Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
File: dXzv42s_zGikLAr_gdFEmA8yd38.mft (raw, json)
Hash identifier: CMW5O2RALsUsxOA8UFfvJUWiWuzA0pSx2ggNCa0IjVs=
Subject key identifier: 80:3D:BF:1B:25:09:25:9D:DE:55:7A:C9:D2:88:C5:96:13:C7:B6:F1
Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Certificate serial: 0198D4740189BEE24A3B2452EA8E122912FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
Manifest number: 0D84
Signing time: Sat 23 Aug 2025 01:03:48 +0000
Manifest this update: Sat 23 Aug 2025 01:03:48 +0000
Manifest next update: Sun 24 Aug 2025 01:03:48 +0000
Files and hashes: 1: AsZ4lIlUC0d5mfRed_ShT3RnpBQ.roa (hash: W7NsqtDHS3yDz7/Se2vS6CdoOqQMP8fqf009dcbuclU=)
2: FL8RMPvYjZOOIH-tYQtC_xdAvvs.roa (hash: ezxuKkKk4E/dW0F4biDlMwtG9fyCWW48njBvZTt+EQk=)
3: MUsQigUUD2skKaCxyUsENnVfQc0.roa (hash: jiSuFC22L+bIpKGlJw58reJLq1BBaex8I+CdJw/e78g=)
4: N1rTidaACgh8Wl5J2g45GZumvQs.roa (hash: btCaFx/Jws6uzlXHydN6cLSWM9L6FDcS4ymcYrWP048=)
5: XsLjp43XqVLOf-UiZTsjZx3E54g.roa (hash: xErYg38+N/tFwn9w696LSX/zjDpD0mxUiTuXvg0H92I=)
6: dXzv42s_zGikLAr_gdFEmA8yd38.crl (hash: HFv1dx9ETLMiZKLp04gjyTVDQNeK1bLNYY7EJ6KIQPM=)
7: qE8D3nsEUOLG1NuGsSRIci9iQRY.roa (hash: vOpcrcbGrhK1e/m6LFFrSilITZsrUmccTwgae/Ijt/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:01:89:be:e2:4a:3b:24:52:ea:8e:12:29:12:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Validity
Not Before: Aug 23 01:03:48 2025 GMT
Not After : Aug 24 01:03:48 2025 GMT
Subject: CN=803dbf1b2509259dde557ac9d288c59613c7b6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:d4:a3:58:b8:87:b2:0e:52:f3:75:f2:df:
37:90:c7:65:41:ce:16:1c:80:2f:6f:66:1f:41:06:
0c:76:ae:81:ad:04:59:ac:76:55:9d:b6:b9:ab:e1:
95:bb:e8:1f:a1:84:68:28:8b:14:76:e4:35:ad:4d:
1f:30:ff:6c:ef:5f:31:62:fd:6a:2a:76:0d:e5:95:
b1:a1:19:e4:d0:79:e4:d2:76:de:4d:8d:84:ba:28:
f2:01:60:08:32:12:85:a0:d4:8f:76:6c:9c:c3:29:
a9:54:ac:64:04:71:bc:81:f1:83:01:68:f2:1b:3e:
8e:d1:b6:e2:e2:1e:c1:19:8e:b2:10:53:98:a3:fa:
7a:32:a0:54:ce:97:8f:c0:f6:67:41:0c:ab:b2:2e:
e2:c9:72:d8:9e:9a:b5:94:8d:a2:dd:83:6a:59:0a:
cd:fd:31:ba:e5:c3:05:44:4e:bf:81:fb:57:43:1d:
70:b3:78:78:ad:80:9b:4b:22:5e:c1:cc:4d:53:ff:
e7:ce:0a:df:42:78:1b:0f:d8:40:4e:4a:b4:23:b0:
52:c5:94:68:8c:eb:4e:c2:b0:8f:c4:da:41:8f:1f:
11:57:e4:12:c5:fe:a9:13:12:75:e0:ff:aa:f0:41:
a5:75:33:fd:f4:c5:41:fe:79:7c:e0:4d:f2:93:20:
b7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3D:BF:1B:25:09:25:9D:DE:55:7A:C9:D2:88:C5:96:13:C7:B6:F1
