Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json)
Hash identifier: pR+4wUWXJYUkSU7Dvc9DeZ3QqwGNJSOUraO5LzihwGs=
Subject key identifier: 4D:8F:46:1B:01:4F:4D:76:C7:4C:05:2E:F3:B0:0A:E8:AB:BE:3A:47
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial: 0198D54DD75BFCA422012800395865834FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
Manifest number: 1129
Signing time: Sat 23 Aug 2025 05:01:45 +0000
Manifest this update: Sat 23 Aug 2025 05:01:45 +0000
Manifest next update: Sun 24 Aug 2025 05:01:45 +0000
Files and hashes: 1: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: 5k/FSrFFlk2lKmluJiYuXE+cyblrFaA7cNKFIBt2sOY=)
2: xzA5d-E1vgeb4mwlvmzNBazR01w.roa (hash: ajfP28ApDq4Q5y/sbVJlhsT7w2HrFwDNTtJP+3l1w9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d7:5b:fc:a4:22:01:28:00:39:58:65:83:4f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Validity
Not Before: Aug 23 05:01:45 2025 GMT
Not After : Aug 24 05:01:45 2025 GMT
Subject: CN=4d8f461b014f4d76c74c052ef3b00ae8abbe3a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c6:42:64:b8:f5:e8:7c:3f:f1:03:4b:3b:8b:
77:34:bc:ad:28:69:3c:15:37:e6:a0:41:f8:6c:ca:
92:f3:b7:6b:d4:ad:4a:23:c3:5b:6e:2b:e0:9e:00:
5a:e4:a2:26:8c:d6:f0:61:84:d2:7a:71:53:bd:91:
26:46:11:4b:2b:20:4b:08:93:e1:41:27:fe:bd:ce:
59:2b:19:38:a1:84:db:32:44:f4:78:28:52:bb:36:
68:48:47:a4:a7:b1:53:98:7c:77:b0:ef:b5:76:b6:
49:83:30:bf:cb:bf:1c:5a:b2:5f:bb:07:3e:71:62:
69:9b:50:5f:e8:99:71:b6:36:0a:82:9f:bd:98:cb:
e5:2b:74:3a:1d:d3:17:db:c7:7c:be:7e:36:9e:e2:
1c:09:0e:82:aa:73:f9:64:55:e2:cf:01:75:49:cf:
5c:a6:e0:70:56:48:49:41:ef:09:06:0a:64:89:18:
69:c4:5f:96:e6:10:19:7a:84:a0:88:08:a2:d4:12:
00:d3:eb:75:b6:8e:93:65:dc:06:d1:09:c5:2c:36:
e6:0f:dc:88:92:1e:7e:b9:5c:50:11:22:15:65:73:
0f:aa:be:cf:59:11:bc:56:2d:18:95:0c:05:cd:3d:
b4:d4:ce:27:2f:e9:b8:7a:11:84:c4:09:45:11:ac:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8F:46:1B:01:4F:4D:76:C7:4C:05:2E:F3:B0:0A:E8:AB:BE:3A:47
X509v3 Authority Key Identifier:
keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:67:83:e5:e0:1a:63:47:5c:3d:ff:0a:79:37:5b:ab:ff:89:
86:a1:0e:6a:a0:eb:d8:09:35:ef:75:6a:74:f5:0f:b9:1b:52:
c0:69:e7:03:81:de:01:74:ee:c4:63:4d:da:d8:41:3d:24:12:
ef:b4:28:32:cd:06:8a:23:b8:93:23:c1:f6:3a:ea:ee:3e:64:
1d:07:16:0a:87:55:2a:7d:17:f3:95:ec:ec:0a:68:b9:e9:91:
c0:ba:a3:a3:f8:e0:01:45:a5:ae:e2:5e:af:00:7c:57:61:01:
77:4c:6c:85:ea:63:77:cd:b7:58:52:ac:16:f3:cb:9e:ae:86:
14:8f:a9:0c:1c:89:36:56:95:bd:25:28:80:48:8a:96:91:79:
63:27:b9:53:83:6a:54:b0:21:6a:47:26:55:a0:d9:55:f9:b9:
1e:dd:2f:d0:17:a7:a6:15:54:e9:ed:01:a8:f5:19:5c:89:3a:
31:f3:4e:6f:75:6e:5b:83:db:56:46:9d:e6:6c:37:35:f1:2e:
d9:d3:cb:b9:1c:4e:ce:8d:98:42:09:49:0e:b0:82:84:d4:bc:
9a:f3:e0:22:07:d3:aa:08:2a:0b:a9:06:47:79:1a:f8:8b:2d:
c7:46:75:07:d1:1e:ab:21:68:68:52:b6:4c:de:17:56:e3:b5:
dc:b4:7d:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTddb/KQiASgAOVhlg0+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MWMwNTc1M2IxOWJjZGI1MzJmZGM3ZjZmNDdlOTdlOTM1
YmEwYTIwHhcNMjUwODIzMDUwMTQ1WhcNMjUwODI0MDUwMTQ1WjAzMTEwLwYDVQQD
Eyg0ZDhmNDYxYjAxNGY0ZDc2Yzc0YzA1MmVmM2IwMGFlOGFiYmUzYTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sZCZLj16Hw/8QNLO4t3NLytKGk8
FTfmoEH4bMqS87dr1K1KI8NbbivgngBa5KImjNbwYYTSenFTvZEmRhFLKyBLCJPh
QSf+vc5ZKxk4oYTbMkT0eChSuzZoSEekp7FTmHx3sO+1drZJgzC/y78cWrJfuwc+
cWJpm1Bf6JlxtjYKgp+9mMvlK3Q6HdMX28d8vn42nuIcCQ6CqnP5ZFXizwF1Sc9c
puBwVkhJQe8JBgpkiRhpxF+W5hAZeoSgiAii1BIA0+t1to6TZdwG0QnFLDbmD9yI
kh5+uVxQESIVZXMPqr7PWRG8Vi0YlQwFzT201M4nL+m4ehGExAlFEaz6RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2PRhsBT012x0wFLvOwCuirvjpHMB8GA1UdIwQY
MBaAFHYcBXU7GbzbUy/cf29H6X6TW6CiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGh3RmRUc1p2TnRUTDl4X2IwZnBmcE5ib0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81YmVmYTctODdmZC00NGEyLWIxZjQt
M2U4ZjU3NWVkZGZmLzEvZGh3RmRUc1p2TnRUTDl4X2IwZnBmcE5ib0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81YmVmYTctODdmZC00NGEyLWIxZjQtM2U4ZjU3NWVkZGZm
LzEvZGh3RmRUc1p2TnRUTDl4X2IwZnBmcE5ib0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2eD5eAa
Y0dcPf8KeTdbq/+JhqEOaqDr2Ak173VqdPUPuRtSwGnnA4HeAXTuxGNN2thBPSQS
77QoMs0GiiO4kyPB9jrq7j5kHQcWCodVKn0X85Xs7ApouemRwLqjo/jgAUWlruJe
rwB8V2EBd0xshepjd823WFKsFvPLnq6GFI+pDByJNlaVvSUogEiKlpF5Yye5U4Nq
VLAhakcmVaDZVfm5Ht0v0BenphVU6e0BqPUZXIk6MfNOb3VuW4PbVkad5mw3NfEu
2dPLuRxOzo2YQglJDrCChNS8mvPgIgfTqggqC6kGR3ka+Istx0Z1B9EeqyFoaFK2
TN4XVuO13LR9rg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:28 2025 by rpki-client