Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File: dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier: qUrxLZNADrmW4v2+2Bir6htodzQmmgy/dCcxHVzWCNc=
Subject key identifier: 81:FB:2C:40:42:C6:DA:78:21:23:9C:3F:55:3A:89:99:89:5B:8E:45
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial: 01993BDE50BD688C66265A0451F55A49B21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number: 02C7
Signing time: Fri 12 Sep 2025 03:00:48 +0000
Manifest this update: Fri 12 Sep 2025 03:00:48 +0000
Manifest next update: Sat 13 Sep 2025 03:00:48 +0000
Files and hashes: 1: 7-iGt4e7trCrvhjbqw5ailuotG8.roa (hash: cy0FH1gqtKBfDPhq2ot6+GUFGCM2/G1KgLpKIId8UGA=)
2: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: CGZZWEz1eviZIT+8Elmb4x9OgW1aAlSfV5v0QNxvEzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:de:50:bd:68:8c:66:26:5a:04:51:f5:5a:49:b2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
Validity
Not Before: Sep 12 03:00:48 2025 GMT
Not After : Sep 13 03:00:48 2025 GMT
Subject: CN=81fb2c4042c6da7821239c3f553a8999895b8e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:cd:bc:fb:1b:ed:12:79:a8:a6:33:5d:98:
14:93:d1:9a:e1:7b:bb:49:5e:2b:bb:ec:17:1d:b6:
04:f9:ec:aa:3f:9c:f1:32:05:4b:09:29:7c:8e:58:
49:d7:72:34:27:f7:25:5e:80:6e:e4:18:d1:e1:3f:
de:44:35:05:26:f9:f4:71:88:da:2f:d0:02:b0:51:
b2:e8:28:5e:27:35:9f:a7:ac:cb:de:91:09:92:de:
11:24:bc:22:4c:4c:9e:2f:32:e9:f2:d7:b5:de:cd:
d9:fe:04:b1:06:b3:ff:00:ad:9d:a3:12:a6:0d:13:
c4:7d:13:11:cb:37:85:09:0c:8a:db:1a:e1:dd:22:
bc:e9:3b:4f:e7:d4:a8:7f:8c:81:53:5b:89:2a:3f:
20:74:94:ce:76:da:e8:9f:a6:ec:50:59:47:6f:be:
97:94:ae:d8:5e:28:e9:b4:f0:cb:21:85:a1:0d:01:
47:04:68:5b:b9:e7:c2:c4:71:a9:4a:c5:54:71:84:
d4:26:43:32:1f:4a:55:a0:b2:c8:4d:bd:81:c9:f7:
73:6b:6b:c5:65:01:cd:84:46:1b:e5:ad:62:28:23:
47:de:52:98:99:63:f3:9b:a7:41:2f:04:68:98:b1:
c9:9f:97:0c:fd:91:04:a8:06:db:2f:fa:77:be:83:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FB:2C:40:42:C6:DA:78:21:23:9C:3F:55:3A:89:99:89:5B:8E:45
X509v3 Authority Key Identifier:
keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fe:9b:95:3f:9c:b0:f5:24:75:b8:12:3f:91:1d:3c:ba:44:
50:8d:6f:66:6f:68:49:c3:53:70:80:9c:bd:f9:9b:a1:77:a1:
45:81:c2:35:f6:0a:cf:d5:24:ed:7a:33:4f:24:1c:b7:73:c8:
31:18:79:c0:c9:be:28:60:4c:9a:e9:75:f1:ce:87:9d:ce:78:
04:56:88:e9:73:06:b6:be:ea:b8:b2:5a:b2:84:af:66:29:2a:
a4:b1:48:9f:20:a2:f6:91:ab:dc:1a:cb:d3:8d:38:15:b7:01:
c4:9d:bb:2e:73:a8:a5:f7:2f:93:c3:7e:f8:e1:4a:79:6d:61:
e8:3e:db:33:14:11:a7:f7:4c:dc:be:14:71:ec:06:1b:8e:9a:
de:af:70:55:88:80:4a:05:ca:cc:3e:4d:77:5a:9a:5b:a6:a0:
2c:26:62:fd:b2:98:d5:fb:a2:db:c2:eb:ea:c4:12:7c:6c:ce:
a5:0c:1a:3b:1b:41:69:38:60:9d:98:32:90:8d:ff:70:df:c7:
cf:13:c4:1e:00:d0:e4:c4:39:1e:18:59:b4:c1:70:92:d5:07:
b8:c1:02:c1:32:4b:f9:5d:03:36:7f:96:76:10:fb:2c:ee:15:
55:f2:b2:e5:b4:d8:ca:03:55:5b:f6:1c:ab:5e:6d:a2:55:ed:
55:ef:c1:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk73lC9aIxmJloEUfVaSbIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZjgxYTk4YjQ4NzAyMGM5ODEwNWQ2MzEzYmNkNjlkZTUw
YWMxN2IwHhcNMjUwOTEyMDMwMDQ4WhcNMjUwOTEzMDMwMDQ4WjAzMTEwLwYDVQQD
Eyg4MWZiMmM0MDQyYzZkYTc4MjEyMzljM2Y1NTNhODk5OTg5NWI4ZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbPNvPsb7RJ5qKYzXZgUk9Ga4Xu7
SV4ru+wXHbYE+eyqP5zxMgVLCSl8jlhJ13I0J/clXoBu5BjR4T/eRDUFJvn0cYja
L9ACsFGy6CheJzWfp6zL3pEJkt4RJLwiTEyeLzLp8te13s3Z/gSxBrP/AK2doxKm
DRPEfRMRyzeFCQyK2xrh3SK86TtP59Sof4yBU1uJKj8gdJTOdtron6bsUFlHb76X
lK7YXijptPDLIYWhDQFHBGhbuefCxHGpSsVUcYTUJkMyH0pVoLLITb2Byfdza2vF
ZQHNhEYb5a1iKCNH3lKYmWPzm6dBLwRomLHJn5cM/ZEEqAbbL/p3voMl9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH7LEBCxtp4ISOcP1U6iZmJW45FMB8GA1UdIwQY
MBaAFHT4Gpi0hwIMmBBdYxO81p3lCsF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYt
MDFlNzEzMWFlMWRlLzEvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYtMDFlNzEzMWFlMWRl
LzEvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/6blT+c
sPUkdbgSP5EdPLpEUI1vZm9oScNTcICcvfmboXehRYHCNfYKz9Uk7XozTyQct3PI
MRh5wMm+KGBMmul18c6Hnc54BFaI6XMGtr7quLJasoSvZikqpLFInyCi9pGr3BrL
0404FbcBxJ27LnOopfcvk8N++OFKeW1h6D7bMxQRp/dM3L4UcewGG46a3q9wVYiA
SgXKzD5Nd1qaW6agLCZi/bKY1fui28Lr6sQSfGzOpQwaOxtBaThgnZgykI3/cN/H
zxPEHgDQ5MQ5HhhZtMFwktUHuMECwTJL+V0DNn+WdhD7LO4VVfKy5bTYygNVW/Yc
q15tolXtVe/BvQ==
-----END CERTIFICATE-----
Generated at Fri Sep 12 11:57:11 2025 by rpki-client