Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: BgU2g1b9oYDXB4IV6kLUmH/bsirH6qIguesqGcAy7CQ=
Subject key identifier: 58:71:03:87:2A:A9:A6:89:D8:6C:89:11:59:E7:40:FF:AA:AD:3A:66
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 019848F784C64880790769D53498D6DD846C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 23:00:37 +0000
Manifest this update: Sat 26 Jul 2025 23:00:37 +0000
Manifest next update: Sun 27 Jul 2025 23:00:37 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: opIZIEQRrlm39UkDZT5833Js+VamdPY2iC06tpQjqDU=)
2: Z6E4tQnRvUpfPcdYuFNVxcJ0ync.roa (hash: xKAWINx5skT5zUOU5FUOicB7VLSOKSuOkc+JGT8/lwg=)
3: icdzN3903U-G6DI4zKp6RZE4flA.roa (hash: kshaHbPYaGNmmaMCwtIlRpH9RaK824cfmas4wivc8R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:84:c6:48:80:79:07:69:d5:34:98:d6:dd:84:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Jul 26 23:00:37 2025 GMT
Not After : Jul 27 23:00:37 2025 GMT
Subject: CN=587103872aa9a689d86c891159e740ffaaad3a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:70:95:1b:79:fc:02:b2:92:f1:30:6d:f8:
9b:14:35:d2:6c:e4:08:ad:12:4e:0e:8d:bd:d8:2c:
20:45:af:88:d5:76:aa:98:96:f5:bc:60:8c:40:93:
67:e3:cc:19:2b:bc:b4:a1:2b:b2:72:fc:af:2d:34:
a8:46:03:27:9c:be:40:9b:29:dc:4e:ab:e2:37:6b:
f0:ac:0e:4c:8d:15:68:98:c6:ae:f3:24:11:e4:63:
a1:25:28:08:87:83:48:e3:5d:ab:30:4c:da:3b:59:
41:f0:5d:67:dd:ec:02:16:77:23:9d:0d:38:3f:33:
f8:92:d4:83:f2:24:81:98:20:93:da:a0:c9:13:70:
65:e5:db:50:6d:14:f5:09:22:72:03:2b:76:68:9f:
70:67:a9:51:b8:84:73:13:bc:8e:06:ee:72:bc:63:
19:15:48:64:de:97:e7:a1:7a:18:4f:2f:83:ff:a4:
06:2e:3e:7e:63:b9:5f:48:75:45:5a:ba:3b:7b:d8:
56:77:e7:11:a5:a9:40:44:8a:34:9e:b0:b7:66:08:
d7:52:e2:f1:b3:ca:1d:92:24:03:2b:d1:58:33:96:
17:b8:4b:8e:d3:55:24:60:8c:26:99:cb:c7:bf:7f:
93:1f:eb:a1:d9:76:07:54:75:8c:bb:1b:68:5e:4f:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:03:87:2A:A9:A6:89:D8:6C:89:11:59:E7:40:FF:AA:AD:3A:66
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3b:07:4a:e2:ab:70:d0:57:4b:be:bd:0b:86:9a:dc:00:d9:
0d:7e:09:bd:80:54:45:4a:6b:a8:d6:1c:89:01:e0:4e:a2:db:
c1:60:71:65:93:63:28:ff:43:d5:62:84:50:b5:0d:b1:89:96:
c7:e9:a7:47:06:94:98:cf:a1:19:80:88:16:c9:ba:4e:5d:c4:
44:c5:e2:10:b4:19:e0:7b:63:9b:1b:7a:4e:1e:40:d4:c1:14:
57:68:0c:07:37:5b:d4:20:c1:4f:e7:32:8a:b4:35:e6:d5:18:
6b:36:a3:da:63:d2:5d:62:51:81:1c:41:55:9f:bc:08:9d:84:
b8:d1:45:b9:10:fe:35:e6:45:27:4c:33:86:13:6f:1c:73:08:
14:64:1b:d0:05:18:e3:8c:8a:ca:90:0d:61:dd:64:8d:9e:6f:
86:39:25:d7:cc:dc:01:1e:62:7c:9c:d3:8a:01:99:c5:40:f3:
9f:2a:ca:b8:9d:f5:c2:bf:fe:ee:b7:4f:39:f9:d1:d4:e4:25:
12:07:1b:a3:ea:b7:c7:3e:bb:07:16:5d:bb:bf:ac:c3:d9:e6:
2a:5e:38:e9:f6:b3:0d:fc:2f:06:27:07:41:e9:a3:cc:f0:d8:
fd:ba:d3:ca:16:67:a9:0a:42:d2:0c:7c:b2:1b:19:5e:93:1d:
5e:5e:99:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI94TGSIB5B2nVNJjW3YRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzAyYzUzY2I4MDNiMTQ2NDRlNjc1ODdlNWQ2ZmQ2MTJi
NjRiY2MwHhcNMjUwNzI2MjMwMDM3WhcNMjUwNzI3MjMwMDM3WjAzMTEwLwYDVQQD
Eyg1ODcxMDM4NzJhYTlhNjg5ZDg2Yzg5MTE1OWU3NDBmZmFhYWQzYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSJwlRt5/AKykvEwbfibFDXSbOQI
rRJODo292CwgRa+I1XaqmJb1vGCMQJNn48wZK7y0oSuycvyvLTSoRgMnnL5Amync
TqviN2vwrA5MjRVomMau8yQR5GOhJSgIh4NI412rMEzaO1lB8F1n3ewCFncjnQ04
PzP4ktSD8iSBmCCT2qDJE3Bl5dtQbRT1CSJyAyt2aJ9wZ6lRuIRzE7yOBu5yvGMZ
FUhk3pfnoXoYTy+D/6QGLj5+Y7lfSHVFWro7e9hWd+cRpalARIo0nrC3ZgjXUuLx
s8odkiQDK9FYM5YXuEuO01UkYIwmmcvHv3+TH+uh2XYHVHWMuxtoXk8g5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhxA4cqqaaJ2GyJEVnnQP+qrTpmMB8GA1UdIwQY
MBaAFA1wLFPLgDsUZE5nWH5db9YStkvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kM2QxMDUtZjk3Mi00YzdjLWJmZWEt
M2YyNTM5MmRlN2Y5LzEvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9kM2QxMDUtZjk3Mi00YzdjLWJmZWEtM2YyNTM5MmRlN2Y5
LzEvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDsHSuKr
cNBXS769C4aa3ADZDX4JvYBURUprqNYciQHgTqLbwWBxZZNjKP9D1WKEULUNsYmW
x+mnRwaUmM+hGYCIFsm6Tl3ERMXiELQZ4Htjmxt6Th5A1MEUV2gMBzdb1CDBT+cy
irQ15tUYazaj2mPSXWJRgRxBVZ+8CJ2EuNFFuRD+NeZFJ0wzhhNvHHMIFGQb0AUY
44yKypANYd1kjZ5vhjkl18zcAR5ifJzTigGZxUDznyrKuJ31wr/+7rdPOfnR1OQl
Egcbo+q3xz67BxZdu7+sw9nmKl446fazDfwvBicHQemjzPDY/brTyhZnqQpC0gx8
shsZXpMdXl6ZqA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:51:05 2025 by rpki-client