Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
File: dbciFa46YYMFwSMUKzSd8mZyoU0.mft (raw, json)
Hash identifier: euH0i11MqNduuGM0a4TwJ6ndxbCn+9/IpuYv4uXOqFo=
Subject key identifier: EF:5D:3E:13:13:A7:BF:FB:24:D0:04:AF:8F:2E:0B:7C:C3:5D:65:E7
Authority key identifier: 75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
Certificate issuer: /CN=75b72215ae3a618305c123142b349df26672a14d
Certificate serial: 019921B178F6C7427835C92195DBF51C0E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
Manifest number: 0362
Signing time: Sun 07 Sep 2025 01:01:42 +0000
Manifest this update: Sun 07 Sep 2025 01:01:42 +0000
Manifest next update: Mon 08 Sep 2025 01:01:42 +0000
Files and hashes: 1: dbciFa46YYMFwSMUKzSd8mZyoU0.crl (hash: vMhYtW+CNb5nsqfmtqrKAgKojQWEQgRoXHsBPadqhww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:78:f6:c7:42:78:35:c9:21:95:db:f5:1c:0e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b72215ae3a618305c123142b349df26672a14d
Validity
Not Before: Sep 7 01:01:42 2025 GMT
Not After : Sep 8 01:01:42 2025 GMT
Subject: CN=ef5d3e1313a7bffb24d004af8f2e0b7cc35d65e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:31:35:75:1e:eb:5a:6b:54:d8:7b:a3:86:
c1:b1:b7:a9:02:24:c6:d1:28:f6:6c:6e:70:00:fd:
4c:a6:5b:f6:af:37:50:bb:c3:ca:62:51:8a:fa:4d:
93:cc:64:95:46:9a:b5:27:49:38:33:10:b0:e9:4f:
37:3a:d9:ae:8f:a9:a5:20:0b:68:25:df:8d:43:12:
86:57:50:0b:47:1f:e9:f5:df:a3:f5:bd:ba:79:ae:
ff:ea:3b:28:99:61:0b:7a:0f:89:59:64:fd:e1:1e:
30:36:e6:95:d3:d6:f2:d9:fc:7d:22:88:b1:2c:e2:
29:f4:8a:3f:00:9c:03:ed:8e:d8:76:aa:22:d6:bd:
8f:ee:d8:09:7f:75:3e:28:6d:93:c0:16:5a:16:2f:
1e:3c:e0:3d:b1:7b:9c:9a:81:b5:93:61:f1:24:b4:
ca:1a:77:65:7b:dc:c2:49:fc:7b:74:30:34:c5:db:
99:3b:0c:ad:13:f8:6c:ea:f4:22:11:dc:66:d4:53:
8f:34:e5:f7:eb:37:56:89:7c:d4:e0:0e:f0:ae:49:
d6:de:19:2e:b8:39:e8:97:b7:cf:a8:13:45:66:36:
80:69:4d:1f:24:b1:dc:37:fa:d7:d8:e5:29:f7:b5:
4b:d5:95:fb:13:6b:66:69:cd:04:a0:a0:5b:cb:45:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5D:3E:13:13:A7:BF:FB:24:D0:04:AF:8F:2E:0B:7C:C3:5D:65:E7
X509v3 Authority Key Identifier:
keyid:75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7a:2d:2e:8e:1e:e8:28:ba:c5:6a:02:3a:3a:b9:df:c9:15:
5c:29:74:99:fd:28:e5:53:5d:32:48:f3:9d:fe:f8:a3:f6:f2:
39:04:5a:c3:dc:98:bd:b6:7c:05:88:b8:db:17:e7:fe:02:85:
7f:a3:90:37:a3:c4:43:92:a3:c5:13:2f:0f:1d:5b:3a:3f:9d:
8a:33:d7:54:dd:f5:ef:9f:a5:3c:f6:15:f3:35:59:d1:67:3f:
7a:8b:89:6c:c6:4c:bc:ab:ec:38:e7:54:ae:59:23:ec:a1:8d:
27:95:6e:3d:96:35:83:22:74:a7:d7:ab:93:ff:ad:85:91:ac:
d6:ce:f7:c0:af:1b:59:2e:45:3e:94:c4:1e:88:6e:39:cd:4b:
da:1e:61:fd:2c:00:d2:b8:33:6b:5b:55:91:2e:e3:7d:97:13:
cb:fe:7a:ae:43:7c:a4:a9:9c:76:2a:83:31:b1:92:0d:ee:26:
0f:b4:65:b4:c8:e0:79:73:2e:23:3e:48:9b:4b:98:54:c3:5f:
1c:0b:14:54:ad:80:b0:7e:16:d5:89:49:65:c4:4f:61:24:7c:
35:8c:7b:a0:f1:14:5c:b1:53:c2:59:53:dc:e2:ed:7b:20:aa:
7f:63:75:ab:c7:7a:47:a3:91:3a:83:e7:61:33:9b:ad:4a:77:
42:af:05:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsXj2x0J4Nckhldv1HA4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjcyMjE1YWUzYTYxODMwNWMxMjMxNDJiMzQ5ZGYyNjY3
MmExNGQwHhcNMjUwOTA3MDEwMTQyWhcNMjUwOTA4MDEwMTQyWjAzMTEwLwYDVQQD
EyhlZjVkM2UxMzEzYTdiZmZiMjRkMDA0YWY4ZjJlMGI3Y2MzNWQ2NWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcQxNXUe61prVNh7o4bBsbepAiTG
0Sj2bG5wAP1Mplv2rzdQu8PKYlGK+k2TzGSVRpq1J0k4MxCw6U83Otmuj6mlIAto
Jd+NQxKGV1ALRx/p9d+j9b26ea7/6jsomWELeg+JWWT94R4wNuaV09by2fx9Ioix
LOIp9Io/AJwD7Y7Ydqoi1r2P7tgJf3U+KG2TwBZaFi8ePOA9sXucmoG1k2HxJLTK
Gndle9zCSfx7dDA0xduZOwytE/hs6vQiEdxm1FOPNOX36zdWiXzU4A7wrknW3hku
uDnol7fPqBNFZjaAaU0fJLHcN/rX2OUp97VL1ZX7E2tmac0EoKBby0X6CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9dPhMTp7/7JNAEr48uC3zDXWXnMB8GA1UdIwQY
MBaAFHW3IhWuOmGDBcEjFCs0nfJmcqFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iZWE5ZGItMWI5Mi00NGNiLThmZDMt
YmRiZTViN2E3NjgwLzEvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9iZWE5ZGItMWI5Mi00NGNiLThmZDMtYmRiZTViN2E3Njgw
LzEvZGJjaUZhNDZZWU1Gd1NNVUt6U2Q4bVp5b1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHotLo4e
6Ci6xWoCOjq538kVXCl0mf0o5VNdMkjznf74o/byOQRaw9yYvbZ8BYi42xfn/gKF
f6OQN6PEQ5KjxRMvDx1bOj+dijPXVN3175+lPPYV8zVZ0Wc/eouJbMZMvKvsOOdU
rlkj7KGNJ5VuPZY1gyJ0p9erk/+thZGs1s73wK8bWS5FPpTEHohuOc1L2h5h/SwA
0rgza1tVkS7jfZcTy/56rkN8pKmcdiqDMbGSDe4mD7RltMjgeXMuIz5Im0uYVMNf
HAsUVK2AsH4W1YlJZcRPYSR8NYx7oPEUXLFTwllT3OLteyCqf2N1q8d6R6OROoPn
YTObrUp3Qq8FOg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:59 2025 by rpki-client