Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
File: dhrP1knI7q2FUZQngfoW9o29EPM.mft (raw, json)
Hash identifier: 5oDJXXyjeRGIELsjX8y3mG5tHKeGhJNebml1WlQhBZI=
Subject key identifier: C5:70:E8:EB:01:32:54:FC:97:25:5C:32:58:52:80:2D:54:01:0A:65
Authority key identifier: 76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
Certificate issuer: /CN=761acfd649c8eead8551942781fa16f68dbd10f3
Certificate serial: 0198D5BC4BC27F9050144BE9074A5EA90DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:02:23 +0000
Manifest this update: Sat 23 Aug 2025 07:02:23 +0000
Manifest next update: Sun 24 Aug 2025 07:02:23 +0000
Files and hashes: 1: UdkvXpXGLdhITVh5jtCCMBnxb7M.roa (hash: HifSo99m/eGKn8WJh44GwrCR837RJMUrmbV81B/JjSg=)
2: dhrP1knI7q2FUZQngfoW9o29EPM.crl (hash: 8p71LJLHLNHFQwBNWPNb+uARRIMcF5sPBygErcFKhrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4b:c2:7f:90:50:14:4b:e9:07:4a:5e:a9:0d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761acfd649c8eead8551942781fa16f68dbd10f3
Validity
Not Before: Aug 23 07:02:23 2025 GMT
Not After : Aug 24 07:02:23 2025 GMT
Subject: CN=c570e8eb013254fc97255c325852802d54010a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:61:25:05:f4:7a:6f:80:3e:e3:94:cc:cc:
b6:55:1e:b5:05:45:df:81:4e:b7:dd:71:97:fa:a9:
14:af:cc:e8:48:8f:13:21:88:08:3f:96:ad:b6:bb:
1f:a9:18:fd:5c:db:a9:45:3f:c6:72:69:46:c1:14:
44:a6:27:56:7a:ed:85:8b:32:7b:53:d2:00:79:55:
0b:c5:e6:54:73:de:a7:a3:5f:b7:65:a6:8e:b1:5d:
e7:71:73:15:6e:51:d9:ef:01:8d:f4:8a:87:6d:64:
6c:9d:ca:fa:48:1f:64:44:ad:c7:0c:4a:8c:8b:68:
38:a8:de:6d:4f:1f:a3:1c:df:e7:43:e1:4a:cb:d6:
02:8a:66:d0:56:36:8d:dc:cc:cc:21:90:c2:02:31:
ad:f4:69:c7:d2:e8:94:d3:06:b0:8e:3e:81:70:7d:
3c:9c:c2:fa:9f:80:d1:08:5b:af:8f:35:95:3c:26:
a6:89:2c:95:57:57:fc:2e:ec:31:8a:50:46:3e:6a:
d6:f2:3d:1d:82:c2:35:28:df:fe:99:79:5e:db:28:
41:25:bb:20:15:2d:eb:a2:8c:9b:9f:17:67:c8:6d:
ba:35:c6:63:66:ff:f7:9f:3a:48:9b:04:ec:25:82:
03:c9:1e:8d:8b:54:43:1c:15:6a:02:4b:98:e1:a3:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:70:E8:EB:01:32:54:FC:97:25:5C:32:58:52:80:2D:54:01:0A:65
X509v3 Authority Key Identifier:
keyid:76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:66:d5:74:f0:1a:c1:67:e7:c7:0b:0f:79:1d:98:93:ac:21:
75:01:a7:a9:9a:0c:c2:3b:f8:57:e6:1c:aa:98:95:c4:7f:90:
38:6b:af:17:72:4d:6f:f7:6d:b5:3d:dc:22:2f:ff:52:c4:68:
83:64:b0:bc:76:ba:4d:06:c5:6c:a1:1d:3a:5d:a0:ad:d8:18:
ed:1f:0c:24:a6:07:d1:6a:8b:6c:03:c1:bc:3e:98:cd:ad:7b:
c3:da:90:53:b5:09:1b:cf:c0:84:e8:f8:98:79:f3:04:42:3b:
0e:01:1a:11:93:8d:0c:ee:8a:e1:8e:53:b1:00:a0:02:f4:c8:
f9:a7:08:ef:0d:8f:d9:b3:01:94:5f:3e:e5:db:53:57:27:ed:
e3:02:d0:c4:bd:98:ad:2c:d9:92:7a:04:42:1f:ae:49:c6:12:
8a:08:39:cb:fe:f6:d6:aa:25:38:ff:ff:c7:42:5d:7b:82:a4:
b9:f7:bd:02:2e:ee:a0:1e:35:84:f4:19:66:4c:cf:12:be:ed:
c0:8c:8b:d7:7d:e4:b8:ec:10:12:cd:35:21:49:ac:3e:c3:9c:
6a:91:6d:e2:a8:f8:7d:b8:99:96:47:39:2c:56:df:24:d2:9d:
98:b3:81:f3:75:aa:d3:0d:6e:65:18:a4:7e:b1:5d:6d:1b:06:
b0:04:fc:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvEvCf5BQFEvpB0peqQ3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MWFjZmQ2NDljOGVlYWQ4NTUxOTQyNzgxZmExNmY2OGRi
ZDEwZjMwHhcNMjUwODIzMDcwMjIzWhcNMjUwODI0MDcwMjIzWjAzMTEwLwYDVQQD
EyhjNTcwZThlYjAxMzI1NGZjOTcyNTVjMzI1ODUyODAyZDU0MDEwYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjRhJQX0em+APuOUzMy2VR61BUXf
gU633XGX+qkUr8zoSI8TIYgIP5attrsfqRj9XNupRT/GcmlGwRREpidWeu2FizJ7
U9IAeVULxeZUc96no1+3ZaaOsV3ncXMVblHZ7wGN9IqHbWRsncr6SB9kRK3HDEqM
i2g4qN5tTx+jHN/nQ+FKy9YCimbQVjaN3MzMIZDCAjGt9GnH0uiU0wawjj6BcH08
nML6n4DRCFuvjzWVPCamiSyVV1f8LuwxilBGPmrW8j0dgsI1KN/+mXle2yhBJbsg
FS3rooybnxdnyG26NcZjZv/3nzpImwTsJYIDyR6Ni1RDHBVqAkuY4aOwAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVw6OsBMlT8lyVcMlhSgC1UAQplMB8GA1UdIwQY
MBaAFHYaz9ZJyO6thVGUJ4H6FvaNvRDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZjkyODMtYjRkNC00NGNkLWE2OWIt
YzczMjAxZGY5OTk1LzEvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC82ZjkyODMtYjRkNC00NGNkLWE2OWItYzczMjAxZGY5OTk1
LzEvZGhyUDFrbkk3cTJGVVpRbmdmb1c5bzI5RVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2bVdPAa
wWfnxwsPeR2Yk6whdQGnqZoMwjv4V+YcqpiVxH+QOGuvF3JNb/dttT3cIi//UsRo
g2SwvHa6TQbFbKEdOl2grdgY7R8MJKYH0WqLbAPBvD6Yza17w9qQU7UJG8/AhOj4
mHnzBEI7DgEaEZONDO6K4Y5TsQCgAvTI+acI7w2P2bMBlF8+5dtTVyft4wLQxL2Y
rSzZknoEQh+uScYSigg5y/721qolOP//x0Jde4Kkufe9Ai7uoB41hPQZZkzPEr7t
wIyL133kuOwQEs01IUmsPsOcapFt4qj4fbiZlkc5LFbfJNKdmLOB83Wq0w1uZRik
frFdbRsGsAT8WA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:59 2025 by rpki-client