Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
File: dHyzZv9uI99sCX9grcf6gHVZgZE.mft (raw, json)
Hash identifier: Ls4L2oNjTQ7CQ9jp6VDb9AyTKYbSs5XKbHpxRoexBv0=
Subject key identifier: 67:22:5D:39:FA:89:F0:00:DC:53:5C:50:9A:61:D8:87:E4:92:5A:69
Authority key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
Certificate issuer: /CN=747cb366ff6e23df6c097f60adc7fa8075598191
Certificate serial: 0197C8DD9076C315978784EE870A2A3F6818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
Manifest number: 0986
Signing time: Wed 02 Jul 2025 02:00:52 +0000
Manifest this update: Wed 02 Jul 2025 02:00:52 +0000
Manifest next update: Thu 03 Jul 2025 02:00:52 +0000
Files and hashes: 1: _yLmchLwIYVTnPdJc9fw9h7BqNI.roa (hash: jQg4aqJLhfqC2o9cWdzjV4aGpmH8JtaZPWEi/oExAo8=)
2: dHyzZv9uI99sCX9grcf6gHVZgZE.crl (hash: GwsXDnrJN6FL/bQtVSL1S1lc3pepeTIV4MtMAXTxPpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:dd:90:76:c3:15:97:87:84:ee:87:0a:2a:3f:68:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747cb366ff6e23df6c097f60adc7fa8075598191
Validity
Not Before: Jul 2 02:00:52 2025 GMT
Not After : Jul 3 02:00:52 2025 GMT
Subject: CN=67225d39fa89f000dc535c509a61d887e4925a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:a1:1e:0b:63:8e:af:c8:d1:e8:0f:1a:7a:
83:e0:f8:12:6f:fe:da:28:99:04:5d:ca:59:ee:ae:
1e:70:3d:78:d8:06:d8:ce:b7:97:91:5d:01:fa:f5:
f0:ca:e3:de:e6:25:a1:da:66:ba:9c:a7:07:da:27:
69:f1:92:47:09:0d:f1:fe:81:f5:ff:af:df:fe:03:
c1:31:32:6b:b1:b1:bb:67:c3:24:1b:3a:bf:10:ea:
5f:71:4d:55:82:aa:df:48:b9:6a:22:56:c0:ce:44:
b2:b1:f6:6a:e6:13:99:be:df:76:d1:11:d9:a4:9a:
2a:dd:0c:f4:91:a4:e4:c6:a1:8b:36:1a:c3:9e:c2:
c3:c1:ba:dc:79:df:78:66:80:0c:87:4e:5c:d1:99:
72:69:89:54:c5:91:e9:14:fc:dd:21:38:7e:eb:f8:
5b:11:2c:c4:88:fc:54:c1:3b:54:5d:5a:80:51:79:
ad:fe:c6:7e:d9:04:e9:8b:55:99:78:7f:d7:2c:52:
3b:70:91:0b:51:37:13:a6:48:30:ac:c9:63:ab:79:
35:ad:a5:cf:83:ce:c6:e2:98:2b:d4:a0:a0:79:38:
de:d1:b9:aa:10:88:d2:2d:9d:df:fa:49:dd:ae:1a:
bc:03:dc:9d:ff:82:e7:0e:8e:de:bc:26:ab:41:c1:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:22:5D:39:FA:89:F0:00:DC:53:5C:50:9A:61:D8:87:E4:92:5A:69
X509v3 Authority Key Identifier:
keyid:74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:13:31:e3:9e:09:bd:8a:2f:e2:a9:8e:a1:82:f7:64:7f:64:
da:9b:83:b4:67:b3:e6:ac:a2:1f:d1:a6:c6:a8:d2:0c:ab:0b:
