Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
File: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft (raw, json)
Hash identifier: q5NQXh9S5rEGxDcM9HDn0NVEEovkn41aEg09wbY2RdQ=
Subject key identifier: F5:A1:3F:D3:00:D5:F6:49:3F:D5:BB:DA:1D:F8:40:28:09:F3:52:A8
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Certificate issuer: /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial: 01991E7891EBD04478B3DBD556AE63B7222A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
Manifest number: 1606
Signing time: Sat 06 Sep 2025 10:00:42 +0000
Manifest this update: Sat 06 Sep 2025 10:00:42 +0000
Manifest next update: Sun 07 Sep 2025 10:00:42 +0000
Files and hashes: 1: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl (hash: /cNEH7b/TPFD64m9lg99rxgRxbsP/Kb0pUnVGDAg9jw=)
2: egtmxNDK9FDAgrarU-Xyuo-QkfI.roa (hash: e278lOu7Zhdc/1PtGLzkkZXNU5WcrL6PKLI2BzSWdWQ=)
3: qYoYfUlCCn9zP-yDwbrlHyj3qyU.roa (hash: AiZ+gWtLdz0jof3tMOVdLJ+BBsLKxSxUlK2q0zbs/tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:78:91:eb:d0:44:78:b3:db:d5:56:ae:63:b7:22:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Validity
Not Before: Sep 6 10:00:42 2025 GMT
Not After : Sep 7 10:00:42 2025 GMT
Subject: CN=f5a13fd300d5f6493fd5bbda1df8402809f352a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:f6:e0:67:9d:9d:52:66:69:90:01:90:68:
34:cb:bd:54:8d:7a:de:f8:e5:75:ed:7c:27:2f:d7:
8f:a9:e5:fb:6d:53:21:59:f3:c6:d1:fe:f2:48:53:
73:58:b3:f4:95:a8:b9:f2:fe:ad:71:f0:b2:65:65:
17:0f:4d:d1:66:19:b6:ec:3a:84:8d:8c:bb:c0:84:
31:47:8a:67:4f:6c:fe:20:96:3f:5c:73:58:ed:67:
78:2c:02:5f:7b:98:5a:f4:5d:39:19:aa:a3:da:37:
37:0c:0d:38:63:ff:0d:19:85:14:6f:e2:6f:52:dc:
36:27:2f:bc:09:64:8d:d5:06:31:70:39:9a:06:e8:
c8:ee:f4:e3:2e:72:30:4c:84:e9:87:ae:7f:e7:af:
ff:ee:3a:fe:1a:47:96:68:cd:ab:46:7a:cf:9c:f7:
f6:33:36:66:ec:ea:18:93:02:16:c7:74:ea:ca:b1:
84:1a:57:15:1a:7f:20:92:2b:ab:e8:7a:dc:b5:29:
cf:dc:5f:b0:de:9f:ce:25:09:2b:79:9a:3c:a7:44:
af:28:43:39:1f:e4:e6:97:3b:08:95:3a:35:47:66:
10:4d:eb:2c:2c:a5:0a:1d:3f:d1:51:bc:2c:71:23:
11:17:5b:90:d2:28:0e:5b:34:27:f2:cb:4b:08:5f:
01:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A1:3F:D3:00:D5:F6:49:3F:D5:BB:DA:1D:F8:40:28:09:F3:52:A8
X509v3 Authority Key Identifier:
keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d5:e9:68:42:46:ca:72:42:ff:c5:39:bb:40:c4:88:fb:1a:
