Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: HkwOG/ZJW3mVFV0iKVmaxGNkNssik5+qDhfjlNdHNDY=
Subject key identifier: EE:58:5B:85:64:91:6E:CE:6C:CF:27:F8:9E:E2:76:10:96:81:15:0B
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019938022D398FC32533483903B3764D6FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 1682
Signing time: Thu 11 Sep 2025 09:01:30 +0000
Manifest this update: Thu 11 Sep 2025 09:01:30 +0000
Manifest next update: Fri 12 Sep 2025 09:01:30 +0000
Files and hashes: 1: 1YRiu8peow1lTJm9FFHNR8FDAbc.roa (hash: M9tDjK8KKMnpI4O/RkjitSO923bPcK4J9p0X6jE60uA=)
2: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: NGu3oWhCz/UnIbRGnA5KQ9MmIdo6pux7CrRRdCGKmCM=)
3: PGW1u6hsibHWgf5RkDB15fW7nFU.roa (hash: 0InCSbIA5SExLZ91M4uEAsM9+kvbm4v2lPuTA9ZO2w0=)
4: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (hash: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=)
5: UeY-6eT8AWic-hKV67W_oibJpb0.roa (hash: P9rAEKkeAqwEaQF6epHGIcD5QsTjObpMNhsoMNWv7oU=)
6: WrHytc5z_RMrlF1ugU748saPCOY.roa (hash: aZHYeaaNVTa6TtaiWMmR/j6toZEkqeQ4kR1tqb6QqNc=)
7: Z0NstpNFGmZvTmitOe-bpzN3pog.roa (hash: vOxHYK5BHjTLsLb9PBk4RNol3oeaceKJ5r4uuQeEoSc=)
8: m6l4SopMeawwf-xaFHTLkByhnNs.roa (hash: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:2d:39:8f:c3:25:33:48:39:03:b3:76:4d:6f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Sep 11 09:01:30 2025 GMT
Not After : Sep 12 09:01:30 2025 GMT
Subject: CN=ee585b8564916ece6ccf27f89ee276109681150b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:e8:28:67:2b:e4:03:f5:9a:c0:f5:cc:02:
14:ce:a1:6f:d5:fb:54:91:46:ee:df:7e:ca:75:84:
c7:5e:ce:17:28:85:4b:29:19:c5:33:14:78:5c:58:
89:ef:33:d6:04:1b:93:a8:cb:fe:78:e6:74:fc:e2:
43:6a:2c:61:5b:d6:6c:b6:88:3c:9b:92:d7:73:81:
24:65:b6:3d:b2:73:dd:cd:40:a0:c5:a9:9a:c6:16:
da:95:31:11:0c:ec:d1:9c:ac:d7:52:67:b6:d0:d5:
7d:c4:64:ce:75:2d:e0:b7:fa:81:93:e4:06:f9:89:
33:07:39:8f:f5:85:b6:b1:5a:19:30:ab:1e:2e:68:
21:ec:19:cd:a8:50:93:2d:7d:a3:9e:6b:c5:6a:6d:
a6:55:0a:c9:83:7f:db:e0:c3:f3:b0:11:cc:e1:d9:
e1:54:b1:5f:24:3d:42:41:d4:31:f8:ac:11:68:63:
b5:b8:9a:7e:10:de:08:79:ad:43:c1:f3:e9:4a:e0:
6b:1e:09:e4:6c:ad:c0:d8:6c:3e:51:2b:d1:7f:95:
fb:9c:58:60:28:35:ea:c4:72:17:26:43:a0:17:f0:
6b:68:f5:b1:f6:e4:f3:96:a5:68:62:73:94:e7:27:
