Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: bOS+voCidz4KCsNCw6f0PxOwFluHjJ8HmhohlH0hQrQ=
Subject key identifier: C0:8D:5B:57:4E:63:66:08:84:E4:87:A6:E4:D0:E7:A5:70:57:99:B3
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 01984B538E407036182780BD1B69A2D265D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 160D
Signing time: Sun 27 Jul 2025 10:00:23 +0000
Manifest this update: Sun 27 Jul 2025 10:00:23 +0000
Manifest next update: Mon 28 Jul 2025 10:00:23 +0000
Files and hashes: 1: 32CQUiCUfdquX7Jbo_dmPVa4RAU.roa (hash: FAfiLPwl0dHpiVR3Uys5QcBsWLGjmkF+BWAYhU6veIk=)
2: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: 9gVm46R44e/wGfuXPMXUFubLbjIh/l9fYdQIRBhLfIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:8e:40:70:36:18:27:80:bd:1b:69:a2:d2:65:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Jul 27 10:00:23 2025 GMT
Not After : Jul 28 10:00:23 2025 GMT
Subject: CN=c08d5b574e63660884e487a6e4d0e7a5705799b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:2c:58:c9:db:3b:4a:e8:53:09:10:f2:ec:
4d:81:10:0e:03:98:ba:20:49:bd:a7:a6:cd:2b:61:
cb:6d:c0:50:44:e3:ef:6d:5d:a3:43:87:5e:bf:7b:
14:eb:64:3d:15:86:66:a2:a9:32:ff:16:78:3c:06:
14:ce:57:1d:f4:74:3d:c2:49:a9:ea:7e:a5:a7:48:
49:07:2f:29:40:7b:e9:97:8a:91:b8:93:2f:74:3c:
88:77:9f:c1:ea:05:ac:94:51:98:93:18:7c:08:de:
43:8d:df:8e:a8:0c:78:a0:e3:64:aa:ac:b3:ac:52:
7c:f7:c7:b1:36:39:1a:9c:3b:37:eb:54:12:b3:54:
9e:cb:12:ad:b0:fe:72:5d:c5:8b:69:26:1f:79:2b:
c1:43:d6:53:59:81:98:cf:45:b3:e0:e6:fc:69:e9:
c5:01:52:00:6d:86:f8:70:16:c6:99:1a:36:4e:57:
13:a9:aa:c1:e7:44:e1:8f:28:1f:23:a8:65:9d:1f:
0b:62:56:9d:95:32:ce:00:14:63:9b:11:97:4f:53:
f4:0a:01:93:92:76:f5:25:fa:c3:3b:f5:a8:2a:8d:
9b:b3:8d:1d:06:3a:07:19:50:2a:ab:7f:26:30:ed:
9c:d8:bd:8d:79:68:85:e7:46:84:47:33:d0:60:2e:
19:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8D:5B:57:4E:63:66:08:84:E4:87:A6:E4:D0:E7:A5:70:57:99:B3
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:97:de:ff:3a:e5:9a:44:b6:7c:1b:e2:d6:c1:70:5b:60:57:
bc:3a:00:bf:cf:17:5c:fd:f0:88:57:7b:18:04:64:df:9f:d6:
25:30:dc:75:f4:65:63:3c:27:f1:63:5c:b1:1f:ab:24:1a:04:
74:e0:7f:40:e3:e7:7f:aa:1d:a2:80:b3:82:83:ce:48:f3:5c:
22:d5:52:a1:6a:4f:b9:2f:d9:d8:7b:8a:e5:6c:4d:60:b2:1c:
81:d8:e5:cf:7e:45:f2:b2:7a:f6:5b:2c:00:fd:aa:e3:9f:60:
45:16:03:fa:ba:c6:12:e3:f8:2d:7e:b6:7c:bd:27:ac:cb:32:
15:8b:8f:d3:68:6a:20:a2:6b:78:e8:de:8e:af:07:e0:a9:0f:
cd:fd:76:a2:84:73:90:55:10:a7:53:01:fb:e1:67:8b:0c:f9:
3e:f7:a2:a3:0d:e9:88:f6:2c:c5:fe:74:46:a0:bf:10:6e:25:
38:3f:19:ec:8e:46:dc:e5:67:f9:25:02:d2:3e:13:8a:76:da:
8c:c5:ea:4c:93:fe:c4:18:53:24:16:c1:b2:29:03:0a:70:74:
31:52:3d:e4:e8:fe:05:55:a6:7a:a0:46:35:f6:c0:1d:05:61:
44:ba:0a:61:a2:74:4b:aa:e5:72:dd:af:d5:35:ad:bb:81:38:
b6:74:c5:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLU45AcDYYJ4C9G2mi0mXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZGE1Yzg3NDM1NGQ4MzgyNmU0M2MyNTM1Yjc2ZTIwZDVi
NjFiMDUwHhcNMjUwNzI3MTAwMDIzWhcNMjUwNzI4MTAwMDIzWjAzMTEwLwYDVQQD
EyhjMDhkNWI1NzRlNjM2NjA4ODRlNDg3YTZlNGQwZTdhNTcwNTc5OWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEksWMnbO0roUwkQ8uxNgRAOA5i6
IEm9p6bNK2HLbcBQROPvbV2jQ4dev3sU62Q9FYZmoqky/xZ4PAYUzlcd9HQ9wkmp
6n6lp0hJBy8pQHvpl4qRuJMvdDyId5/B6gWslFGYkxh8CN5Djd+OqAx4oONkqqyz
rFJ898exNjkanDs361QSs1SeyxKtsP5yXcWLaSYfeSvBQ9ZTWYGYz0Wz4Ob8aenF
AVIAbYb4cBbGmRo2TlcTqarB50ThjygfI6hlnR8LYladlTLOABRjmxGXT1P0CgGT
knb1JfrDO/WoKo2bs40dBjoHGVAqq38mMO2c2L2NeWiF50aERzPQYC4ZRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCNW1dOY2YIhOSHpuTQ56VwV5mzMB8GA1UdIwQY
MBaAFAzaXIdDVNg4JuQ8JTW3biDVthsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMt
YzgyZjQyNGI2ZDBkLzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMtYzgyZjQyNGI2ZDBk
LzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZfe/zrl
mkS2fBvi1sFwW2BXvDoAv88XXP3wiFd7GARk35/WJTDcdfRlYzwn8WNcsR+rJBoE
dOB/QOPnf6odooCzgoPOSPNcItVSoWpPuS/Z2HuK5WxNYLIcgdjlz35F8rJ69lss
AP2q459gRRYD+rrGEuP4LX62fL0nrMsyFYuP02hqIKJreOjejq8H4KkPzf12ooRz
kFUQp1MB++Fniwz5Pveiow3piPYsxf50RqC/EG4lOD8Z7I5G3OVn+SUC0j4Tinba
jMXqTJP+xBhTJBbBsikDCnB0MVI95Oj+BVWmeqBGNfbAHQVhRLoKYaJ0S6rlct2v
1TWtu4E4tnTFYA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:56:14 2025 by rpki-client