Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: FNewGGSBUUSSrIqbHm7SGGh64vH0MHImcUkNYWEaHFw=
Subject key identifier: B4:DE:47:E8:6A:FE:AC:91:AB:28:E4:5F:EE:6B:00:8A:C4:55:DF:EA
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 01988EED4FD8B7976E651AB680A739745E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 13:02:53 +0000
Manifest this update: Sat 09 Aug 2025 13:02:53 +0000
Manifest next update: Sun 10 Aug 2025 13:02:53 +0000
Files and hashes: 1: 1-TOVnm2gd04tI-uLivEABR6Pazo.roa (hash: QVp2c0LkMSwloi3MOMCG1fyuxaPczwJ3tn0nHSxmhjE=)
2: HgA_tKLG5N3ASR5gcHl20EupVRE.roa (hash: DRYtmqvkH/s26hespCVF8HpGzgqR1cL88tvUFROmz9s=)
3: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: WZIbKrkWYWs/tsbeBjD9MiTfUskiRpqrDHXWfkAMu44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:4f:d8:b7:97:6e:65:1a:b6:80:a7:39:74:5e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Aug 9 13:02:53 2025 GMT
Not After : Aug 10 13:02:53 2025 GMT
Subject: CN=b4de47e86afeac91ab28e45fee6b008ac455dfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:96:6d:15:62:f2:df:3d:18:1b:12:2b:7c:
a9:e1:fe:88:64:26:31:9b:17:c2:f2:02:83:b7:b9:
55:57:89:3e:d9:5c:b9:3a:15:4f:0d:21:be:f1:4d:
f6:e5:77:ee:4a:5b:7a:81:8b:67:dd:98:0d:a7:51:
67:74:d0:2f:fb:64:dd:d5:b6:b1:59:7c:2e:e8:fd:
1f:45:3c:35:c2:34:fe:00:7f:fc:c6:4a:e0:ea:0a:
f4:84:5e:08:86:7f:54:15:54:ea:ad:f5:46:6e:5d:
a6:b6:99:ce:4e:77:53:2c:5a:b6:eb:89:65:6b:a7:
98:4a:b3:82:3a:9a:b8:1a:65:7e:04:af:3b:75:57:
94:46:45:29:a5:c3:3c:19:a4:e2:8a:c3:ea:8a:5e:
2a:2e:df:6d:4e:7b:c3:23:f5:6e:90:a0:98:41:ac:
9d:17:9d:16:59:33:93:96:13:bf:91:ed:ae:8b:7d:
01:11:8e:a7:46:f6:89:b6:a1:64:68:8e:ea:1f:d9:
b0:64:54:72:7e:fd:2e:82:9c:60:28:07:fa:11:38:
73:b7:94:cb:72:2a:dd:3b:5d:40:56:21:24:41:72:
f1:6f:b5:e0:4e:38:0c:16:12:3e:e7:51:5b:4b:a5:
e7:90:39:68:1d:54:50:7c:a5:00:3f:28:35:2e:2b:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DE:47:E8:6A:FE:AC:91:AB:28:E4:5F:EE:6B:00:8A:C4:55:DF:EA
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:23:cc:e9:3c:51:fe:7f:dd:48:b9:b1:d8:39:39:53:a9:81:
b2:ea:cf:5e:7d:9f:42:fb:56:e1:aa:9e:b7:3a:47:9d:bb:f2:
b8:68:24:24:31:65:67:67:bd:c4:1c:81:f1:19:19:48:30:a9:
0e:71:67:75:50:70:ec:ae:10:cb:1e:8c:3d:7d:04:76:6b:3e:
22:2c:b6:0c:c3:a5:7c:84:85:82:7c:ca:ad:bf:bc:5d:6b:4a:
bb:85:7d:69:01:dc:a0:58:7e:2d:ba:ad:48:a8:81:9a:d3:93:
4b:68:ec:7c:a4:5a:07:43:21:fc:65:d8:79:63:d3:48:af:df:
6f:b0:7a:c3:73:4f:29:ce:81:67:b8:ee:db:7d:2f:a7:81:e7:
dd:35:c2:97:10:7c:fa:ca:c6:20:fa:fa:e0:dc:e2:b0:2f:23:
bc:1b:01:77:a4:81:ac:d9:81:5e:d7:6f:68:77:6f:6a:13:61:
f5:82:4f:5f:a3:db:b5:f4:32:be:be:83:f9:c9:cf:82:92:7d:
b4:5f:a0:de:01:aa:ec:86:92:50:91:90:62:1f:65:30:41:25:
de:c6:8a:aa:ee:5d:7e:1d:60:1a:3d:ed:1f:f3:61:b7:1b:ac:
f8:a9:ce:f5:24:f2:97:ec:c2:9b:57:53:ba:01:56:34:f9:4c:
09:a3:a9:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO7U/Yt5duZRq2gKc5dF4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MmIwZDcyYmYwNzQzYmYyY2RjNzhiYTFmNTNlOWE5ODhm
OWFmMWUwHhcNMjUwODA5MTMwMjUzWhcNMjUwODEwMTMwMjUzWjAzMTEwLwYDVQQD
EyhiNGRlNDdlODZhZmVhYzkxYWIyOGU0NWZlZTZiMDA4YWM0NTVkZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvuWbRVi8t89GBsSK3yp4f6IZCYx
mxfC8gKDt7lVV4k+2Vy5OhVPDSG+8U325XfuSlt6gYtn3ZgNp1FndNAv+2Td1bax
WXwu6P0fRTw1wjT+AH/8xkrg6gr0hF4Ihn9UFVTqrfVGbl2mtpnOTndTLFq264ll
a6eYSrOCOpq4GmV+BK87dVeURkUppcM8GaTiisPqil4qLt9tTnvDI/VukKCYQayd
F50WWTOTlhO/ke2ui30BEY6nRvaJtqFkaI7qH9mwZFRyfv0ugpxgKAf6EThzt5TL
cirdO11AViEkQXLxb7XgTjgMFhI+51FbS6XnkDloHVRQfKUAPyg1LivkxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTeR+hq/qyRqyjkX+5rAIrEVd/qMB8GA1UdIwQY
MBaAFHUrDXK/B0O/LNx4uh9T6amI+a8eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFNzTmNyOEhRNzhzM0hpNkgxUHBxWWo1cng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zYWJhN2UtMWQ1MC00NzJmLThkYjct
NjkxMjE5MjEzNGU5LzEvZFNzTmNyOEhRNzhzM0hpNkgxUHBxWWo1cng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zYWJhN2UtMWQ1MC00NzJmLThkYjctNjkxMjE5MjEzNGU5
LzEvZFNzTmNyOEhRNzhzM0hpNkgxUHBxWWo1cng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1SPM6TxR
/n/dSLmx2Dk5U6mBsurPXn2fQvtW4aqetzpHnbvyuGgkJDFlZ2e9xByB8RkZSDCp
DnFndVBw7K4Qyx6MPX0Edms+Iiy2DMOlfISFgnzKrb+8XWtKu4V9aQHcoFh+Lbqt
SKiBmtOTS2jsfKRaB0Mh/GXYeWPTSK/fb7B6w3NPKc6BZ7ju230vp4Hn3TXClxB8
+srGIPr64NzisC8jvBsBd6SBrNmBXtdvaHdvahNh9YJPX6PbtfQyvr6D+cnPgpJ9
tF+g3gGq7IaSUJGQYh9lMEEl3saKqu5dfh1gGj3tH/Nhtxus+KnO9STyl+zCm1dT
ugFWNPlMCaOp1g==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:23 2025 by rpki-client