Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier: T6wyj/Waa/kxVcDQpw7SzN0HEbt5uchksxD4E84pcDM=
Subject key identifier: D1:EC:44:B6:B3:86:D6:06:CE:02:8C:23:63:4A:3B:DA:06:CD:FF:4B
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial: 019874192BE81E6D377A9C553BBDEB812E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 08:01:03 +0000
Manifest this update: Mon 04 Aug 2025 08:01:03 +0000
Manifest next update: Tue 05 Aug 2025 08:01:03 +0000
Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: ccG5RwCYDry8rvyvuHJ1mEb5bjpAeWIh7tRkwHgvjd8=)
2: tP4Nr3k13Af3UtlucGdOvIgy7uY.roa (hash: ofrFnG5ByBdxFiFLthIkeYVusoIIsNMbVNLs6rFZMMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:2b:e8:1e:6d:37:7a:9c:55:3b:bd:eb:81:2e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Validity
Not Before: Aug 4 08:01:03 2025 GMT
Not After : Aug 5 08:01:03 2025 GMT
Subject: CN=d1ec44b6b386d606ce028c23634a3bda06cdff4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:65:d7:8d:33:0d:5d:cf:c2:d8:80:f0:a7:
d3:39:8b:67:64:1b:5e:00:bc:e1:45:e7:d8:3f:f0:
28:e1:77:05:4c:7e:d7:29:5b:91:2c:19:b9:d6:34:
3d:a8:4e:1f:5e:77:f6:2b:9c:f4:11:e4:61:d6:dc:
d8:94:f2:76:55:e3:e9:6f:d2:98:3b:3c:4d:94:57:
d3:53:95:12:25:78:91:64:cb:59:fb:f2:c0:a1:f2:
1d:2a:10:ab:40:3f:8e:94:3f:70:5d:67:70:48:0a:
bd:2c:46:8e:4a:0d:0e:7e:e4:3c:66:11:6d:9a:18:
db:b3:78:10:14:ef:f2:d8:56:13:a7:1e:42:80:a2:
c4:43:49:45:c3:53:16:42:af:5f:a5:a2:a8:67:71:
12:61:3c:f4:22:e9:22:e4:18:5b:e7:f6:75:ca:2d:
4d:43:48:b4:bf:b9:80:de:a7:1e:e3:63:2e:e6:f9:
5d:c7:3c:c4:dd:58:54:15:69:62:f2:a4:f1:1a:df:
65:7a:51:dd:d1:b0:ec:d0:f7:6d:26:f0:14:17:26:
50:b4:cb:b7:3f:9b:fa:64:18:e4:51:44:10:b2:9b:
a8:5d:b2:11:ac:c8:cc:07:41:f6:ea:af:60:bc:5d:
bb:2a:8a:27:12:d4:c0:8c:5c:d7:29:8f:d9:19:68:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EC:44:B6:B3:86:D6:06:CE:02:8C:23:63:4A:3B:DA:06:CD:FF:4B
X509v3 Authority Key Identifier:
keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:88:5b:56:f3:5f:b1:27:7a:d4:d0:9d:8f:88:e9:ce:5d:cf:
7e:76:71:bb:c4:99:97:38:b2:e6:3e:54:f8:66:9d:8a:ae:08:
d5:25:94:8e:4a:06:e1:61:2e:33:da:44:14:f0:e1:fe:59:68:
f3:ab:7b:f5:cb:bc:bc:a1:f5:d0:d8:f1:7c:54:2f:ca:59:0b:
c5:33:12:63:e1:dd:53:a4:18:25:58:71:a3:54:c0:01:ce:77:
86:ab:59:92:c5:3d:8b:0a:f8:ab:a7:40:9b:a9:3a:39:ca:c0:
ff:cd:61:2b:b2:8e:70:e7:d7:c9:99:29:e9:a1:26:6a:ee:7e:
65:ff:89:47:4c:69:6e:ec:25:f2:f4:82:73:55:45:8f:4f:12:
33:32:f7:61:a3:d6:d3:a5:b3:df:83:af:a8:04:ed:4c:4e:c6:
32:30:75:10:70:b5:bf:19:a1:0a:03:1d:1f:22:03:af:87:53:
d1:09:e4:b0:2e:bb:5d:2c:c6:d6:e1:b5:1d:18:14:fd:cf:1b:
00:ea:81:d0:bb:40:ab:c6:0a:f7:5d:f9:65:a1:24:ee:ca:bc:
c5:6f:d3:f8:01:60:c7:d2:51:35:90:82:13:66:77:ae:c4:9d:
16:a3:b8:24:a8:df:f1:ee:8c:c7:c1:df:c1:10:44:93:26:1b:
46:db:38:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GSvoHm03epxVO73rgS4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjM0NTU2MmQ1NzE4YjZjNGIyMDZiMWFlMzA0ZmM2ODQz
NmFkYjIwHhcNMjUwODA0MDgwMTAzWhcNMjUwODA1MDgwMTAzWjAzMTEwLwYDVQQD
EyhkMWVjNDRiNmIzODZkNjA2Y2UwMjhjMjM2MzRhM2JkYTA2Y2RmZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEtl140zDV3PwtiA8KfTOYtnZBte
ALzhRefYP/Ao4XcFTH7XKVuRLBm51jQ9qE4fXnf2K5z0EeRh1tzYlPJ2VePpb9KY
OzxNlFfTU5USJXiRZMtZ+/LAofIdKhCrQD+OlD9wXWdwSAq9LEaOSg0OfuQ8ZhFt
mhjbs3gQFO/y2FYTpx5CgKLEQ0lFw1MWQq9fpaKoZ3ESYTz0Iuki5Bhb5/Z1yi1N
Q0i0v7mA3qce42Mu5vldxzzE3VhUFWli8qTxGt9lelHd0bDs0PdtJvAUFyZQtMu3
P5v6ZBjkUUQQspuoXbIRrMjMB0H26q9gvF27KoonEtTAjFzXKY/ZGWhyywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHsRLazhtYGzgKMI2NKO9oGzf9LMB8GA1UdIwQY
MBaAFHWzRVYtVxi2xLIGsa4wT8aENq2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMt
OGFlNTFmNjJkMjE4LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMtOGFlNTFmNjJkMjE4
LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlohbVvNf
sSd61NCdj4jpzl3PfnZxu8SZlziy5j5U+Gadiq4I1SWUjkoG4WEuM9pEFPDh/llo
86t79cu8vKH10NjxfFQvylkLxTMSY+HdU6QYJVhxo1TAAc53hqtZksU9iwr4q6dA
m6k6OcrA/81hK7KOcOfXyZkp6aEmau5+Zf+JR0xpbuwl8vSCc1VFj08SMzL3YaPW
06Wz34OvqATtTE7GMjB1EHC1vxmhCgMdHyIDr4dT0QnksC67XSzG1uG1HRgU/c8b
AOqB0LtAq8YK9135ZaEk7sq8xW/T+AFgx9JRNZCCE2Z3rsSdFqO4JKjf8e6Mx8Hf
wRBEkyYbRts40g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:00 2025 by rpki-client