Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File: deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier: 85TscwgrNCAxqE0ATWZra/DMAz1RBxCpudSDKOkt4Ig=
Subject key identifier: 03:F0:F0:8B:6E:E1:76:CB:EB:15:D6:4A:A9:45:ED:48:EB:1F:F1:17
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 019933EE21FCEAAED14CD557A01A9944DDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number: 1685
Signing time: Wed 10 Sep 2025 14:01:08 +0000
Manifest this update: Wed 10 Sep 2025 14:01:08 +0000
Manifest next update: Thu 11 Sep 2025 14:01:08 +0000
Files and hashes: 1: UJAjdPQrd8bP5k3ucoOuD61_MT8.roa (hash: ugk9F1DdJco8dK5O++Cvmb5dblVQF4BV4yb8wudILQ0=)
2: WkmHxNpKrmAzpx_FXkIaqhpVbpg.roa (hash: +AeFew5fsUdx9Fz3OOuJ7ZKCrATyNvcvfW0fCxc+tvg=)
3: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: vjNkmsoXiWPuQOg1UNvYWiHsbgaqCvqwyMHglMtfuYI=)
4: imLX_iKSVxIt55dbqRMupQNb-6o.roa (hash: OviNWocn0RhLkHHteMWnzyr2rnMguzIPeb1JC9urBc0=)
5: iwdwl1HuN2YXg9VICxrnQ2L8T_o.roa (hash: tLBry0LnEHMR25EGcYFuNe2nISzjy4sXmppIiMI5cVo=)
6: ju7dlcjXTVtzrpg-cXuTrngFgtw.roa (hash: Odms44ovs7hGv3jdYt/7+590lUec8LGS69mCjmZU8q4=)
7: oDzpo9P1CSTveVeS7HO-MB_9-so.roa (hash: TBsZnZ6Hce91sBTky4DlDhCeMhJRvacSOmd1DwZB9+E=)
8: rsxSpj9moP8LtPzNvFBSE3jnhTY.roa (hash: EI5toUib0yn2k83FMVjkqamZ8A/+xIBPYiOu2bZVLHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:21:fc:ea:ae:d1:4c:d5:57:a0:1a:99:44:dd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Sep 10 14:01:08 2025 GMT
Not After : Sep 11 14:01:08 2025 GMT
Subject: CN=03f0f08b6ee176cbeb15d64aa945ed48eb1ff117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:8a:6d:b7:95:57:b1:2d:ff:dc:8a:71:8a:
d0:41:16:b3:1b:b7:c3:43:54:b7:b1:16:91:13:44:
4f:0e:cb:55:a9:f8:71:34:59:1e:7d:50:14:0b:18:
42:99:9e:99:40:f0:ab:81:ae:31:72:42:67:9f:6d:
4b:f3:d0:b3:20:85:b4:85:a9:89:56:86:96:f5:7c:
b2:54:52:5c:1c:d8:10:f6:d4:fa:f3:be:a6:c9:75:
5a:8e:48:44:5c:dd:09:88:7f:1d:27:f0:40:be:72:
03:4a:91:09:44:4c:6d:34:fa:c8:ee:52:e3:9a:40:
b4:a2:ec:83:7a:b8:62:93:89:1b:02:40:12:1f:62:
07:9c:6d:34:fe:a6:7b:55:99:dd:3b:ea:2b:2f:73:
78:b8:f3:5f:1e:a9:ea:cd:ca:aa:42:e7:92:b2:5f:
19:5b:e6:8f:19:83:fe:2f:2a:3f:5c:b5:6c:61:c4:
02:c8:76:e1:aa:6a:4d:ef:ce:81:cb:98:a5:76:97:
72:fa:ae:09:9b:f5:48:d4:4b:5a:f9:95:8e:3c:85:
53:8d:c1:79:c0:18:7b:e2:21:25:8d:dc:f7:50:ca:
ca:7f:29:8a:c4:33:6b:af:98:74:1c:8d:66:54:05:
