Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier: qzJMMokDNGKc+CchgcA5WDXBN1RAD1AgorEVsnvzgRc=
Subject key identifier: 99:36:79:7E:7F:FB:3B:DB:6B:E3:A4:BC:14:B7:5C:F2:42:93:2D:33
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial: 0199240CE22BC938B025CD84DE330BBF83B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 12:00:48 +0000
Manifest this update: Sun 07 Sep 2025 12:00:48 +0000
Manifest next update: Mon 08 Sep 2025 12:00:48 +0000
Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: rVfVx0F4uTThoIEW3bGyDqzqV0YDglXLVnT6Rlmi9JU=)
2: RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa (hash: iX9OHbXh9X/4e6G7wovNf6r/WuAf8SkEeNMsZiGLv+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:e2:2b:c9:38:b0:25:cd:84:de:33:0b:bf:83:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Validity
Not Before: Sep 7 12:00:48 2025 GMT
Not After : Sep 8 12:00:48 2025 GMT
Subject: CN=9936797e7ffb3bdb6be3a4bc14b75cf242932d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:41:56:42:69:79:58:b0:6b:ea:cd:5e:94:
e7:2f:07:f1:73:14:b4:23:75:cb:c2:97:47:11:54:
dc:74:a5:22:e4:cb:2c:1b:a8:7a:b5:5b:9f:6c:86:
ec:60:47:69:15:9a:73:f7:1f:c0:81:42:f6:9c:e6:
b6:4c:a0:a3:fa:96:b6:a5:7e:6e:0f:ec:6f:0c:13:
f2:17:5c:be:7a:2b:cf:6a:ef:28:ac:55:0d:d6:74:
b0:f9:bc:cb:49:bf:e7:5d:df:4d:11:05:8d:a7:27:
a2:e9:5e:3e:20:dd:72:e9:1d:f9:7c:57:8e:d1:15:
1c:5b:d7:de:5f:1d:c2:08:36:df:76:af:c1:8c:9a:
9a:35:17:69:7c:ec:fc:91:79:10:e9:b5:db:ae:ed:
b8:8a:55:df:16:d8:91:de:8e:cc:21:b4:b2:e3:2e:
eb:1a:19:46:f0:90:18:85:f9:8e:73:c1:f1:53:3c:
6c:83:ab:1c:a1:b0:5b:9f:55:e4:dd:77:92:0a:8d:
9d:ec:9e:eb:da:ff:8c:ac:19:0e:08:74:fc:d3:18:
74:0c:e5:ed:a3:d6:fd:47:b5:7b:11:24:c6:d2:f7:
81:6f:65:d3:e4:6b:fe:de:49:62:c9:ec:fc:8f:a8:
38:ab:8f:28:b4:e4:f4:d4:0c:96:5c:b9:4b:c3:a0:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:36:79:7E:7F:FB:3B:DB:6B:E3:A4:BC:14:B7:5C:F2:42:93:2D:33
X509v3 Authority Key Identifier:
keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:19:57:96:98:99:a3:12:c5:50:55:b1:8f:b8:62:8a:e5:2b:
8d:00:f4:50:70:ba:94:fb:d2:22:82:42:44:81:53:fc:cf:25:
92:7c:2f:0b:00:ab:e8:3b:67:bd:00:c0:a5:07:dc:a7:f5:16:
16:53:4c:9b:6e:30:6e:41:36:8b:e9:d8:7f:68:29:3c:28:eb:
a1:e2:d5:44:7e:bf:c4:6d:27:d0:49:c7:6c:2d:57:92:86:7b:
14:2c:15:06:7c:3e:88:62:78:66:3b:97:b4:dd:e6:b8:3f:d3:
27:63:9d:b2:4b:9e:3d:84:e8:31:bf:e8:37:2c:c3:a4:d4:3c:
1e:52:ae:f2:4f:41:ec:9c:99:e2:ee:70:5f:3c:81:df:e0:d5:
4e:aa:c8:d9:c1:45:65:24:ff:70:fa:c2:e8:6f:91:93:c6:6c:
9a:07:27:f6:01:8c:02:7c:4c:8c:e2:de:c4:9e:b1:f4:0e:e8:
b4:7b:47:e7:5b:bd:f0:a6:18:d0:9d:08:9e:7d:9f:40:a3:69:
91:d6:7d:6a:27:78:98:ae:33:a0:18:d1:c8:6c:dd:83:bf:a6:
b0:e2:6a:ef:72:f9:23:4e:1b:e5:d2:94:0b:b8:81:3c:61:9d:
64:b2:ab:62:f7:7a:d3:8b:fb:d5:e3:5d:10:c9:9d:22:9b:b6:
24:db:13:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDOIryTiwJc2E3jMLv4O0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOWUwYWZlYmY1NGE0ZDIxOGFmYmFlZDU0MzA3NzFiYmY3
Nzc3YTkwHhcNMjUwOTA3MTIwMDQ4WhcNMjUwOTA4MTIwMDQ4WjAzMTEwLwYDVQQD
Eyg5OTM2Nzk3ZTdmZmIzYmRiNmJlM2E0YmMxNGI3NWNmMjQyOTMyZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIRBVkJpeViwa+rNXpTnLwfxcxS0
I3XLwpdHEVTcdKUi5MssG6h6tVufbIbsYEdpFZpz9x/AgUL2nOa2TKCj+pa2pX5u
D+xvDBPyF1y+eivPau8orFUN1nSw+bzLSb/nXd9NEQWNpyei6V4+IN1y6R35fFeO
0RUcW9feXx3CCDbfdq/BjJqaNRdpfOz8kXkQ6bXbru24ilXfFtiR3o7MIbSy4y7r
GhlG8JAYhfmOc8HxUzxsg6scobBbn1Xk3XeSCo2d7J7r2v+MrBkOCHT80xh0DOXt
o9b9R7V7ESTG0veBb2XT5Gv+3kliyez8j6g4q48otOT01AyWXLlLw6AEDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJk2eX5/+zvba+OkvBS3XPJCky0zMB8GA1UdIwQY
MBaAFA6eCv6/VKTSGK+67VQwdxu/d3epMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYt
M2VmNTk0ZTZjNjk2LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYtM2VmNTk0ZTZjNjk2
LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRlXlpiZ
oxLFUFWxj7hiiuUrjQD0UHC6lPvSIoJCRIFT/M8lknwvCwCr6DtnvQDApQfcp/UW
FlNMm24wbkE2i+nYf2gpPCjroeLVRH6/xG0n0EnHbC1XkoZ7FCwVBnw+iGJ4ZjuX
tN3muD/TJ2OdskuePYToMb/oNyzDpNQ8HlKu8k9B7JyZ4u5wXzyB3+DVTqrI2cFF
ZST/cPrC6G+Rk8Zsmgcn9gGMAnxMjOLexJ6x9A7otHtH51u98KYY0J0Inn2fQKNp
kdZ9aid4mK4zoBjRyGzdg7+msOJq73L5I04b5dKUC7iBPGGdZLKrYvd604v71eNd
EMmdIpu2JNsTPQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:18 2025 by rpki-client