Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: jFw2qPwJZzo7HIYAgLwAHarl/XnTJLxBuZw6f/RsttE=
Subject key identifier: 6C:73:8F:38:77:68:8C:26:2F:06:1D:90:D8:B6:B9:0C:F4:72:D8:7F
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 019855DEE9FAD026903615B657B71FDC5848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 11:08:48 +0000
Manifest this update: Tue 29 Jul 2025 11:08:48 +0000
Manifest next update: Wed 30 Jul 2025 11:08:48 +0000
Files and hashes: 1: byfAz36QPO1zWRGDAvBxGCJUgUc.roa (hash: cj5k9JTRqENUIcOxIhQN0l2jcQzpbWQBrAEBDWIt2vI=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: Q0PIj+pqR0JUrOQoWB9z8FwWm5QV1w8T2P1Oy4b3g3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:de:e9:fa:d0:26:90:36:15:b6:57:b7:1f:dc:58:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Jul 29 11:08:48 2025 GMT
Not After : Jul 30 11:08:48 2025 GMT
Subject: CN=6c738f3877688c262f061d90d8b6b90cf472d87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:ee:8f:5c:c5:2d:d2:59:f9:67:19:a5:ec:
0a:69:00:c3:f5:28:5b:6e:ff:9c:7d:9e:a4:a5:8c:
47:54:98:14:59:93:78:e0:49:95:58:f7:d5:59:7d:
e1:2a:49:52:28:e8:50:61:e9:1c:b6:78:fb:76:36:
5e:62:12:d5:45:8f:16:dc:1f:9b:36:a8:27:12:f9:
6a:da:3d:e0:74:45:b9:11:ad:ae:92:78:55:c1:50:
f3:4a:e4:cd:47:df:a9:28:92:a7:7a:4a:d7:34:6c:
ef:6b:30:1c:c9:d6:88:5a:10:18:13:7c:f3:38:ef:
3b:c5:06:d0:d1:a3:55:02:cc:5a:8e:da:96:96:0e:
05:90:73:12:a6:ee:bb:94:6c:a9:09:40:c8:c4:1e:
13:65:27:47:3a:25:3c:da:42:0c:19:e6:b1:fb:b9:
52:f7:ef:19:5f:6d:f4:04:79:a3:12:29:0c:5e:03:
8f:b5:48:fe:ea:bd:81:a8:38:bf:a4:1e:48:84:55:
b9:d6:b5:c3:5b:0c:96:34:e9:58:0b:af:c7:c9:1f:
1d:7c:af:07:b5:78:8d:f8:0d:80:05:c4:6e:5b:1c:
66:e9:77:5d:09:9a:25:a5:66:ec:25:06:f1:32:ec:
00:6e:48:11:4b:f1:f3:c8:a3:3a:f8:a6:15:4f:09:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:8F:38:77:68:8C:26:2F:06:1D:90:D8:B6:B9:0C:F4:72:D8:7F
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e1:da:85:ee:3d:b2:6f:36:a8:7c:3c:d7:f7:a9:2f:5d:dc:
09:1d:f5:3c:94:67:79:28:56:9f:81:3e:8d:a6:0c:f3:f8:34:
f7:4e:e9:c6:74:60:de:4a:0f:23:55:56:a9:1c:fc:70:4c:45:
28:c7:95:58:d7:c1:0b:9a:3a:cb:aa:c8:61:23:83:1c:b8:21:
42:25:0c:cc:ea:a8:61:8d:18:1e:56:cf:59:01:8b:59:76:2b:
15:4d:b9:d0:75:4b:f2:62:51:4f:4e:22:34:b6:d8:e3:40:9f:
ff:da:83:1b:5b:19:d7:40:91:63:9a:eb:96:4b:a9:d4:8e:e8:
b0:da:a5:e2:76:4e:d7:df:d8:9b:02:77:e3:48:c2:50:ad:46:
c9:7a:85:be:c0:b0:18:a5:51:86:bc:26:65:64:5f:8d:9f:59:
1b:d4:0b:33:38:c4:47:02:47:38:86:49:ca:ae:4a:10:a8:d3:
3b:75:5b:8a:78:ac:05:d1:2b:2f:0e:88:74:06:dd:9d:94:de:
58:91:49:bd:65:90:c5:e5:ed:dc:ee:2c:41:44:aa:d2:e2:f0:
7f:ac:27:0f:79:63:49:6e:d7:60:0d:cd:86:27:c1:38:c1:cb:
fc:62:95:dc:a2:33:c8:43:1c:1b:cf:84:ec:c7:39:7f:5f:41:
bf:32:f9:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhV3un60CaQNhW2V7cf3FhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzVhMmM5NTg4ZmM2OTVkMjc1NDI4M2RjZDNkMTIzZDFm
Nzc4MTEwHhcNMjUwNzI5MTEwODQ4WhcNMjUwNzMwMTEwODQ4WjAzMTEwLwYDVQQD
Eyg2YzczOGYzODc3Njg4YzI2MmYwNjFkOTBkOGI2YjkwY2Y0NzJkODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdvuj1zFLdJZ+WcZpewKaQDD9Shb
bv+cfZ6kpYxHVJgUWZN44EmVWPfVWX3hKklSKOhQYekctnj7djZeYhLVRY8W3B+b
NqgnEvlq2j3gdEW5Ea2uknhVwVDzSuTNR9+pKJKnekrXNGzvazAcydaIWhAYE3zz
OO87xQbQ0aNVAsxajtqWlg4FkHMSpu67lGypCUDIxB4TZSdHOiU82kIMGeax+7lS
9+8ZX230BHmjEikMXgOPtUj+6r2BqDi/pB5IhFW51rXDWwyWNOlYC6/HyR8dfK8H
tXiN+A2ABcRuWxxm6XddCZolpWbsJQbxMuwAbkgRS/HzyKM6+KYVTwlO+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxzjzh3aIwmLwYdkNi2uQz0cth/MB8GA1UdIwQY
MBaAFHR1oslYj8aV0nVCg9zT0SPR93gRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yODk4ZTYtMGQ3OS00NTRlLWFiNTQt
NDBiZTBjNDYzYjkwLzEvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yODk4ZTYtMGQ3OS00NTRlLWFiNTQtNDBiZTBjNDYzYjkw
LzEvZEhXaXlWaVB4cFhTZFVLRDNOUFJJOUgzZUJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeHahe49
sm82qHw81/epL13cCR31PJRneShWn4E+jaYM8/g0907pxnRg3koPI1VWqRz8cExF
KMeVWNfBC5o6y6rIYSODHLghQiUMzOqoYY0YHlbPWQGLWXYrFU250HVL8mJRT04i
NLbY40Cf/9qDG1sZ10CRY5rrlkup1I7osNql4nZO19/YmwJ340jCUK1GyXqFvsCw
GKVRhrwmZWRfjZ9ZG9QLMzjERwJHOIZJyq5KEKjTO3VbinisBdErLw6IdAbdnZTe
WJFJvWWQxeXt3O4sQUSq0uLwf6wnD3ljSW7XYA3NhifBOMHL/GKV3KIzyEMcG8+E
7Mc5f19BvzL5yQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:38:19 2025 by rpki-client