Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: swENcudn+rfjz6mZnwr1XVRSFxbRZoHKtqqPRRu/f38=
Subject key identifier: 8D:FD:54:DB:09:4E:65:B0:D7:AE:C2:2D:2F:7B:45:70:72:15:30:2C
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 01989E608487DFA1A951D80E9B5AC45BC5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 0545
Signing time: Tue 12 Aug 2025 13:03:02 +0000
Manifest this update: Tue 12 Aug 2025 13:03:02 +0000
Manifest next update: Wed 13 Aug 2025 13:03:02 +0000
Files and hashes: 1: 6Ws74y6Nwf78AVosGHIH3KZShUI.roa (hash: HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: KQLajWVQOKanbIGTGt2mR+bv6eVuEgv7VGr60sBrvMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:60:84:87:df:a1:a9:51:d8:0e:9b:5a:c4:5b:c5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: Aug 12 13:03:02 2025 GMT
Not After : Aug 13 13:03:02 2025 GMT
Subject: CN=8dfd54db094e65b0d7aec22d2f7b45707215302c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:ed:21:3d:98:25:72:16:49:17:98:51:d1:
0f:76:ae:60:56:eb:87:bf:97:05:67:30:1a:19:40:
3e:7a:9b:1e:c6:8c:36:49:e8:a7:98:73:6d:c3:ba:
ad:6f:49:ec:9c:64:51:11:44:b6:9d:90:03:ea:5a:
4f:ff:ac:42:5d:2f:00:22:1b:7b:86:22:d1:d7:c9:
3c:0a:27:b2:f9:c2:eb:1a:bd:4e:0e:d2:d6:d4:9e:
80:0d:70:3d:62:9e:7e:87:20:00:b0:df:6d:b8:b2:
98:d7:4d:7b:cc:54:b1:af:a7:b5:a6:ae:13:25:72:
ef:16:f2:6f:2e:c0:4f:21:fc:1b:27:08:30:02:a5:
df:56:6f:6a:52:62:d0:5b:1e:16:b3:30:b2:9c:55:
8b:23:c7:7c:4b:11:06:02:98:0c:ff:89:11:f6:e5:
f1:49:74:cd:60:50:02:4e:dd:8a:d3:04:8c:86:ae:
79:dc:ff:32:36:27:f1:95:0f:d0:2a:29:78:5e:2b:
86:dc:2c:0d:b6:cb:ee:67:bb:8f:16:cc:2e:8f:40:
96:da:7e:41:dd:50:29:ea:41:b6:0d:41:83:02:02:
6a:d6:ef:26:d9:b5:87:ba:0e:e0:62:fb:cb:b4:ae:
f9:5b:fc:06:b6:9a:a6:c4:ce:b3:fe:d2:3d:11:c4:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FD:54:DB:09:4E:65:B0:D7:AE:C2:2D:2F:7B:45:70:72:15:30:2C
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a0:a9:17:9a:46:6a:60:26:76:39:5b:69:00:da:3b:39:ce:
f1:22:bc:ad:d6:8d:94:ea:c6:64:2a:a6:33:32:e6:2a:00:14:
54:96:ad:9f:d2:d1:94:37:55:bb:2a:a6:ef:c5:11:9e:7c:10:
69:a3:c3:eb:a5:26:8b:50:8c:ec:05:a3:62:94:d9:78:05:fe:
7a:94:8c:5c:54:64:b4:d9:c7:96:8a:5b:8e:bc:2e:e9:28:03:
2c:bc:dd:41:0f:f2:b1:fd:07:ac:b6:95:f7:b0:34:24:2c:3b:
d0:88:70:36:a6:16:bf:98:06:ae:65:fe:d5:3c:d7:bc:38:86:
68:c0:e1:d0:b3:70:bf:79:df:9b:57:03:2d:c2:94:c0:64:34:
12:5a:db:5d:97:ef:3d:68:45:7b:64:53:d2:d5:4f:5c:3b:d8:
ee:c3:37:17:e7:3f:02:26:14:e1:6c:de:5d:e0:6c:03:9f:f9:
ab:1f:73:f6:63:95:0e:41:50:8f:3f:b1:e7:6f:85:84:05:24:
4d:ae:ed:30:77:52:2c:07:6f:c8:75:57:d7:6d:e1:b0:48:61:
fb:d1:5f:30:66:ac:73:4b:fc:49:20:3b:6b:0a:8f:76:29:2e:
b2:b9:fb:5c:40:b3:d8:69:6e:f7:9f:b6:08:aa:41:c9:21:43:
38:ce:e7:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZieYISH36GpUdgOm1rEW8X9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy
NTI3OGYwHhcNMjUwODEyMTMwMzAyWhcNMjUwODEzMTMwMzAyWjAzMTEwLwYDVQQD
Eyg4ZGZkNTRkYjA5NGU2NWIwZDdhZWMyMmQyZjdiNDU3MDcyMTUzMDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlejtIT2YJXIWSReYUdEPdq5gVuuH
v5cFZzAaGUA+epsexow2SeinmHNtw7qtb0nsnGRREUS2nZAD6lpP/6xCXS8AIht7
hiLR18k8Ciey+cLrGr1ODtLW1J6ADXA9Yp5+hyAAsN9tuLKY1017zFSxr6e1pq4T
JXLvFvJvLsBPIfwbJwgwAqXfVm9qUmLQWx4WszCynFWLI8d8SxEGApgM/4kR9uXx
SXTNYFACTt2K0wSMhq553P8yNifxlQ/QKil4XiuG3CwNtsvuZ7uPFswuj0CW2n5B
3VAp6kG2DUGDAgJq1u8m2bWHug7gYvvLtK75W/wGtpqmxM6z/tI9EcTfDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI39VNsJTmWw167CLS97RXByFTAsMB8GA1UdIwQY
MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct
OTEyZTc4YzJmMmViLzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi
LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKCpF5pG
amAmdjlbaQDaOznO8SK8rdaNlOrGZCqmMzLmKgAUVJatn9LRlDdVuyqm78URnnwQ
aaPD66Umi1CM7AWjYpTZeAX+epSMXFRktNnHlopbjrwu6SgDLLzdQQ/ysf0HrLaV
97A0JCw70IhwNqYWv5gGrmX+1TzXvDiGaMDh0LNwv3nfm1cDLcKUwGQ0ElrbXZfv
PWhFe2RT0tVPXDvY7sM3F+c/AiYU4WzeXeBsA5/5qx9z9mOVDkFQjz+x52+FhAUk
Ta7tMHdSLAdvyHVX123hsEhh+9FfMGasc0v8SSA7awqPdikusrn7XECz2Glu95+2
CKpBySFDOM7nlg==
-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:56 2025 by rpki-client