Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: Mi7QFF901+fZETz1FcLZiSXyyyfi/pziG5WFSpw0tvs=
Subject key identifier: 74:6A:04:DC:D6:5C:89:04:02:48:41:54:11:EA:6C:AF:C8:A2:A4:AB
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019836C1A28AA7C6B8FE97AF837EDC61C09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 0634
Signing time: Wed 23 Jul 2025 10:08:36 +0000
Manifest this update: Wed 23 Jul 2025 10:08:36 +0000
Manifest next update: Thu 24 Jul 2025 10:08:36 +0000
Files and hashes: 1: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: cTsepicr1TBmBc/JpY/osFAtNEuWVEf3jKCo4m5KSDM=)
2: EEHOXZie7GfjFP8O_aL3DaZW-cs.roa (hash: X68IlMoKqFdfJQq29aFoZvl4dyUrIU6qUuNNpdY5QY0=)
3: GRNi9FaG_cegQglT0i8FIDNWU2U.roa (hash: bCWNDCmq66YbcJ+QlNZxut5x3FKlyihHpYRCb3I31oo=)
4: R6j9VFf9hyGNWvQI3K-rac4qKtM.roa (hash: OsF+wduGV2ZDH6UXcdpVcVuvDncNr0AEm//3Zi2I5P8=)
5: XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa (hash: aTCk4tDEozYvDRrFyrZ3f3BlxhXKcnoh7F4+cF/wfgQ=)
6: a543lKmyyGMa0HBPrwfoutV1h7c.roa (hash: LmAVwRAD65X9ZkrQl9CW8/V9eNzAq0UoEpMZCq2ur1o=)
7: jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa (hash: xAyKDInYSvUkNUl6uz5vwMUk+j1zJC/E+Ymsw/w0qH0=)
8: mK6Hd1l33q60MXDCDb-v3OAM0UE.roa (hash: BlNVjbSzLjZletHX6nfFNTrDwvaIRsmo9MnmSGytaUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 10:08:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:c1:a2:8a:a7:c6:b8:fe:97:af:83:7e:dc:61:c0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jul 23 10:08:36 2025 GMT
Not After : Jul 24 10:08:36 2025 GMT
Subject: CN=746a04dcd65c89040248415411ea6cafc8a2a4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d7:f6:34:29:ad:d2:b3:0f:80:86:56:04:63:
41:89:47:36:f0:2b:83:c3:1d:e9:19:8a:a0:80:47:
a5:c1:d7:61:08:e9:b4:cc:81:30:39:a2:aa:b0:00:
30:be:eb:dd:07:b3:0a:ab:e9:d9:26:04:ff:cd:ae:
56:c3:fa:1c:62:84:41:2f:98:04:c8:e2:67:87:11:
ba:e8:a4:3b:61:c8:af:ff:25:05:30:b1:0a:2f:86:
56:15:69:60:b0:5e:55:df:af:14:91:56:cb:c9:5e:
43:ec:17:c0:83:c9:bb:81:5b:91:36:a5:b3:01:e7:
c3:8a:c1:79:a6:c3:6f:f4:11:79:fc:89:db:fe:9c:
58:31:a3:03:62:20:f4:33:04:3b:60:e4:6d:f3:80:
d6:9c:5e:bf:c6:41:f2:69:7e:f8:15:e5:74:a9:17:
53:be:c4:37:61:c9:f3:0d:fb:d0:a4:ce:11:6c:9e:
62:d7:82:5a:13:1a:b4:f5:1f:b0:96:99:79:c2:e5:
5c:24:fc:9f:a2:b7:be:c3:f4:ee:96:fc:26:0c:8d:
92:db:ac:57:48:0b:7e:c4:78:d2:ac:01:e2:c1:29:
4a:dc:ef:f8:31:79:e1:81:dc:f6:88:59:44:ab:a4:
