Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft
File: dJm8fW4g9ytAmz-7qsGDSAyekNc.mft (raw, json)
Hash identifier: NKDh1gHH8CO13kKWbidmYKZHlOFTD4a8pTbnEvUqBa8=
Subject key identifier: CF:90:3C:EB:8C:5C:D0:DA:7D:E6:15:93:C6:50:48:7C:35:7D:BF:43
Authority key identifier: 74:99:BC:7D:6E:20:F7:2B:40:9B:3F:BB:AA:C1:83:48:0C:9E:90:D7
Certificate issuer: /CN=7499bc7d6e20f72b409b3fbbaac183480c9e90d7
Certificate serial: 0199FB45961DE4A12C488E1799371DC13500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJm8fW4g9ytAmz-7qsGDSAyekNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft
Manifest number: 0197
Signing time: Sun 19 Oct 2025 07:01:05 +0000
Manifest this update: Sun 19 Oct 2025 07:01:05 +0000
Manifest next update: Mon 20 Oct 2025 07:01:05 +0000
Files and hashes: 1: dJm8fW4g9ytAmz-7qsGDSAyekNc.crl (hash: ByiswIgBvzeMms7anfeKHSAgvU5sW2ba/EE4SJbnJm8=)
2: huwtM5H3WHHFN2LeVYLLfwYIi9U.roa (hash: lyQDWq341CJPd/NvmgyGwJD/zV+qdIXVc/dkiOsTWVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJm8fW4g9ytAmz-7qsGDSAyekNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:96:1d:e4:a1:2c:48:8e:17:99:37:1d:c1:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7499bc7d6e20f72b409b3fbbaac183480c9e90d7
Validity
Not Before: Oct 19 07:01:05 2025 GMT
Not After : Oct 20 07:01:05 2025 GMT
Subject: CN=cf903ceb8c5cd0da7de61593c650487c357dbf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:93:65:b7:64:22:88:1f:95:76:ca:d2:2c:
6e:1d:33:ff:4d:a8:27:3c:16:52:b9:d3:f2:e2:70:
05:d7:c2:40:bd:c0:72:a8:ff:13:7b:1a:3c:3b:65:
6a:26:ff:20:5c:17:b4:4a:6e:e9:e2:51:59:98:1c:
5b:23:15:4d:35:fe:2b:28:63:1c:13:51:dc:63:da:
e7:c7:81:06:99:c6:d9:7e:32:b4:7f:e4:41:6a:60:
ec:b4:74:58:23:5f:6a:f8:e2:a1:66:5a:97:ee:ca:
e2:66:ec:c3:9a:23:31:a4:b6:17:e7:b6:57:a9:aa:
92:f8:94:3f:b4:15:d5:4f:61:e7:64:32:15:49:be:
ef:47:15:42:2f:e3:a0:29:8a:eb:7e:06:41:15:5f:
44:6f:f3:c4:cf:c0:6c:31:db:75:51:36:8f:98:e8:
61:f2:2a:50:46:18:cc:f1:58:bc:f8:40:3d:8b:1c:
38:35:b2:61:ec:dd:af:34:7c:6a:4f:f1:32:04:d6:
a7:cb:0e:e5:f6:d2:61:f5:87:b9:d9:a5:91:1a:f6:
aa:68:b5:89:49:5b:26:73:ca:5f:ce:50:9c:c0:98:
4a:36:7a:02:2f:be:b4:11:8e:b5:0b:98:1a:5f:84:
a9:b3:4c:2b:e5:32:26:ca:70:1b:bc:d9:1f:87:db:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:90:3C:EB:8C:5C:D0:DA:7D:E6:15:93:C6:50:48:7C:35:7D:BF:43
X509v3 Authority Key Identifier:
keyid:74:99:BC:7D:6E:20:F7:2B:40:9B:3F:BB:AA:C1:83:48:0C:9E:90:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJm8fW4g9ytAmz-7qsGDSAyekNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:23:f3:a8:f7:d4:12:0f:5a:8d:7e:79:ab:cc:81:d7:2b:b0:
