Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: rYbPrXfYjIzFTKGc6NFDFoR47nmUBYm6Q157APLm+tI=
Subject key identifier: ED:E1:C2:55:5D:47:B3:1A:A4:A0:FE:E6:B0:CF:23:5F:E3:98:AA:53
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 019881678282E1898B2D46D2117A6D2F31DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 22:01:41 +0000
Manifest this update: Wed 06 Aug 2025 22:01:41 +0000
Manifest next update: Thu 07 Aug 2025 22:01:41 +0000
Files and hashes: 1: 1-xjgsfI902jNFD0m8-DZHtSyyIE.roa (hash: CsZOcJgPTxy7xIAOVt8lWaYqRyYDTFNbLjFpLqFoAHY=)
2: 8znWg7qZ9bI9AKat_qhyP26JqfY.roa (hash: Y2YmIOv3jVMh1xIJmeIZI13RLm2nx7Gd9VO4KN+O0Z4=)
3: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: S4YP4X+n1aI63W4wNuBal2u+QxkDXw0CbmoCYM3tYNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:82:82:e1:89:8b:2d:46:d2:11:7a:6d:2f:31:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: Aug 6 22:01:41 2025 GMT
Not After : Aug 7 22:01:41 2025 GMT
Subject: CN=ede1c2555d47b31aa4a0fee6b0cf235fe398aa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:2f:02:fc:13:c2:62:db:e8:4e:81:40:41:
20:b3:6d:f8:77:aa:8b:46:1b:f0:b7:8c:b7:47:26:
9d:9e:98:a4:ab:23:2d:a5:a8:bc:89:93:24:dc:0b:
69:76:ec:9d:34:81:31:6e:4c:6a:8b:10:37:fe:f8:
49:5b:58:f5:60:01:24:bf:b1:d9:ae:cc:31:46:6d:
27:00:d1:d0:b1:33:63:4a:d6:d5:e8:78:12:fe:d8:
f1:21:83:7f:df:a1:c3:7a:d2:0c:83:0b:45:1f:1b:
6f:61:e6:fc:e9:5f:1a:3c:3b:b4:b0:5f:a1:b8:c6:
0f:de:b5:29:65:8f:bc:06:e5:5c:f8:5a:8e:d9:f6:
68:3c:5b:4a:5b:a7:de:f9:a8:4d:e4:13:7c:04:12:
22:ee:46:ed:9d:ba:b2:15:28:00:3e:ed:46:74:55:
24:8a:ef:43:e4:31:8d:07:7d:aa:c5:64:20:09:7c:
9c:e0:07:5a:c8:09:f6:62:47:76:82:d5:d1:f5:18:
77:54:f7:dc:28:ee:b0:30:cf:25:61:a3:ee:62:40:
97:b7:bc:60:89:a5:7a:a8:23:a7:71:e1:76:18:b6:
b1:94:66:d3:84:ff:f3:1e:2f:29:91:d6:8c:da:a7:
82:d0:22:5e:93:26:47:42:90:77:b7:4f:c0:2e:44:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E1:C2:55:5D:47:B3:1A:A4:A0:FE:E6:B0:CF:23:5F:E3:98:AA:53
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e8:86:3a:6c:09:11:cf:2d:78:74:0a:75:46:5f:3d:26:2d:
3e:40:91:72:9a:e1:6d:f4:55:04:71:52:a0:77:77:f4:7e:a6:
f6:d2:8b:0d:81:e8:f1:89:46:8f:1c:eb:5a:52:e5:52:30:b5:
4c:e4:10:61:0a:1b:33:55:07:b6:bb:0b:84:4a:a9:a8:16:67:
44:81:b1:d9:89:fb:2c:35:86:7a:8f:0d:f2:3d:18:9e:3a:28:
7a:98:e1:39:9c:dc:4a:62:1b:35:d8:ba:db:19:d5:77:97:f3:
fc:9e:4b:a1:20:0e:91:7e:5f:e1:20:5b:59:eb:d2:2d:db:ef:
37:9b:d9:cc:fd:de:e7:64:4b:21:34:68:74:4f:b8:46:8b:e1:
7e:d8:ec:29:9b:23:8b:fe:f8:76:55:ba:fa:db:8b:80:2c:ea:
cb:e0:25:ac:44:0e:d0:a7:a2:ec:87:8a:b8:ec:db:d4:52:02:
8f:68:2e:81:fc:d2:0c:35:00:d9:9a:99:49:0c:bf:e6:75:03:
eb:4c:f3:16:c1:be:dd:a6:1a:f2:d1:65:68:28:ef:18:61:91:
f9:26:bf:ae:98:02:43:f1:d6:d0:ff:d0:2b:0a:2e:fc:19:76:
5e:37:8a:5b:2a:8a:2f:64:ae:8c:58:07:23:a0:23:dd:fe:db:
93:25:77:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZ4KC4YmLLUbSEXptLzHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODBkMTY1NjliYjI0YTMyOGUyN2I0N2Y3ZDc1MTY1OTcy
NWRlZmIwHhcNMjUwODA2MjIwMTQxWhcNMjUwODA3MjIwMTQxWjAzMTEwLwYDVQQD
EyhlZGUxYzI1NTVkNDdiMzFhYTRhMGZlZTZiMGNmMjM1ZmUzOThhYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukQvAvwTwmLb6E6BQEEgs234d6qL
Rhvwt4y3RyadnpikqyMtpai8iZMk3AtpduydNIExbkxqixA3/vhJW1j1YAEkv7HZ
rswxRm0nANHQsTNjStbV6HgS/tjxIYN/36HDetIMgwtFHxtvYeb86V8aPDu0sF+h
uMYP3rUpZY+8BuVc+FqO2fZoPFtKW6fe+ahN5BN8BBIi7kbtnbqyFSgAPu1GdFUk
iu9D5DGNB32qxWQgCXyc4AdayAn2Ykd2gtXR9Rh3VPfcKO6wMM8lYaPuYkCXt7xg
iaV6qCOnceF2GLaxlGbThP/zHi8pkdaM2qeC0CJekyZHQpB3t0/ALkTtbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3hwlVdR7MapKD+5rDPI1/jmKpTMB8GA1UdIwQY
MBaAFHWA0WVpuySjKOJ7R/fXUWWXJd77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFlEUlpXbTdKS01vNG50SDk5ZFJaWmNsM3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xYTE4ZGUtZWZiZC00MWI1LWIzMzYt
NzlmYmQzODVhNTUwLzEvZFlEUlpXbTdKS01vNG50SDk5ZFJaWmNsM3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xYTE4ZGUtZWZiZC00MWI1LWIzMzYtNzlmYmQzODVhNTUw
LzEvZFlEUlpXbTdKS01vNG50SDk5ZFJaWmNsM3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+iGOmwJ
Ec8teHQKdUZfPSYtPkCRcprhbfRVBHFSoHd39H6m9tKLDYHo8YlGjxzrWlLlUjC1
TOQQYQobM1UHtrsLhEqpqBZnRIGx2Yn7LDWGeo8N8j0YnjooepjhOZzcSmIbNdi6
2xnVd5fz/J5LoSAOkX5f4SBbWevSLdvvN5vZzP3e52RLITRodE+4RovhftjsKZsj
i/74dlW6+tuLgCzqy+AlrEQO0Kei7IeKuOzb1FICj2gugfzSDDUA2ZqZSQy/5nUD
60zzFsG+3aYa8tFlaCjvGGGR+Sa/rpgCQ/HW0P/QKwou/Bl2XjeKWyqKL2SujFgH
I6Aj3f7bkyV3nA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:10:22 2025 by rpki-client