Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: BUX12qZd6QxnILAM9ATluS/IvRpzQHWOB3jI2x9RFYE=
Subject key identifier: 14:8D:90:80:CD:69:12:42:6E:90:5E:4E:35:58:44:F2:3D:67:32:59
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 019873E2F0830257295637350CAD2755E0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 13D6
Signing time: Mon 04 Aug 2025 07:01:49 +0000
Manifest this update: Mon 04 Aug 2025 07:01:49 +0000
Manifest next update: Tue 05 Aug 2025 07:01:49 +0000
Files and hashes: 1: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (hash: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=)
2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: YKW5cqjZtpzI+u2+Bgb5zMuTIP4JRj7X9tNXZDKHa1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:f0:83:02:57:29:56:37:35:0c:ad:27:55:e0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Aug 4 07:01:49 2025 GMT
Not After : Aug 5 07:01:49 2025 GMT
Subject: CN=148d9080cd6912426e905e4e355844f23d673259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:ea:e6:fe:41:a6:c0:47:a4:44:3e:35:d9:
65:ba:f6:fe:37:35:7f:53:05:82:f0:a8:9c:00:dc:
2c:e9:34:3a:83:70:a1:4b:39:1a:b6:f4:1a:e2:10:
ab:dc:ce:e1:64:10:6c:45:f5:a4:0f:17:02:bf:c8:
ca:6a:8c:f3:20:62:7e:52:53:e6:2e:97:1d:54:6a:
07:22:ee:92:c6:fe:e1:09:72:2f:62:7c:28:e9:82:
82:82:f8:e3:b5:fb:97:81:01:a2:69:af:b7:c9:d8:
e8:03:4a:fe:6b:9d:21:9b:c9:b2:96:b1:f7:4e:bf:
cd:05:e2:a4:c4:44:a8:3c:04:3b:84:b6:78:a5:9a:
a2:96:02:7e:9d:98:54:0e:51:cb:c5:0c:e4:f8:20:
d3:ba:3c:cf:a7:af:a0:a2:c1:a0:38:0a:aa:5d:23:
a1:a7:d8:c4:92:dc:d0:2a:38:2f:3b:67:2e:d6:2c:
84:8b:95:a9:72:08:ff:53:5f:9e:7d:39:13:95:2d:
91:81:23:fe:a4:03:cf:9a:2e:17:40:99:66:4c:a1:
9c:33:0a:e2:0f:85:4b:42:30:03:19:5a:9b:c2:66:
9a:a0:0b:be:37:46:97:c6:5a:74:4b:6e:ce:6e:dd:
c8:44:d3:d5:72:69:f6:1a:ea:c9:51:f0:68:e3:a7:
8b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8D:90:80:CD:69:12:42:6E:90:5E:4E:35:58:44:F2:3D:67:32:59
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4c:06:3d:47:8c:87:ec:85:32:6b:91:5d:56:3b:ef:79:56:
8d:75:44:a3:13:c0:72:84:e7:16:08:f4:1c:d3:23:b4:ca:c1:
5d:13:2f:30:a9:76:88:8b:e6:3c:70:f0:b7:2c:89:71:84:7d:
69:41:af:b0:59:5f:0a:af:2e:58:4f:92:80:a0:f2:be:3a:d0:
90:fc:cf:83:b1:3c:30:14:44:c6:c6:be:a6:bd:78:93:7b:8b:
a2:ec:2d:1f:ee:7a:c4:0b:15:8d:ef:37:98:03:71:2d:b2:85:
56:90:ee:fc:d2:79:67:66:ce:98:16:80:3f:3d:0a:20:28:bc:
f4:03:d0:b7:d8:d4:d1:02:4a:0e:1e:b1:49:32:5b:4b:fb:c5:
a9:99:42:25:27:2a:78:36:03:b1:f1:23:95:c5:f9:d4:ec:9b:
68:db:82:df:32:25:50:ea:82:c0:e0:e0:3d:77:0c:46:a4:4d:
59:ad:9d:6f:fb:e8:b3:32:24:65:4a:2f:46:d9:7c:7f:17:ca:
b8:f7:e0:a4:99:b0:33:b1:f8:02:aa:76:da:0d:89:50:48:63:
2f:31:47:24:9b:3b:a0:0c:9e:85:e9:81:44:36:7a:37:78:94:
47:25:ac:ea:39:35:e9:99:97:23:14:94:0d:b8:9b:f2:af:c0:
0f:bd:03:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4vCDAlcpVjc1DK0nVeDbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZDAzMjUyOGJiMWQxNTk3NjZjZDc5ZGU0Nzg2ZGNkOTYy
YTFmYmIwHhcNMjUwODA0MDcwMTQ5WhcNMjUwODA1MDcwMTQ5WjAzMTEwLwYDVQQD
EygxNDhkOTA4MGNkNjkxMjQyNmU5MDVlNGUzNTU4NDRmMjNkNjczMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0jq5v5BpsBHpEQ+Ndlluvb+NzV/
UwWC8KicANws6TQ6g3ChSzkatvQa4hCr3M7hZBBsRfWkDxcCv8jKaozzIGJ+UlPm
LpcdVGoHIu6Sxv7hCXIvYnwo6YKCgvjjtfuXgQGiaa+3ydjoA0r+a50hm8mylrH3
Tr/NBeKkxESoPAQ7hLZ4pZqilgJ+nZhUDlHLxQzk+CDTujzPp6+gosGgOAqqXSOh
p9jEktzQKjgvO2cu1iyEi5Wpcgj/U1+efTkTlS2RgSP+pAPPmi4XQJlmTKGcMwri
D4VLQjADGVqbwmaaoAu+N0aXxlp0S27Obt3IRNPVcmn2GurJUfBo46eLuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSNkIDNaRJCbpBeTjVYRPI9ZzJZMB8GA1UdIwQY
MBaAFHTQMlKLsdFZdmzXneR4bc2WKh+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmIt
MmM5MTI3YWI0OGMzLzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmItMmM5MTI3YWI0OGMz
LzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxUwGPUeM
h+yFMmuRXVY773lWjXVEoxPAcoTnFgj0HNMjtMrBXRMvMKl2iIvmPHDwtyyJcYR9
aUGvsFlfCq8uWE+SgKDyvjrQkPzPg7E8MBRExsa+pr14k3uLouwtH+56xAsVje83
mANxLbKFVpDu/NJ5Z2bOmBaAPz0KICi89APQt9jU0QJKDh6xSTJbS/vFqZlCJScq
eDYDsfEjlcX51OybaNuC3zIlUOqCwODgPXcMRqRNWa2db/voszIkZUovRtl8fxfK
uPfgpJmwM7H4Aqp22g2JUEhjLzFHJJs7oAyehemBRDZ6N3iURyWs6jk16ZmXIxSU
Dbib8q/AD70DzA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:22 2025 by rpki-client