X509v3 Authority Key Identifier:
keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f9:12:b1:7c:0f:87:38:f8:60:3e:34:d1:37:d3:59:ba:77:
ce:d0:bb:65:05:f7:95:26:a2:0c:3b:f6:0d:af:60:2d:61:19:
43:2a:c0:1b:2d:d5:83:38:32:33:d3:c8:3b:38:40:5f:31:56:
36:35:2e:2b:6e:60:17:58:79:22:98:29:07:5a:3d:28:ff:7e:
52:03:8b:4d:6e:2b:f2:3a:3e:e1:c6:22:b0:3d:b2:f0:be:28:
3b:39:35:a0:d0:ab:51:d8:9c:20:ad:6e:74:77:70:8d:d2:ec:
1d:78:fd:ca:0b:7a:25:b9:df:29:18:bd:fd:a1:ac:11:18:5f:
de:a8:16:45:f5:d7:03:ac:35:0c:1d:16:50:92:63:60:c3:73:
61:f9:e7:6f:a5:4b:d9:59:1f:53:85:e8:3b:1b:d2:fd:39:e1:
fe:4e:e1:69:71:b9:d4:4e:66:dc:cf:83:5b:b8:83:97:f9:23:
fe:d0:36:7d:cf:c7:d0:e9:08:67:6f:b6:53:ac:83:18:08:26:
1b:f5:71:ed:c8:fc:93:8c:1b:ee:42:07:36:18:9a:60:f4:d0:
1c:b2:55:b3:ef:57:18:ae:0d:cf:9f:4d:92:f4:a8:2e:4d:bd:
25:78:03:00:89:c2:a3:3f:fd:a5:ff:72:cc:05:c9:d3:91:ce:
31:22:ea:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdAGJvuJKOyRS6o4SKRL7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1N2NlZmUzNmIzZmNjNjhhNDJjMGFmZjgxZDE0NDk4MGYz
Mjc3N2YwHhcNMjUwODIzMDEwMzQ4WhcNMjUwODI0MDEwMzQ4WjAzMTEwLwYDVQQD
Eyg4MDNkYmYxYjI1MDkyNTlkZGU1NTdhYzlkMjg4YzU5NjEzYzdiNmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF7Uo1i4h7IOUvN18t83kMdlQc4W
HIAvb2YfQQYMdq6BrQRZrHZVnba5q+GVu+gfoYRoKIsUduQ1rU0fMP9s718xYv1q
KnYN5ZWxoRnk0Hnk0nbeTY2EuijyAWAIMhKFoNSPdmycwympVKxkBHG8gfGDAWjy
Gz6O0bbi4h7BGY6yEFOYo/p6MqBUzpePwPZnQQyrsi7iyXLYnpq1lI2i3YNqWQrN
/TG65cMFRE6/gftXQx1ws3h4rYCbSyJewcxNU//nzgrfQngbD9hATkq0I7BSxZRo
jOtOwrCPxNpBjx8RV+QSxf6pExJ14P+q8EGldTP99MVB/nl84E3ykyC3IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIA9vxslCSWd3lV6ydKIxZYTx7bxMB8GA1UdIwQY
MBaAFHV87+NrP8xopCwK/4HRRJgPMnd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85NzJkYjYtNzcwZi00NDYyLTlmYzct
ZWU5Yjk1MTdmMmVjLzEvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC85NzJkYjYtNzcwZi00NDYyLTlmYzctZWU5Yjk1MTdmMmVj
LzEvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfkSsXwP
hzj4YD400TfTWbp3ztC7ZQX3lSaiDDv2Da9gLWEZQyrAGy3VgzgyM9PIOzhAXzFW
NjUuK25gF1h5IpgpB1o9KP9+UgOLTW4r8jo+4cYisD2y8L4oOzk1oNCrUdicIK1u
dHdwjdLsHXj9ygt6JbnfKRi9/aGsERhf3qgWRfXXA6w1DB0WUJJjYMNzYfnnb6VL
2VkfU4XoOxvS/Tnh/k7haXG51E5m3M+DW7iDl/kj/tA2fc/H0OkIZ2+2U6yDGAgm
G/Vx7cj8k4wb7kIHNhiaYPTQHLJVs+9XGK4Nz59NkvSoLk29JXgDAInCoz/9pf9y
zAXJ05HOMSLq3A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:53 2025 by rpki-client