Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier: tsLqfcqQTgApVFXtAVsMeLrABUSjhwHnUv9tY9/f+xM=
Subject key identifier: 1C:D8:51:25:CE:2A:DC:A7:66:64:1F:55:9B:3C:4D:4A:22:2A:5E:43
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial: 0198D4A7C5DF8A47E7000642193C9E935490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 02:00:21 +0000
Manifest this update: Sat 23 Aug 2025 02:00:21 +0000
Manifest next update: Sun 24 Aug 2025 02:00:21 +0000
Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: p2G/Fz4lleLgj28SNjI3xXXNtxX/ytL/Y0cvLJ3VBJw=)
2: tP4Nr3k13Af3UtlucGdOvIgy7uY.roa (hash: ofrFnG5ByBdxFiFLthIkeYVusoIIsNMbVNLs6rFZMMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c5:df:8a:47:e7:00:06:42:19:3c:9e:93:54:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Validity
Not Before: Aug 23 02:00:21 2025 GMT
Not After : Aug 24 02:00:21 2025 GMT
Subject: CN=1cd85125ce2adca766641f559b3c4d4a222a5e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:dd:c5:7d:e5:c5:4d:c8:47:68:ba:0b:f0:
7f:4e:88:0b:89:a3:7e:5d:6c:c2:95:00:35:25:ff:
59:b9:b8:f1:8f:5b:f3:8b:83:57:48:ea:2e:7f:6c:
91:69:d3:59:9f:9d:fd:ce:6e:7a:66:cd:09:7c:db:
c7:07:cf:e1:74:48:46:1b:55:ad:65:b3:15:a2:55:
eb:bc:7d:94:a4:a0:b2:35:5c:3b:ce:5d:19:c0:86:
b0:49:a0:cd:74:e8:f5:24:3a:54:28:84:a8:cc:8c:
68:a3:d2:97:56:92:03:7b:41:fe:22:73:1c:03:b4:
fe:31:c3:c6:c8:ce:f9:6c:c3:ea:05:0a:12:b5:b8:
3a:cb:3c:17:36:6a:e5:85:72:f4:31:32:82:8b:21:
7e:55:71:81:17:be:01:f5:20:6b:55:11:e5:2f:b4:
c3:b8:a0:5d:b7:2f:59:9e:5a:54:c7:35:00:dd:a1:
0e:77:da:72:31:c9:8e:ac:ae:a0:08:f5:d3:95:9f:
dd:e6:8b:88:a1:5a:f3:02:3a:e8:9c:12:a3:20:24:
af:fa:b8:d0:53:bb:c4:d1:9b:8b:08:72:b5:2b:41:
31:ac:90:1f:21:9e:0c:69:b8:e7:36:7c:10:b0:a0:
d1:33:98:d6:32:bb:fc:36:50:38:72:36:b4:90:f0:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D8:51:25:CE:2A:DC:A7:66:64:1F:55:9B:3C:4D:4A:22:2A:5E:43
X509v3 Authority Key Identifier:
keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7d:8a:c8:3e:1e:d6:3d:7a:79:a9:33:5a:55:4c:54:c5:13:
40:e1:5b:15:17:a4:b8:c1:90:77:d4:55:e7:a4:8a:94:66:12:
df:62:25:30:d4:2b:ad:e8:47:5c:17:f3:f4:2e:c0:06:9a:d1:
23:6c:b6:d3:db:61:0f:f2:59:14:56:69:85:35:64:fc:59:2b:
03:14:0e:ad:13:6f:22:6d:9d:c7:df:eb:33:a0:dd:26:bc:89:
42:8c:8e:30:a6:1e:29:5e:6f:95:28:08:2b:59:1f:91:9c:5b:
f7:e1:ce:c5:05:9b:a2:fa:b2:07:c1:e9:85:4b:f3:c5:45:5b:
ad:e1:b1:be:75:07:3b:67:cf:b4:26:75:7c:6e:bc:13:32:a2:
b4:2a:12:f8:dc:76:70:32:43:48:09:42:8a:01:c3:35:c7:3d:
04:62:f1:65:88:33:17:4a:84:93:1a:47:5e:ec:72:53:99:5b:
76:79:c5:98:1b:71:b6:d0:c8:f9:2d:c1:75:31:d8:31:6e:48:
1e:4e:15:ee:54:12:6c:9b:bf:a9:89:ad:ce:4d:56:d9:65:c0:
40:91:80:ee:d9:35:e5:83:23:d6:99:b4:f9:61:7e:c5:45:78:
ba:cc:f8:f3:1f:6d:b9:77:55:a5:b3:36:f8:20:cb:ce:c5:c9:
81:8c:37:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp8XfikfnAAZCGTyek1SQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjM0NTU2MmQ1NzE4YjZjNGIyMDZiMWFlMzA0ZmM2ODQz
NmFkYjIwHhcNMjUwODIzMDIwMDIxWhcNMjUwODI0MDIwMDIxWjAzMTEwLwYDVQQD
EygxY2Q4NTEyNWNlMmFkY2E3NjY2NDFmNTU5YjNjNGQ0YTIyMmE1ZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YLdxX3lxU3IR2i6C/B/TogLiaN+
XWzClQA1Jf9Zubjxj1vzi4NXSOouf2yRadNZn539zm56Zs0JfNvHB8/hdEhGG1Wt
ZbMVolXrvH2UpKCyNVw7zl0ZwIawSaDNdOj1JDpUKISozIxoo9KXVpIDe0H+InMc
A7T+McPGyM75bMPqBQoStbg6yzwXNmrlhXL0MTKCiyF+VXGBF74B9SBrVRHlL7TD
uKBdty9ZnlpUxzUA3aEOd9pyMcmOrK6gCPXTlZ/d5ouIoVrzAjronBKjICSv+rjQ
U7vE0ZuLCHK1K0ExrJAfIZ4MabjnNnwQsKDRM5jWMrv8NlA4cja0kPDixQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzYUSXOKtynZmQfVZs8TUoiKl5DMB8GA1UdIwQY
MBaAFHWzRVYtVxi2xLIGsa4wT8aENq2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMt
OGFlNTFmNjJkMjE4LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMtOGFlNTFmNjJkMjE4
LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi32KyD4e
1j16eakzWlVMVMUTQOFbFRekuMGQd9RV56SKlGYS32IlMNQrrehHXBfz9C7ABprR
I2y209thD/JZFFZphTVk/FkrAxQOrRNvIm2dx9/rM6DdJryJQoyOMKYeKV5vlSgI
K1kfkZxb9+HOxQWbovqyB8HphUvzxUVbreGxvnUHO2fPtCZ1fG68EzKitCoS+Nx2
cDJDSAlCigHDNcc9BGLxZYgzF0qEkxpHXuxyU5lbdnnFmBtxttDI+S3BdTHYMW5I
Hk4V7lQSbJu/qYmtzk1W2WXAQJGA7tk15YMj1pm0+WF+xUV4usz48x9tuXdVpbM2
+CDLzsXJgYw3xQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:49 2025 by rpki-client