Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
File: dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft (raw, json)
Hash identifier: sH817cnNfUrY1FikkcJkJrvkhWw4FdTMUXaF9/F4Ikg=
Subject key identifier: DF:98:9A:05:13:20:0A:06:C6:27:E6:92:73:94:4B:A2:FC:F3:60:3C
Authority key identifier: 75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
Certificate issuer: /CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Certificate serial: 019848F7A4568C5B5CE044CFF61259F91539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 23:00:45 +0000
Manifest this update: Sat 26 Jul 2025 23:00:45 +0000
Manifest next update: Sun 27 Jul 2025 23:00:45 +0000
Files and hashes: 1: ITU9N73wNSwtRlo0RIBRFcqyI18.roa (hash: tZ8waA6UjAXlSU4mKy5eCZ0yrObYCvk+4Q5dVUfAZCs=)
2: dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl (hash: 0/7WIQDFmKdDMgZuhPWtx9lrCNeJItpvFLp0KRjiVd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:a4:56:8c:5b:5c:e0:44:cf:f6:12:59:f9:15:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Validity
Not Before: Jul 26 23:00:45 2025 GMT
Not After : Jul 27 23:00:45 2025 GMT
Subject: CN=df989a0513200a06c627e69273944ba2fcf3603c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:f1:63:94:ce:ca:66:e2:ef:c9:7d:7f:9c:
88:fa:75:2a:f8:ce:da:21:aa:7e:2e:6f:a4:b3:ba:
c3:3b:86:6d:2c:d2:0d:40:4b:ed:2a:2f:60:66:3a:
79:9b:0e:79:bd:28:68:e5:04:2a:38:54:f2:72:3e:
49:e4:7e:a1:0d:14:b8:77:c0:34:36:a7:60:71:66:
42:fa:11:6c:e2:c3:ff:46:22:c8:e1:bc:28:94:39:
ce:5f:36:e4:23:ed:09:c6:8f:e5:37:19:75:82:16:
a6:0a:b3:14:56:dc:5c:10:a0:ce:4d:ec:d7:38:20:
83:cd:c2:a1:08:da:c2:fe:97:38:5c:f1:0a:a6:3f:
02:22:4c:16:2c:8d:3c:cc:59:80:3f:ee:21:45:55:
4b:f9:54:e8:da:ee:75:ae:dc:98:29:90:da:ec:6f:
a9:c5:ab:5f:b0:d9:4a:77:20:d0:5d:6d:04:3d:bc:
7a:10:f6:8c:a0:d5:00:f1:0d:be:9a:3f:22:6c:91:
91:c9:4d:17:50:0e:a9:b9:11:77:f3:5b:0a:5e:d3:
a4:bb:53:90:d2:7b:90:f0:5d:ec:82:b7:97:38:ec:
83:e8:85:e4:55:48:8e:ce:84:f8:b5:69:77:21:c6:
ab:bc:b8:a8:fc:4d:03:c7:e2:bc:9c:d0:1e:e8:14:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:98:9A:05:13:20:0A:06:C6:27:E6:92:73:94:4B:A2:FC:F3:60:3C
X509v3 Authority Key Identifier:
keyid:75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:76:67:22:6f:97:fb:04:ad:c9:6e:c5:22:3f:55:c4:e9:2e:
20:6d:05:7c:9a:d9:d9:06:d3:a1:d4:5f:e4:2f:88:d1:98:03:
b6:c3:e3:09:56:bb:ea:97:da:b9:b6:5d:7a:cf:28:0d:a0:16:
bf:40:75:c2:ab:62:2c:c7:64:ab:48:76:88:a7:e0:9f:ba:c3:
6e:5e:0f:f6:5d:ac:e6:43:ef:c9:6f:6e:4f:0d:b6:1b:40:a8:
a4:5c:0c:e4:cb:14:6b:a8:e3:70:09:9e:cf:1f:2b:53:52:6f:
d1:64:4d:a9:03:20:77:94:60:75:32:8f:89:b3:59:26:36:24:
73:b0:9f:96:1e:a5:4d:73:da:44:ea:92:6f:50:6d:53:75:10:
1e:73:0f:a6:64:f5:88:0c:a5:a3:17:b5:ed:5b:84:98:28:c9:
d3:10:2f:79:a1:ff:ec:a7:6b:1c:d0:e0:8c:1a:9c:f3:32:c8:
42:78:87:3c:b5:c7:9f:4f:49:27:93:da:d2:ee:d0:41:a8:92:
7d:db:0f:91:1a:db:7c:92:a3:93:ce:08:00:4d:a6:d3:21:d8:
10:3d:68:d2:87:71:49:d3:7b:14:6e:d4:95:c6:17:ef:53:cc:
a9:68:84:68:18:5f:43:bf:51:53:34:d0:d5:ed:9f:68:3f:39:
8c:4d:c4:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI96RWjFtc4ETP9hJZ+RU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Yjk4MmVhYmE0NDA4Y2Q5NDE4OTlmNWNlZWMxZGE2YTY3
YzVjNDkwHhcNMjUwNzI2MjMwMDQ1WhcNMjUwNzI3MjMwMDQ1WjAzMTEwLwYDVQQD
EyhkZjk4OWEwNTEzMjAwYTA2YzYyN2U2OTI3Mzk0NGJhMmZjZjM2MDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP3xY5TOymbi78l9f5yI+nUq+M7a
Iap+Lm+ks7rDO4ZtLNINQEvtKi9gZjp5mw55vSho5QQqOFTycj5J5H6hDRS4d8A0
NqdgcWZC+hFs4sP/RiLI4bwolDnOXzbkI+0Jxo/lNxl1ghamCrMUVtxcEKDOTezX
OCCDzcKhCNrC/pc4XPEKpj8CIkwWLI08zFmAP+4hRVVL+VTo2u51rtyYKZDa7G+p
xatfsNlKdyDQXW0EPbx6EPaMoNUA8Q2+mj8ibJGRyU0XUA6puRF381sKXtOku1OQ
0nuQ8F3sgreXOOyD6IXkVUiOzoT4tWl3IcarvLio/E0Dx+K8nNAe6BR4yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+YmgUTIAoGxifmknOUS6L882A8MB8GA1UdIwQY
MBaAFHW5guq6RAjNlBiZ9c7sHaamfFxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82OWYzZjMtMGZhYS00NjVmLWFhN2Et
ZDcxY2ExOWY5ODllLzEvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC82OWYzZjMtMGZhYS00NjVmLWFhN2EtZDcxY2ExOWY5ODll
LzEvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHZnIm+X
+wStyW7FIj9VxOkuIG0FfJrZ2QbTodRf5C+I0ZgDtsPjCVa76pfaubZdes8oDaAW
v0B1wqtiLMdkq0h2iKfgn7rDbl4P9l2s5kPvyW9uTw22G0CopFwM5MsUa6jjcAme
zx8rU1Jv0WRNqQMgd5RgdTKPibNZJjYkc7Cflh6lTXPaROqSb1BtU3UQHnMPpmT1
iAyloxe17VuEmCjJ0xAveaH/7KdrHNDgjBqc8zLIQniHPLXHn09JJ5Pa0u7QQaiS
fdsPkRrbfJKjk84IAE2m0yHYED1o0odxSdN7FG7UlcYX71PMqWiEaBhfQ79RUzTQ
1e2faD85jE3EUg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:21:34 2025 by rpki-client