Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
File: dxPzWC9jkBMFUwtLGTbNbmYRowo.mft (raw, json)
Hash identifier: Sf8sfMKViFoCjnFRewrCuGrOg21q00B/ZILizTe7QVg=
Subject key identifier: BB:C1:C8:AC:D3:91:86:51:DB:DD:1A:16:56:8E:A2:09:58:59:29:A9
Authority key identifier: 77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
Certificate issuer: /CN=7713f3582f63901305530b4b1936cd6e6611a30a
Certificate serial: 0199221EC48F3F246C6912FC7FB8E05C10D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
Manifest number: 0472
Signing time: Sun 07 Sep 2025 03:01:05 +0000
Manifest this update: Sun 07 Sep 2025 03:01:05 +0000
Manifest next update: Mon 08 Sep 2025 03:01:05 +0000
Files and hashes: 1: QBpayCeedHorPlMUrxP80cZpQMk.roa (hash: OQ5xE2z8NMteCC4WWbezxTDqjx0MzAo+K4Av2s6co/8=)
2: dxPzWC9jkBMFUwtLGTbNbmYRowo.crl (hash: +lFXl6t7AzCg0rp5pOGSrzpqgmg1VE1IMUuSucSz7Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:c4:8f:3f:24:6c:69:12:fc:7f:b8:e0:5c:10:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7713f3582f63901305530b4b1936cd6e6611a30a
Validity
Not Before: Sep 7 03:01:05 2025 GMT
Not After : Sep 8 03:01:05 2025 GMT
Subject: CN=bbc1c8acd3918651dbdd1a16568ea209585929a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:60:9d:cc:2f:52:11:cc:4a:49:ce:b6:47:01:
80:ff:30:38:3f:02:a3:f2:b9:39:52:34:d3:ef:65:
b3:53:4d:b9:0d:b5:6a:be:a1:26:8d:30:2e:62:4b:
ad:69:6a:8f:4a:44:dd:b0:f7:3b:62:51:4c:61:07:
d1:4a:bd:46:b5:68:6d:66:b0:12:8f:63:9b:c6:84:
d7:68:5e:1b:1e:2a:67:08:a9:eb:6e:13:be:71:c6:
f0:62:e7:b4:ab:d3:da:35:51:b9:49:c4:49:12:7e:
6e:01:6f:10:dc:34:3d:8f:29:2c:ce:d1:82:29:dd:
46:c8:bf:69:46:42:56:6b:fb:81:38:1b:be:f5:2f:
a2:de:09:e4:19:21:98:a5:47:10:48:95:dd:e4:b8:
b5:87:5a:1d:29:dc:a4:be:47:7f:6d:c1:60:05:fa:
a5:aa:5e:e7:bc:5a:2f:2d:8d:85:af:01:e2:f0:e0:
5f:49:e9:ef:6d:d5:fe:20:68:7b:a9:e4:d7:58:87:
ec:d1:53:d5:47:c6:31:84:e7:b4:2e:07:a6:f3:52:
17:6a:f8:ed:3c:06:68:e2:ea:4c:d1:4f:ef:99:e2:
74:0d:44:e9:3f:95:7a:f2:5f:60:0b:ba:93:8e:c3:
ba:0f:33:00:a4:da:15:5f:46:e5:4e:4d:5b:9b:9f:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C1:C8:AC:D3:91:86:51:DB:DD:1A:16:56:8E:A2:09:58:59:29:A9
X509v3 Authority Key Identifier:
keyid:77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ed:78:8a:79:0c:f5:2a:01:4f:a8:e9:9d:9d:da:d4:95:da:
