Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: 4HO2R70xUFXblo9eUZnRHQGziOJxp7fEXHZeq3taJxc=
Subject key identifier: 49:A8:A1:46:27:A6:A6:E5:B5:E6:33:7A:15:04:5B:BB:9A:6B:FE:B0
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 01988168B3802615F6D9925A9A4B5CC68650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 1629
Signing time: Wed 06 Aug 2025 22:02:59 +0000
Manifest this update: Wed 06 Aug 2025 22:02:59 +0000
Manifest next update: Thu 07 Aug 2025 22:02:59 +0000
Files and hashes: 1: 32CQUiCUfdquX7Jbo_dmPVa4RAU.roa (hash: FAfiLPwl0dHpiVR3Uys5QcBsWLGjmkF+BWAYhU6veIk=)
2: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: r8MTvyGWRImsG0DNtieavyiC1SPTNxhMnA2vLsUI7oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:b3:80:26:15:f6:d9:92:5a:9a:4b:5c:c6:86:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Aug 6 22:02:59 2025 GMT
Not After : Aug 7 22:02:59 2025 GMT
Subject: CN=49a8a14627a6a6e5b5e6337a15045bbb9a6bfeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:72:fd:ed:10:20:06:13:e3:0f:9c:aa:df:
46:66:bc:cb:fa:aa:49:8d:94:30:9a:02:72:d9:e4:
66:cd:d9:7c:93:b2:36:d9:aa:33:8b:c2:fd:81:1a:
9a:ac:3d:66:5a:dd:cd:0f:31:d6:49:35:33:78:c3:
c1:8d:aa:fe:b1:28:e1:0e:5b:7c:14:f1:27:35:7a:
1b:d2:88:97:1c:35:12:57:bd:49:da:ab:0c:b0:b5:
7a:b4:71:f9:bf:49:78:f7:26:de:37:ad:c1:4e:27:
0d:c6:ef:5b:b2:fb:5c:5b:73:77:0c:6e:00:39:87:
14:36:43:e6:29:db:11:f5:3b:f6:2b:90:46:4d:c4:
96:26:5d:23:3d:c2:96:2a:90:ca:5c:78:4c:4f:7d:
1c:0a:13:92:54:24:8c:c4:3f:46:f9:43:57:08:f3:
44:4d:82:95:30:3f:92:ff:50:de:0f:82:13:bc:b6:
93:c1:62:de:36:c4:18:d9:06:de:3b:9f:97:25:ea:
ba:e0:c4:1d:36:5f:49:11:d2:ba:3a:97:5b:42:56:
5c:b7:bd:9f:93:11:bc:1a:c9:51:f8:33:06:b3:38:
b6:1b:ba:32:fd:db:3e:86:cc:04:64:11:af:89:2d:
c1:1e:50:ad:a7:7c:71:e0:44:38:d4:74:28:f5:d5:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A8:A1:46:27:A6:A6:E5:B5:E6:33:7A:15:04:5B:BB:9A:6B:FE:B0
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6f:c6:69:f2:14:44:d6:c6:a3:89:b8:ad:aa:29:68:e6:5c:
78:bd:5b:f9:91:ef:5d:7c:e9:0f:26:65:51:62:80:4a:58:d8:
09:39:96:56:ef:60:c6:da:2a:66:58:5b:65:06:84:c5:25:97:
cf:2e:55:99:bb:c6:81:61:c8:61:f8:23:b4:52:94:fd:b7:51:
24:fe:91:e8:50:ef:38:be:a9:59:58:0a:1f:e1:17:c6:79:68:
6c:60:3c:67:6c:af:18:64:32:f2:ea:1e:82:db:e8:2b:7f:bf:
d7:18:21:e7:4c:e8:bc:8d:1b:56:6e:91:d3:29:43:fc:54:ec:
5b:2e:35:64:0f:ed:2b:7d:59:3e:73:fb:64:67:14:52:4e:29:
96:4c:cf:5b:d2:3e:af:f7:9f:2b:1d:4d:e1:36:df:f0:b3:67:
fc:11:01:30:05:8c:6b:d3:2d:dc:09:99:86:77:ef:b1:13:df:
ce:cf:20:3d:36:58:d2:86:ae:27:dc:ef:c3:59:16:a6:73:32:
dd:dd:64:15:06:f9:22:36:55:d6:87:b6:0f:b7:93:33:e7:10:
19:b3:19:a9:2b:28:05:4a:14:51:e5:ec:13:e0:17:b0:a5:2e:
86:0e:b8:c7:30:99:06:74:ae:39:fb:54:16:18:e6:3d:a3:72:
52:0b:06:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaLOAJhX22ZJamktcxoZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZGE1Yzg3NDM1NGQ4MzgyNmU0M2MyNTM1Yjc2ZTIwZDVi
NjFiMDUwHhcNMjUwODA2MjIwMjU5WhcNMjUwODA3MjIwMjU5WjAzMTEwLwYDVQQD
Eyg0OWE4YTE0NjI3YTZhNmU1YjVlNjMzN2ExNTA0NWJiYjlhNmJmZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xly/e0QIAYT4w+cqt9GZrzL+qpJ
jZQwmgJy2eRmzdl8k7I22aozi8L9gRqarD1mWt3NDzHWSTUzeMPBjar+sSjhDlt8
FPEnNXob0oiXHDUSV71J2qsMsLV6tHH5v0l49ybeN63BTicNxu9bsvtcW3N3DG4A
OYcUNkPmKdsR9Tv2K5BGTcSWJl0jPcKWKpDKXHhMT30cChOSVCSMxD9G+UNXCPNE
TYKVMD+S/1DeD4ITvLaTwWLeNsQY2QbeO5+XJeq64MQdNl9JEdK6OpdbQlZct72f
kxG8GslR+DMGszi2G7oy/ds+hswEZBGviS3BHlCtp3xx4EQ41HQo9dXHAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmooUYnpqblteYzehUEW7uaa/6wMB8GA1UdIwQY
MBaAFAzaXIdDVNg4JuQ8JTW3biDVthsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMt
YzgyZjQyNGI2ZDBkLzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMtYzgyZjQyNGI2ZDBk
LzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmm/GafIU
RNbGo4m4raopaOZceL1b+ZHvXXzpDyZlUWKASljYCTmWVu9gxtoqZlhbZQaExSWX
zy5VmbvGgWHIYfgjtFKU/bdRJP6R6FDvOL6pWVgKH+EXxnlobGA8Z2yvGGQy8uoe
gtvoK3+/1xgh50zovI0bVm6R0ylD/FTsWy41ZA/tK31ZPnP7ZGcUUk4plkzPW9I+
r/efKx1N4Tbf8LNn/BEBMAWMa9Mt3AmZhnfvsRPfzs8gPTZY0oauJ9zvw1kWpnMy
3d1kFQb5IjZV1oe2D7eTM+cQGbMZqSsoBUoUUeXsE+AXsKUuhg64xzCZBnSuOftU
FhjmPaNyUgsGxw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:02:32 2025 by rpki-client