21:c7:d6:72:36:d4:ca:05:65:21:5b:1a:c2:7a:c0:
d2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6A:04:DC:D6:5C:89:04:02:48:41:54:11:EA:6C:AF:C8:A2:A4:AB
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f6:53:0d:34:96:7a:b4:db:2d:b1:83:e8:55:17:a7:d8:72:
f2:16:78:90:3f:28:08:1d:b9:9a:86:a4:79:f2:32:f9:30:df:
c2:5d:c5:d6:5a:ec:6b:e0:7f:42:f2:90:01:34:93:08:07:e4:
6f:65:b9:ea:3b:39:00:81:71:03:62:cf:7c:f2:40:0b:8a:eb:
6f:40:92:2c:8b:57:6e:7a:e8:c1:d7:f0:7f:ca:b1:43:a9:dc:
68:9b:50:53:d9:7a:de:21:e9:03:e3:74:49:c9:cd:e3:91:39:
e1:cc:0e:63:f1:9c:a9:c1:49:9f:3c:84:c9:60:35:d1:49:f0:
55:e5:e3:51:9f:d5:bb:0b:aa:b6:01:2c:9c:02:27:9a:97:3f:
f7:0e:b1:a8:50:c6:f7:35:f2:27:1b:d5:c8:63:26:c3:82:58:
b6:19:5d:c0:93:91:5f:82:88:cf:b7:24:39:38:45:f9:23:05:
36:78:a2:8d:8a:02:cf:f4:c4:01:b5:7b:c3:c5:25:5c:3b:02:
10:09:35:c1:27:9e:f9:bf:33:fa:7e:e2:c8:19:53:d9:75:42:
6a:cb:d4:26:4a:4e:05:59:87:e0:dd:3c:2b:76:7b:84:94:ff:
22:d4:f7:cd:a9:0f:6a:81:f2:9f:7a:d3:68:6d:01:f0:d1:c1:
cb:2c:d8:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg2waKKp8a4/pevg37cYcCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj
ZWYzMTEwHhcNMjUwNzIzMTAwODM2WhcNMjUwNzI0MTAwODM2WjAzMTEwLwYDVQQD
Eyg3NDZhMDRkY2Q2NWM4OTA0MDI0ODQxNTQxMWVhNmNhZmM4YTJhNGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNf2NCmt0rMPgIZWBGNBiUc28CuD
wx3pGYqggEelwddhCOm0zIEwOaKqsAAwvuvdB7MKq+nZJgT/za5Ww/ocYoRBL5gE
yOJnhxG66KQ7Yciv/yUFMLEKL4ZWFWlgsF5V368UkVbLyV5D7BfAg8m7gVuRNqWz
AefDisF5psNv9BF5/Inb/pxYMaMDYiD0MwQ7YORt84DWnF6/xkHyaX74FeV0qRdT
vsQ3YcnzDfvQpM4RbJ5i14JaExq09R+wlpl5wuVcJPyfore+w/TulvwmDI2S26xX
SAt+xHjSrAHiwSlK3O/4MXnhgdz2iFlEq6Qhx9ZyNtTKBWUhWxrCesDShQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRqBNzWXIkEAkhBVBHqbK/IoqSrMB8GA1UdIwQY
MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct
YzhmMTgyZTk1ZWE1LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1
LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvZTDTSW
erTbLbGD6FUXp9hy8hZ4kD8oCB25moakefIy+TDfwl3F1lrsa+B/QvKQATSTCAfk
b2W56js5AIFxA2LPfPJAC4rrb0CSLItXbnrowdfwf8qxQ6ncaJtQU9l63iHpA+N0
ScnN45E54cwOY/GcqcFJnzyEyWA10UnwVeXjUZ/VuwuqtgEsnAInmpc/9w6xqFDG
9zXyJxvVyGMmw4JYthldwJORX4KIz7ckOThF+SMFNniijYoCz/TEAbV7w8UlXDsC
EAk1wSee+b8z+n7iyBlT2XVCasvUJkpOBVmH4N08K3Z7hJT/ItT3zakPaoHyn3rT
aG0B8NHByyzYxA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 16:31:42 2025 by rpki-client