Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json)
Hash identifier: Mmtcj4Ok5Bav/pkxMNZpYv3A2Q3drH9z36n1TJf+lHU=
Subject key identifier: 5C:13:FB:0C:B0:24:22:96:2C:3D:E2:16:EA:52:DE:9A:BF:CC:BE:4B
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 01987B9D99754B9792EAB6ADF1FBD8C087EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
Manifest number: 0A6B
Signing time: Tue 05 Aug 2025 19:03:02 +0000
Manifest this update: Tue 05 Aug 2025 19:03:02 +0000
Manifest next update: Wed 06 Aug 2025 19:03:02 +0000
Files and hashes: 1: VqZeFvbbX-KsOWD9GK-fycFhuOI.roa (hash: xgMvcAX7GnHhnhehwxi81Z4YyETizwcdtzJzWTQwg/k=)
2: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: Rhg6Wo67Md/CMCQB3XYHvRnLpdxhhVc4prec2j9TrYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:99:75:4b:97:92:ea:b6:ad:f1:fb:d8:c0:87:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Aug 5 19:03:02 2025 GMT
Not After : Aug 6 19:03:02 2025 GMT
Subject: CN=5c13fb0cb02422962c3de216ea52de9abfccbe4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e7:75:56:0d:60:95:d7:2e:23:16:a4:70:a0:
ba:80:6c:3f:10:25:63:8f:52:53:11:8f:96:07:64:
63:dd:79:a9:5f:81:49:b7:3f:11:51:16:cf:5b:e9:
65:8b:6d:2a:96:b8:08:43:48:e1:45:aa:7f:e5:f3:
e7:b7:0a:70:6c:46:5b:9a:d4:1e:e7:05:73:3d:d2:
95:2f:43:93:90:d4:dd:8f:ca:71:a9:c2:d6:90:26:
95:cb:2a:a6:d1:74:43:d7:18:9e:e5:6b:38:3e:44:
15:1f:0b:85:74:f2:ac:cc:c0:51:46:0a:55:73:55:
54:5f:27:40:4d:41:1c:12:c1:11:a7:f0:d5:a0:ed:
c5:92:4e:53:b6:6f:b6:5c:ac:52:8e:b6:6c:b1:5e:
21:38:28:6b:3e:1a:3d:86:0d:e5:4e:85:7e:3e:41:
32:ff:ed:c9:ed:6d:e5:02:92:93:9f:44:92:27:eb:
7b:81:81:ad:15:64:1d:2d:1a:8b:e2:3c:95:6a:c5:
5d:c1:43:8f:3e:c0:f8:df:c4:6c:82:6d:7d:00:22:
7f:05:c1:04:e0:c8:5b:71:7f:53:16:f7:08:af:38:
7b:af:8c:0b:cb:9a:db:ee:e1:a8:e3:11:e9:18:1a:
85:e8:91:67:f7:de:a2:bc:d9:2f:70:da:1f:42:e9:
82:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:13:FB:0C:B0:24:22:96:2C:3D:E2:16:EA:52:DE:9A:BF:CC:BE:4B
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:31:2d:cd:e7:4a:fc:5c:73:86:9e:42:e8:f8:cd:b6:92:25:
bf:ba:68:3d:d8:79:33:6b:87:be:7a:9c:84:83:1a:35:b3:b1:
17:74:e8:dd:31:34:a0:81:22:01:a8:b0:9f:05:cc:f4:15:1b:
29:72:c9:83:83:54:62:b0:8c:df:71:b3:23:51:dd:1f:73:99:
90:9a:ea:f6:f7:8c:56:78:b2:d7:a2:84:3a:43:72:d0:68:02:
ea:9a:90:93:5f:5c:d3:cb:5f:99:f9:65:6d:4e:2d:1c:fa:84:
de:c5:13:ea:5b:78:ac:6a:53:2c:81:38:6e:18:e7:9b:3a:bb:
4f:b5:5c:41:ff:f7:5e:5e:80:32:cd:f5:4d:8f:68:e4:b3:71:
96:5a:88:97:5c:f1:0a:c5:bf:9e:26:cd:04:48:d9:d9:49:75:
2c:1e:8d:d3:95:14:53:8d:d9:db:d7:b5:95:52:7b:af:77:3c:
08:ea:8f:ec:6a:c2:0c:73:5f:57:3b:1d:c0:52:90:04:91:5b:
3c:d3:f2:d6:2e:ad:92:7f:7f:1a:d7:d9:b0:7f:cd:e6:27:3e:
73:46:74:08:a0:ad:54:16:e2:36:7e:54:10:18:c7:8b:0b:07:
db:95:b9:36:8f:da:f1:63:4a:28:37:0d:ec:ed:5b:74:22:d0:
a1:a2:cc:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nZl1S5eS6rat8fvYwIfqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0
MDA0NGEwHhcNMjUwODA1MTkwMzAyWhcNMjUwODA2MTkwMzAyWjAzMTEwLwYDVQQD
Eyg1YzEzZmIwY2IwMjQyMjk2MmMzZGUyMTZlYTUyZGU5YWJmY2NiZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ed1Vg1gldcuIxakcKC6gGw/ECVj
j1JTEY+WB2Rj3XmpX4FJtz8RURbPW+lli20qlrgIQ0jhRap/5fPntwpwbEZbmtQe
5wVzPdKVL0OTkNTdj8pxqcLWkCaVyyqm0XRD1xie5Ws4PkQVHwuFdPKszMBRRgpV
c1VUXydATUEcEsERp/DVoO3Fkk5Ttm+2XKxSjrZssV4hOChrPho9hg3lToV+PkEy
/+3J7W3lApKTn0SSJ+t7gYGtFWQdLRqL4jyVasVdwUOPPsD438Rsgm19ACJ/BcEE
4MhbcX9TFvcIrzh7r4wLy5rb7uGo4xHpGBqF6JFn996ivNkvcNofQumCmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwT+wywJCKWLD3iFupS3pq/zL5LMB8GA1UdIwQY
MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt
ZWQ1MzU4YjZkYTMxLzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx
LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTEtzedK
/Fxzhp5C6PjNtpIlv7poPdh5M2uHvnqchIMaNbOxF3To3TE0oIEiAaiwnwXM9BUb
KXLJg4NUYrCM33GzI1HdH3OZkJrq9veMVniy16KEOkNy0GgC6pqQk19c08tfmfll
bU4tHPqE3sUT6lt4rGpTLIE4bhjnmzq7T7VcQf/3Xl6AMs31TY9o5LNxllqIl1zx
CsW/nibNBEjZ2Ul1LB6N05UUU43Z29e1lVJ7r3c8COqP7GrCDHNfVzsdwFKQBJFb
PNPy1i6tkn9/GtfZsH/N5ic+c0Z0CKCtVBbiNn5UEBjHiwsH25W5No/a8WNKKDcN
7O1bdCLQoaLMuw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:25:37 2025 by rpki-client