Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: dK0Ay/48y21WLnpuV4jqm2hpo7xLLPlvhd5GNzCA4Zs=
Subject key identifier: DF:13:3E:76:97:6C:AE:42:8B:D2:9A:AC:6D:73:A8:65:96:7C:3A:57
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 019872989F7F098AC3F6807F0890E559D418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 01:01:01 +0000
Manifest this update: Mon 04 Aug 2025 01:01:01 +0000
Manifest next update: Tue 05 Aug 2025 01:01:01 +0000
Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=)
2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: 7jhWBca4+z8Z7bkrNutVIskJGBr7AK9VRsJzHy+RU/k=)
3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:9f:7f:09:8a:c3:f6:80:7f:08:90:e5:59:d4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Aug 4 01:01:01 2025 GMT
Not After : Aug 5 01:01:01 2025 GMT
Subject: CN=df133e76976cae428bd29aac6d73a865967c3a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:1a:3a:68:cc:f3:9f:8e:c8:46:18:51:e9:
db:05:49:15:f6:91:18:cc:48:32:38:48:2d:c1:36:
69:5b:d2:03:e3:f6:94:8b:8e:97:14:e7:16:91:07:
a3:79:97:87:f0:16:37:4d:93:b7:54:aa:ab:4c:eb:
64:10:d6:e6:c7:9e:12:c4:bd:e5:6a:d8:7f:78:80:
78:fd:20:2d:d0:00:75:ef:bf:c4:31:8c:af:28:06:
e6:bf:1a:62:33:10:ab:76:03:51:bc:d7:b4:1d:fe:
0b:18:d0:5c:92:59:8a:3c:75:32:0f:2d:cc:28:77:
26:c4:5e:b0:55:7a:ff:53:86:17:86:62:26:94:dd:
ad:02:c6:7b:92:11:52:6c:e4:5b:47:da:ab:c0:6a:
90:39:e3:b1:87:8e:b8:da:43:b0:2b:18:ce:e4:2f:
cd:3f:aa:69:1f:a9:89:3a:86:62:f2:40:54:b4:3e:
86:97:af:04:61:70:0a:41:de:7a:3a:0e:df:e4:82:
16:2e:ad:59:65:6a:5f:ed:e9:b9:18:32:4f:cd:28:
fe:ee:8a:5e:f4:f1:b2:b0:b0:62:60:21:9e:00:44:
66:4a:13:da:7e:76:0e:0f:0a:0c:51:bc:ac:92:11:
f6:50:a7:f8:95:81:de:b6:12:f2:8b:ad:b7:db:fd:
20:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:13:3E:76:97:6C:AE:42:8B:D2:9A:AC:6D:73:A8:65:96:7C:3A:57
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:78:07:cb:e7:e5:ce:ef:14:41:14:e4:64:ae:5d:7f:fb:87:
ec:49:97:4e:c9:23:cd:2e:d1:dc:75:6b:c8:12:39:d5:5e:49:
97:b6:97:0d:af:22:0e:c9:e2:29:17:79:c0:72:84:6e:bf:36:
38:d7:5b:09:23:fa:92:6e:31:57:28:ad:be:e1:3b:7f:ad:27:
4a:c7:2b:44:5a:a3:40:3f:99:f1:b4:f9:24:cd:16:73:e6:15:
7b:65:61:63:3c:7b:2c:8b:4e:37:f6:b3:8b:49:73:55:c2:d6:
c9:54:5f:9b:25:8d:87:60:0d:f0:93:62:da:f1:ca:32:73:bf:
2a:14:a0:8c:a0:da:29:71:04:02:c4:47:67:ba:67:23:37:d2:
e6:fa:8d:23:e6:88:dc:25:d9:c2:fc:5a:f4:28:e1:55:d7:fb:
ec:19:51:d1:5e:27:d3:88:2d:10:fc:75:99:9d:4e:1b:79:2d:
ba:04:29:2d:0b:9c:30:72:b8:2f:b2:32:91:42:a9:f5:fb:2e:
46:19:fe:cb:b0:af:6d:45:0e:16:b3:70:e5:be:34:6c:49:8f:
5d:e8:22:b4:f0:26:b4:11:fc:93:9b:7c:f7:91:2f:5c:06:97:
b5:23:1d:3e:f3:51:40:80:72:f2:a9:ed:59:54:70:4f:97:1a:
f4:78:18:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymJ9/CYrD9oB/CJDlWdQYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ODBjZDRlNzRmMTg1YThmMWFkNDA1MjFiNjExYjc0ZDUx
NmJmNzcwHhcNMjUwODA0MDEwMTAxWhcNMjUwODA1MDEwMTAxWjAzMTEwLwYDVQQD
EyhkZjEzM2U3Njk3NmNhZTQyOGJkMjlhYWM2ZDczYTg2NTk2N2MzYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FQaOmjM85+OyEYYUenbBUkV9pEY
zEgyOEgtwTZpW9ID4/aUi46XFOcWkQejeZeH8BY3TZO3VKqrTOtkENbmx54SxL3l
ath/eIB4/SAt0AB177/EMYyvKAbmvxpiMxCrdgNRvNe0Hf4LGNBcklmKPHUyDy3M
KHcmxF6wVXr/U4YXhmImlN2tAsZ7khFSbORbR9qrwGqQOeOxh4642kOwKxjO5C/N
P6ppH6mJOoZi8kBUtD6Gl68EYXAKQd56Og7f5IIWLq1ZZWpf7em5GDJPzSj+7ope
9PGysLBiYCGeAERmShPafnYODwoMUbyskhH2UKf4lYHethLyi6232/0gvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8TPnaXbK5Ci9KarG1zqGWWfDpXMB8GA1UdIwQY
MBaAFHeAzU508YWo8a1AUhthG3TVFr93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQt
ZTk4ZDA1MmNlYTdmLzEvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQtZTk4ZDA1MmNlYTdm
LzEvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXgHy+fl
zu8UQRTkZK5df/uH7EmXTskjzS7R3HVryBI51V5Jl7aXDa8iDsniKRd5wHKEbr82
ONdbCSP6km4xVyitvuE7f60nSscrRFqjQD+Z8bT5JM0Wc+YVe2VhYzx7LItON/az
i0lzVcLWyVRfmyWNh2AN8JNi2vHKMnO/KhSgjKDaKXEEAsRHZ7pnIzfS5vqNI+aI
3CXZwvxa9CjhVdf77BlR0V4n04gtEPx1mZ1OG3ktugQpLQucMHK4L7IykUKp9fsu
Rhn+y7CvbUUOFrNw5b40bEmPXegitPAmtBH8k5t895EvXAaXtSMdPvNRQIBy8qnt
WVRwT5ca9HgYfA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:42 2025 by rpki-client