Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
File: dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json)
Hash identifier: PqW3MfyBs11rx+BuOQpCwxFGjXRqCJyp3OZPqSWxGI4=
Subject key identifier: 6A:AB:8F:FA:58:32:36:EF:85:EA:F4:D2:BB:48:40:0D:9E:8B:7A:2D
Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Certificate serial: 019883C3B08BF3BD35697E5D766FE4D3579C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
Manifest number: 1272
Signing time: Thu 07 Aug 2025 09:01:36 +0000
Manifest this update: Thu 07 Aug 2025 09:01:36 +0000
Manifest next update: Fri 08 Aug 2025 09:01:36 +0000
Files and hashes: 1: 6S1fN0Slf3Y95btQEfpy__y_tiw.roa (hash: 5FWi2gr8yiM3yt2DtW3oiI0p1G9KyA1KVfzD3/JWlJI=)
2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: bWJQbGc8/avO7J4E4E61Ec2lOhrCLEvpWjs1EeYj6OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:b0:8b:f3:bd:35:69:7e:5d:76:6f:e4:d3:57:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Validity
Not Before: Aug 7 09:01:36 2025 GMT
Not After : Aug 8 09:01:36 2025 GMT
Subject: CN=6aab8ffa583236ef85eaf4d2bb48400d9e8b7a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:89:93:35:a2:78:cf:ba:01:aa:8c:c1:36:
be:b0:68:6e:5c:01:ba:54:f9:7b:6b:a4:03:88:5b:
41:17:43:0d:66:a0:4d:8e:1f:bb:13:65:dc:3c:2a:
86:60:9b:b9:cb:42:ae:fe:b4:5a:07:9f:b3:b8:35:
a0:d3:57:5f:91:23:ca:fe:5b:79:03:16:50:64:2c:
e6:b6:2a:bb:21:a4:1f:de:f9:b2:1c:61:ca:f4:f6:
49:57:a7:63:f1:b5:51:b1:02:9a:45:9d:48:3b:88:
91:d4:04:a1:1e:9b:48:44:26:6d:e1:f2:21:8a:85:
3a:51:ce:7c:51:1a:cf:a7:aa:66:ea:f0:cb:a0:e2:
98:9a:c9:14:14:06:de:12:ea:8d:c2:36:ed:65:00:
86:ab:48:08:cf:bd:98:62:f3:9c:30:8f:50:89:af:
da:1a:18:f9:b6:54:b4:b5:3a:8f:e7:d6:36:aa:bd:
a5:40:5b:1c:27:1e:e4:52:ad:36:44:82:af:50:72:
be:22:bd:5f:1d:53:11:54:f8:5f:6f:d5:be:f4:4b:
24:49:d6:84:59:53:58:00:dc:bc:78:d3:9d:7f:6d:
2e:aa:e8:36:7d:e5:f3:3a:f6:5c:51:52:3f:10:92:
df:a3:be:5a:c1:ec:76:e7:73:39:3e:e3:ed:dd:4e:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AB:8F:FA:58:32:36:EF:85:EA:F4:D2:BB:48:40:0D:9E:8B:7A:2D
X509v3 Authority Key Identifier:
keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:aa:de:13:d4:ac:0e:b8:c8:a6:33:32:c1:93:98:2d:d5:f8:
35:df:8c:db:7d:e4:3c:26:0f:7a:18:be:9a:d1:b1:d9:57:08:
eb:9b:e5:41:78:75:66:c3:85:b6:58:5b:9d:e4:ee:63:df:01:
99:8a:93:f6:77:ec:5d:33:e2:34:ce:60:1f:b1:4f:f0:54:37:
c1:1c:eb:81:26:4d:cb:09:2d:e1:70:c1:65:20:44:32:f1:69:
3d:18:f3:1a:71:e9:40:e1:32:e7:06:ca:69:b7:97:fa:de:8f:
18:8f:2c:a4:cc:f0:3b:77:da:70:72:46:df:22:ae:37:2c:13:
a3:93:03:24:48:9f:b6:77:45:32:2b:e3:07:1c:5f:a5:98:12:
a9:c0:f4:1d:1d:8c:65:f9:9b:5f:ae:19:74:76:ee:dc:c8:57:
fc:0f:ce:32:ae:12:f0:0c:58:fb:9e:b5:da:de:8c:f0:7a:32:
3d:a3:f0:74:12:ee:f9:2a:1d:fc:a5:93:c9:12:1c:6c:be:5f:
31:b8:8e:32:bb:cf:d0:6c:b8:4c:61:cd:05:d9:d0:db:2e:8b:
e9:c1:f7:67:a5:60:65:fb:c0:b0:55:7e:be:50:f8:6d:29:94:
b5:a7:0e:7c:82:46:ec:99:c5:a2:6f:1b:e5:8d:40:e4:bd:6d:
68:d1:47:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDw7CL8701aX5ddm/k01ecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YTQ3ZTNhNjcxNjBhZTQ2NjJlMGViY2NlZDdhOTIzM2Nl
NDdhYmYwHhcNMjUwODA3MDkwMTM2WhcNMjUwODA4MDkwMTM2WjAzMTEwLwYDVQQD
Eyg2YWFiOGZmYTU4MzIzNmVmODVlYWY0ZDJiYjQ4NDAwZDllOGI3YTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLSJkzWieM+6AaqMwTa+sGhuXAG6
VPl7a6QDiFtBF0MNZqBNjh+7E2XcPCqGYJu5y0Ku/rRaB5+zuDWg01dfkSPK/lt5
AxZQZCzmtiq7IaQf3vmyHGHK9PZJV6dj8bVRsQKaRZ1IO4iR1AShHptIRCZt4fIh
ioU6Uc58URrPp6pm6vDLoOKYmskUFAbeEuqNwjbtZQCGq0gIz72YYvOcMI9Qia/a
Ghj5tlS0tTqP59Y2qr2lQFscJx7kUq02RIKvUHK+Ir1fHVMRVPhfb9W+9EskSdaE
WVNYANy8eNOdf20uqug2feXzOvZcUVI/EJLfo75awex253M5PuPt3U4YzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqrj/pYMjbvher00rtIQA2ei3otMB8GA1UdIwQY
MBaAFHSkfjpnFgrkZi4OvM7XqSM85Hq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2Yt
OTJjN2Q0NmRkYjg5LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2YtOTJjN2Q0NmRkYjg5
LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6reE9Ss
DrjIpjMywZOYLdX4Nd+M233kPCYPehi+mtGx2VcI65vlQXh1ZsOFtlhbneTuY98B
mYqT9nfsXTPiNM5gH7FP8FQ3wRzrgSZNywkt4XDBZSBEMvFpPRjzGnHpQOEy5wbK
abeX+t6PGI8spMzwO3facHJG3yKuNywTo5MDJEiftndFMivjBxxfpZgSqcD0HR2M
ZfmbX64ZdHbu3MhX/A/OMq4S8AxY+5612t6M8HoyPaPwdBLu+Sod/KWTyRIcbL5f
MbiOMrvP0Gy4TGHNBdnQ2y6L6cH3Z6VgZfvAsFV+vlD4bSmUtacOfIJG7JnFom8b
5Y1A5L1taNFHFg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 13:10:11 2025 by rpki-client