Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
File: dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json)
Hash identifier: MIdxnZ0+FTBW835Xtx8YjOwt14PGNSPDkQeFYROhPVk=
Subject key identifier: 77:11:97:EE:3D:B5:AC:C3:06:84:67:F1:56:14:4B:2A:F0:03:13:BC
Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b
Certificate serial: 019873E24B6F7F93FBFBD8133EC759B14711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
Manifest number: 148C
Signing time: Mon 04 Aug 2025 07:01:06 +0000
Manifest this update: Mon 04 Aug 2025 07:01:06 +0000
Manifest next update: Tue 05 Aug 2025 07:01:06 +0000
Files and hashes: 1: 1-p_3utwZJLFIY_hjsgzsQwTLbiI.roa (hash: zpk9gNBEbgG53UDNDLXhMv6FzOCjxm3OmxU6M/IVco8=)
2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: WBFNfy1l86IScMdIWugp1qEMIVgZNYWGY+AlKlMZuIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:4b:6f:7f:93:fb:fb:d8:13:3e:c7:59:b1:47:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b
Validity
Not Before: Aug 4 07:01:06 2025 GMT
Not After : Aug 5 07:01:06 2025 GMT
Subject: CN=771197ee3db5acc3068467f156144b2af00313bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:b2:88:d6:8a:4a:5e:10:1f:0d:c9:15:f6:
2f:ee:e4:d1:1c:10:09:2a:f2:42:47:7e:7a:a2:df:
d3:f7:d6:d2:a1:48:dc:3e:18:21:b4:bf:c5:03:d6:
dd:75:91:97:c5:a2:96:37:11:e4:67:dd:d8:9e:cb:
40:a9:f7:0a:a7:54:e1:fb:46:8a:6e:73:01:03:27:
a5:59:0b:30:4f:90:f2:53:1f:7d:1e:59:0a:c1:0c:
18:4a:44:f6:f3:b5:d6:23:ae:23:d8:f6:ff:84:9c:
3f:e4:7e:cd:57:bc:88:d0:1f:3b:83:1d:b1:6d:73:
ca:08:dd:17:e7:51:ed:b0:7c:f2:fc:2c:74:c4:af:
5d:56:1c:fc:2d:ea:a1:15:f0:2d:90:b8:81:e2:8b:
56:a7:f3:38:4d:4e:99:5f:9e:9d:cb:1e:33:51:b1:
c7:49:54:45:d0:55:c8:6d:0d:ff:54:4d:37:c4:ba:
22:80:9e:a1:87:71:b3:75:b6:0d:2e:6e:c7:f0:28:
9d:2a:ed:51:29:16:be:8c:36:12:26:8a:8f:27:60:
f4:eb:43:6e:8b:9f:3d:8d:ec:a6:18:f4:ef:43:80:
b0:bf:76:a3:2b:50:c5:47:7c:0f:0e:94:f5:d2:a6:
e1:95:0e:a2:32:0b:0b:ec:c4:86:5c:62:59:c2:51:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:11:97:EE:3D:B5:AC:C3:06:84:67:F1:56:14:4B:2A:F0:03:13:BC
X509v3 Authority Key Identifier:
keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ff:2f:1f:70:30:2b:1c:cb:36:7f:ca:f0:ef:1f:5c:62:e4:
d3:19:bb:bd:76:4b:64:0f:8b:5b:63:29:ba:33:5c:61:42:bb:
fd:40:dd:5c:72:ce:6c:f7:e2:4f:10:c7:7f:89:e1:97:de:d0:
1e:1d:41:e0:a4:b4:03:6f:f4:bb:04:f0:c1:18:05:88:84:aa:
aa:93:50:14:73:41:a8:49:f7:34:56:20:52:f3:81:71:5a:68:
39:96:14:0b:9c:e8:8f:2b:da:76:ed:45:ab:0c:3d:b9:c9:84:
df:8e:7a:26:de:8c:55:2d:2a:f7:20:56:1b:de:ed:0a:02:e4:
14:9e:f6:55:82:69:b0:f0:7b:b6:ca:d1:85:ea:70:60:28:9d:
57:df:cc:34:96:be:e2:cc:67:f0:a7:99:cf:ac:84:98:09:55:
1d:94:d3:ce:cd:c2:15:e6:2e:1a:4b:45:d9:e1:1d:be:7d:51:
5c:f0:01:b6:a4:a7:0b:34:21:75:d5:ba:3a:89:c9:92:70:81:
73:d2:35:14:aa:c5:76:bd:72:b4:90:8f:6f:ae:b1:bb:44:36:
93:6f:78:b2:5d:72:c3:a2:d0:31:a3:68:78:a4:40:91:e2:ad:
6d:b8:8e:2b:11:3a:98:6d:2b:5f:7c:56:41:47:2d:fc:68:87:
3f:fa:19:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4ktvf5P7+9gTPsdZsUcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODc5MDJjZTdhNmEzMzRhNGUwZGI3M2U3MjE5ODkwMTVk
NjQ4OWIwHhcNMjUwODA0MDcwMTA2WhcNMjUwODA1MDcwMTA2WjAzMTEwLwYDVQQD
Eyg3NzExOTdlZTNkYjVhY2MzMDY4NDY3ZjE1NjE0NGIyYWYwMDMxM2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuImyiNaKSl4QHw3JFfYv7uTRHBAJ
KvJCR356ot/T99bSoUjcPhghtL/FA9bddZGXxaKWNxHkZ93YnstAqfcKp1Th+0aK
bnMBAyelWQswT5DyUx99HlkKwQwYSkT287XWI64j2Pb/hJw/5H7NV7yI0B87gx2x
bXPKCN0X51HtsHzy/Cx0xK9dVhz8LeqhFfAtkLiB4otWp/M4TU6ZX56dyx4zUbHH
SVRF0FXIbQ3/VE03xLoigJ6hh3GzdbYNLm7H8CidKu1RKRa+jDYSJoqPJ2D060Nu
i589jeymGPTvQ4Cwv3ajK1DFR3wPDpT10qbhlQ6iMgsL7MSGXGJZwlEzjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcRl+49tazDBoRn8VYUSyrwAxO8MB8GA1UdIwQY
MBaAFHWHkCznpqM0pODbc+chmJAV1kibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80ZGU5YmEtMGE2Yi00N2Y4LTk3NzAt
ZjkyMDE5Mzc1YmM4LzEvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy80ZGU5YmEtMGE2Yi00N2Y4LTk3NzAtZjkyMDE5Mzc1YmM4
LzEvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYP8vH3Aw
KxzLNn/K8O8fXGLk0xm7vXZLZA+LW2MpujNcYUK7/UDdXHLObPfiTxDHf4nhl97Q
Hh1B4KS0A2/0uwTwwRgFiISqqpNQFHNBqEn3NFYgUvOBcVpoOZYUC5zojyvadu1F
qww9ucmE3456Jt6MVS0q9yBWG97tCgLkFJ72VYJpsPB7tsrRhepwYCidV9/MNJa+
4sxn8KeZz6yEmAlVHZTTzs3CFeYuGktF2eEdvn1RXPABtqSnCzQhddW6OonJknCB
c9I1FKrFdr1ytJCPb66xu0Q2k294sl1yw6LQMaNoeKRAkeKtbbiOKxE6mG0rX3xW
QUct/GiHP/oZ1Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:22:12 2025 by rpki-client