Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: KC/1B0fDrslONVCdFNH3Kg3BlGYBdHiGkPHvBJa1ehk=
Subject key identifier: EF:07:2A:50:AD:EE:51:FC:18:4A:04:65:BB:D6:5F:D5:1A:9F:82:54
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 0198548DAD4C3B1C9B05B68FAB096A16911F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 161B
Signing time: Tue 29 Jul 2025 05:00:27 +0000
Manifest this update: Tue 29 Jul 2025 05:00:27 +0000
Manifest next update: Wed 30 Jul 2025 05:00:27 +0000
Files and hashes: 1: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: zsDcBCeKWepKjdLeqTLlx1yEKBaziUvVtDXyJwetPss=)
2: hn0oOL_Phy31I2IYdCocfuCMl4Y.roa (hash: pL8SqciTf3yJI1mNpTYcxXjCVmcDvB9gR79xz18ukNA=)
3: n4Gl-s-Z4-ZJ7aZsYXedLjfUwYs.roa (hash: 2ovoFydr5EnhNhzcx+FRnrZsnjvX8pqDu1VDKcopbtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:ad:4c:3b:1c:9b:05:b6:8f:ab:09:6a:16:91:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Jul 29 05:00:27 2025 GMT
Not After : Jul 30 05:00:27 2025 GMT
Subject: CN=ef072a50adee51fc184a0465bbd65fd51a9f8254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:7a:80:95:14:a9:c5:be:36:3e:c0:27:f5:
e0:7e:89:7a:33:b8:a2:57:39:2a:f5:45:bb:ff:28:
3f:36:f6:d5:7d:ed:01:56:63:6a:ab:1f:48:9c:95:
2d:cb:3a:83:bc:b8:f9:55:76:a1:39:f5:51:02:8b:
d8:00:8d:10:0a:c0:97:be:cb:d1:56:d7:d7:2d:0d:
3c:53:c0:f6:3c:07:a3:c7:ff:a9:e6:c7:03:97:01:
c1:cc:48:05:fa:e5:db:bd:6c:e0:a1:56:c1:ae:8f:
85:2f:a4:d1:4c:53:b1:f0:e6:e3:ff:f6:36:5f:01:
5c:db:4d:ba:42:2d:85:89:09:e2:6b:75:84:af:f4:
8f:a5:eb:64:f2:c3:a0:5d:29:4f:89:69:0e:6b:0f:
35:19:9e:cb:da:d9:94:f6:65:ad:95:a5:db:80:5a:
a1:ea:c2:15:d9:0d:e0:e6:bd:f6:15:8b:0d:23:54:
f9:5a:93:72:15:ea:3b:44:db:bd:88:e0:fe:02:d3:
a8:30:90:11:e5:ab:26:94:36:e3:60:20:69:a4:ad:
de:a3:19:89:21:25:c7:fa:49:64:24:ca:75:15:c4:
5c:01:61:2c:fd:8e:0a:3a:59:90:81:66:f4:b8:24:
a6:00:75:6b:fc:4f:27:2d:72:13:ae:c8:d2:f8:d9:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:07:2A:50:AD:EE:51:FC:18:4A:04:65:BB:D6:5F:D5:1A:9F:82:54
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3f:e9:fd:52:67:2b:2e:61:9f:e0:7c:f1:9d:7f:b6:c4:ad:
bd:f3:19:b7:c8:dc:04:ff:35:f0:05:7c:44:65:4c:0e:79:fa:
9d:6d:8b:a6:3f:2d:bb:21:2c:19:69:0e:b0:17:5c:35:52:b5:
a0:31:73:a4:d7:64:d6:b2:ba:86:51:42:36:b2:30:a3:e2:d8:
31:e5:9c:ac:49:82:dd:49:c1:44:ef:25:45:2f:3b:89:e0:18:
8d:b4:39:3f:7c:2f:50:3b:01:cf:8f:aa:65:9e:d2:6e:f7:b1:
73:8a:9d:61:90:6e:eb:f0:b1:9c:13:16:97:38:50:0c:df:4a:
91:d6:5e:d2:25:c9:06:89:d5:88:07:f7:bc:e2:b8:41:4c:7c:
18:a2:65:d6:f6:c0:28:a7:3f:3c:92:a6:bc:91:d2:a2:c8:08:
ea:c7:99:6b:4e:03:97:c1:e5:c0:bf:dd:fd:03:ba:3d:90:7d:
13:fa:2d:27:14:7b:51:88:05:5a:54:74:a8:d7:c3:f1:4b:f6:
f0:6d:73:84:64:ba:e2:a1:b2:35:48:c1:d8:d3:f9:8f:e1:3f:
9f:00:e5:34:dd:03:98:24:1e:7a:31:f9:08:3a:b6:9e:64:7f:
61:8d:98:96:e5:c6:f6:0c:63:73:dc:03:d9:3c:06:22:ca:af:
2e:51:d9:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUja1MOxybBbaPqwlqFpEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDJiMzYyMDY0MzliYmNlMTViMzYzZjA5ZWVmZjFkNzM4
Y2VjYzcwHhcNMjUwNzI5MDUwMDI3WhcNMjUwNzMwMDUwMDI3WjAzMTEwLwYDVQQD
EyhlZjA3MmE1MGFkZWU1MWZjMTg0YTA0NjViYmQ2NWZkNTFhOWY4MjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfB6gJUUqcW+Nj7AJ/Xgfol6M7ii
Vzkq9UW7/yg/NvbVfe0BVmNqqx9InJUtyzqDvLj5VXahOfVRAovYAI0QCsCXvsvR
VtfXLQ08U8D2PAejx/+p5scDlwHBzEgF+uXbvWzgoVbBro+FL6TRTFOx8Obj//Y2
XwFc2026Qi2FiQnia3WEr/SPpetk8sOgXSlPiWkOaw81GZ7L2tmU9mWtlaXbgFqh
6sIV2Q3g5r32FYsNI1T5WpNyFeo7RNu9iOD+AtOoMJAR5asmlDbjYCBppK3eoxmJ
ISXH+klkJMp1FcRcAWEs/Y4KOlmQgWb0uCSmAHVr/E8nLXITrsjS+Nki9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8HKlCt7lH8GEoEZbvWX9Uan4JUMB8GA1UdIwQY
MBaAFP3Ss2IGQ5u84Vs2Pwnu/x1zjOzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQt
YjAxZTAyOTdiMDcwLzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQtYjAxZTAyOTdiMDcw
LzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABD/p/VJn
Ky5hn+B88Z1/tsStvfMZt8jcBP818AV8RGVMDnn6nW2Lpj8tuyEsGWkOsBdcNVK1
oDFzpNdk1rK6hlFCNrIwo+LYMeWcrEmC3UnBRO8lRS87ieAYjbQ5P3wvUDsBz4+q
ZZ7Sbvexc4qdYZBu6/CxnBMWlzhQDN9KkdZe0iXJBonViAf3vOK4QUx8GKJl1vbA
KKc/PJKmvJHSosgI6seZa04Dl8HlwL/d/QO6PZB9E/otJxR7UYgFWlR0qNfD8Uv2
8G1zhGS64qGyNUjB2NP5j+E/nwDlNN0DmCQeejH5CDq2nmR/YY2YluXG9gxjc9wD
2TwGIsqvLlHZhQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 10:52:58 2025 by rpki-client