Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File: dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier: RdpeYE/HOO/rFEPmE2FKlY4H2rdT85taG3wj4qsWDxQ=
Subject key identifier: 49:F3:59:C8:B0:DA:31:AB:69:7F:F2:06:99:CB:51:91:A9:04:9F:6B
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer: /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial: 019849665BD0FFC848C293D748F452FED7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number: 05B9
Signing time: Sun 27 Jul 2025 01:01:41 +0000
Manifest this update: Sun 27 Jul 2025 01:01:41 +0000
Manifest next update: Mon 28 Jul 2025 01:01:41 +0000
Files and hashes: 1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: hQqJlZzVmn9FKUHepWXeYxj2onUuFaMNgOtowuhjwk8=)
2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:5b:d0:ff:c8:48:c2:93:d7:48:f4:52:fe:d7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Validity
Not Before: Jul 27 01:01:41 2025 GMT
Not After : Jul 28 01:01:41 2025 GMT
Subject: CN=49f359c8b0da31ab697ff20699cb5191a9049f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:92:c4:e6:62:42:9b:e6:05:16:d5:1a:2d:
db:aa:40:6b:9d:71:4c:44:7d:d7:05:c5:a6:71:ac:
42:6f:09:6a:57:dc:c9:bd:8e:ff:03:89:3e:9e:ce:
4b:58:a1:e1:60:b2:08:ec:27:21:29:60:66:45:b4:
bf:a4:2c:17:b1:0f:33:64:bd:50:7b:ff:ec:34:ff:
ef:1b:5d:c2:67:b3:27:14:67:a8:28:1b:15:6d:f7:
29:d0:42:05:02:af:bd:f4:96:f4:e5:d4:61:e1:c8:
60:c8:c8:c7:c3:74:83:89:e5:87:1a:cc:6b:d5:45:
4f:64:2e:28:7b:68:e7:bc:96:31:40:89:38:89:84:
bb:ef:5a:df:11:f9:21:05:c8:5e:d4:85:dd:21:0a:
ca:88:81:3e:c6:76:59:91:c5:bc:5b:29:3d:38:d6:
9d:b3:26:fb:f9:43:28:c7:f6:0f:bd:bf:f6:6c:36:
5e:ed:bb:e8:7a:68:c6:b8:ec:9f:9b:65:05:d7:93:
26:a8:62:96:47:78:84:19:e1:a5:28:75:ae:4d:21:
df:92:9c:b0:71:8b:22:4d:86:74:d4:e8:3c:af:b4:
11:ae:c3:d1:84:ac:18:39:5e:7b:ee:a1:f9:d4:a2:
f6:11:8e:26:be:b7:89:d4:0f:f6:c1:6e:84:91:89:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F3:59:C8:B0:DA:31:AB:69:7F:F2:06:99:CB:51:91:A9:04:9F:6B
X509v3 Authority Key Identifier:
keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:37:04:6a:0c:09:47:c0:7d:33:2e:40:80:0c:17:9a:fe:03:
b0:73:46:91:8c:74:d5:f0:20:7c:1f:d4:e8:59:69:b6:dd:c7:
1d:5d:dd:ec:fa:3a:bf:7c:52:77:1c:01:00:06:e3:c3:26:5e:
e1:50:75:27:b3:17:32:43:80:b2:a4:a4:ce:f9:6c:6b:c3:fd:
fc:02:13:e8:e3:5d:8b:a7:31:1f:db:fd:34:11:ee:f8:b1:ed:
76:29:38:05:99:5c:aa:59:c7:5f:4b:27:a8:0a:b1:07:ec:0f:
27:cc:96:25:9e:25:67:72:77:9e:59:d7:33:be:c9:9a:5b:b1:
29:53:9c:1c:aa:ba:84:e8:aa:dd:d7:fc:e4:f7:75:a8:06:46:
fa:14:5e:58:f1:34:6e:fa:ea:63:7c:c0:c4:f7:4f:3f:4c:8b:
a1:9e:25:e5:e1:d2:da:ec:74:4a:dd:24:16:f5:0b:17:6c:14:
00:26:fb:1e:05:aa:9b:ca:82:f3:6b:27:d3:e8:9d:60:23:d0:
b9:b3:29:a1:47:be:2e:5b:fd:cd:5e:f5:88:a4:2f:c1:f6:85:
c1:4c:40:9b:89:d4:11:cc:1f:b5:28:87:f8:ba:b6:ec:8f:05:
40:4f:1f:8a:a9:60:27:dd:8e:0f:7b:a3:02:1c:c5:b4:e9:55:
9e:b8:7c:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZlvQ/8hIwpPXSPRS/tevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODc4NDkyYTA2N2NiNWEzZWRmOTY5NWE2ZmQyNTg5ZjMy
NzNhYTcwHhcNMjUwNzI3MDEwMTQxWhcNMjUwNzI4MDEwMTQxWjAzMTEwLwYDVQQD
Eyg0OWYzNTljOGIwZGEzMWFiNjk3ZmYyMDY5OWNiNTE5MWE5MDQ5ZjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuOSxOZiQpvmBRbVGi3bqkBrnXFM
RH3XBcWmcaxCbwlqV9zJvY7/A4k+ns5LWKHhYLII7CchKWBmRbS/pCwXsQ8zZL1Q
e//sNP/vG13CZ7MnFGeoKBsVbfcp0EIFAq+99Jb05dRh4chgyMjHw3SDieWHGsxr
1UVPZC4oe2jnvJYxQIk4iYS771rfEfkhBche1IXdIQrKiIE+xnZZkcW8Wyk9ONad
syb7+UMox/YPvb/2bDZe7bvoemjGuOyfm2UF15MmqGKWR3iEGeGlKHWuTSHfkpyw
cYsiTYZ01Og8r7QRrsPRhKwYOV577qH51KL2EY4mvreJ1A/2wW6EkYkKnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnzWciw2jGraX/yBpnLUZGpBJ9rMB8GA1UdIwQY
MBaAFHWHhJKgZ8taPt+Wlab9JYnzJzqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMWJlNzctZTg3OC00NmU4LWE4NzUt
ZDA5ZmVlMDljY2IxLzEvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mMWJlNzctZTg3OC00NmU4LWE4NzUtZDA5ZmVlMDljY2Ix
LzEvZFllRWtxQm55MW8tMzVhVnB2MGxpZk1uT3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTcEagwJ
R8B9My5AgAwXmv4DsHNGkYx01fAgfB/U6Flptt3HHV3d7Po6v3xSdxwBAAbjwyZe
4VB1J7MXMkOAsqSkzvlsa8P9/AIT6ONdi6cxH9v9NBHu+LHtdik4BZlcqlnHX0sn
qAqxB+wPJ8yWJZ4lZ3J3nlnXM77JmluxKVOcHKq6hOiq3df85Pd1qAZG+hReWPE0
bvrqY3zAxPdPP0yLoZ4l5eHS2ux0St0kFvULF2wUACb7HgWqm8qC82sn0+idYCPQ
ubMpoUe+Llv9zV71iKQvwfaFwUxAm4nUEcwftSiH+Lq27I8FQE8fiqlgJ92OD3uj
AhzFtOlVnrh85Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:39:17 2025 by rpki-client