ee:c0:af:8b:b1:cf:53:8b:2b:97:be:b5:6c:40:07:2d:2d:f4:
e6:4d:79:31:6b:61:d6:f3:a6:3a:13:3e:f2:e8:af:41:52:f5:
0c:e4:c9:2c:64:60:7f:5f:e6:24:5b:cc:70:07:53:17:55:34:
27:79:1f:f3:b7:0b:16:16:41:9b:b5:71:f4:df:1f:36:b4:e0:
d8:be:eb:63:e4:5c:19:f5:bb:c0:00:c9:72:7b:8b:b3:43:bb:
03:2c:96:64:88:47:47:03:68:44:a7:93:52:a0:1c:b1:b3:70:
3c:9b:fb:88:25:48:d9:cc:d5:6a:dd:2e:41:d4:7a:05:2b:30:
43:5f:12:ef:18:54:21:d7:b7:e4:30:29:ed:9c:c1:3a:7d:5f:
d1:34:d3:83:05:91:eb:b7:a9:a5:d8:b7:fa:24:bd:15:47:06:
5c:1a:44:34:22:c3:a2:db:10:73:35:b0:0f:39:13:0f:37:90:
d3:39:61:35:01:cc:b1:5f:b5:f6:7e:38:93:b4:df:19:99:1b:
90:ab:6e:06:11:15:09:5d:d8:3d:46:81:50:f4:97:dc:ad:ad:
9d:ad:a0:80:7c:fd:cc:d0:e3:4c:63:f1:96:fc:2d:ef:97:20:
09:e3:86:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkeeJHr0ER4s9vVVq5jtyIqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZGUxN2I4Y2FmMDI0NjFiZjU0YzA5NjRlZDM4YTI1OTAw
NjJmOTQwHhcNMjUwOTA2MTAwMDQyWhcNMjUwOTA3MTAwMDQyWjAzMTEwLwYDVQQD
EyhmNWExM2ZkMzAwZDVmNjQ5M2ZkNWJiZGExZGY4NDAyODA5ZjM1MmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjL24GednVJmaZABkGg0y71UjXre
+OV17XwnL9ePqeX7bVMhWfPG0f7ySFNzWLP0lai58v6tcfCyZWUXD03RZhm27DqE
jYy7wIQxR4pnT2z+IJY/XHNY7Wd4LAJfe5ha9F05Gaqj2jc3DA04Y/8NGYUUb+Jv
Utw2Jy+8CWSN1QYxcDmaBujI7vTjLnIwTITph65/56//7jr+GkeWaM2rRnrPnPf2
MzZm7OoYkwIWx3TqyrGEGlcVGn8gkiur6HrctSnP3F+w3p/OJQkreZo8p0SvKEM5
H+TmlzsIlTo1R2YQTessLKUKHT/RUbwscSMRF1uQ0igOWzQn8stLCF8BgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWhP9MA1fZJP9W72h34QCgJ81KoMB8GA1UdIwQY
MBaAFA7eF7jK8CRhv1TAlk7TiiWQBi+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHQ0WHVNcndKR0dfVk1DV1R0T0tKWkFHTDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNGJiNTEtYjk2My00YjQ2LWFhMjct
MjZiZjhjY2Q3Yjc0LzEvRHQ0WHVNcndKR0dfVk1DV1R0T0tKWkFHTDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lNGJiNTEtYjk2My00YjQ2LWFhMjctMjZiZjhjY2Q3Yjc0
LzEvRHQ0WHVNcndKR0dfVk1DV1R0T0tKWkFHTDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9XpaEJG
ynJC/8U5u0DEiPsa7sCvi7HPU4srl761bEAHLS305k15MWth1vOmOhM+8uivQVL1
DOTJLGRgf1/mJFvMcAdTF1U0J3kf87cLFhZBm7Vx9N8fNrTg2L7rY+RcGfW7wADJ
cnuLs0O7AyyWZIhHRwNoRKeTUqAcsbNwPJv7iCVI2czVat0uQdR6BSswQ18S7xhU
Ide35DAp7ZzBOn1f0TTTgwWR67eppdi3+iS9FUcGXBpENCLDotsQczWwDzkTDzeQ
0zlhNQHMsV+19n44k7TfGZkbkKtuBhEVCV3YPUaBUPSX3K2tna2ggHz9zNDjTGPx
lvwt75cgCeOGlw==
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:08:44 2025 by rpki-client