
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
File: pDJ8VulBFx6jvrom67niP031vPM.mft (raw, json)
Hash identifier: QsgTK2zN7xNhTHIuM9dNkcRVn7hspj/FaItEa/0Dwak=
Subject key identifier: 9D:08:04:4F:D7:0C:2A:5D:2C:0E:03:9E:A8:DD:ED:5E:A7:50:44:9D
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 01987DF81536BEE02407E5BCF905D57578F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
Manifest number: 06DF
Signing time: Wed 06 Aug 2025 06:01:07 +0000
Manifest this update: Wed 06 Aug 2025 06:01:07 +0000
Manifest next update: Thu 07 Aug 2025 06:01:07 +0000
Files and hashes: 1: 3vdSYlPhYCcKWdxmctUlZz3LRrA.roa (hash: JYH+c4M07iZOS3Xafi4xgQEUcEXeZVf7HAqO1Fudxb4=)
2: IKxoI34yNDqSYAVSbtJ6URAzHH8.roa (hash: /1RKNbwdvJvERdDo7l1kD+y03W4o9/o77qVS9bJMSGs=)
3: cLRpZsuHj1Ogs0ExPm-7o6d-jPI.roa (hash: TUBUIVHrB/n/iv6Q1YfM7h8U6VmMHs60X+y0rpIetb0=)
4: lbRMrKUagBNury-urjZX3f75_Qw.roa (hash: mq29IIHcb8ubsfXIgUD4LUU90hH0YRXl8dREvVbfEwI=)
5: pDJ8VulBFx6jvrom67niP031vPM.crl (hash: XR4Fq5QGL/hhf5Kuse6LTNE9MitKYOcRuJpd11n5cfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:15:36:be:e0:24:07:e5:bc:f9:05:d5:75:78:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Aug 6 06:01:07 2025 GMT
Not After : Aug 7 06:01:07 2025 GMT
Subject: CN=9d08044fd70c2a5d2c0e039ea8dded5ea750449d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:89:bc:a8:1a:47:80:41:b5:c5:8f:80:f1:
b4:0c:f2:c4:02:ed:54:d1:08:c4:02:c5:28:2f:2e:
ba:4b:49:b8:f1:51:f2:08:97:68:d9:b4:56:d0:9a:
a3:6e:26:77:84:ac:4b:37:34:ad:7b:fc:50:b3:e9:
e3:5b:ee:92:b4:3b:60:d9:75:cf:a2:71:c1:72:a1:
bf:76:26:fd:73:d5:3a:0f:f0:e5:b2:e8:30:83:5a:
57:cc:6d:45:ed:80:b1:59:95:8a:e5:15:cd:fd:ef:
bd:4c:02:eb:b8:19:e5:cb:5f:3a:76:34:d1:f5:19:
09:34:b4:1a:87:4b:17:e1:85:42:cf:e2:ff:0a:e1:
50:8b:26:46:40:82:e2:54:27:39:1d:17:96:72:a4:
58:a6:3f:f3:cf:52:a7:51:e3:8c:bd:23:76:0c:65:
dc:06:9f:99:f8:4b:13:a2:2e:38:9a:f0:f4:3e:54:
5d:cb:31:0a:df:05:8d:36:16:19:e6:48:e3:ff:be:
f2:59:e5:f6:f9:c3:c6:df:90:c9:34:cf:8b:f3:e6:
32:70:03:37:3f:6c:57:c7:3d:13:7e:5b:0b:81:7a:
55:53:ba:98:af:b1:ed:10:de:72:7f:b5:a1:8f:dd:
91:d6:15:dd:74:f4:c9:d8:2e:ce:37:a3:65:61:e2:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:08:04:4F:D7:0C:2A:5D:2C:0E:03:9E:A8:DD:ED:5E:A7:50:44:9D
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cd:ae:06:e5:43:46:f4:cf:1c:3b:fc:f0:29:7a:39:9f:9e:
ec:61:c1:d8:c6:3c:45:b7:10:63:a7:8a:bf:d1:9b:5c:19:0e:
8c:32:6a:83:ba:a6:b7:0b:fd:f1:51:d5:65:7c:6a:65:64:ac:
9e:ce:12:3f:4d:29:e0:a9:1e:88:df:19:a8:eb:1c:01:7c:67:
6a:77:36:0d:6d:54:13:ef:60:3c:a7:de:7f:fb:90:06:cf:82:
a4:0b:91:29:d9:0f:44:46:4a:00:d6:f9:40:51:4e:e1:38:70:
5f:36:b0:a7:80:c3:1c:60:c7:db:00:14:a2:56:d5:bd:4f:5c:
d5:f1:93:df:7c:1c:12:25:e2:76:f0:19:1e:61:d1:ce:92:57:
43:b2:f4:98:4f:5e:28:25:2c:ee:67:07:1e:a9:53:0f:01:5d:
13:09:7d:e1:3d:da:ef:21:ea:58:38:cf:ba:f3:d3:b9:c6:a2:
5e:6a:cc:78:f0:a5:dc:4a:1f:d9:56:c2:f4:8e:26:91:f8:02:
df:92:41:55:1d:4e:90:f0:22:95:1a:98:5a:9e:69:6f:39:dd:
5e:fa:26:6c:32:c4:e7:05:99:b9:f4:16:8a:c1:30:09:12:ff:
ed:fb:e6:30:3b:d6:84:dc:61:6b:95:39:10:f1:e7:b8:45:29:
71:9b:8d:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9+BU2vuAkB+W8+QXVdXjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm
NWJjZjMwHhcNMjUwODA2MDYwMTA3WhcNMjUwODA3MDYwMTA3WjAzMTEwLwYDVQQD
Eyg5ZDA4MDQ0ZmQ3MGMyYTVkMmMwZTAzOWVhOGRkZWQ1ZWE3NTA0NDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteuJvKgaR4BBtcWPgPG0DPLEAu1U
0QjEAsUoLy66S0m48VHyCJdo2bRW0JqjbiZ3hKxLNzSte/xQs+njW+6StDtg2XXP
onHBcqG/dib9c9U6D/Dlsugwg1pXzG1F7YCxWZWK5RXN/e+9TALruBnly186djTR
9RkJNLQah0sX4YVCz+L/CuFQiyZGQILiVCc5HReWcqRYpj/zz1KnUeOMvSN2DGXc
Bp+Z+EsToi44mvD0PlRdyzEK3wWNNhYZ5kjj/77yWeX2+cPG35DJNM+L8+YycAM3
P2xXxz0TflsLgXpVU7qYr7HtEN5yf7Whj92R1hXddPTJ2C7ON6NlYeKBrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0IBE/XDCpdLA4Dnqjd7V6nUESdMB8GA1UdIwQY
MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt
MjhjMzQzY2U5ZDVkLzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk
LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEc2uBuVD
RvTPHDv88Cl6OZ+e7GHB2MY8RbcQY6eKv9GbXBkOjDJqg7qmtwv98VHVZXxqZWSs
ns4SP00p4KkeiN8ZqOscAXxnanc2DW1UE+9gPKfef/uQBs+CpAuRKdkPREZKANb5
QFFO4ThwXzawp4DDHGDH2wAUolbVvU9c1fGT33wcEiXidvAZHmHRzpJXQ7L0mE9e
KCUs7mcHHqlTDwFdEwl94T3a7yHqWDjPuvPTucaiXmrMePCl3Eof2VbC9I4mkfgC
35JBVR1OkPAilRqYWp5pbzndXvombDLE5wWZufQWisEwCRL/7fvmMDvWhNxha5U5
EPHnuEUpcZuNcw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:31 2025 by rpki-client