Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: f37ZmFP5yGE5cFZHOc550o99ik992xoy2tZrMTg2oRo=
Subject key identifier: F3:57:86:6D:C8:04:48:18:E4:F4:8A:90:82:31:A0:97:17:7D:5F:06
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 0199FD6B08E94A5288B243FC7E8B4EA4865E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 0782
Signing time: Sun 19 Oct 2025 17:01:14 +0000
Manifest this update: Sun 19 Oct 2025 17:01:14 +0000
Manifest next update: Mon 20 Oct 2025 17:01:14 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: 9CM3UAcQBWDECpFMv9VqAsYjeWdrJxFkIbfEcA2cgDE=)
2: oH2IWQRozN1-75odpKh66sr4uwc.roa (hash: wPfO52+kbkGCq6+uVpP9AwZp/WGjoxj4/guIax27VIU=)
3: y77dBZKkwdBWSaHuC-2LOWhhnDE.roa (hash: Mve9fSJEqTyFEiPK9mxYy3Dvl/+0Q/tVpXlrv6a1VIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:08:e9:4a:52:88:b2:43:fc:7e:8b:4e:a4:86:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Oct 19 17:01:14 2025 GMT
Not After : Oct 20 17:01:14 2025 GMT
Subject: CN=f357866dc8044818e4f48a908231a097177d5f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:6a:14:3b:8b:bb:cf:4d:0d:d0:a1:c8:1c:
82:cb:d5:1c:fb:07:2b:5f:8f:42:e5:4a:b3:7a:3c:
2c:01:75:95:ad:8c:25:1c:d7:d8:cf:11:62:4a:3f:
fb:fe:a0:23:0f:40:70:5d:13:77:10:bf:3d:58:c6:
72:d0:94:c4:7e:2f:17:8a:50:2e:97:09:65:44:f4:
bd:f6:8d:90:f0:7f:81:ec:dc:ac:e8:99:b1:be:d2:
26:1c:52:4d:c5:7d:91:7d:6e:26:3d:cf:a6:7b:11:
cd:81:db:02:a4:7d:e7:9e:3e:ca:03:ad:f7:4f:91:
84:9f:17:0d:fa:1d:8b:bc:8c:d0:b9:1d:94:ec:66:
c8:18:bc:a7:cd:65:c6:b0:71:a3:2c:75:22:95:37:
25:bc:7d:7c:8f:3a:03:f7:25:e0:37:85:5a:8e:c4:
f3:6c:c9:de:2e:65:5e:d1:40:70:4c:f0:6f:44:4e:
f1:66:41:ce:1a:e8:99:c3:89:74:64:dd:ec:26:58:
b5:bf:a8:be:45:07:02:2b:1d:97:24:f9:e8:35:81:
95:57:a3:0d:e2:de:b7:a1:1b:85:7b:af:f9:58:24:
cc:b0:d4:24:90:1a:70:7e:db:4f:f1:4a:97:e6:a3:
63:91:aa:8b:c5:93:49:c0:da:79:69:56:e3:b0:34:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:57:86:6D:C8:04:48:18:E4:F4:8A:90:82:31:A0:97:17:7D:5F:06
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6a:48:ab:3e:1d:b0:dc:61:2a:18:40:76:99:70:bd:af:33:
71:de:b8:5d:0f:15:bc:d6:8a:a1:93:0a:da:6d:4d:bd:91:f5:
e7:26:29:26:d2:44:8b:9c:3d:50:a4:3c:72:31:7f:21:72:be:
36:82:9a:47:3d:8f:3b:49:eb:93:b2:ea:18:2f:55:9a:d9:49:
7f:a7:39:33:20:61:ba:91:5b:18:74:cf:b3:9b:91:27:e4:a2:
4b:52:14:54:0d:73:0d:5a:20:9f:23:95:14:af:8a:95:b3:ea:
ba:7f:6e:99:13:e6:d5:17:05:44:7a:db:d0:f4:8e:72:c0:90:
0e:5b:8b:97:40:4a:fc:38:02:42:32:e6:f7:cd:c6:97:66:a4:
52:29:7b:af:e5:4f:9c:a7:d6:e6:e7:52:37:88:b4:39:06:1c:
84:91:b3:92:ef:ca:e6:73:51:8b:a1:2b:a9:69:37:b0:35:f1:
30:b3:a4:65:b6:ea:b8:d0:7a:46:90:a2:e1:e9:29:a8:a3:6f:
dc:dd:ef:ba:c4:01:07:ea:9d:36:cc:a1:3f:6e:e0:f5:07:96:
56:60:b3:4e:e7:49:77:07:65:1e:00:40:24:f4:6b:c7:37:bb:
57:b5:b5:6d:01:b5:7f:90:7a:af:d5:34:9d:48:b7:4f:e7:19:
87:72:ac:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9awjpSlKIskP8fotOpIZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTgxNTlhMTZkNzJiM2Q2Y2RmYmFhMDk2ZDY5MTM5ZmRl
OWQyOTAwHhcNMjUxMDE5MTcwMTE0WhcNMjUxMDIwMTcwMTE0WjAzMTEwLwYDVQQD
EyhmMzU3ODY2ZGM4MDQ0ODE4ZTRmNDhhOTA4MjMxYTA5NzE3N2Q1ZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubJqFDuLu89NDdChyByCy9Uc+wcr
X49C5UqzejwsAXWVrYwlHNfYzxFiSj/7/qAjD0BwXRN3EL89WMZy0JTEfi8XilAu
lwllRPS99o2Q8H+B7Nys6JmxvtImHFJNxX2RfW4mPc+mexHNgdsCpH3nnj7KA633
T5GEnxcN+h2LvIzQuR2U7GbIGLynzWXGsHGjLHUilTclvH18jzoD9yXgN4VajsTz
bMneLmVe0UBwTPBvRE7xZkHOGuiZw4l0ZN3sJli1v6i+RQcCKx2XJPnoNYGVV6MN
4t63oRuFe6/5WCTMsNQkkBpwfttP8UqX5qNjkaqLxZNJwNp5aVbjsDSZ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNXhm3IBEgY5PSKkIIxoJcXfV8GMB8GA1UdIwQY
MBaAFHToFZoW1ys9bN+6oJbWkTn96dKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgt
ODRjYmM4NWEyMzQzLzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgtODRjYmM4NWEyMzQz
LzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAampIqz4d
sNxhKhhAdplwva8zcd64XQ8VvNaKoZMK2m1NvZH15yYpJtJEi5w9UKQ8cjF/IXK+
NoKaRz2PO0nrk7LqGC9VmtlJf6c5MyBhupFbGHTPs5uRJ+SiS1IUVA1zDVognyOV
FK+KlbPqun9umRPm1RcFRHrb0PSOcsCQDluLl0BK/DgCQjLm983Gl2akUil7r+VP
nKfW5udSN4i0OQYchJGzku/K5nNRi6ErqWk3sDXxMLOkZbbquNB6RpCi4ekpqKNv
3N3vusQBB+qdNsyhP27g9QeWVmCzTudJdwdlHgBAJPRrxze7V7W1bQG1f5B6r9U0
nUi3T+cZh3KszA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:08:45 2025 by rpki-client