Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: EkFddiKJez1iiXqOFIRXtq6vP6v61KlWrdj0AoVG5HM=
Subject key identifier: D7:9B:7A:3C:D3:BE:3E:C7:2E:5C:B0:E0:17:78:83:3D:BA:68:E0:40
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 0198496633874821001CAC85B817AB3AF203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 09B5
Signing time: Sun 27 Jul 2025 01:01:31 +0000
Manifest this update: Sun 27 Jul 2025 01:01:31 +0000
Manifest next update: Mon 28 Jul 2025 01:01:31 +0000
Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=)
2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: na61JTN7FQcDwjJTl0te+jjEbNhC7K4ZCPov/db7gTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:33:87:48:21:00:1c:ac:85:b8:17:ab:3a:f2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Jul 27 01:01:31 2025 GMT
Not After : Jul 28 01:01:31 2025 GMT
Subject: CN=d79b7a3cd3be3ec72e5cb0e01778833dba68e040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:a7:b8:00:8a:8e:40:44:9e:f2:5c:be:fc:
e7:79:36:e3:c2:5e:e6:85:39:88:a6:9c:2a:31:72:
0b:66:77:7d:ef:b8:a3:51:84:58:33:a7:cb:f4:b0:
f6:f9:0e:33:7e:5c:e9:46:fa:b6:59:a0:76:ab:39:
df:05:cb:4a:4d:f1:86:c8:c2:dc:ba:11:67:57:78:
a6:7b:ee:17:b1:09:a4:84:4e:dd:ea:b1:05:54:07:
f2:8f:77:a7:f8:d2:62:2c:32:36:9a:48:9b:00:ba:
1d:bc:68:d6:0a:ba:57:5e:72:60:c4:68:28:5f:4a:
a2:ce:70:93:0a:c5:f2:f7:8e:f7:8c:4b:61:f9:e9:
11:54:74:cd:b7:25:1d:dd:ba:1c:c4:05:ea:b8:7d:
b3:ef:ad:67:f9:05:54:c0:a7:8b:3b:c6:ec:c9:49:
bc:d3:27:ed:73:2f:05:31:47:42:a2:e1:0a:19:e4:
3f:b5:19:4f:a1:8e:31:0b:45:6f:e4:0b:de:47:cc:
01:c7:cd:62:55:c7:50:76:54:e1:75:cf:ee:cd:0e:
14:58:c5:90:7d:db:c5:21:72:d7:2f:ed:f3:c4:41:
6d:fd:9d:77:6a:af:2d:ff:f9:fb:fb:38:7e:b1:cb:
fb:9b:9b:21:47:dc:c1:38:c0:bd:9b:7e:96:9c:2d:
67:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9B:7A:3C:D3:BE:3E:C7:2E:5C:B0:E0:17:78:83:3D:BA:68:E0:40
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fe:eb:33:8b:5c:7b:94:38:64:84:46:b2:b7:1f:30:d3:c2:
8c:47:30:08:18:c6:85:85:27:d6:c6:a7:de:1d:f5:34:e8:bd:
5d:6f:cb:33:72:0f:62:99:2d:b5:37:69:34:fd:47:25:3d:0f:
1d:f2:56:7f:04:f6:c0:3b:86:7e:61:b0:0f:f6:ee:10:34:3a:
5d:3a:9e:31:9a:65:18:35:e2:d2:66:1e:a5:38:3a:b5:a6:93:
70:79:3f:37:9c:77:0a:83:f7:53:ef:8c:32:b8:38:61:e5:fd:
e5:93:c5:79:13:8c:c1:2f:87:aa:00:83:b5:37:08:01:cb:3a:
1c:52:00:b6:64:82:77:62:10:f5:4f:44:27:46:e9:08:38:3e:
76:13:14:86:7f:13:fb:51:43:8e:a2:c2:3e:c6:9a:9a:b0:f6:
bb:b9:18:02:37:70:cc:61:a8:94:79:d1:26:9b:ab:05:73:3c:
5a:db:d8:61:64:7b:8c:86:32:b2:d1:63:06:62:e6:44:87:45:
a1:cb:61:75:6f:e0:fb:17:b6:b8:e0:6a:2d:f6:39:f1:74:e1:
10:11:4a:1a:4b:c3:d8:b6:f6:47:67:31:ff:3a:a3:ff:50:7b:
8e:5d:15:f2:6b:67:de:46:e0:9d:e6:04:a0:67:1d:e1:a0:e7:
d7:11:10:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZjOHSCEAHKyFuBerOvIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGUxMzNjYTBjYWQ5ZjFmZDE2MTU4MDU5MGIyOTZkYjIy
MzA4Y2UwHhcNMjUwNzI3MDEwMTMxWhcNMjUwNzI4MDEwMTMxWjAzMTEwLwYDVQQD
EyhkNzliN2EzY2QzYmUzZWM3MmU1Y2IwZTAxNzc4ODMzZGJhNjhlMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+SnuACKjkBEnvJcvvzneTbjwl7m
hTmIppwqMXILZnd977ijUYRYM6fL9LD2+Q4zflzpRvq2WaB2qznfBctKTfGGyMLc
uhFnV3ime+4XsQmkhE7d6rEFVAfyj3en+NJiLDI2mkibALodvGjWCrpXXnJgxGgo
X0qiznCTCsXy9473jEth+ekRVHTNtyUd3bocxAXquH2z761n+QVUwKeLO8bsyUm8
0yftcy8FMUdCouEKGeQ/tRlPoY4xC0Vv5AveR8wBx81iVcdQdlThdc/uzQ4UWMWQ
fdvFIXLXL+3zxEFt/Z13aq8t//n7+zh+scv7m5shR9zBOMC9m36WnC1ngQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNebejzTvj7HLlyw4Bd4gz26aOBAMB8GA1UdIwQY
MBaAFHROEzygytnx/RYVgFkLKW2yIwjOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUt
OTVhNGVmNDNjMjE1LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iNDExOTAtZGEyOC00MzAxLTkwYzUtOTVhNGVmNDNjMjE1
LzEvZEU0VFBLREsyZkg5RmhXQVdRc3BiYklqQ000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPP7rM4tc
e5Q4ZIRGsrcfMNPCjEcwCBjGhYUn1san3h31NOi9XW/LM3IPYpkttTdpNP1HJT0P
HfJWfwT2wDuGfmGwD/buEDQ6XTqeMZplGDXi0mYepTg6taaTcHk/N5x3CoP3U++M
Mrg4YeX95ZPFeROMwS+HqgCDtTcIAcs6HFIAtmSCd2IQ9U9EJ0bpCDg+dhMUhn8T
+1FDjqLCPsaamrD2u7kYAjdwzGGolHnRJpurBXM8WtvYYWR7jIYystFjBmLmRIdF
octhdW/g+xe2uOBqLfY58XThEBFKGkvD2Lb2R2cx/zqj/1B7jl0V8mtn3kbgneYE
oGcd4aDn1xEQZg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:37:50 2025 by rpki-client