Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: +tM3CumD1+grus2VLQkVZ8DTwrFlqoeFUhQXchR2rXw=
Subject key identifier: 9E:26:70:65:15:75:0B:F0:92:69:1C:F5:CC:F9:B3:4A:17:EF:24:C5
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 0198D4745AAE06FF2AFC3F56352BCCCB572D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0970
Signing time: Sat 23 Aug 2025 01:04:11 +0000
Manifest this update: Sat 23 Aug 2025 01:04:11 +0000
Manifest next update: Sun 24 Aug 2025 01:04:11 +0000
Files and hashes: 1: 8nt8dsbMeiqtSt6KoDNGgs5pyTM.roa (hash: RvFtibhd8tSawl3iSjZ76rX4z9HhG8SM7MwleTD5nY0=)
2: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: fAhRuhn6LPldpNaEVQ1as/pTnCrcL5F3IXS1HanyiwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:5a:ae:06:ff:2a:fc:3f:56:35:2b:cc:cb:57:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Aug 23 01:04:11 2025 GMT
Not After : Aug 24 01:04:11 2025 GMT
Subject: CN=9e26706515750bf092691cf5ccf9b34a17ef24c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a1:0e:eb:b1:fb:e6:01:fe:06:0e:97:65:33:
a4:9e:87:99:54:c3:87:2b:c3:68:2c:bf:fb:d3:7d:
1c:20:8c:52:e2:5d:1c:21:70:b2:e8:87:ed:db:34:
60:23:ac:02:5b:21:1a:ef:07:ba:06:52:94:e0:d2:
c9:b9:12:72:8c:e9:c2:22:c5:24:13:13:72:c5:6f:
fc:b3:7d:02:ab:26:ce:6b:4d:a4:59:4a:52:bd:94:
ea:e5:06:c2:f0:5e:71:9c:22:3d:f4:ca:04:55:e6:
8d:77:74:31:b1:3d:de:3e:78:52:26:c9:92:8f:6e:
b2:28:d7:03:f6:82:63:05:9f:ee:b6:9a:36:ca:0d:
83:7b:d5:2f:be:5e:e0:aa:16:7a:e6:2b:b7:9c:f8:
03:87:1e:e0:ce:37:0d:1b:a4:09:d4:b3:6a:9b:ae:
ad:31:0d:2a:b8:39:4d:97:87:79:70:77:87:09:22:
5f:7d:f5:0d:92:9f:3a:2a:96:51:95:e5:66:16:a8:
53:38:b8:b7:ad:e5:f9:41:b1:41:82:0f:46:10:5c:
50:7e:93:56:9c:e1:ab:39:34:86:9c:8e:d3:f5:59:
32:b6:95:42:a4:fc:e5:e3:94:4c:a3:00:a8:5f:33:
c8:7b:90:d1:9c:cb:97:62:f7:d1:7c:71:da:f1:3a:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:26:70:65:15:75:0B:F0:92:69:1C:F5:CC:F9:B3:4A:17:EF:24:C5
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c9:b4:19:36:5e:18:b1:c3:02:a1:f1:4f:d1:da:d2:d2:e6:
bc:44:17:17:97:7f:0a:e4:e5:8e:c6:ab:7a:9d:4f:b4:07:44:
c2:1c:08:53:43:16:f7:d4:38:b1:f6:bd:b1:93:41:1c:00:57:
29:3c:47:16:74:4e:a4:8e:12:44:4b:1d:e5:44:23:85:67:cd:
8e:c2:e8:2d:2f:65:64:53:c6:67:0f:39:01:01:8c:fa:3b:f6:
47:65:41:b9:00:22:d9:60:8d:7e:a6:e6:d8:40:9f:2f:b0:c3:
bf:f2:9e:97:f8:75:4f:fe:40:90:62:a3:16:1c:c3:e2:af:53:
b6:0f:a1:5e:5f:24:20:ed:61:58:92:54:83:02:c5:1a:c8:5d:
33:28:2e:83:d2:13:1c:86:ed:57:01:d7:67:7f:64:f6:70:ba:
d6:a2:42:b5:7c:f2:8f:d1:45:24:91:79:09:23:9d:fe:16:fe:
85:ad:f7:95:2f:e0:6b:37:25:92:2d:44:07:3b:19:da:4d:71:
12:e8:fb:62:d0:86:93:11:6d:53:5c:5c:0e:94:38:f0:fb:f6:
c2:9c:43:31:5a:2d:8b:66:1f:f0:40:7e:07:ae:55:de:94:6e:
b3:09:87:71:3e:7b:49:b2:02:3b:68:83:19:c3:af:c6:8f:b9:
2e:2b:f2:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdFquBv8q/D9WNSvMy1ctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZmUzMDU1ZTg3MjkwMDAwZTMyODdmN2FiNTg4MzgwMmE1
YWE2ZGEwHhcNMjUwODIzMDEwNDExWhcNMjUwODI0MDEwNDExWjAzMTEwLwYDVQQD
Eyg5ZTI2NzA2NTE1NzUwYmYwOTI2OTFjZjVjY2Y5YjM0YTE3ZWYyNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaEO67H75gH+Bg6XZTOknoeZVMOH
K8NoLL/7030cIIxS4l0cIXCy6Ift2zRgI6wCWyEa7we6BlKU4NLJuRJyjOnCIsUk
ExNyxW/8s30CqybOa02kWUpSvZTq5QbC8F5xnCI99MoEVeaNd3QxsT3ePnhSJsmS
j26yKNcD9oJjBZ/utpo2yg2De9Uvvl7gqhZ65iu3nPgDhx7gzjcNG6QJ1LNqm66t
MQ0quDlNl4d5cHeHCSJfffUNkp86KpZRleVmFqhTOLi3reX5QbFBgg9GEFxQfpNW
nOGrOTSGnI7T9VkytpVCpPzl45RMowCoXzPIe5DRnMuXYvfRfHHa8TqH5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4mcGUVdQvwkmkc9cz5s0oX7yTFMB8GA1UdIwQY
MBaAFHb+MFXocpAADjKH96tYg4AqWqbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iY2UxNDEtZTljMi00YTVkLThlMTYt
ODRiNTE3NmEyYTRjLzEvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iY2UxNDEtZTljMi00YTVkLThlMTYtODRiNTE3NmEyYTRj
LzEvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8m0GTZe
GLHDAqHxT9Ha0tLmvEQXF5d/CuTljsarep1PtAdEwhwIU0MW99Q4sfa9sZNBHABX
KTxHFnROpI4SREsd5UQjhWfNjsLoLS9lZFPGZw85AQGM+jv2R2VBuQAi2WCNfqbm
2ECfL7DDv/Kel/h1T/5AkGKjFhzD4q9Ttg+hXl8kIO1hWJJUgwLFGshdMygug9IT
HIbtVwHXZ39k9nC61qJCtXzyj9FFJJF5CSOd/hb+ha33lS/gazclki1EBzsZ2k1x
Euj7YtCGkxFtU1xcDpQ48Pv2wpxDMVoti2Yf8EB+B65V3pRuswmHcT57SbICO2iD
GcOvxo+5Livydg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:08 2025 by rpki-client