ad:2d:4a:b2:de:1d:5a:1e:32:9c:86:06:b8:e8:d6:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:58:5B:85:64:91:6E:CE:6C:CF:27:F8:9E:E2:76:10:96:81:15:0B
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c8:c0:a6:f8:1c:cc:c0:91:bb:62:7b:f1:2a:4b:bc:e1:47:
0f:6f:4e:49:3f:f9:b9:17:e4:e5:d8:6e:1d:de:8f:fb:c1:0a:
2e:34:29:cc:b4:5c:e8:ea:db:83:2d:86:ce:02:7b:b9:29:b2:
16:5f:24:20:0b:37:b0:88:13:b2:a8:92:65:21:6f:a6:5a:12:
e6:4a:fe:e6:32:4f:f9:f1:c7:a7:b7:9a:a8:5b:14:05:cb:6e:
10:ed:8b:f0:15:74:57:64:42:e9:ae:04:5c:49:ee:b4:3c:e2:
f2:20:d6:97:07:9c:2d:cc:58:01:a2:f5:e5:5c:68:2e:17:84:
c4:a2:ae:20:72:8b:d5:8f:6b:c7:6e:65:25:20:a9:50:58:78:
c9:42:32:38:30:7f:45:34:22:0b:32:75:be:b9:ff:86:93:6f:
df:14:1a:43:7d:87:49:0c:96:e5:e7:7d:0e:f1:c8:e8:e8:0a:
8d:e2:0b:9a:27:21:50:85:3c:a6:75:b4:65:40:7a:6c:25:4e:
57:fd:79:79:4a:b5:03:b3:17:e8:b9:81:7c:45:ad:ba:ad:00:
e1:81:11:8c:87:49:ba:f7:4e:a2:de:be:c3:8f:43:bb:10:94:
10:0e:ec:e5:01:a1:f4:6d:bc:5e:1a:7c:86:93:87:94:0d:cc:
1b:d9:8c:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk4Ai05j8MlM0g5A7N2TW/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0
MDkzYWYwHhcNMjUwOTExMDkwMTMwWhcNMjUwOTEyMDkwMTMwWjAzMTEwLwYDVQQD
EyhlZTU4NWI4NTY0OTE2ZWNlNmNjZjI3Zjg5ZWUyNzYxMDk2ODExNTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9zoKGcr5AP1msD1zAIUzqFv1ftU
kUbu337KdYTHXs4XKIVLKRnFMxR4XFiJ7zPWBBuTqMv+eOZ0/OJDaixhW9Zstog8
m5LXc4EkZbY9snPdzUCgxamaxhbalTERDOzRnKzXUme20NV9xGTOdS3gt/qBk+QG
+YkzBzmP9YW2sVoZMKseLmgh7BnNqFCTLX2jnmvFam2mVQrJg3/b4MPzsBHM4dnh
VLFfJD1CQdQx+KwRaGO1uJp+EN4Iea1DwfPpSuBrHgnkbK3A2Gw+USvRf5X7nFhg
KDXqxHIXJkOgF/BraPWx9uTzlqVoYnOU5yetLUqy3h1aHjKchga46NZrLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5YW4VkkW7ObM8n+J7idhCWgRULMB8GA1UdIwQY
MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt
OWY3ZTBmODYyZjFlLzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl
LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8jApvgc
zMCRu2J78SpLvOFHD29OST/5uRfk5dhuHd6P+8EKLjQpzLRc6Orbgy2GzgJ7uSmy
Fl8kIAs3sIgTsqiSZSFvploS5kr+5jJP+fHHp7eaqFsUBctuEO2L8BV0V2RC6a4E
XEnutDzi8iDWlwecLcxYAaL15VxoLheExKKuIHKL1Y9rx25lJSCpUFh4yUIyODB/
RTQiCzJ1vrn/hpNv3xQaQ32HSQyW5ed9DvHI6OgKjeILmichUIU8pnW0ZUB6bCVO
V/15eUq1A7MX6LmBfEWtuq0A4YERjIdJuvdOot6+w49DuxCUEA7s5QGh9G28Xhp8
hpOHlA3MG9mMXw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 12:41:40 2025 by rpki-client