Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: t5Ob4b8MjeMZWMqtqxhYNbqkf/BcKBJEggKs/0W8knM=
Subject key identifier: 1F:2D:FB:8F:EB:B1:7A:5B:9A:6F:B7:5A:ED:C3:A2:D4:AF:D2:78:39
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 0199342510F4B5457B6CA8808E73715A466A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0AC8
Signing time: Wed 10 Sep 2025 15:01:08 +0000
Manifest this update: Wed 10 Sep 2025 15:01:08 +0000
Manifest next update: Thu 11 Sep 2025 15:01:08 +0000
Files and hashes: 1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=)
2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: 5ylOvlMbpd7U+QLMG7XHzFEhDrWgmR1/2FBBP/vyr8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:25:10:f4:b5:45:7b:6c:a8:80:8e:73:71:5a:46:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Sep 10 15:01:08 2025 GMT
Not After : Sep 11 15:01:08 2025 GMT
Subject: CN=1f2dfb8febb17a5b9a6fb75aedc3a2d4afd27839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:22:b7:b5:4b:c0:73:71:bd:fa:0e:d3:1d:
df:54:d0:d4:b9:e4:a0:93:df:b1:3b:f0:67:34:28:
88:7f:30:2f:c0:0d:fe:80:5b:f2:c2:7f:6c:68:14:
e2:07:b2:61:bb:b2:e7:cc:ac:1d:31:56:aa:d0:1b:
58:b2:de:08:24:18:f3:36:34:01:84:3d:a9:15:6d:
7a:76:1e:28:6f:62:d3:3c:3b:d3:76:05:f5:9d:71:
6d:25:62:93:a3:83:37:51:f0:00:56:dc:2f:44:1c:
f1:13:ae:a1:93:88:74:29:8f:cc:29:d5:89:4c:5f:
e1:70:c9:28:88:41:ed:87:36:00:e2:e3:96:0e:89:
c2:6f:01:a3:cc:d9:02:63:cf:84:86:d8:87:98:f4:
4e:bf:8f:2f:73:5c:02:cf:e5:0c:98:ff:85:f9:88:
ec:1a:09:b6:7f:c9:b7:7e:97:7e:38:b0:7a:52:4f:
2f:dc:fd:ce:88:c5:b6:ad:34:1e:29:54:23:74:8a:
0e:89:2e:ca:5d:54:b8:38:3a:2b:fd:56:46:3f:62:
3c:2d:f3:a8:80:2f:71:05:0a:8d:f5:fa:0e:7b:4b:
2b:2a:3d:20:f6:79:b4:2e:d3:2e:e0:75:e1:21:22:
9e:89:23:1d:7e:98:94:c8:bc:1e:68:40:08:2d:e5:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2D:FB:8F:EB:B1:7A:5B:9A:6F:B7:5A:ED:C3:A2:D4:AF:D2:78:39
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8a:6d:eb:ca:81:1a:4e:b8:75:5e:97:a6:d0:45:3e:f1:e6:
cc:8c:15:cf:e8:28:93:88:f1:20:2c:aa:81:b5:cb:63:df:f1:
cd:e0:99:cb:71:e9:f7:5f:4f:e6:d2:db:70:6e:15:12:67:64:
f6:0f:98:64:a1:5c:7d:ed:e0:e1:e9:a2:45:58:3f:1a:0b:1e:
95:61:d2:88:f1:cb:64:6b:d9:f4:18:ea:10:e3:a0:03:2b:eb:
b1:2d:66:e7:95:26:da:71:e8:48:73:e5:88:da:0d:c4:2b:6e:
c7:74:a3:26:83:dd:b3:b4:65:70:12:d0:39:96:81:17:50:3d:
45:51:d2:01:ac:19:64:60:94:5c:09:e5:cb:7f:a8:18:ac:41:
28:ac:d3:c0:6a:a0:7b:fa:80:ed:16:c8:d8:75:3b:ea:c0:e7:
5d:eb:c4:c1:b8:64:6b:b6:b8:be:ea:56:e4:05:93:7d:f8:d9:
58:36:14:77:aa:2d:ee:04:ed:96:b4:e1:50:3b:42:7b:ce:0d:
a5:a0:21:d1:a2:15:7b:aa:b6:4a:20:70:96:6a:d2:90:ed:b1:
8d:75:6b:24:6f:2b:22:da:f5:cc:0f:e4:ea:70:b5:47:3e:89:
85:78:61:73:a9:6c:ea:c9:e4:43:e7:3d:89:ff:67:11:d0:a8:
f9:49:ab:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0JRD0tUV7bKiAjnNxWkZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGRjYjcyZThjYjQ3OGNmYzRiMjVhZWIxZjAzYjQwNjI2
NjM3NWMwHhcNMjUwOTEwMTUwMTA4WhcNMjUwOTExMTUwMTA4WjAzMTEwLwYDVQQD
EygxZjJkZmI4ZmViYjE3YTViOWE2ZmI3NWFlZGMzYTJkNGFmZDI3ODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKMit7VLwHNxvfoO0x3fVNDUueSg
k9+xO/BnNCiIfzAvwA3+gFvywn9saBTiB7Jhu7LnzKwdMVaq0BtYst4IJBjzNjQB
hD2pFW16dh4ob2LTPDvTdgX1nXFtJWKTo4M3UfAAVtwvRBzxE66hk4h0KY/MKdWJ
TF/hcMkoiEHthzYA4uOWDonCbwGjzNkCY8+EhtiHmPROv48vc1wCz+UMmP+F+Yjs
Ggm2f8m3fpd+OLB6Uk8v3P3OiMW2rTQeKVQjdIoOiS7KXVS4ODor/VZGP2I8LfOo
gC9xBQqN9foOe0srKj0g9nm0LtMu4HXhISKeiSMdfpiUyLweaEAILeXRFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8t+4/rsXpbmm+3Wu3DotSv0ng5MB8GA1UdIwQY
MBaAFHRNy3Loy0eM/EslrrHwO0BiZjdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4Yjct
ZDBkNDc2ZjQxZmQ2LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4YjctZDBkNDc2ZjQxZmQ2
LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYpt68qB
Gk64dV6XptBFPvHmzIwVz+gok4jxICyqgbXLY9/xzeCZy3Hp919P5tLbcG4VEmdk
9g+YZKFcfe3g4emiRVg/GgselWHSiPHLZGvZ9BjqEOOgAyvrsS1m55Um2nHoSHPl
iNoNxCtux3SjJoPds7RlcBLQOZaBF1A9RVHSAawZZGCUXAnly3+oGKxBKKzTwGqg
e/qA7RbI2HU76sDnXevEwbhka7a4vupW5AWTffjZWDYUd6ot7gTtlrThUDtCe84N
paAh0aIVe6q2SiBwlmrSkO2xjXVrJG8rItr1zA/k6nC1Rz6JhXhhc6ls6snkQ+c9
if9nEdCo+UmrAQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:36:50 2025 by rpki-client