Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier: 3HvWa6181g6Pt0fAEnCVDR+Ptbzf5/WKLy5voL5DGVs=
Subject key identifier: 04:72:E0:83:0C:F9:7D:35:41:99:62:3A:86:55:21:29:D0:9C:11:37
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 01992BC708AC1BBE5F41E953F588B4BEF181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number: 0FCB
Signing time: Tue 09 Sep 2025 00:01:28 +0000
Manifest this update: Tue 09 Sep 2025 00:01:28 +0000
Manifest next update: Wed 10 Sep 2025 00:01:28 +0000
Files and hashes: 1: DqHnzYWuxMllYj4fNdyjlN5bOt8.roa (hash: Ct+oA/iZNUzEaqp34vmPr/rb2NLctNCZu0gWWKERVjE=)
2: Lf8_T-o7ZHygGu0g3mlzua1_1HA.roa (hash: CQIDTTHcfVlCnxAPq4hAkvv2QsASVNkVlmr+LBxrlLU=)
3: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: x2oMOcaaCUmxB7KnZNYhruFTEzoMvXnN9nhXR+zLWlQ=)
4: vYaVLKXY1-Vrl86mKkE3Y-3XdFU.roa (hash: 8y0C99LYt4H2oUrCqNFHSxS/1TMmBVBqFKxb6zfEFoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:c7:08:ac:1b:be:5f:41:e9:53:f5:88:b4:be:f1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Sep 9 00:01:28 2025 GMT
Not After : Sep 10 00:01:28 2025 GMT
Subject: CN=0472e0830cf97d354199623a86552129d09c1137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:74:59:ac:12:4e:ed:6a:d1:07:97:c2:54:
eb:3f:98:0e:61:80:6a:fc:93:33:0c:ed:73:42:de:
4a:b2:74:d9:0a:6d:f1:e6:8b:6a:32:f1:37:1e:6c:
21:36:40:7a:37:55:72:10:1c:e3:cd:79:29:a9:38:
ca:9e:d9:fc:51:40:ef:27:2a:4d:27:6f:ff:c5:33:
86:d3:94:0b:fe:46:9b:1e:ff:4c:6d:2a:0a:5a:19:
a5:5a:5f:df:eb:64:23:5f:c1:a2:8f:0c:b0:3e:e4:
42:9d:bb:93:05:f4:1f:b1:aa:3e:cb:b6:76:a3:63:
ec:70:ea:a1:a9:9b:b8:5c:64:d0:a4:93:c8:fc:10:
a4:7c:53:47:ff:21:4b:8c:20:d8:e2:7c:34:71:5c:
d8:85:01:f6:8a:b8:56:bd:00:11:d4:2b:13:c3:1e:
ea:86:c4:9e:d8:d0:7d:22:13:98:fc:68:bf:16:1d:
56:f4:0e:f6:11:d5:2a:70:d2:c8:b7:45:2f:d9:5d:
f8:6e:15:20:e6:da:1b:7b:44:d9:d1:55:3f:ab:47:
a7:03:62:f6:17:28:71:a1:4c:18:05:74:45:14:91:
0d:73:58:7a:8e:5c:f7:14:ab:a6:eb:19:c1:b2:3b:
ba:5b:d1:4b:f4:b1:58:f1:30:3b:65:29:f4:11:ee:
27:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:72:E0:83:0C:F9:7D:35:41:99:62:3A:86:55:21:29:D0:9C:11:37
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6e:b6:33:10:75:11:9b:64:bc:7e:40:23:54:f8:61:bb:64:
d7:01:9a:9a:4d:8c:3d:47:40:25:09:06:3d:a7:54:fd:4f:47:
cc:cc:cf:de:7d:d8:61:b3:59:d6:1c:9f:6d:15:93:4e:45:8e:
d0:d9:cd:87:bd:03:ba:47:11:95:19:a6:0c:1c:75:ac:36:4b:
ec:1b:7b:8f:11:35:0e:b0:69:01:1f:87:45:34:07:1d:85:dc:
ba:57:8a:bb:50:9e:fa:50:f2:72:0e:3b:4c:a2:53:12:88:85:
25:d6:32:86:4b:b3:a7:03:66:eb:af:86:5c:dd:eb:3d:97:3c:
6a:eb:ef:85:78:aa:81:ab:fb:5e:06:eb:ef:3f:e8:7a:55:d7:
e8:d9:7b:cc:0d:e6:b5:50:f9:d4:c9:33:7f:06:7b:99:23:4b:
03:1f:39:52:74:ed:8f:f2:67:ce:2f:67:f7:7e:db:80:88:5b:
92:10:c1:0e:46:9a:ad:ca:c0:52:f8:42:cd:c3:3a:95:db:69:
9c:06:d2:c8:ef:c7:19:f0:a0:4b:f6:15:06:80:11:d5:c2:91:
1b:08:4f:86:21:6e:cf:65:d1:40:98:1b:33:3f:c2:4c:df:d6:
da:25:4c:c1:ac:ba:12:1e:43:84:89:b1:b3:c5:35:27:cd:0b:
06:55:be:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkrxwisG75fQelT9Yi0vvGBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTBjZTZiNmY4Zjc1MGUwMzU4NGViYmQ3YmRhZDBmMTFm
YmUzMWMwHhcNMjUwOTA5MDAwMTI4WhcNMjUwOTEwMDAwMTI4WjAzMTEwLwYDVQQD
EygwNDcyZTA4MzBjZjk3ZDM1NDE5OTYyM2E4NjU1MjEyOWQwOWMxMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dN0WawSTu1q0QeXwlTrP5gOYYBq
/JMzDO1zQt5KsnTZCm3x5otqMvE3HmwhNkB6N1VyEBzjzXkpqTjKntn8UUDvJypN
J2//xTOG05QL/kabHv9MbSoKWhmlWl/f62QjX8GijwywPuRCnbuTBfQfsao+y7Z2
o2PscOqhqZu4XGTQpJPI/BCkfFNH/yFLjCDY4nw0cVzYhQH2irhWvQAR1CsTwx7q
hsSe2NB9IhOY/Gi/Fh1W9A72EdUqcNLIt0Uv2V34bhUg5tobe0TZ0VU/q0enA2L2
FyhxoUwYBXRFFJENc1h6jlz3FKum6xnBsju6W9FL9LFY8TA7ZSn0Ee4nEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARy4IMM+X01QZliOoZVISnQnBE3MB8GA1UdIwQY
MBaAFHSQzmtvj3UOA1hOu9e9rQ8R++McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAt
YzQ5NmY5Y2FmYTgzLzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAtYzQ5NmY5Y2FmYTgz
LzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARW62MxB1
EZtkvH5AI1T4Ybtk1wGamk2MPUdAJQkGPadU/U9HzMzP3n3YYbNZ1hyfbRWTTkWO
0NnNh70DukcRlRmmDBx1rDZL7Bt7jxE1DrBpAR+HRTQHHYXculeKu1Ce+lDycg47
TKJTEoiFJdYyhkuzpwNm66+GXN3rPZc8auvvhXiqgav7Xgbr7z/oelXX6Nl7zA3m
tVD51MkzfwZ7mSNLAx85UnTtj/Jnzi9n937bgIhbkhDBDkaarcrAUvhCzcM6ldtp
nAbSyO/HGfCgS/YVBoAR1cKRGwhPhiFuz2XRQJgbMz/CTN/W2iVMway6Eh5DhImx
s8U1J80LBlW+Zw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 04:14:55 2025 by rpki-client