Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: iISblOqOkJY5qqFoB8KcSibo67rpkWQ7/9hoAt9GBlU=
Subject key identifier: 88:CA:3D:E5:2F:4F:CD:44:7F:BC:94:C7:17:86:1B:54:E7:A6:1A:C0
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 019935DC086D6EBBAF495D8AEB280B61FD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 0E5A
Signing time: Wed 10 Sep 2025 23:00:36 +0000
Manifest this update: Wed 10 Sep 2025 23:00:36 +0000
Manifest next update: Thu 11 Sep 2025 23:00:36 +0000
Files and hashes: 1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=)
2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: frcpfxsMbGB5+NERhYfDS12gYEofPPotHg7+HnH2lhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:08:6d:6e:bb:af:49:5d:8a:eb:28:0b:61:fd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Sep 10 23:00:36 2025 GMT
Not After : Sep 11 23:00:36 2025 GMT
Subject: CN=88ca3de52f4fcd447fbc94c717861b54e7a61ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:3e:04:13:77:24:30:bf:83:28:aa:3f:fa:
2e:cb:a9:4b:42:7f:cb:3c:2c:36:e4:e9:80:28:ce:
65:82:80:bf:3e:de:a3:2e:ac:fe:86:56:8d:a7:ea:
5e:ab:c8:79:3d:96:db:c2:6e:c0:10:69:31:e1:b7:
1e:2e:a7:28:54:a5:c8:68:f9:40:39:ef:95:cb:2f:
4c:05:29:53:5d:16:5d:ba:57:fc:0b:6b:fa:96:c8:
81:ed:5d:fc:ee:7f:bc:62:27:b8:e1:d5:f3:a9:07:
43:e7:da:f5:0d:81:5e:6b:34:c3:49:16:34:49:3f:
c5:2f:c3:e2:09:c3:b4:46:f6:20:7d:f9:aa:f6:0f:
c1:17:67:73:f2:5a:a7:40:a3:31:ea:7f:e6:17:40:
07:8d:f0:49:03:5d:f8:43:fd:14:12:c4:38:88:ac:
7d:35:96:24:fd:e2:1e:6b:8c:14:1d:68:4b:75:c5:
00:88:9b:7b:4b:c7:11:43:67:9c:2c:c1:fb:f9:42:
a1:c8:fb:d6:b7:77:eb:ce:79:af:8c:13:88:ba:40:
57:05:b8:0c:ea:db:a6:ae:b5:1d:25:d7:6b:ba:2d:
a9:db:dd:98:37:08:8d:ba:d1:65:85:3c:80:07:89:
1a:be:1c:76:ed:4a:da:65:20:27:ad:72:2f:6f:f9:
d4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CA:3D:E5:2F:4F:CD:44:7F:BC:94:C7:17:86:1B:54:E7:A6:1A:C0
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:37:50:b6:55:24:dc:5f:64:7c:51:88:33:c2:59:d5:ed:45:
2f:cc:a2:2b:9d:1b:f4:76:b0:3f:1e:08:75:cf:65:de:af:5b:
80:4d:da:08:24:c1:4e:f4:f2:f0:3c:41:22:64:09:42:90:ae:
ad:40:37:7a:a1:34:12:25:ec:e2:30:96:65:65:5b:ca:85:37:
78:ef:7f:ad:45:69:31:be:74:30:4e:9b:35:c5:68:3d:84:bf:
6c:ef:39:a0:48:7f:8c:d5:25:db:40:cb:10:33:fa:ac:11:12:
ed:ae:17:70:b8:0a:bb:52:e8:31:ea:1f:c6:81:0e:75:d4:f9:
f0:a1:1a:f5:88:8a:be:64:8a:ba:1c:39:6d:18:2b:11:29:42:
04:8e:69:99:d3:55:65:a7:b8:9a:8c:fe:30:b0:5a:8e:d6:39:
57:22:90:1a:0d:38:a8:2c:bd:eb:5b:74:98:d1:61:f3:c2:a3:
7a:bf:f1:12:45:96:f2:eb:58:9a:e2:9e:30:c6:f0:ff:52:6b:
fe:83:b4:3a:8e:9e:cc:1f:fc:6b:2b:5e:ca:87:b2:3a:d9:4b:
0a:e0:49:16:8b:4d:45:3e:b5:e2:a5:17:e4:68:c0:b0:ba:70:
2e:15:c0:24:e9:2f:83:53:11:3d:b0:55:21:17:48:5b:19:1b:
4b:89:1e:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk13AhtbruvSV2K6ygLYf2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MWJjZTI5YTM2Y2JkZTg5OGFjMDA3MDdkYjk1MTQzZjg2
YTc5MjIwHhcNMjUwOTEwMjMwMDM2WhcNMjUwOTExMjMwMDM2WjAzMTEwLwYDVQQD
Eyg4OGNhM2RlNTJmNGZjZDQ0N2ZiYzk0YzcxNzg2MWI1NGU3YTYxYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlU+BBN3JDC/gyiqP/ouy6lLQn/L
PCw25OmAKM5lgoC/Pt6jLqz+hlaNp+peq8h5PZbbwm7AEGkx4bceLqcoVKXIaPlA
Oe+Vyy9MBSlTXRZdulf8C2v6lsiB7V387n+8Yie44dXzqQdD59r1DYFeazTDSRY0
ST/FL8PiCcO0RvYgffmq9g/BF2dz8lqnQKMx6n/mF0AHjfBJA134Q/0UEsQ4iKx9
NZYk/eIea4wUHWhLdcUAiJt7S8cRQ2ecLMH7+UKhyPvWt3frznmvjBOIukBXBbgM
6tumrrUdJddrui2p292YNwiNutFlhTyAB4kavhx27UraZSAnrXIvb/nUlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjKPeUvT81Ef7yUxxeGG1TnphrAMB8GA1UdIwQY
MBaAFHcbzimjbL3omKwAcH25UUP4ankiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYt
MmFmOTE3ODM4MmZiLzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYtMmFmOTE3ODM4MmZi
LzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTdQtlUk
3F9kfFGIM8JZ1e1FL8yiK50b9HawPx4Idc9l3q9bgE3aCCTBTvTy8DxBImQJQpCu
rUA3eqE0EiXs4jCWZWVbyoU3eO9/rUVpMb50ME6bNcVoPYS/bO85oEh/jNUl20DL
EDP6rBES7a4XcLgKu1LoMeofxoEOddT58KEa9YiKvmSKuhw5bRgrESlCBI5pmdNV
Zae4moz+MLBajtY5VyKQGg04qCy961t0mNFh88Kjer/xEkWW8utYmuKeMMbw/1Jr
/oO0Oo6ezB/8ayteyoeyOtlLCuBJFotNRT614qUX5GjAsLpwLhXAJOkvg1MRPbBV
IRdIWxkbS4keZw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 03:53:05 2025 by rpki-client