
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
File: dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft (raw, json)
Hash identifier: Qkxf3sfXix7WnjRdX4p+tCYM1Llg+f791g1CPzUlOvE=
Subject key identifier: 32:3F:2B:F0:3D:64:A5:79:95:AB:23:02:63:23:9C:44:B2:43:DC:56
Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Certificate serial: 0199FC589E75AA4804959A49485C4547CBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
Manifest number: 0700
Signing time: Sun 19 Oct 2025 12:01:30 +0000
Manifest this update: Sun 19 Oct 2025 12:01:30 +0000
Manifest next update: Mon 20 Oct 2025 12:01:30 +0000
Files and hashes: 1: Akagd0l7QO9OvkucPctZVYCXA9M.roa (hash: IhMY55O2zxdfLlGwJcA2GKoYXI6fuVYr/yI0EHnUALg=)
2: dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl (hash: KXN5Z0r9mw9OH9+lkPdNlrQ6y3PJxjrluXV3pktCE+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9e:75:aa:48:04:95:9a:49:48:5c:45:47:cb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Validity
Not Before: Oct 19 12:01:30 2025 GMT
Not After : Oct 20 12:01:30 2025 GMT
Subject: CN=323f2bf03d64a57995ab230263239c44b243dc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:d3:27:5f:5c:e8:77:9c:76:07:6a:de:7f:
cf:45:1b:07:05:ab:d7:fd:0b:f9:27:f5:fa:bc:e2:
ac:fd:0e:fd:fe:91:f4:ff:d2:4d:a0:63:a8:40:e1:
cd:3f:2f:ea:a9:d5:5b:75:6d:4a:49:7b:e4:f9:c6:
c5:c1:5e:05:48:08:c2:40:ed:c8:ab:3f:71:8b:7a:
df:d8:9f:8f:c5:18:28:2e:cb:3a:02:e6:50:84:38:
f6:2e:d8:5c:83:80:30:ba:fc:0d:02:3f:0f:cb:56:
12:eb:fa:c6:ad:33:31:3c:d4:a7:35:7e:5d:e7:f9:
82:3c:d8:63:0f:78:57:a6:f7:6d:d2:4f:53:71:85:
c9:a8:f4:ae:92:32:7d:e1:0e:e7:73:a3:7e:36:c0:
6c:b7:dd:4b:cd:74:e0:80:9c:6a:7d:6d:96:27:6c:
57:8e:61:18:53:78:44:0e:84:91:8c:28:bb:af:6e:
81:8b:f4:9d:f0:95:eb:9f:52:f0:a7:71:e3:47:21:
a2:05:70:43:d0:27:a3:f2:0f:fa:80:89:c6:6f:62:
09:d5:d6:81:35:db:65:71:5c:36:48:fd:75:ef:50:
c4:f0:93:e1:1e:83:1c:a5:4d:d9:bb:52:32:af:16:
44:83:72:3c:cc:79:f3:78:52:3a:e3:a0:9a:85:f5:
5c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3F:2B:F0:3D:64:A5:79:95:AB:23:02:63:23:9C:44:B2:43:DC:56
X509v3 Authority Key Identifier:
keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a4:b1:79:e4:9d:43:21:82:a2:43:6e:30:77:41:63:2f:35:
84:e9:1c:ed:ac:b6:b7:aa:ce:07:6f:27:28:59:5a:99:b9:61:
43:9f:17:27:7d:a3:20:6f:97:a0:3b:e8:62:7f:c8:d5:78:36:
10:a6:b8:d2:cb:de:cb:d0:3d:e7:e4:86:60:7f:ff:c1:e9:4d:
64:37:5e:3f:ae:4c:dc:8b:6d:a3:9c:b3:79:d0:b4:41:af:4c:
f2:50:f9:3d:e8:e0:05:6c:84:0e:5d:2b:bf:b4:7c:74:55:c6:
da:fe:c5:42:72:b7:9d:38:93:a7:fb:ed:1d:33:a9:d6:54:ff:
dd:7e:4d:15:c3:fd:bf:c7:2e:3d:93:0b:8e:a5:4c:f0:9f:80:
fb:6e:af:16:45:64:5a:59:39:59:e4:ef:92:00:03:dc:8a:0a:
54:d7:ff:8b:6c:ae:d5:37:7a:f0:c6:a8:b9:2b:e5:19:25:22:
35:4a:f2:5d:d8:62:9f:ae:81:f5:f1:31:20:69:75:48:07:55:
40:f3:9f:63:af:92:74:05:97:09:62:46:e9:36:e3:04:29:49:
63:a8:5d:0d:a5:6e:a5:2b:49:b6:4c:e7:44:69:c8:59:ed:38:
57:31:de:47:1e:ed:6e:45:9f:50:f8:c9:06:28:d5:d8:ea:5a:
1b:84:53:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJ51qkgElZpJSFxFR8vPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0N2JiN2MyNDUwNWI2ZjU4Zjk0ODE3ZDdjOGQ1Mzc2NzU2
ZDM3ZmMwHhcNMjUxMDE5MTIwMTMwWhcNMjUxMDIwMTIwMTMwWjAzMTEwLwYDVQQD
EygzMjNmMmJmMDNkNjRhNTc5OTVhYjIzMDI2MzIzOWM0NGIyNDNkYzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcHTJ19c6Hecdgdq3n/PRRsHBavX
/Qv5J/X6vOKs/Q79/pH0/9JNoGOoQOHNPy/qqdVbdW1KSXvk+cbFwV4FSAjCQO3I
qz9xi3rf2J+PxRgoLss6AuZQhDj2Lthcg4AwuvwNAj8Py1YS6/rGrTMxPNSnNX5d
5/mCPNhjD3hXpvdt0k9TcYXJqPSukjJ94Q7nc6N+NsBst91LzXTggJxqfW2WJ2xX
jmEYU3hEDoSRjCi7r26Bi/Sd8JXrn1Lwp3HjRyGiBXBD0Cej8g/6gInGb2IJ1daB
NdtlcVw2SP1171DE8JPhHoMcpU3Zu1IyrxZEg3I8zHnzeFI646CahfVcTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDI/K/A9ZKV5lasjAmMjnESyQ9xWMB8GA1UdIwQY
MBaAFHR7t8JFBbb1j5SBfXyNU3Z1bTf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xN2E2MjEtZWRhZS00YTliLTg0NTUt
ZmNjMDA5MWZlOWU2LzEvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8xN2E2MjEtZWRhZS00YTliLTg0NTUtZmNjMDA5MWZlOWU2
LzEvZEh1M3drVUZ0dldQbElGOWZJMVRkblZ0Tl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqSxeeSd
QyGCokNuMHdBYy81hOkc7ay2t6rOB28nKFlamblhQ58XJ32jIG+XoDvoYn/I1Xg2
EKa40svey9A95+SGYH//welNZDdeP65M3Itto5yzedC0Qa9M8lD5PejgBWyEDl0r
v7R8dFXG2v7FQnK3nTiTp/vtHTOp1lT/3X5NFcP9v8cuPZMLjqVM8J+A+26vFkVk
Wlk5WeTvkgAD3IoKVNf/i2yu1Td68MaouSvlGSUiNUryXdhin66B9fExIGl1SAdV
QPOfY6+SdAWXCWJG6TbjBClJY6hdDaVupStJtkznRGnIWe04VzHeRx7tbkWfUPjJ
BijV2OpaG4RT4g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:48 2025 by rpki-client