Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
File: pDCUIgOqL405Co2uULhamEUE_Zw.mft (raw, json)
Hash identifier: BFNwyOaXWU/XUpQAZtx1PdJf/KXYvx3SUdsOVbmXmTo=
Subject key identifier: 83:A9:0E:AF:6B:1A:87:D8:59:38:33:8B:E3:83:6D:91:C6:F9:29:B0
Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
Certificate issuer: /CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Certificate serial: 019922FA34B868E60B8F3C00C94F91D1EDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
Manifest number: 106D
Signing time: Sun 07 Sep 2025 07:00:46 +0000
Manifest this update: Sun 07 Sep 2025 07:00:46 +0000
Manifest next update: Mon 08 Sep 2025 07:00:46 +0000
Files and hashes: 1: mxHqegiIzk-5yKnAa0W9InQ8xh8.roa (hash: 1T8S7F5C1unZ11xq+jwLnSOyvWawPuJqcLvoyNmvP44=)
2: pDCUIgOqL405Co2uULhamEUE_Zw.crl (hash: mkDDexsa4sO3PY3P0HXJG3BXMvy45d4Yrfk0ImoCNAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:34:b8:68:e6:0b:8f:3c:00:c9:4f:91:d1:ed:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Validity
Not Before: Sep 7 07:00:46 2025 GMT
Not After : Sep 8 07:00:46 2025 GMT
Subject: CN=83a90eaf6b1a87d85938338be3836d91c6f929b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:a9:b4:b6:1c:18:63:81:ae:d8:30:09:37:
dc:e3:45:0e:5c:71:57:a0:bc:1b:b1:1a:4f:ec:52:
e4:52:f6:36:71:b5:37:11:b5:08:f8:1c:23:c8:70:
59:67:75:28:1a:b5:a0:5d:ca:53:f5:c9:b8:e5:46:
68:e9:ab:48:95:5c:1a:98:8b:25:9a:12:c3:af:19:
15:cc:0a:76:a2:7b:b0:19:60:fe:3b:f2:98:0b:6f:
13:c7:99:20:71:4a:85:ac:8c:9d:63:55:a0:08:37:
74:1e:61:a4:52:cd:f0:ac:22:3e:54:5f:bf:84:e5:
35:e9:4d:97:c1:f4:c1:54:70:b3:e5:68:e2:6b:dc:
0a:5f:69:80:da:fd:88:45:90:2c:0d:42:02:d1:ec:
55:54:6b:29:c7:f5:0c:d9:cc:36:85:b9:a3:1e:68:
1a:ea:80:17:f3:b6:00:8d:a7:2f:9e:f0:df:df:1e:
87:56:6d:c1:67:5d:bf:0d:67:f2:05:df:96:15:e2:
0f:18:7a:7c:a3:08:10:d9:fb:d5:44:7b:ba:0f:65:
4a:a5:28:f4:15:98:7f:94:d9:7d:80:aa:09:1e:fc:
1e:b6:f5:02:b9:14:9a:9b:32:0f:9d:51:80:19:11:
8d:25:9b:0e:8b:a3:3f:42:a2:d1:b2:fd:db:20:15:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A9:0E:AF:6B:1A:87:D8:59:38:33:8B:E3:83:6D:91:C6:F9:29:B0
X509v3 Authority Key Identifier:
keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:05:5d:5a:cc:63:28:ee:ce:84:5b:3a:98:2c:d0:27:cc:09:
b3:66:5c:24:ea:27:c7:2c:dc:68:16:43:76:3d:22:b7:82:95:
56:b1:55:20:38:f3:af:77:9a:1c:76:aa:fe:69:a3:92:90:88:
40:5e:cc:59:7b:2b:7f:96:01:81:ff:8a:89:b4:7a:df:c3:f4:
56:97:c0:fe:b8:4d:47:1a:6d:e9:d2:b1:58:1e:47:c3:8a:8c:
c2:2f:ee:18:f0:4a:27:26:a5:b9:96:2f:15:7a:5f:31:a5:31:
1f:1f:69:23:c5:fe:31:64:c2:91:dd:19:c9:e9:9d:c5:8f:e4:
41:3c:e0:54:ab:70:ad:ee:ff:66:82:57:fb:06:88:5f:c6:b1:
41:ee:7d:65:e2:98:b5:81:03:c3:ae:80:25:a0:36:7e:57:d7:
f2:fd:37:12:45:8c:db:dd:18:52:de:85:1a:d5:17:a6:12:eb:
0d:30:01:b1:a6:c3:99:55:98:5a:28:a7:4d:38:2b:cc:95:4d:
ef:d9:65:36:00:08:06:96:d3:ff:c5:5e:de:2e:58:0e:99:c0:
bc:b5:30:7f:08:ab:7b:8d:02:dd:f8:39:30:d1:d9:39:d3:1e:
a0:ea:da:d0:5b:16:8d:40:34:5c:c6:91:23:5a:b3:dd:50:7f:
90:c1:cb:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+jS4aOYLjzwAyU+R0e3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzA5NDIyMDNhYTJmOGQzOTBhOGRhZTUwYjg1YTk4NDUw
NGZkOWMwHhcNMjUwOTA3MDcwMDQ2WhcNMjUwOTA4MDcwMDQ2WjAzMTEwLwYDVQQD
Eyg4M2E5MGVhZjZiMWE4N2Q4NTkzODMzOGJlMzgzNmQ5MWM2ZjkyOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nSptLYcGGOBrtgwCTfc40UOXHFX
oLwbsRpP7FLkUvY2cbU3EbUI+BwjyHBZZ3UoGrWgXcpT9cm45UZo6atIlVwamIsl
mhLDrxkVzAp2onuwGWD+O/KYC28Tx5kgcUqFrIydY1WgCDd0HmGkUs3wrCI+VF+/
hOU16U2XwfTBVHCz5Wjia9wKX2mA2v2IRZAsDUIC0exVVGspx/UM2cw2hbmjHmga
6oAX87YAjacvnvDf3x6HVm3BZ12/DWfyBd+WFeIPGHp8owgQ2fvVRHu6D2VKpSj0
FZh/lNl9gKoJHvwetvUCuRSamzIPnVGAGRGNJZsOi6M/QqLRsv3bIBXWmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOpDq9rGofYWTgzi+ODbZHG+SmwMB8GA1UdIwQY
MBaAFKQwlCIDqi+NOQqNrlC4WphFBP2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGIt
MWJmMGY3YjRkZjMwLzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGItMWJmMGY3YjRkZjMw
LzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAVdWsxj
KO7OhFs6mCzQJ8wJs2ZcJOonxyzcaBZDdj0it4KVVrFVIDjzr3eaHHaq/mmjkpCI
QF7MWXsrf5YBgf+KibR638P0VpfA/rhNRxpt6dKxWB5Hw4qMwi/uGPBKJyaluZYv
FXpfMaUxHx9pI8X+MWTCkd0ZyemdxY/kQTzgVKtwre7/ZoJX+waIX8axQe59ZeKY
tYEDw66AJaA2flfX8v03EkWM290YUt6FGtUXphLrDTABsabDmVWYWiinTTgrzJVN
79llNgAIBpbT/8Ve3i5YDpnAvLUwfwire40C3fg5MNHZOdMeoOra0FsWjUA0XMaR
I1qz3VB/kMHLmw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:00 2025 by rpki-client