d8:62:c2:70:b3:bb:15:23:e4:36:01:2b:d4:a3:9f:7f:c7:5f:
9b:70:f4:9f:7f:13:51:da:7b:87:3d:04:6f:51:d3:4f:a5:42:
6d:27:66:fb:f8:d2:66:b5:ce:f9:0c:d6:72:62:b8:2e:e7:bc:
79:f2:9f:21:24:94:cd:2a:64:85:92:6b:46:3c:67:b3:98:bd:
9a:68:c9:e4:a2:cd:d6:8a:d1:c5:af:72:95:5b:4c:69:15:98:
ba:75:80:8c:09:41:da:b1:a6:3c:c8:f3:26:3c:f5:f9:40:03:
6c:70:74:36:4c:f5:12:95:e6:79:d6:fd:9d:a5:29:f2:c5:a8:
7d:76:d6:e0:df:3b:31:73:c8:3b:5e:61:07:c1:82:06:79:f8:
28:11:fb:44:7b:85:fc:95:40:f3:39:4c:10:02:1b:de:c0:e0:
ae:af:2e:ed:ea:a4:8d:4d:19:0b:f1:6b:89:7e:59:9a:51:cc:
e0:d2:7f:3e:97:08:4d:39:c6:9d:65:3b:e7:80:7c:78:25:e0:
78:06:ef:d5:7f:39:e1:9e:fa:c1:2f:71:2f:53:4d:6d:51:af:
71:5f:67:3c:6d:dc:45:f7:4a:5b:cf:2b:7c:30:8e:78:40:fb:
cb:9e:8b:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHsSPPyRsaRL8f7jgXBDZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTNmMzU4MmY2MzkwMTMwNTUzMGI0YjE5MzZjZDZlNjYx
MWEzMGEwHhcNMjUwOTA3MDMwMTA1WhcNMjUwOTA4MDMwMTA1WjAzMTEwLwYDVQQD
EyhiYmMxYzhhY2QzOTE4NjUxZGJkZDFhMTY1NjhlYTIwOTU4NTkyOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2CdzC9SEcxKSc62RwGA/zA4PwKj
8rk5UjTT72WzU025DbVqvqEmjTAuYkutaWqPSkTdsPc7YlFMYQfRSr1GtWhtZrAS
j2ObxoTXaF4bHipnCKnrbhO+ccbwYue0q9PaNVG5ScRJEn5uAW8Q3DQ9jyksztGC
Kd1GyL9pRkJWa/uBOBu+9S+i3gnkGSGYpUcQSJXd5Li1h1odKdykvkd/bcFgBfql
ql7nvFovLY2FrwHi8OBfSenvbdX+IGh7qeTXWIfs0VPVR8YxhOe0Lgem81IXavjt
PAZo4upM0U/vmeJ0DUTpP5V68l9gC7qTjsO6DzMApNoVX0blTk1bm5/XnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvByKzTkYZR290aFlaOoglYWSmpMB8GA1UdIwQY
MBaAFHcT81gvY5ATBVMLSxk2zW5mEaMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNGQ3NmUtMzRhMS00ZDBhLWI5YmQt
MTg5ZDUzYWU0ZTNlLzEvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mNGQ3NmUtMzRhMS00ZDBhLWI5YmQtMTg5ZDUzYWU0ZTNl
LzEvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlu14inkM
9SoBT6jpnZ3a1JXa2GLCcLO7FSPkNgEr1KOff8dfm3D0n38TUdp7hz0Eb1HTT6VC
bSdm+/jSZrXO+QzWcmK4Lue8efKfISSUzSpkhZJrRjxns5i9mmjJ5KLN1orRxa9y
lVtMaRWYunWAjAlB2rGmPMjzJjz1+UADbHB0Nkz1EpXmedb9naUp8sWofXbW4N87
MXPIO15hB8GCBnn4KBH7RHuF/JVA8zlMEAIb3sDgrq8u7eqkjU0ZC/FriX5ZmlHM
4NJ/PpcITTnGnWU754B8eCXgeAbv1X854Z76wS9xL1NNbVGvcV9nPG3cRfdKW88r
fDCOeED7y56LmA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:59 2025 by rpki-client