Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: X2buYWCX9QbCx3FRlhiH76IGXd2h1AXzBmWkFGkGa4o=
Subject key identifier: 48:52:19:12:C8:A9:92:0B:6A:3D:94:BA:CC:5B:D1:46:99:7E:C6:64
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019847092610A67316DC3B45042FEC2B764B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 0FEB
Signing time: Sat 26 Jul 2025 14:00:38 +0000
Manifest this update: Sat 26 Jul 2025 14:00:38 +0000
Manifest next update: Sun 27 Jul 2025 14:00:38 +0000
Files and hashes: 1: BlZTyn453CV0yZnKwe_T35RBLj8.roa (hash: PAa8WNraC9MFUR+BnYs7v6ED2lFQD5yfvCpmA0N6q0g=)
2: UDoseI4zszDcDoPnMdfmZguRd1g.roa (hash: VWwS6jcqEeePHwTnYZpbdNRT6bmACcXJEdqIR68HwbA=)
3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=)
4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=)
5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=)
6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: lWnXVuwRs7X69C/3uv2iUlhcsvIhwC2f5CUevaKneew=)
7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=)
8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=)
9: saRTVdpqQA0OCzsMYir3B6BlFes.roa (hash: nWaisSWXPPt/Ku1COahUOFAKdzpunAhgMbmaca4maXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:26:10:a6:73:16:dc:3b:45:04:2f:ec:2b:76:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jul 26 14:00:38 2025 GMT
Not After : Jul 27 14:00:38 2025 GMT
Subject: CN=48521912c8a9920b6a3d94bacc5bd146997ec664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:3f:81:39:cf:06:28:5c:a5:ef:68:f3:a9:
df:0e:df:25:c7:25:a8:f1:51:11:56:ef:f2:4a:70:
fc:ae:65:c7:04:50:68:bb:65:d4:58:fc:e7:59:3e:
f1:14:59:12:77:ec:98:ee:9c:9e:f4:2f:4a:d0:20:
10:45:cd:ea:7f:a4:91:40:4a:61:7b:12:10:dc:70:
0f:70:0c:fe:28:66:e8:81:a2:c5:fc:8d:dc:fa:ee:
57:d2:b2:2c:a3:2f:44:a7:9d:ad:26:f1:b3:1b:17:
fa:df:2f:89:5d:a1:ce:27:75:63:81:77:9c:3a:53:
b4:75:af:36:59:5e:25:2f:19:74:86:87:06:b7:29:
c3:c2:92:de:56:ea:f2:05:89:8c:d7:3d:18:a7:2c:
c8:ea:40:b3:6e:a0:ac:ca:a2:19:16:0e:c6:b6:2f:
d1:d8:73:2a:7a:d6:2b:3e:b0:2c:45:22:4f:65:79:
45:62:f3:01:6e:f5:14:cf:cb:be:b6:65:98:a7:09:
73:72:ab:20:14:b5:a0:10:5d:16:10:70:b1:ac:66:
e6:65:ac:74:4c:8d:9e:48:71:61:15:8c:ac:21:3d:
fb:2f:95:7e:dc:94:d5:ff:08:bc:2b:5d:d4:3f:44:
c6:fc:c0:52:9f:f2:c3:f1:da:53:13:f4:f7:a1:3b:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:52:19:12:C8:A9:92:0B:6A:3D:94:BA:CC:5B:D1:46:99:7E:C6:64
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0e:b0:a0:44:6e:ff:2b:14:66:1a:b2:88:71:e7:46:5c:68:
ea:9f:09:82:46:36:5d:55:c8:59:56:3a:e2:37:5d:f9:46:67:
a7:ba:e4:dd:bb:58:7d:d3:3f:09:ff:fb:da:82:93:2c:aa:e9:
ea:73:a2:d0:53:d2:3e:12:f1:34:13:c0:5a:bc:ee:5e:b6:c2:
72:4e:05:c9:b9:b4:72:47:1f:8a:98:0e:36:41:ec:e2:69:fc:
f3:02:cf:d8:b0:b8:5b:50:b1:a4:40:34:fe:9c:fc:64:b7:8b:
33:41:ed:9d:59:ef:6f:83:c8:70:5b:0f:9f:f9:c0:a7:34:ef:
e8:e3:a0:73:0a:88:96:bf:5d:ff:90:8d:dd:e9:26:af:41:7a:
bc:5c:d5:a8:91:d6:a6:81:a1:70:b0:bb:31:23:c9:ba:90:ae:
29:fe:6d:fb:57:3c:34:7d:b0:4a:64:af:07:00:a7:af:8f:7d:
c0:d5:66:a3:38:a5:50:13:d8:b3:43:c8:85:4f:63:3d:03:a7:
19:ee:f5:10:98:6f:54:6f:21:32:cb:96:cb:b2:99:e9:29:d2:
b7:5e:79:6c:d7:74:c2:6c:dd:f6:e7:1a:6d:76:c8:2c:eb:37:
6c:b5:94:44:3c:db:a1:22:28:06:a1:1f:b2:c3:99:c9:d8:9d:
97:76:a4:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCSYQpnMW3DtFBC/sK3ZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjUwNzI2MTQwMDM4WhcNMjUwNzI3MTQwMDM4WjAzMTEwLwYDVQQD
Eyg0ODUyMTkxMmM4YTk5MjBiNmEzZDk0YmFjYzViZDE0Njk5N2VjNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkA/gTnPBihcpe9o86nfDt8lxyWo
8VERVu/ySnD8rmXHBFBou2XUWPznWT7xFFkSd+yY7pye9C9K0CAQRc3qf6SRQEph
exIQ3HAPcAz+KGbogaLF/I3c+u5X0rIsoy9Ep52tJvGzGxf63y+JXaHOJ3VjgXec
OlO0da82WV4lLxl0hocGtynDwpLeVuryBYmM1z0YpyzI6kCzbqCsyqIZFg7Gti/R
2HMqetYrPrAsRSJPZXlFYvMBbvUUz8u+tmWYpwlzcqsgFLWgEF0WEHCxrGbmZax0
TI2eSHFhFYysIT37L5V+3JTV/wi8K13UP0TG/MBSn/LD8dpTE/T3oTvaJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhSGRLIqZILaj2Uusxb0UaZfsZkMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZA6woERu
/ysUZhqyiHHnRlxo6p8JgkY2XVXIWVY64jdd+UZnp7rk3btYfdM/Cf/72oKTLKrp
6nOi0FPSPhLxNBPAWrzuXrbCck4Fybm0ckcfipgONkHs4mn88wLP2LC4W1CxpEA0
/pz8ZLeLM0HtnVnvb4PIcFsPn/nApzTv6OOgcwqIlr9d/5CN3ekmr0F6vFzVqJHW
poGhcLC7MSPJupCuKf5t+1c8NH2wSmSvBwCnr499wNVmozilUBPYs0PIhU9jPQOn
Ge71EJhvVG8hMsuWy7KZ6SnSt155bNd0wmzd9ucabXbILOs3bLWURDzboSIoBqEf
ssOZydidl3akaA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:25:33 2025 by rpki-client