Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: 6Ngb4dQ4zfqUNpdPjb1V0fmLQ1HzJVfVTwNTVO007C0=
Subject key identifier: 82:03:B8:10:CE:8D:02:06:F2:BD:4C:B5:19:B7:40:1F:0F:48:45:4C
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 0198D697FEE1D201588C63A033F02551272C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 11:02:22 +0000
Manifest this update: Sat 23 Aug 2025 11:02:22 +0000
Manifest next update: Sun 24 Aug 2025 11:02:22 +0000
Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=)
2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: quVafQahpyogwOnvqbXZ2i8LjaNc93JoYi3WIOlo12E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:fe:e1:d2:01:58:8c:63:a0:33:f0:25:51:27:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Aug 23 11:02:22 2025 GMT
Not After : Aug 24 11:02:22 2025 GMT
Subject: CN=8203b810ce8d0206f2bd4cb519b7401f0f48454c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:25:59:59:8b:72:66:19:f2:f1:21:41:38:
06:08:d4:2d:b5:6a:f3:0b:ac:92:5c:c9:9b:92:72:
1c:87:6b:41:1d:57:d2:49:1a:d8:ef:1b:2c:3b:b2:
59:22:9a:33:65:f3:bc:c8:4c:42:b6:d5:35:49:82:
be:ef:ff:87:4d:ef:ba:f0:c3:ad:c1:da:7d:f6:0e:
49:b6:c2:84:cc:cc:97:f1:71:43:d2:e9:bd:4f:e1:
71:67:d1:5f:f0:95:36:4b:02:fe:12:3e:58:b7:20:
70:5c:03:42:9c:8a:ae:06:90:9c:a1:dc:7e:d5:ed:
c0:6a:ab:a7:f5:fa:50:41:b8:36:90:4c:cc:94:4c:
64:e2:86:17:5d:84:2e:30:b2:7a:8f:d8:81:91:26:
96:de:1e:a3:77:b1:01:46:da:24:52:a0:d9:ba:f0:
2b:4d:87:d3:4e:39:cb:da:d9:b6:9a:5a:dc:27:04:
07:ed:26:f4:39:c6:7e:08:e1:e1:b1:a2:9e:93:ba:
f9:aa:c1:82:c8:6f:6b:17:e1:2e:c7:cf:b0:b5:a2:
2a:6d:84:8a:70:1d:d9:58:44:cb:c6:16:a8:7c:e4:
7d:16:d1:5d:af:fa:5b:78:a4:fb:0d:c7:ea:bc:70:
51:1d:7a:b5:8a:e7:0b:bd:36:70:25:7b:a4:68:29:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:03:B8:10:CE:8D:02:06:F2:BD:4C:B5:19:B7:40:1F:0F:48:45:4C
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e8:45:4c:27:bf:63:44:54:08:fc:b3:c8:04:a9:34:a9:51:
a9:e0:f9:3e:f3:0e:6e:35:72:de:5e:1e:9e:1a:2c:10:87:be:
d3:88:dc:80:b9:be:a2:6e:9f:0f:5b:2e:4a:04:6a:c0:a0:cb:
6a:09:a5:14:ce:cd:5f:61:a3:d6:ad:28:6d:f1:22:09:7e:84:
37:03:f0:b2:2b:32:f1:78:16:c2:f0:34:82:06:ac:0c:94:c5:
e8:60:c1:b9:e8:b3:0e:f8:3b:d3:e6:59:31:96:10:19:1c:7b:
01:49:57:c2:7a:78:d9:02:c6:fe:c9:95:fb:9d:0e:fc:6b:c6:
d1:5e:0b:ec:1b:3e:94:ec:0a:3d:9f:dd:82:2c:98:6b:27:81:
2b:4f:59:96:9b:a2:54:08:9f:f0:74:05:5e:23:c0:6b:d2:01:
2e:94:a6:2a:04:1d:94:91:46:4b:32:cd:3b:7e:02:98:29:59:
c0:46:22:ce:5e:42:a3:ea:cb:a5:ac:8f:99:41:a1:96:96:38:
ee:5b:3d:fa:f9:35:8e:ae:75:de:72:23:37:53:e2:a7:1f:80:
5a:f2:0d:a5:f9:09:b1:a2:11:29:74:f3:c6:fc:9f:0f:1e:30:
4a:09:aa:e8:b7:83:d8:3a:f4:a0:4a:c8:0c:da:60:91:7e:a7:
82:8a:ca:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWl/7h0gFYjGOgM/AlUScsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1M2Q0NzZkYjk2ZGUxZTU4NjIzMTE5YTcwYjlkN2IwMGI2
NzZkYTAwHhcNMjUwODIzMTEwMjIyWhcNMjUwODI0MTEwMjIyWjAzMTEwLwYDVQQD
Eyg4MjAzYjgxMGNlOGQwMjA2ZjJiZDRjYjUxOWI3NDAxZjBmNDg0NTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXElWVmLcmYZ8vEhQTgGCNQttWrz
C6ySXMmbknIch2tBHVfSSRrY7xssO7JZIpozZfO8yExCttU1SYK+7/+HTe+68MOt
wdp99g5JtsKEzMyX8XFD0um9T+FxZ9Ff8JU2SwL+Ej5YtyBwXANCnIquBpCcodx+
1e3Aaqun9fpQQbg2kEzMlExk4oYXXYQuMLJ6j9iBkSaW3h6jd7EBRtokUqDZuvAr
TYfTTjnL2tm2mlrcJwQH7Sb0OcZ+COHhsaKek7r5qsGCyG9rF+Eux8+wtaIqbYSK
cB3ZWETLxhaofOR9FtFdr/pbeKT7DcfqvHBRHXq1iucLvTZwJXukaCmXewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIDuBDOjQIG8r1MtRm3QB8PSEVMMB8GA1UdIwQY
MBaAFHU9R225beHlhiMRmnC517ALZ22gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUt
NDY4NTc4MmFjMmMzLzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUtNDY4NTc4MmFjMmMz
LzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuhFTCe/
Y0RUCPyzyASpNKlRqeD5PvMObjVy3l4enhosEIe+04jcgLm+om6fD1suSgRqwKDL
agmlFM7NX2Gj1q0obfEiCX6ENwPwsisy8XgWwvA0ggasDJTF6GDBueizDvg70+ZZ
MZYQGRx7AUlXwnp42QLG/smV+50O/GvG0V4L7Bs+lOwKPZ/dgiyYayeBK09Zlpui
VAif8HQFXiPAa9IBLpSmKgQdlJFGSzLNO34CmClZwEYizl5Co+rLpayPmUGhlpY4
7ls9+vk1jq513nIjN1Pipx+AWvINpfkJsaIRKXTzxvyfDx4wSgmq6LeD2Dr0oErI
DNpgkX6ngorKMQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:21:36 2025 by rpki-client