22:79:d9:44:0b:7c:53:6e:47:f5:92:06:ba:34:c3:cd:d4:c2:
f2:4c:17:86:c0:cc:82:96:61:5f:84:44:88:67:bb:8e:ff:41:
e9:3a:33:8f:85:70:68:2b:d3:c8:a4:7a:6e:24:3e:9d:6e:88:
c2:8a:a7:40:ab:83:d1:47:2d:29:95:82:90:ee:bd:bf:35:f8:
0a:60:14:af:18:fe:c6:c9:43:e2:04:3d:4e:94:75:22:4b:fc:
1c:77:13:e8:e2:c4:f7:a6:3e:34:00:d8:93:64:61:24:d3:a2:
35:1e:77:e8:26:f8:d8:54:c3:68:74:e8:41:d6:ac:28:4f:db:
30:4d:c3:ad:aa:97:f4:63:c2:97:8a:40:0e:9a:0a:5f:64:83:
d7:7c:f7:3d:54:7d:a7:65:98:e2:9e:59:1f:f2:55:4f:5b:a3:
50:85:fc:1f:64:d7:7f:e5:a9:b8:f1:11:aa:89:ca:29:00:01:
cb:8d:cf:0b:dd:d2:f1:cd:a4:1f:80:eb:a2:d9:24:6e:fd:92:
43:c5:e7:28:ff:ab:63:ec:03:90:08:73:e8:48:3c:c0:0c:b0:
7d:c9:6c:5f:cf:79:e5:94:85:6b:27:29:4b:21:6e:83:08:5b:
37:22:09:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RZYd5KEsSI4XmTcdwTUAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTliYzdkNmUyMGY3MmI0MDliM2ZiYmFhYzE4MzQ4MGM5
ZTkwZDcwHhcNMjUxMDE5MDcwMTA1WhcNMjUxMDIwMDcwMTA1WjAzMTEwLwYDVQQD
EyhjZjkwM2NlYjhjNWNkMGRhN2RlNjE1OTNjNjUwNDg3YzM1N2RiZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA6TZbdkIogflXbK0ixuHTP/Tagn
PBZSudPy4nAF18JAvcByqP8Texo8O2VqJv8gXBe0Sm7p4lFZmBxbIxVNNf4rKGMc
E1HcY9rnx4EGmcbZfjK0f+RBamDstHRYI19q+OKhZlqX7sriZuzDmiMxpLYX57ZX
qaqS+JQ/tBXVT2HnZDIVSb7vRxVCL+OgKYrrfgZBFV9Eb/PEz8BsMdt1UTaPmOhh
8ipQRhjM8Vi8+EA9ixw4NbJh7N2vNHxqT/EyBNanyw7l9tJh9Ye52aWRGvaqaLWJ
SVsmc8pfzlCcwJhKNnoCL760EY61C5gaX4Sps0wr5TImynAbvNkfh9sgBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+QPOuMXNDafeYVk8ZQSHw1fb9DMB8GA1UdIwQY
MBaAFHSZvH1uIPcrQJs/u6rBg0gMnpDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEptOGZXNGc5eXRBbXotN3FzR0RTQXlla05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jODU2ZGItZTQ0Yy00NmYzLTlhZjMt
YzZkYmI1OWFmYjRiLzEvZEptOGZXNGc5eXRBbXotN3FzR0RTQXlla05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jODU2ZGItZTQ0Yy00NmYzLTlhZjMtYzZkYmI1OWFmYjRi
LzEvZEptOGZXNGc5eXRBbXotN3FzR0RTQXlla05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciPzqPfU
Eg9ajX55q8yB1yuwInnZRAt8U25H9ZIGujTDzdTC8kwXhsDMgpZhX4REiGe7jv9B
6Tozj4VwaCvTyKR6biQ+nW6IwoqnQKuD0UctKZWCkO69vzX4CmAUrxj+xslD4gQ9
TpR1Ikv8HHcT6OLE96Y+NADYk2RhJNOiNR536Cb42FTDaHToQdasKE/bME3DraqX
9GPCl4pADpoKX2SD13z3PVR9p2WY4p5ZH/JVT1ujUIX8H2TXf+WpuPERqonKKQAB
y43PC93S8c2kH4Drotkkbv2SQ8XnKP+rY+wDkAhz6Eg8wAywfclsX8955ZSFaycp
SyFugwhbNyIJcA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:38:06 2025 by rpki-client