:fa:9a:5b:34:94:ba:
20:52:a2:6e:27:66:b6:24:cd:e7:dd:b4:13:4e:a9:
3a:9e:a3:87:3e:c5:4a:b3:a3:83:48:1a:8c:bb:da:
2a:d8:88:ee:1f:b0:0b:ad:e8:d8:33:a2:be:9c:c4:
36:58:4d:f0:ce:1b:59:3d:fb:ad:9d:be:5c:2e:ef:
c7:18:7c:2c:19:d8:b4:b6:e3:07:b4:9b:58:14:58:
1b:92:e8:d9:90:ba:27:4a:35:78:07:85:20:fd:33:
1f:48:4d:9f:73:0a:dd:df:cd:a5:43:8f:f5:c7:1f:
a5:0b:e4:a3:50:81:e7:82:05:ce:9d:79:8e:1b:84:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:73:F7:EC:8B:65:6E:42:AD:29:67:9E:DB:F9:A1:70:EF:AA:1C:10
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:82:ab:14:89:d9:ea:30:4b:6c:f3:73:8e:da:7b:eb:57:48:
5c:d0:f2:cf:82:ae:83:e4:f7:6e:39:17:9e:0d:79:79:62:4d:
0c:cc:a5:90:b1:99:76:33:1b:2f:c0:ae:3e:6e:a2:b3:ef:03:
c5:ea:3c:aa:4e:47:9a:28:df:3a:c2:2f:18:c9:74:10:78:30:
14:ee:f5:ba:75:0e:ec:0c:3e:bc:01:f2:d0:61:61:dc:a6:af:
43:3c:de:2b:50:3c:db:68:cd:ad:aa:a2:8e:f6:0b:11:b9:30:
55:6d:30:9e:74:94:fe:04:7c:5d:31:ff:6a:39:27:66:f3:19:
1d:c9:f1:ce:57:62:d9:08:27:46:1c:c8:6b:90:c8:5c:5a:f7:
04:9a:1e:3d:76:47:6e:9d:f5:90:c8:1d:13:bf:b3:a9:cb:fb:
18:0d:74:5f:44:b0:7f:d7:93:05:2f:68:13:98:77:6a:ce:aa:
c0:72:1e:08:b1:1a:99:58:f6:ba:42:fb:3a:73:f3:5f:68:ae:
ee:5c:8e:bc:f4:68:14:6c:fb:48:ca:84:b9:bc:95:9b:3b:8d:
33:7a:7e:87:be:c1:32:7c:01:b9:2c:96:f0:1c:f4:13:13:a0:
b7:6f:0a:ed:e9:68:a5:22:ba:86:50:bf:2e:16:c7:53:58:56:
dd:ef:c9:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiGVe1HZA1BdREDytl9Cl9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0
MDkzYWYwHhcNMjUwODA3MjEwMDM0WhcNMjUwODA4MjEwMDM0WjAzMTEwLwYDVQQD
EyhkNTczZjdlYzhiNjU2ZTQyYWQyOTY3OWVkYmY5YTE3MGVmYWExYzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HMMxkDuo77v5V1xz5/6aTOz2DiM
v/HomkyTneTb+t++CImvgdwlWpm7CJqYUlAEgau7TmPYRwPNvmHo647AoWjssQVj
rS8RNWEkJ6611i5qejuS4YN5fG8FReIor19hvRyZq2W4Ff7GR7sqLUzAi9PdG4aG
fvvVzWz0YojuhVT6mls0lLogUqJuJ2a2JM3n3bQTTqk6nqOHPsVKs6ODSBqMu9oq
2IjuH7ALrejYM6K+nMQ2WE3wzhtZPfutnb5cLu/HGHwsGdi0tuMHtJtYFFgbkujZ
kLonSjV4B4Ug/TMfSE2fcwrd382lQ4/1xx+lC+SjUIHnggXOnXmOG4QbDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVz9+yLZW5CrSlnntv5oXDvqhwQMB8GA1UdIwQY
MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt
OWY3ZTBmODYyZjFlLzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl
LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4KrFInZ
6jBLbPNzjtp761dIXNDyz4Kug+T3bjkXng15eWJNDMylkLGZdjMbL8CuPm6is+8D
xeo8qk5HmijfOsIvGMl0EHgwFO71unUO7Aw+vAHy0GFh3KavQzzeK1A822jNraqi
jvYLEbkwVW0wnnSU/gR8XTH/ajknZvMZHcnxzldi2QgnRhzIa5DIXFr3BJoePXZH
bp31kMgdE7+zqcv7GA10X0Swf9eTBS9oE5h3as6qwHIeCLEamVj2ukL7OnPzX2iu
7lyOvPRoFGz7SMqEubyVmzuNM3p+h77BMnwBuSyW8Bz0ExOgt28K7elopSK6hlC/
LhbHU1hW3e/Jsg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:13 2025 by rpki-client