Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
File: ds5jfUe3gATQzPrjceaBh2isP6U.mft (raw, json)
Hash identifier: BcGjkvCwRf2+ctvtm6MPxElRS9m+v76ujujR32JTK/k=
Subject key identifier: 73:E3:01:7B:EC:45:14:10:BF:77:68:9A:D6:8A:83:53:B9:37:7D:16
Authority key identifier: 76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
Certificate issuer: /CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Certificate serial: 0198D583ACD0557598650A0A22F6E0C61CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
Manifest number: 146B
Signing time: Sat 23 Aug 2025 06:00:33 +0000
Manifest this update: Sat 23 Aug 2025 06:00:33 +0000
Manifest next update: Sun 24 Aug 2025 06:00:33 +0000
Files and hashes: 1: 2v9WLSFviNLhCEs3PI8ghWfG43g.roa (hash: s4HF4L3IMaVI3bReAfOPFKeWOp26BrTGFcFThVgszh4=)
2: ds5jfUe3gATQzPrjceaBh2isP6U.crl (hash: dm64tuyDniEhnOQbsNAu08Bbu0nzXEdstnvRkLHfrR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ac:d0:55:75:98:65:0a:0a:22:f6:e0:c6:1c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Validity
Not Before: Aug 23 06:00:33 2025 GMT
Not After : Aug 24 06:00:33 2025 GMT
Subject: CN=73e3017bec451410bf77689ad68a8353b9377d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:69:ed:df:ad:2f:ff:9c:0b:38:fc:a4:ca:
ba:f1:27:49:15:32:de:5c:92:c9:a7:a4:a7:73:0b:
80:30:43:a3:bf:3b:e0:5d:96:0c:08:02:ca:56:23:
66:2a:55:ec:9d:59:4a:4b:34:c7:7d:b3:35:47:14:
63:c2:2c:5e:a7:fc:b8:3a:b7:2d:cd:57:c5:95:4c:
46:f2:d6:36:f5:42:1c:b1:22:4e:bc:94:b1:6a:59:
88:b1:8d:a7:e8:62:16:71:d3:f8:54:4f:ec:6f:8e:
fb:5c:c8:cf:f4:32:e6:db:d4:4c:3e:0d:8b:13:48:
40:3e:87:ef:70:16:5b:d9:c2:9f:4a:22:42:a5:cb:
29:0e:00:ed:f7:b7:cd:7b:33:f9:43:07:77:3b:68:
cc:4e:98:37:6c:30:f8:16:dc:82:08:2b:70:36:2c:
7e:42:a4:4b:f3:32:49:e6:46:21:fd:72:39:25:cc:
bc:91:50:30:e7:0c:e2:74:46:2a:ad:d1:c1:18:0c:
85:ad:d9:bf:32:17:a0:4c:10:a1:2a:d0:ee:5b:6d:
ce:88:20:64:c7:b2:ca:e3:33:99:fb:e0:c6:ca:cc:
63:75:20:42:e6:62:c0:9e:34:12:e4:18:65:f2:99:
c2:c6:48:2b:da:ff:3f:90:2c:d6:4f:59:36:16:db:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E3:01:7B:EC:45:14:10:BF:77:68:9A:D6:8A:83:53:B9:37:7D:16
X509v3 Authority Key Identifier:
keyid:76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:36:a3:05:28:b7:13:3c:83:51:91:5d:6c:44:c1:a2:60:74:
9b:0a:83:63:f3:00:38:48:6e:68:74:a3:fa:e3:9a:9b:a2:c4:
f1:0d:19:c1:f7:3b:97:f7:36:8a:27:02:c1:4a:f1:1a:5c:38:
a9:40:26:65:fa:ae:42:0a:77:0d:09:27:76:76:35:83:d6:c1:
10:b2:5d:36:84:d1:2b:7d:ae:df:11:df:82:79:48:75:4f:c5:
b1:1a:42:69:c2:15:cc:3f:65:4e:8e:3c:0e:b3:71:2d:e6:f6:
2c:e3:2e:72:d3:77:d6:89:57:64:da:81:9e:7b:e8:27:e8:15:
a0:c4:22:59:27:f6:77:78:e7:42:33:10:c3:c5:2d:ea:90:76:
31:d0:31:c1:af:ba:2b:ff:e1:16:a9:67:0f:d6:d0:a7:e5:e6:
29:9e:26:6e:b5:c0:aa:33:ca:cb:74:72:a4:b8:47:95:93:9c:
4c:db:19:be:a2:a9:60:4f:0e:76:39:ca:20:8e:e0:72:70:78:
2c:97:97:4d:49:64:13:c2:bf:58:ff:27:2d:a9:4c:94:32:19:
0a:ec:8b:3b:18:ea:7d:c8:41:37:bf:03:b1:2e:e3:ff:d4:a8:
a2:70:0f:0d:4a:93:59:b1:3c:65:54:f2:fe:a3:d7:a1:77:95:
bd:3c:2d:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg6zQVXWYZQoKIvbgxhzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2Y2U2MzdkNDdiNzgwMDRkMGNjZmFlMzcxZTY4MTg3Njhh
YzNmYTUwHhcNMjUwODIzMDYwMDMzWhcNMjUwODI0MDYwMDMzWjAzMTEwLwYDVQQD
Eyg3M2UzMDE3YmVjNDUxNDEwYmY3NzY4OWFkNjhhODM1M2I5Mzc3ZDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrVp7d+tL/+cCzj8pMq68SdJFTLe
XJLJp6SncwuAMEOjvzvgXZYMCALKViNmKlXsnVlKSzTHfbM1RxRjwixep/y4Orct
zVfFlUxG8tY29UIcsSJOvJSxalmIsY2n6GIWcdP4VE/sb477XMjP9DLm29RMPg2L
E0hAPofvcBZb2cKfSiJCpcspDgDt97fNezP5Qwd3O2jMTpg3bDD4FtyCCCtwNix+
QqRL8zJJ5kYh/XI5Jcy8kVAw5wzidEYqrdHBGAyFrdm/MhegTBChKtDuW23OiCBk
x7LK4zOZ++DGysxjdSBC5mLAnjQS5Bhl8pnCxkgr2v8/kCzWT1k2FtuQywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPjAXvsRRQQv3domtaKg1O5N30WMB8GA1UdIwQY
MBaAFHbOY31Ht4AE0Mz643HmgYdorD+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYt
ODQwODgxYTRkMzBkLzEvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYtODQwODgxYTRkMzBk
LzEvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTajBSi3
EzyDUZFdbETBomB0mwqDY/MAOEhuaHSj+uOam6LE8Q0Zwfc7l/c2iicCwUrxGlw4
qUAmZfquQgp3DQkndnY1g9bBELJdNoTRK32u3xHfgnlIdU/FsRpCacIVzD9lTo48
DrNxLeb2LOMuctN31olXZNqBnnvoJ+gVoMQiWSf2d3jnQjMQw8Ut6pB2MdAxwa+6
K//hFqlnD9bQp+XmKZ4mbrXAqjPKy3RypLhHlZOcTNsZvqKpYE8OdjnKII7gcnB4
LJeXTUlkE8K/WP8nLalMlDIZCuyLOxjqfchBN78DsS7j/9SoonAPDUqTWbE8ZVTy
/qPXoXeVvTwttA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:26 2025 by rpki-client