Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File: dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier: mIrh7/uNdg5xZHuBvWe7xAApn0kJqhF7Wi3qsbFb9Tg=
Subject key identifier: 48:48:A9:86:CD:30:CC:E3:27:D0:3E:39:D6:51:E6:65:9A:D4:C1:A4
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer: /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial: 01993ACDA55614E9F6F8F4A6AD2ACBE0CFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number: 1158
Signing time: Thu 11 Sep 2025 22:02:59 +0000
Manifest this update: Thu 11 Sep 2025 22:02:59 +0000
Manifest next update: Fri 12 Sep 2025 22:02:59 +0000
Files and hashes: 1: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: NTasJoGFDEVIvbfgdl3Q/4n+gEHjRoEV20RQjWbA568=)
2: kyN0WWkyKmvqixy5lWeDm8cyXsk.roa (hash: PvvB6yKuDqOU2looXNznQebEk8ZA6ldARR0PgTYG5Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 22:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:cd:a5:56:14:e9:f6:f8:f4:a6:ad:2a:cb:e0:cf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
Validity
Not Before: Sep 11 22:02:59 2025 GMT
Not After : Sep 12 22:02:59 2025 GMT
Subject: CN=4848a986cd30cce327d03e39d651e6659ad4c1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:c8:dc:4e:b6:22:d4:47:a8:07:d0:33:ec:
65:bb:fa:76:59:de:5c:b9:19:88:6d:6f:47:c2:a8:
e7:2f:38:d8:38:ae:c9:a0:59:bd:5e:d9:b2:4d:00:
06:5d:94:6f:21:ec:45:42:f8:b9:96:b8:41:ef:fe:
76:ae:50:73:88:65:8d:9b:0c:82:ce:9f:db:2b:5c:
7c:7d:45:45:9e:3c:af:89:66:36:9e:dc:cd:7a:4a:
69:b0:fd:42:ff:9a:8f:c5:84:2a:92:81:d4:24:8d:
0d:b3:45:99:e4:b5:de:70:97:ca:23:3f:e0:4f:e0:
70:b0:0d:ea:a2:e9:e9:c5:5e:60:b2:8d:ad:c0:67:
5d:6b:5e:5d:4a:f8:a2:a5:48:a8:fb:f2:88:a8:49:
02:fb:9e:59:59:ba:ff:de:33:9f:c7:9f:4b:2b:0b:
4f:8c:b5:83:af:20:f8:09:30:21:f6:74:48:dd:05:
b8:c5:4d:d5:46:c3:2e:58:2a:34:44:f9:e6:2e:bd:
a6:cd:a1:27:fe:8b:18:4b:18:28:38:81:ea:8b:4e:
0e:d4:36:3f:9a:eb:c0:1b:17:cd:bd:3f:2c:30:2a:
35:f5:cf:f7:96:b4:c3:f0:73:d1:01:ea:b0:58:84:
45:f6:1e:a8:37:22:ed:f5:e1:de:c9:fc:40:69:60:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:48:A9:86:CD:30:CC:E3:27:D0:3E:39:D6:51:E6:65:9A:D4:C1:A4
X509v3 Authority Key Identifier:
keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f3:33:ae:e7:2f:08:26:a3:db:d1:3f:5a:04:13:9a:58:67:
ee:3c:ad:f3:82:38:08:a8:31:ee:f4:a3:42:db:07:10:d9:90:
95:34:50:10:ba:e2:41:e7:9a:48:b2:97:6b:ff:a8:0e:bd:66:
be:81:c5:e5:00:75:6f:e6:b8:9b:a3:1e:f2:cb:84:25:37:fe:
d6:5e:97:a0:6e:30:fd:43:f9:b5:01:88:5c:99:af:30:60:05:
36:68:41:d6:3c:26:28:39:41:b2:8e:f4:03:e5:e5:5c:ea:b5:
d1:95:21:1a:6a:18:af:4b:00:d1:da:48:8c:5a:31:c1:a8:fe:
e8:ce:e1:b9:31:86:67:53:ee:0c:72:46:06:fb:ee:10:ab:4f:
9f:20:1a:55:b9:ed:6e:0f:07:07:28:a0:ca:91:95:74:fa:d7:
19:4d:e8:d4:98:21:8e:fd:8c:4b:13:08:66:6a:61:c7:9a:58:
8d:07:a8:50:24:fc:2a:c2:c6:e7:82:41:55:f6:77:c5:1c:de:
7d:39:80:9d:be:fe:dd:89:4a:62:67:c9:e1:c3:46:a2:c1:fc:
26:f3:b1:b3:bc:c9:7d:80:a0:28:c8:11:8a:f2:0e:b7:31:3a:
10:47:19:80:6e:18:2a:35:eb:d8:2c:65:30:15:e8:56:c7:43:
cd:d1:6e:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk6zaVWFOn2+PSmrSrL4M/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx
ZDNkZjAwHhcNMjUwOTExMjIwMjU5WhcNMjUwOTEyMjIwMjU5WjAzMTEwLwYDVQQD
Eyg0ODQ4YTk4NmNkMzBjY2UzMjdkMDNlMzlkNjUxZTY2NTlhZDRjMWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FjI3E62ItRHqAfQM+xlu/p2Wd5c
uRmIbW9HwqjnLzjYOK7JoFm9XtmyTQAGXZRvIexFQvi5lrhB7/52rlBziGWNmwyC
zp/bK1x8fUVFnjyviWY2ntzNekppsP1C/5qPxYQqkoHUJI0Ns0WZ5LXecJfKIz/g
T+BwsA3qounpxV5gso2twGdda15dSviipUio+/KIqEkC+55ZWbr/3jOfx59LKwtP
jLWDryD4CTAh9nRI3QW4xU3VRsMuWCo0RPnmLr2mzaEn/osYSxgoOIHqi04O1DY/
muvAGxfNvT8sMCo19c/3lrTD8HPRAeqwWIRF9h6oNyLt9eHeyfxAaWDvnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhIqYbNMMzjJ9A+OdZR5mWa1MGkMB8GA1UdIwQY
MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct
ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4
LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvMzrucv
CCaj29E/WgQTmlhn7jyt84I4CKgx7vSjQtsHENmQlTRQELriQeeaSLKXa/+oDr1m
voHF5QB1b+a4m6Me8suEJTf+1l6XoG4w/UP5tQGIXJmvMGAFNmhB1jwmKDlBso70
A+XlXOq10ZUhGmoYr0sA0dpIjFoxwaj+6M7huTGGZ1PuDHJGBvvuEKtPnyAaVbnt
bg8HByigypGVdPrXGU3o1Jghjv2MSxMIZmphx5pYjQeoUCT8KsLG54JBVfZ3xRze
fTmAnb7+3YlKYmfJ4cNGosH8JvOxs7zJfYCgKMgRivIOtzE6EEcZgG4YKjXr2Cxl
MBXoVsdDzdFu7w==
-----END CERTIFICATE-----
Generated at Fri Sep 12 07:13:43 2025 by rpki-client