Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
File: dBmPcCK5VgUB20SK9gMB-ihekjY.mft (raw, json)
Hash identifier: kvJAiljbbIWsQhiWfPO6MRuvSKHt4BHN9kfag3jvoNc=
Subject key identifier: ED:58:6F:3D:BB:2D:37:29:9C:CB:1A:60:66:BF:E2:80:3C:21:CE:E7
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial: 019855DEF583E4CD4B5D4EDF9FEC81F13BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 11:08:51 +0000
Manifest this update: Tue 29 Jul 2025 11:08:51 +0000
Manifest next update: Wed 30 Jul 2025 11:08:51 +0000
Files and hashes: 1: HIDgrdHX_QU-bGXtDjZHW_ouIno.roa (hash: CeASJRYiDgx1fz5UAh5dDbAHwn7ALNNERk8t4H2LNDQ=)
2: dBmPcCK5VgUB20SK9gMB-ihekjY.crl (hash: gSI9vTXb85dl9PyppnFYci1E/WPoi73YdcfAZPRww0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 11:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:de:f5:83:e4:cd:4b:5d:4e:df:9f:ec:81:f1:3b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74198f7022b9560501db448af60301fa285e9236
Validity
Not Before: Jul 29 11:08:51 2025 GMT
Not After : Jul 30 11:08:51 2025 GMT
Subject: CN=ed586f3dbb2d37299ccb1a6066bfe2803c21cee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:be:ca:2f:1a:95:b3:c6:30:b5:a3:cb:c3:
59:aa:e6:52:09:37:d6:20:f2:c3:54:fe:ad:70:8c:
07:0b:f8:47:21:4d:24:62:69:60:9a:18:48:7f:54:
ef:b9:32:a5:ec:8f:1e:64:7c:db:ea:b9:ba:47:7c:
dd:be:bb:63:e1:31:37:a1:3e:5d:2d:92:15:36:df:
91:31:ef:59:a6:1e:f5:57:fc:46:9f:1a:f3:7e:58:
c1:a2:d7:d0:29:ca:51:34:2b:74:f7:1c:4b:ea:00:
0c:51:7b:57:1e:60:5b:e4:83:17:74:7a:24:95:e1:
c7:61:85:b2:fe:c7:ec:54:0a:0e:e2:ec:41:a2:d7:
ac:18:ab:e1:25:89:36:18:e1:f3:c9:7f:ce:0a:36:
1a:f3:cc:d2:18:ad:08:ef:e8:bb:6a:82:ad:ba:4c:
ab:00:b1:e4:38:3d:0e:46:9e:92:fd:55:dc:18:2b:
33:ee:58:3d:f3:df:6a:c7:01:e5:74:ba:d7:43:d0:
eb:b4:c6:51:ec:8f:db:d3:8f:ee:66:5e:cb:fe:88:
2f:24:df:d1:4b:45:c1:3d:35:cc:67:68:c0:a5:ac:
6a:49:ba:f8:54:b0:03:ce:d8:4b:c5:f5:80:75:ab:
e9:e4:6c:81:eb:5c:fd:1e:52:c0:01:dc:f7:43:ab:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:58:6F:3D:BB:2D:37:29:9C:CB:1A:60:66:BF:E2:80:3C:21:CE:E7
X509v3 Authority Key Identifier:
keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f5:15:2f:9c:89:b3:e4:65:0b:87:ca:dd:b7:92:e8:a0:47:
80:ca:08:9d:da:e7:b7:ed:84:18:a8:e2:58:a0:c7:48:cf:40:
0d:8f:b1:51:ba:16:68:1c:22:45:55:29:05:c2:d6:e1:0c:51:
ab:1a:9f:8c:29:ce:d6:16:a7:cb:86:25:62:20:71:14:ec:53:
47:14:16:dc:5c:5a:ab:87:d6:a6:3f:cd:67:69:46:f8:d6:a7:
d1:e2:a7:61:d3:0b:33:a2:91:ff:e3:79:ff:c2:4b:62:00:28:
a0:37:88:ec:4d:a6:b8:bc:31:ef:86:cb:23:a4:78:46:e5:a4:
4e:45:49:b7:c0:c3:83:94:0d:98:93:f0:13:69:da:57:d1:be:
b9:07:a5:7f:90:46:84:52:29:34:8b:b8:d4:da:4a:af:36:4a:
87:fb:96:cb:b0:c2:36:f5:22:74:35:f5:aa:44:51:1e:7a:70:
cf:ac:b9:75:fa:ff:3b:5b:32:fa:e5:0f:1a:08:fa:4c:50:b9:
1f:99:66:30:e2:05:33:6e:71:28:62:f9:c9:bb:fe:88:8b:27:
7f:38:fc:88:71:ff:2b:26:df:bd:c8:aa:53:e2:a4:b9:1d:35:
4a:a1:12:bb:25:14:25:f0:49:e3:db:24:36:09:de:35:91:23:
75:69:6c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:37:19 2025 by rpki-client