a2:ef:70:c9:79:f6:d7:88:10:a7:97:b7:0c:ee:5f:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F0:F0:8B:6E:E1:76:CB:EB:15:D6:4A:A9:45:ED:48:EB:1F:F1:17
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:76:99:e7:b6:fc:1b:60:18:a6:cc:cb:ad:89:96:4e:22:2d:
82:43:4f:37:8b:67:b9:d3:c4:ff:eb:6e:f6:2d:b4:2e:52:56:
d0:62:62:37:06:6e:91:9e:63:b8:64:0c:70:1a:ee:3f:d0:15:
f1:73:0c:0e:c7:8e:78:0b:42:13:ce:93:a9:36:28:77:68:a2:
69:84:b2:b4:37:89:c2:cd:70:60:3d:4a:be:1c:83:74:eb:45:
ec:15:d8:a2:03:61:72:72:49:8b:2a:88:e2:5a:51:10:b4:f9:
f8:00:ce:be:68:a4:75:23:99:8c:0a:2f:5e:9f:34:81:dd:d9:
c3:27:70:0b:3a:61:48:ad:04:8a:87:d3:ee:92:1a:3b:e0:c4:
09:e5:38:13:5a:23:59:a3:b0:d3:37:6a:01:cd:2c:c2:c1:bb:
c8:57:eb:f5:5e:d6:77:60:21:84:03:92:55:58:5c:47:1b:dc:
85:04:9b:b9:85:43:d8:be:01:8a:00:ff:ea:ee:ed:30:13:a4:
61:9d:17:3e:2d:f0:e0:af:04:8b:ab:62:9e:49:23:b7:df:bf:
d0:bb:bf:4e:5f:ef:f7:f6:bb:25:28:b6:45:24:f7:2b:7b:f2:
12:ec:88:73:81:23:c3:02:89:d5:37:b1:a7:39:7b:70:a0:38:
22:75:5a:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkz7iH86q7RTNVXoBqZRN3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj
ZTVhNGEwHhcNMjUwOTEwMTQwMTA4WhcNMjUwOTExMTQwMTA4WjAzMTEwLwYDVQQD
EygwM2YwZjA4YjZlZTE3NmNiZWIxNWQ2NGFhOTQ1ZWQ0OGViMWZmMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkeKbbeVV7Et/9yKcYrQQRazG7fD
Q1S3sRaRE0RPDstVqfhxNFkefVAUCxhCmZ6ZQPCrga4xckJnn21L89CzIIW0hamJ
VoaW9XyyVFJcHNgQ9tT6876myXVajkhEXN0JiH8dJ/BAvnIDSpEJRExtNPrI7lLj
mkC0ouyDerhik4kbAkASH2IHnG00/qZ7VZndO+orL3N4uPNfHqnqzcqqQueSsl8Z
W+aPGYP+Lyo/XLVsYcQCyHbhqmpN786By5ildpdy+q4Jm/VI1Eta+ZWOPIVTjcF5
wBh74iEljdz3UMrKfymKxDNrr5h0HI1mVAWi73DJefbXiBCnl7cM7l8uZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPw8Itu4XbL6xXWSqlF7UjrH/EXMB8GA1UdIwQY
MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct
ZDQ1YWI3ZGYyZGUxLzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx
LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXaZ57b8
G2AYpszLrYmWTiItgkNPN4tnudPE/+tu9i20LlJW0GJiNwZukZ5juGQMcBruP9AV
8XMMDseOeAtCE86TqTYod2iiaYSytDeJws1wYD1KvhyDdOtF7BXYogNhcnJJiyqI
4lpRELT5+ADOvmikdSOZjAovXp80gd3ZwydwCzphSK0EiofT7pIaO+DECeU4E1oj
WaOw0zdqAc0swsG7yFfr9V7Wd2AhhAOSVVhcRxvchQSbuYVD2L4BigD/6u7tMBOk
YZ0XPi3w4K8Ei6tinkkjt9+/0Lu/Tl/v9/a7JSi2RST3K3vyEuyIc4EjwwKJ1Tex
pzl7cKA4InVaXA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:07:44 2025 by rpki-client