Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: JYFUYdhiJkmnT6miPAa7WwTPR25nNP5DrABMwb8Y7sA=
Subject key identifier: B4:58:3A:6B:B1:8C:59:22:F4:33:3F:41:FC:DD:83:27:A0:C7:E7:24
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 019A4E4F60F6F14FFAED6C00619E9EBD3E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:16 +0000
Manifest this update: Tue 04 Nov 2025 10:00:16 +0000
Manifest next update: Wed 05 Nov 2025 10:00:16 +0000
Files and hashes: 1: c_4VrUZIMtuPlYj4DhW8ouhaRQw.roa (hash: 3ElLAVX1FXo1T4VYhDu+QaMztPbJUQVgeIUdwTADFRI=)
2: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: raYFI0/QjIL10yhbJRShgfCs2UozfO182FCDggxTkCY=)
3: r_WAi-eWzHC7Psr81UVNU3kzOJw.roa (hash: ZETLofVAHwa7kjk2pEcSj1ALX1XE9n9Z4taPD31cXSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:60:f6:f1:4f:fa:ed:6c:00:61:9e:9e:bd:3e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Nov 4 10:00:16 2025 GMT
Not After : Nov 5 10:00:16 2025 GMT
Subject: CN=b4583a6bb18c5922f4333f41fcdd8327a0c7e724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:0c:48:0e:3b:00:94:65:23:eb:10:eb:03:
19:42:9d:ce:0e:58:62:9d:33:9e:a4:31:c7:94:7f:
05:60:7b:40:dc:a9:ed:2f:c7:5b:43:33:61:b6:a2:
4d:f2:10:cf:f5:9a:90:6b:ca:04:50:ad:ba:f2:a1:
eb:3d:58:f6:fc:dc:7c:6e:4b:7b:e6:89:0b:9b:cb:
c5:37:3e:d6:bd:8f:22:6c:24:6c:a9:08:c8:11:c7:
06:a8:24:8e:1e:d5:d9:69:1b:24:0a:43:d6:14:64:
6c:03:5d:e0:8d:60:5e:a9:48:8e:00:fc:00:20:de:
25:5e:9c:f3:24:70:96:e9:2c:87:b3:ca:29:bb:55:
51:f9:56:3d:fd:37:3f:6f:f1:27:7c:61:a1:ec:a8:
bc:f8:96:7f:ef:1e:05:f2:06:0f:fb:3b:8d:f2:1a:
ba:07:77:57:97:3f:d0:06:45:d7:df:e1:4a:6c:2b:
71:1e:8e:77:36:36:27:94:34:af:5f:14:99:f7:d2:
49:74:6f:34:0f:72:88:a9:71:10:91:ec:31:ef:59:
a2:e5:59:0d:90:58:c6:b1:c0:4a:5b:13:10:49:4e:
ad:c4:89:92:3e:60:b8:3a:2c:13:8a:45:da:3c:26:
b7:f8:79:a5:45:5e:82:98:13:c0:d5:52:09:38:ea:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:58:3A:6B:B1:8C:59:22:F4:33:3F:41:FC:DD:83:27:A0:C7:E7:24
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:aa:30:f7:84:30:27:ea:83:e8:90:e5:18:7b:a3:83:75:12:
47:45:40:76:53:56:99:76:e5:38:4f:9d:82:c9:3e:49:ca:8a:
df:d4:c0:be:44:8c:0c:29:b4:98:1e:ac:cb:bf:54:94:80:7e:
12:a3:fa:7f:36:ea:fe:aa:79:be:33:7d:b2:64:af:e4:cc:72:
a5:62:fa:e5:c5:c5:36:52:27:5a:50:84:e6:b3:b9:80:58:ed:
9d:dd:90:fe:b8:ea:09:d9:93:c9:b2:2e:7b:2a:d7:44:0e:36:
dc:27:bb:2d:cf:e6:fb:5f:f1:83:4e:d7:25:d8:41:f1:8c:85:
84:97:a1:ea:b5:90:35:7a:94:0a:0b:d2:e6:11:ee:5b:96:80:
98:0b:ef:21:4e:53:75:23:9f:c5:05:a1:43:89:32:fc:c1:5d:
02:0d:38:c4:41:2c:af:4c:e0:ad:ae:89:9e:5d:3d:1d:5b:11:
ec:22:15:49:0e:c1:0c:cd:ac:dd:77:e5:09:c6:24:54:3e:a4:
97:de:48:09:e4:f7:71:58:9d:59:a8:be:f6:00:7a:9d:0b:17:
04:45:ee:1a:92:31:2c:28:a2:54:5f:c2:3d:fd:7d:26:3d:ab:
02:c3:78:1d:ec:ba:6f:fb:95:90:a4:24:53:65:fc:2b:12:a3:
21:77:11:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT2D28U/67WwAYZ6evT57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTczNmY2NTcyMjFmYzEzNDMxNjMyM2IwNzQwNTg1YTlj
MWIyMGMwHhcNMjUxMTA0MTAwMDE2WhcNMjUxMTA1MTAwMDE2WjAzMTEwLwYDVQQD
EyhiNDU4M2E2YmIxOGM1OTIyZjQzMzNmNDFmY2RkODMyN2EwYzdlNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMQMSA47AJRlI+sQ6wMZQp3ODlhi
nTOepDHHlH8FYHtA3KntL8dbQzNhtqJN8hDP9ZqQa8oEUK268qHrPVj2/Nx8bkt7
5okLm8vFNz7WvY8ibCRsqQjIEccGqCSOHtXZaRskCkPWFGRsA13gjWBeqUiOAPwA
IN4lXpzzJHCW6SyHs8opu1VR+VY9/Tc/b/EnfGGh7Ki8+JZ/7x4F8gYP+zuN8hq6
B3dXlz/QBkXX3+FKbCtxHo53NjYnlDSvXxSZ99JJdG80D3KIqXEQkewx71mi5VkN
kFjGscBKWxMQSU6txImSPmC4OiwTikXaPCa3+HmlRV6CmBPA1VIJOOrrNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRYOmuxjFki9DM/Qfzdgyegx+ckMB8GA1UdIwQY
MBaAFHQXNvZXIh/BNDFjI7B0BYWpwbIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUt
Y2JmYmE0NTlkOGY3LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUtY2JmYmE0NTlkOGY3
LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyaow94Qw
J+qD6JDlGHujg3USR0VAdlNWmXblOE+dgsk+ScqK39TAvkSMDCm0mB6sy79UlIB+
EqP6fzbq/qp5vjN9smSv5MxypWL65cXFNlInWlCE5rO5gFjtnd2Q/rjqCdmTybIu
eyrXRA423Ce7Lc/m+1/xg07XJdhB8YyFhJeh6rWQNXqUCgvS5hHuW5aAmAvvIU5T
dSOfxQWhQ4ky/MFdAg04xEEsr0zgra6Jnl09HVsR7CIVSQ7BDM2s3XflCcYkVD6k
l95ICeT3cVidWai+9gB6nQsXBEXuGpIxLCiiVF/CPf19Jj2rAsN4Hey6b/uVkKQk
U2X8KxKjIXcRFA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:27 2025 by rpki-client