Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
File: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft (raw, json)
Hash identifier: rZSYnAqoAaYHrUUiOAoeAUy6qwWw7VDOOrPlIThbnto=
Subject key identifier: F0:5E:D2:1D:E0:B3:50:2C:1D:FE:0A:39:5C:80:99:CE:F3:0D:5F:D9
Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
Certificate issuer: /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Certificate serial: 019921B136EC625FB4EAB9FA2D122C1A82BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
Manifest number: 03B1
Signing time: Sun 07 Sep 2025 01:01:25 +0000
Manifest this update: Sun 07 Sep 2025 01:01:25 +0000
Manifest next update: Mon 08 Sep 2025 01:01:25 +0000
Files and hashes: 1: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl (hash: QjKFEUSXaAK7eG6uq6U4G+HXVwYsaWeaHiLgA9c9F00=)
2: WBCctmrLBY9TZchWHVefCJRpgwo.roa (hash: ha4SM2FYKNPb6uYgJ7O/6N/bp7uHsy7szwwtLn89ZkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:36:ec:62:5f:b4:ea:b9:fa:2d:12:2c:1a:82:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Validity
Not Before: Sep 7 01:01:25 2025 GMT
Not After : Sep 8 01:01:25 2025 GMT
Subject: CN=f05ed21de0b3502c1dfe0a395c8099cef30d5fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:04:11:8f:45:bc:cc:ad:04:21:8f:38:03:
eb:2b:d6:5f:72:0c:72:f4:b5:b0:05:f2:15:30:a7:
29:24:4e:71:93:a1:5a:6c:a4:be:8f:25:01:dc:50:
cd:4f:51:65:4a:62:2a:be:ae:9d:ef:16:8c:b9:5e:
32:34:8f:4c:df:0f:aa:98:50:94:2b:53:20:1f:9c:
e5:3b:4e:99:78:74:90:57:7d:9d:83:a6:75:ac:a6:
16:f6:cd:ab:3e:ee:bb:6d:88:7a:f3:8f:55:68:96:
49:30:58:6d:d4:ac:ab:05:5c:a5:8d:b7:ef:82:ea:
6c:77:ab:02:65:79:28:63:8f:18:4e:06:c6:4d:0a:
b8:74:25:59:25:aa:c5:7d:4d:01:96:e9:72:a3:27:
09:c0:6b:66:2d:bf:2d:17:6c:92:51:2e:59:16:d0:
0b:0d:ac:21:d9:4b:5b:af:91:0a:d1:81:f5:c2:71:
6f:72:e4:9c:8f:ae:9c:6c:d2:cc:df:26:f6:c4:4c:
50:67:88:a8:62:e3:c0:c0:b7:00:75:7c:e2:15:87:
f9:b3:42:2d:f4:bd:d5:41:1b:68:ea:df:7c:1e:f9:
d5:f6:82:cb:84:3f:c1:4e:58:8c:62:88:82:6d:56:
cf:54:e8:ae:06:77:e4:7e:7a:b3:d5:28:a0:94:7e:
f0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5E:D2:1D:E0:B3:50:2C:1D:FE:0A:39:5C:80:99:CE:F3:0D:5F:D9
X509v3 Authority Key Identifier:
keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:78:98:18:5e:b2:38:cd:18:23:a4:10:f1:83:7d:13:7b:6b:
aa:14:f7:34:73:de:b3:c3:88:21:bb:9b:b2:a7:e3:ae:a4:44:
03:4c:0b:80:95:d6:49:7a:90:30:c7:af:9c:71:c3:2d:a1:67:
6b:d0:1f:75:54:0c:5f:1e:5b:5d:88:eb:d9:49:09:15:3a:a2:
86:35:dd:df:ae:d7:9b:79:df:3d:e3:5b:c1:ee:8e:73:6a:9a:
06:c5:3a:3e:c8:b2:33:4b:01:65:f7:b1:f9:c8:54:53:cc:c6:
4f:97:8c:0a:c6:74:ee:53:ee:49:0b:47:0f:37:53:8d:3e:4a:
09:06:13:df:cf:67:2f:bc:9b:38:7d:1b:43:c9:f0:70:9c:ad:
ac:f8:e3:e8:14:1e:8b:f4:20:ad:91:68:b4:8d:58:d6:93:4a:
a1:38:c2:1f:0b:ef:af:96:36:1a:2b:56:c7:5e:3a:2b:1a:5c:
fc:a0:f8:c4:b0:08:12:ea:6e:ba:3f:84:10:fb:6b:b1:92:e5:
90:9c:f3:80:5c:aa:fa:72:b4:36:be:b1:07:d9:b9:21:7d:da:
49:f5:f5:21:4f:44:d1:ec:c4:05:ef:d0:8a:9f:86:46:6a:2f:
f0:88:96:c9:03:9e:e4:39:c4:25:43:f1:c1:81:96:f4:f1:c6:
9e:87:bb:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsTbsYl+06rn6LRIsGoK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMTE3YTNlMGQwZDA1ZDRiMGFiODIzMDgwZTdiZjZjZmQ0
YjM3NzYwHhcNMjUwOTA3MDEwMTI1WhcNMjUwOTA4MDEwMTI1WjAzMTEwLwYDVQQD
EyhmMDVlZDIxZGUwYjM1MDJjMWRmZTBhMzk1YzgwOTljZWYzMGQ1ZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5EEEY9FvMytBCGPOAPrK9Zfcgxy
9LWwBfIVMKcpJE5xk6FabKS+jyUB3FDNT1FlSmIqvq6d7xaMuV4yNI9M3w+qmFCU
K1MgH5zlO06ZeHSQV32dg6Z1rKYW9s2rPu67bYh6849VaJZJMFht1KyrBVyljbfv
gupsd6sCZXkoY48YTgbGTQq4dCVZJarFfU0BlulyoycJwGtmLb8tF2ySUS5ZFtAL
Dawh2Utbr5EK0YH1wnFvcuScj66cbNLM3yb2xExQZ4ioYuPAwLcAdXziFYf5s0It
9L3VQRto6t98HvnV9oLLhD/BTliMYoiCbVbPVOiuBnfkfnqz1SiglH7wfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBe0h3gs1AsHf4KOVyAmc7zDV/ZMB8GA1UdIwQY
MBaAFA4Rej4NDQXUsKuCMIDnv2z9Szd2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2It
ZDg0NzVmMTg0NjRlLzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2ItZDg0NzVmMTg0NjRl
LzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXiYGF6y
OM0YI6QQ8YN9E3trqhT3NHPes8OIIbubsqfjrqREA0wLgJXWSXqQMMevnHHDLaFn
a9AfdVQMXx5bXYjr2UkJFTqihjXd367Xm3nfPeNbwe6Oc2qaBsU6PsiyM0sBZfex
+chUU8zGT5eMCsZ07lPuSQtHDzdTjT5KCQYT389nL7ybOH0bQ8nwcJytrPjj6BQe
i/QgrZFotI1Y1pNKoTjCHwvvr5Y2GitWx146Kxpc/KD4xLAIEupuuj+EEPtrsZLl
kJzzgFyq+nK0Nr6xB9m5IX3aSfX1IU9E0ezEBe/Qip+GRmov8IiWyQOe5DnEJUPx
wYGW9PHGnoe7/Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:37 2025 by rpki-client