Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File: dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier: aceE/LsLcwatoMe3EKq3jigMnziNVGx1cqOQiT3w8v4=
Subject key identifier: 54:2D:AC:DA:C8:4A:33:51:7E:A2:FF:EB:D3:3A:7B:B8:20:22:5B:A3
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer: /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial: 0199353790864BCB4A27DE6BCBAD0CB44878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number: 035F
Signing time: Wed 10 Sep 2025 20:00:57 +0000
Manifest this update: Wed 10 Sep 2025 20:00:57 +0000
Manifest next update: Thu 11 Sep 2025 20:00:57 +0000
Files and hashes: 1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=)
2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: RBpYo3rsuJIvY/7lwCVplvZeJAiQIxRGrjG7lait9Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:90:86:4b:cb:4a:27:de:6b:cb:ad:0c:b4:48:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Validity
Not Before: Sep 10 20:00:57 2025 GMT
Not After : Sep 11 20:00:57 2025 GMT
Subject: CN=542dacdac84a33517ea2ffebd33a7bb820225ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:91:d0:bb:a6:0c:8c:b0:ac:6d:c7:fb:c6:
72:fe:d6:4a:34:5b:6f:75:f6:2c:76:8d:83:62:28:
01:83:2a:bb:02:e6:2b:6e:85:b6:9d:f3:e9:36:18:
7a:54:16:c1:03:47:ff:5f:08:f1:0b:ba:70:97:c6:
16:f6:1d:0c:9d:6f:ff:88:82:ef:18:3f:ec:be:e8:
7a:3c:dc:a1:31:a9:74:e1:5b:0b:06:dc:82:20:7c:
89:e0:82:d2:3c:e5:ac:b8:11:93:39:b7:61:4e:06:
4b:ae:ae:b6:60:55:f0:5a:b8:20:61:e2:e5:bd:42:
9d:b1:f8:6c:40:df:6b:45:18:ad:96:81:ed:fa:84:
77:01:2c:09:45:4c:df:09:e6:60:09:fa:3c:3f:00:
58:6c:6d:cb:de:e6:97:40:ff:f8:9e:08:41:24:07:
86:8f:da:7d:ca:2d:a2:48:5a:4e:8a:99:b8:9a:12:
cb:3c:fe:df:f0:09:f9:d0:ac:52:a9:12:d0:54:1f:
52:16:15:66:4d:b6:f4:f6:83:69:a9:88:fe:c1:02:
57:ff:4a:c1:7d:b0:d4:52:94:24:67:e3:c8:b9:c9:
17:12:79:2c:3d:7d:c8:83:b0:f4:1d:9e:70:6f:85:
46:e3:d9:0c:fc:9e:31:1d:53:a4:54:21:cf:0f:e0:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2D:AC:DA:C8:4A:33:51:7E:A2:FF:EB:D3:3A:7B:B8:20:22:5B:A3
X509v3 Authority Key Identifier:
keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f0:d5:32:98:25:2a:ae:5a:cc:aa:9b:77:3a:96:c8:b5:b2:
e9:1f:f1:5d:fc:94:05:f6:fe:2d:03:09:34:12:99:e6:38:73:
c1:9d:9e:4b:42:c2:86:9a:ab:86:71:6f:07:5c:61:66:38:fa:
48:06:9e:95:c4:ae:8f:d0:11:e0:72:c0:87:5c:76:3d:0c:3f:
66:0a:aa:0a:f8:34:17:e0:8b:1c:64:13:ce:16:92:a7:e0:0e:
29:7a:8b:68:93:e4:5d:39:8a:08:76:f5:1e:db:2b:88:00:6e:
d6:a5:4d:e1:7f:88:d4:3e:d0:7b:ce:6e:dc:6e:77:ae:f2:7c:
d7:52:46:fb:11:4c:9e:c4:1d:ab:83:e2:b5:c1:58:05:59:50:
f1:4c:a6:7d:cc:01:1f:ba:1c:e8:83:a9:e6:66:e7:c7:39:56:
6d:4b:fa:30:ce:a9:f1:18:fc:ae:22:9d:16:29:3f:6e:d9:1d:
56:55:b1:69:9a:4c:af:2d:c1:80:f7:50:10:10:0d:b9:cb:d6:
ac:0a:42:6f:db:61:a4:ed:65:a8:52:98:05:33:b1:2d:dd:5f:
a7:72:aa:c2:7a:04:24:e1:54:9d:2e:56:14:7c:6b:cb:ad:14:
aa:6e:93:15:8e:6e:eb:ff:c5:18:0c:79:ac:e3:fb:90:a5:61:
4b:f4:f3:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1N5CGS8tKJ95ry60MtEh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OWQ1YzUyYzMxNTdlNTk0NWU2NjNiOTJlZDQ0MDJjNjA2
MTZlM2IwHhcNMjUwOTEwMjAwMDU3WhcNMjUwOTExMjAwMDU3WjAzMTEwLwYDVQQD
Eyg1NDJkYWNkYWM4NGEzMzUxN2VhMmZmZWJkMzNhN2JiODIwMjI1YmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZiR0LumDIywrG3H+8Zy/tZKNFtv
dfYsdo2DYigBgyq7AuYrboW2nfPpNhh6VBbBA0f/XwjxC7pwl8YW9h0MnW//iILv
GD/svuh6PNyhMal04VsLBtyCIHyJ4ILSPOWsuBGTObdhTgZLrq62YFXwWrggYeLl
vUKdsfhsQN9rRRitloHt+oR3ASwJRUzfCeZgCfo8PwBYbG3L3uaXQP/4nghBJAeG
j9p9yi2iSFpOipm4mhLLPP7f8An50KxSqRLQVB9SFhVmTbb09oNpqYj+wQJX/0rB
fbDUUpQkZ+PIuckXEnksPX3Ig7D0HZ5wb4VG49kM/J4xHVOkVCHPD+DKswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQtrNrISjNRfqL/69M6e7ggIlujMB8GA1UdIwQY
MBaAFHadXFLDFX5ZReZjuS7UQCxgYW47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYt
Mzc2YjQ5ZDUyZDdlLzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYtMzc2YjQ5ZDUyZDdl
LzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvDVMpgl
Kq5azKqbdzqWyLWy6R/xXfyUBfb+LQMJNBKZ5jhzwZ2eS0LChpqrhnFvB1xhZjj6
SAaelcSuj9AR4HLAh1x2PQw/ZgqqCvg0F+CLHGQTzhaSp+AOKXqLaJPkXTmKCHb1
HtsriABu1qVN4X+I1D7Qe85u3G53rvJ811JG+xFMnsQdq4PitcFYBVlQ8UymfcwB
H7oc6IOp5mbnxzlWbUv6MM6p8Rj8riKdFik/btkdVlWxaZpMry3BgPdQEBANucvW
rApCb9thpO1lqFKYBTOxLd1fp3KqwnoEJOFUnS5WFHxry60Uqm6TFY5u6//FGAx5
rOP7kKVhS/Tzyg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:54:29 2025 by rpki-client