80:93:40:79:bf:69:4a:b2:0a:4c:11:92:c8:67:d3:02:a0:2d:
e1:ca:0a:15:3e:c6:fb:d6:d5:80:5b:60:81:bc:75:4d:6a:4c:
7a:2d:87:8c:1a:7e:f3:8c:ee:de:1f:42:10:d6:20:f9:1a:63:
09:24:41:5f:19:f1:86:07:a1:2d:c5:5f:35:aa:1e:03:86:52:
14:d1:86:19:b9:36:d4:1c:33:d2:04:25:82:e0:ac:14:d0:5c:
89:19:66:93:e4:d7:ac:23:9b:d9:cd:be:2e:4c:1f:34:ab:28:
f9:8c:8e:eb:0a:e8:14:5c:72:f4:e1:0c:76:20:04:04:8c:27:
af:3c:69:f5:38:3b:52:1f:a7:41:07:89:f0:11:6e:61:bf:92:
02:7f:f7:b4:4a:eb:5b:b0:44:2e:98:2f:14:52:ff:1d:da:94:
c0:88:e1:04:f1:9c:f5:aa:af:50:f3:88:8c:47:9d:62:57:09:
c9:19:ec:e8:bc:7b:6a:f3:4b:22:5b:59:33:17:a3:83:f0:17:
a5:25:b5:31:96:ff:b1:a4:6c:b8:21:40:53:cc:7b:88:58:5d:
89:72:8f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfI3ZB2wxWXh4TuhwoqP2gYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0N2NiMzY2ZmY2ZTIzZGY2YzA5N2Y2MGFkYzdmYTgwNzU1
OTgxOTEwHhcNMjUwNzAyMDIwMDUyWhcNMjUwNzAzMDIwMDUyWjAzMTEwLwYDVQQD
Eyg2NzIyNWQzOWZhODlmMDAwZGM1MzVjNTA5YTYxZDg4N2U0OTI1YTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRKhHgtjjq/I0egPGnqD4PgSb/7a
KJkEXcpZ7q4ecD142AbYzreXkV0B+vXwyuPe5iWh2ma6nKcH2idp8ZJHCQ3x/oH1
/6/f/gPBMTJrsbG7Z8MkGzq/EOpfcU1VgqrfSLlqIlbAzkSysfZq5hOZvt920RHZ
pJoq3Qz0kaTkxqGLNhrDnsLDwbrced94ZoAMh05c0ZlyaYlUxZHpFPzdITh+6/hb
ESzEiPxUwTtUXVqAUXmt/sZ+2QTpi1WZeH/XLFI7cJELUTcTpkgwrMljq3k1raXP
g87G4pgr1KCgeTje0bmqEIjSLZ3f+kndrhq8A9yd/4LnDo7evCarQcGrswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGciXTn6ifAA3FNcUJph2IfkklppMB8GA1UdIwQY
MBaAFHR8s2b/biPfbAl/YK3H+oB1WYGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEh5elp2OXVJOTlzQ1g5Z3JjZjZnSFZaZ1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zYWI1NWQtODUyZi00OTViLWIyYjMt
ZTAyZDczMGZlODRlLzEvZEh5elp2OXVJOTlzQ1g5Z3JjZjZnSFZaZ1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zYWI1NWQtODUyZi00OTViLWIyYjMtZTAyZDczMGZlODRl
LzEvZEh5elp2OXVJOTlzQ1g5Z3JjZjZnSFZaZ1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxMx454J
vYov4qmOoYL3ZH9k2puDtGez5qyiH9GmxqjSDKsLgJNAeb9pSrIKTBGSyGfTAqAt
4coKFT7G+9bVgFtggbx1TWpMei2HjBp+84zu3h9CENYg+RpjCSRBXxnxhgehLcVf
NaoeA4ZSFNGGGbk21Bwz0gQlguCsFNBciRlmk+TXrCOb2c2+LkwfNKso+YyO6wro
FFxy9OEMdiAEBIwnrzxp9Tg7Uh+nQQeJ8BFuYb+SAn/3tErrW7BELpgvFFL/HdqU
wIjhBPGc9aqvUPOIjEedYlcJyRns6Lx7avNLIltZMxejg/AXpSW1MZb/saRsuCFA
U8x7iFhdiXKPAw==
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:44:52 2025 by rpki-client