Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: tjalllNabnXAnFRcTKnY8bdDfk+0f+iPQum0spfWJCE=
Subject key identifier: 2E:8D:B7:C3:1D:97:8A:CD:76:A4:C6:01:AF:9C:15:3E:39:4A:16:C4
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 01988D6B4288DF91082EBFC75247B789D49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 15B6
Signing time: Sat 09 Aug 2025 06:01:13 +0000
Manifest this update: Sat 09 Aug 2025 06:01:13 +0000
Manifest next update: Sun 10 Aug 2025 06:01:13 +0000
Files and hashes: 1: 5GQUPOVGommpVDGycPNjbxgsAD0.roa (hash: FIE52nDWdmLHUw5eNYHFQW5KOb1fH0QVln67hfDRIhI=)
2: As_2g2yroeYldeSEBOBcptHFZjw.roa (hash: 2A+ZAisZSqDWuxJUH2YsftgFU0YaUFKEL3In2EBPDcU=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: Ad5U+XOfkC9wIKi0sMbK78ttXyYjbo8K2OL5DkaG2uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:42:88:df:91:08:2e:bf:c7:52:47:b7:89:d4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Aug 9 06:01:13 2025 GMT
Not After : Aug 10 06:01:13 2025 GMT
Subject: CN=2e8db7c31d978acd76a4c601af9c153e394a16c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5b:47:0e:00:2e:16:97:fc:77:0d:9f:39:48:
3a:db:51:13:33:24:fe:13:86:ad:ed:2a:be:a0:79:
f5:6e:9d:0f:a3:86:ca:6a:b2:76:d8:dd:f2:89:cd:
25:9e:2f:23:b8:d7:1c:10:f8:f8:47:51:83:51:f0:
e2:5f:01:02:17:80:84:d1:3b:8c:66:f3:d1:ce:94:
27:93:17:6b:ad:11:11:35:b8:ac:b7:f7:65:c1:ba:
cc:cf:cd:d0:d0:1e:7c:c1:35:2f:ba:d5:d3:66:e6:
59:2f:84:5e:05:ab:4a:3d:af:f5:f7:fb:86:d7:5b:
13:5b:8e:24:b1:aa:ea:ff:b2:b5:2d:fb:23:54:c7:
c6:e3:36:ac:df:f9:69:4d:45:9a:08:a5:dc:86:f3:
4d:df:1e:bc:ac:9a:7f:a9:4d:13:63:5a:3f:e3:c8:
27:d5:13:12:40:dd:fd:01:2a:c5:4f:87:0b:da:84:
ff:69:fd:c2:de:20:44:24:22:fc:d2:e1:d2:48:3f:
e1:95:e0:7d:d3:43:68:c6:05:fe:07:fe:7e:de:93:
e7:ed:21:f2:c9:81:f8:df:c2:50:80:a0:a7:19:f3:
ca:83:bc:7a:75:35:eb:09:fc:00:f4:58:22:8a:46:
98:5f:19:93:d2:59:b1:d9:7a:6a:30:fa:3c:70:9c:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8D:B7:C3:1D:97:8A:CD:76:A4:C6:01:AF:9C:15:3E:39:4A:16:C4
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f5:3d:59:ac:23:c1:c7:9a:c5:68:b0:4c:c5:98:30:dd:ef:
42:3d:44:04:94:82:8b:05:b0:7f:1c:ce:43:1f:7a:01:d1:de:
21:d2:f6:fa:ce:94:83:32:24:18:ca:f1:09:b5:c9:47:d7:9a:
2b:a8:4f:aa:63:8b:d7:1f:af:cd:d2:47:61:4f:48:2c:1c:27:
48:87:de:cd:df:55:9e:57:00:c6:de:3c:b9:fd:76:d1:f1:a6:
23:f7:0e:e3:34:a5:3c:76:38:65:d0:05:a1:01:e8:34:2e:6d:
45:89:24:9a:6a:8a:7b:df:66:52:5b:db:09:48:e4:f5:6a:e3:
1b:56:2b:67:d8:3c:dd:b6:9b:8c:60:8c:59:1b:e2:4a:86:d2:
10:11:55:f2:21:f8:06:09:bf:5b:18:9a:6c:7e:7d:bd:27:c4:
e9:ca:41:90:d7:e2:cb:c0:cb:c5:d5:42:81:53:4d:2a:e4:d8:
84:1f:66:c3:e5:95:49:5a:17:67:19:6e:c0:de:6f:c8:43:02:
06:09:6c:c1:cc:f9:93:70:99:82:9d:b5:7a:3a:dc:84:4a:0d:
4e:7b:83:d9:c7:32:77:00:0e:92:fe:40:18:e2:f2:aa:56:83:
b6:76:94:30:ff:16:ef:ed:69:f8:d6:38:8f:9c:d6:b4:f8:03:
0b:cd:06:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNa0KI35EILr/HUke3idSfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODJiMDE3NzE3Y2E4M2EwNWU0Y2JjM2YyNjZmMTJhNTM1
OWQ1ZTUwHhcNMjUwODA5MDYwMTEzWhcNMjUwODEwMDYwMTEzWjAzMTEwLwYDVQQD
EygyZThkYjdjMzFkOTc4YWNkNzZhNGM2MDFhZjljMTUzZTM5NGExNmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VtHDgAuFpf8dw2fOUg621ETMyT+
E4at7Sq+oHn1bp0Po4bKarJ22N3yic0lni8juNccEPj4R1GDUfDiXwECF4CE0TuM
ZvPRzpQnkxdrrRERNbist/dlwbrMz83Q0B58wTUvutXTZuZZL4ReBatKPa/19/uG
11sTW44ksarq/7K1LfsjVMfG4zas3/lpTUWaCKXchvNN3x68rJp/qU0TY1o/48gn
1RMSQN39ASrFT4cL2oT/af3C3iBEJCL80uHSSD/hleB900NoxgX+B/5+3pPn7SHy
yYH438JQgKCnGfPKg7x6dTXrCfwA9FgiikaYXxmT0lmx2XpqMPo8cJwt8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6Nt8Mdl4rNdqTGAa+cFT45ShbEMB8GA1UdIwQY
MBaAFHSCsBdxfKg6BeTLw/Jm8SpTWdXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kNDgzNWItNzMyMy00NjcxLWFkNTkt
N2ZiMDU5MjBlMjI4LzEvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9kNDgzNWItNzMyMy00NjcxLWFkNTktN2ZiMDU5MjBlMjI4
LzEvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfU9Wawj
wceaxWiwTMWYMN3vQj1EBJSCiwWwfxzOQx96AdHeIdL2+s6UgzIkGMrxCbXJR9ea
K6hPqmOL1x+vzdJHYU9ILBwnSIfezd9VnlcAxt48uf120fGmI/cO4zSlPHY4ZdAF
oQHoNC5tRYkkmmqKe99mUlvbCUjk9WrjG1YrZ9g83babjGCMWRviSobSEBFV8iH4
Bgm/WxiabH59vSfE6cpBkNfiy8DLxdVCgVNNKuTYhB9mw+WVSVoXZxluwN5vyEMC
Bglswcz5k3CZgp21ejrchEoNTnuD2ccydwAOkv5AGOLyqlaDtnaUMP8W7+1p+NY4
j5zWtPgDC80Gig==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:05 2025 by rpki-client