Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: +d1WrHNatcTO27YHLUPyh8xRqfI3b7Vat0/D0xRFHEk=
Subject key identifier: 23:23:96:85:E5:66:9C:35:47:D2:46:C5:B3:E7:39:B7:31:67:0F:24
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 019923A0A983F445765642A2137A58A39FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:02:35 +0000
Manifest this update: Sun 07 Sep 2025 10:02:35 +0000
Manifest next update: Mon 08 Sep 2025 10:02:35 +0000
Files and hashes: 1: 3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa (hash: 32NxwfNK1ZaYklZXBKeX9wsuxMzcdx3YENya2fUqH/0=)
2: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: z3dWTcr88kexzGOi0cvA1pAIcfUP4pV+/2JMHhHgumA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:a9:83:f4:45:76:56:42:a2:13:7a:58:a3:9f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Sep 7 10:02:35 2025 GMT
Not After : Sep 8 10:02:35 2025 GMT
Subject: CN=23239685e5669c3547d246c5b3e739b731670f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:6e:19:75:d7:2b:c4:53:7e:e0:cd:b3:58:
f1:3d:7c:d7:b4:64:ea:55:de:83:d0:b6:20:48:3a:
a8:5d:0f:69:c7:c3:93:e0:c8:69:c8:bd:93:1c:58:
6e:fb:c9:e7:74:10:0d:98:f2:be:96:03:d5:62:a1:
9d:a2:4e:8a:29:bf:fd:68:d9:e6:eb:0f:dd:8d:05:
29:ab:f2:78:c7:35:c6:a2:07:e7:18:ad:b6:83:99:
63:11:37:37:2c:27:d2:21:91:cf:8c:39:17:0b:72:
c0:d1:c6:52:2e:95:b3:a8:92:37:b8:be:26:95:aa:
e5:a9:72:c0:e5:3b:12:b2:7c:2f:58:42:67:86:a2:
25:98:d5:04:29:1a:96:a2:f4:22:15:04:7b:03:23:
a7:e5:cd:46:11:e9:3a:8b:00:23:27:eb:49:d5:71:
ca:b3:54:e5:eb:eb:fc:9d:f9:0d:d7:05:92:d1:62:
4a:aa:d9:4b:60:f0:a1:2c:c7:2a:76:2f:06:52:bd:
8a:22:19:a5:74:c8:af:d5:53:9e:3f:93:6e:d3:96:
b0:32:da:c1:a1:3e:1f:5c:25:c5:bc:41:15:05:01:
05:91:89:83:39:4e:03:9e:68:d3:a3:7c:03:8b:ad:
ec:fe:38:69:f1:6c:95:a5:d0:dc:af:69:d9:3d:ea:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:23:96:85:E5:66:9C:35:47:D2:46:C5:B3:E7:39:B7:31:67:0F:24
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:05:00:47:d8:95:b4:69:08:17:d0:9d:cb:de:a5:18:58:b6:
cf:f4:2e:9c:30:49:65:c3:92:d6:34:ed:83:61:2e:ab:51:ad:
d7:95:98:ad:c4:c6:50:ec:e4:1c:22:54:ca:f8:1c:b3:cc:76:
56:fc:ef:76:6f:3c:58:50:51:6c:5e:3f:aa:5b:26:d9:6b:47:
6b:5b:5c:45:19:67:70:a7:d5:f3:ce:18:a9:91:35:01:8f:b7:
dc:16:0b:72:36:44:9f:02:c4:4b:60:2a:63:a1:56:2f:69:fc:
4d:8c:b8:02:57:1d:7b:88:92:db:d3:89:d3:af:0f:eb:3a:55:
c8:35:15:4a:99:49:e5:01:96:d0:85:8d:57:be:53:bd:02:df:
03:c8:79:36:33:52:da:22:aa:4e:11:ef:5d:29:99:59:73:e0:
4f:4d:4d:59:50:0b:7f:82:37:37:30:b5:51:ed:66:d4:1b:17:
24:4b:6b:d1:8d:7e:4b:74:57:29:40:38:a2:6b:9d:34:f9:7f:
09:55:56:8b:fa:69:83:4b:c9:6e:f9:51:ca:4b:25:a1:0b:6d:
29:a4:c1:1c:0e:27:c7:e0:c1:f3:99:e9:8f:84:4d:19:27:a8:
04:eb:f8:10:64:19:1a:73:c4:20:39:7e:17:aa:e5:48:2b:a1:
a3:59:fe:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoKmD9EV2VkKiE3pYo5/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzYzNTc0ODk4MDYwZTFiNmE0OGNhYzNmMWYyYmNiMzZj
ODZkNGUwHhcNMjUwOTA3MTAwMjM1WhcNMjUwOTA4MTAwMjM1WjAzMTEwLwYDVQQD
EygyMzIzOTY4NWU1NjY5YzM1NDdkMjQ2YzViM2U3MzliNzMxNjcwZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGduGXXXK8RTfuDNs1jxPXzXtGTq
Vd6D0LYgSDqoXQ9px8OT4MhpyL2THFhu+8nndBANmPK+lgPVYqGdok6KKb/9aNnm
6w/djQUpq/J4xzXGogfnGK22g5ljETc3LCfSIZHPjDkXC3LA0cZSLpWzqJI3uL4m
larlqXLA5TsSsnwvWEJnhqIlmNUEKRqWovQiFQR7AyOn5c1GEek6iwAjJ+tJ1XHK
s1Tl6+v8nfkN1wWS0WJKqtlLYPChLMcqdi8GUr2KIhmldMiv1VOeP5Nu05awMtrB
oT4fXCXFvEEVBQEFkYmDOU4DnmjTo3wDi63s/jhp8WyVpdDcr2nZPeo41QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMjloXlZpw1R9JGxbPnObcxZw8kMB8GA1UdIwQY
MBaAFAw2NXSJgGDhtqSMrD8fK8s2yG1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYt
YmE5MDFhNWZjYjc0LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYtYmE5MDFhNWZjYjc0
LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwUAR9iV
tGkIF9Cdy96lGFi2z/QunDBJZcOS1jTtg2Euq1Gt15WYrcTGUOzkHCJUyvgcs8x2
Vvzvdm88WFBRbF4/qlsm2WtHa1tcRRlncKfV884YqZE1AY+33BYLcjZEnwLES2Aq
Y6FWL2n8TYy4Alcde4iS29OJ068P6zpVyDUVSplJ5QGW0IWNV75TvQLfA8h5NjNS
2iKqThHvXSmZWXPgT01NWVALf4I3NzC1Ue1m1BsXJEtr0Y1+S3RXKUA4omudNPl/
CVVWi/ppg0vJbvlRyksloQttKaTBHA4nx+DB85npj4RNGSeoBOv4EGQZGnPEIDl+
F6rlSCuho1n+cg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:12 2025 by rpki-client