Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File: d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier: 3PaF9K2IzxzQ4+cW/K9/CgMOYBojCa63pKQ61QAD4ww=
Subject key identifier: A7:B6:AB:97:FE:48:DD:BC:7B:21:DC:30:ED:12:45:37:11:13:52:81
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 0198D54E9212DD08CF9EC995A5B6DE593429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:32 +0000
Manifest this update: Sat 23 Aug 2025 05:02:32 +0000
Manifest next update: Sun 24 Aug 2025 05:02:32 +0000
Files and hashes: 1: GAo7ZduAV60PzhY9o_GDH21ot64.roa (hash: L65aKQ/diSXQMwJ1Sh2UT0BCtlwKc371uG33rtI8OVw=)
2: YnJ26bGDXX1huMvr8EfEnzAcB78.roa (hash: k0PljRyemCupKRxSVAifU5D7QGL/CooV0WFr/NbUXsk=)
3: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: gan1EzfOHXMoXIyUCw+vV5ueSgOgcTcKid0xLVPg8zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:92:12:dd:08:cf:9e:c9:95:a5:b6:de:59:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Aug 23 05:02:32 2025 GMT
Not After : Aug 24 05:02:32 2025 GMT
Subject: CN=a7b6ab97fe48ddbc7b21dc30ed12453711135281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:34:38:bb:20:5f:b9:f5:10:84:c3:31:44:
83:c0:37:04:76:34:6c:45:82:05:5d:12:aa:65:3d:
b5:2a:e1:45:e0:ec:98:5c:59:f9:07:48:f4:bc:38:
44:3b:ab:4f:c1:1a:fa:c2:40:c9:fb:3e:31:3c:b8:
08:13:c9:67:b6:36:87:74:bd:84:b2:50:34:dd:f0:
0a:21:db:1d:4a:77:8e:62:47:6d:29:41:34:95:85:
f9:e1:d3:94:5a:00:40:ca:bc:6d:fe:a2:17:91:c1:
95:30:33:2c:39:47:1c:e0:61:97:c5:eb:79:96:96:
75:cc:81:57:64:6b:68:20:3d:93:26:4f:c6:78:b2:
34:e0:99:52:50:bc:47:d2:0d:3e:44:50:a7:11:be:
64:cb:02:06:e0:8a:f5:86:22:3f:0b:b3:53:2c:01:
12:37:cd:ea:0f:4e:49:df:25:bd:7a:f3:c8:f0:13:
bf:ee:4a:e0:fd:4e:6a:7c:df:de:a5:22:f4:08:ba:
b5:38:03:09:33:e5:dc:79:6a:9b:23:81:e2:a3:81:
3b:b7:75:be:ed:9e:06:33:2c:1d:43:ef:51:a5:ae:
2d:b3:34:7d:02:fc:d4:57:fe:a3:20:bd:5e:47:72:
42:0e:5c:e2:42:57:36:b1:6a:cf:ae:0a:26:4d:d3:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B6:AB:97:FE:48:DD:BC:7B:21:DC:30:ED:12:45:37:11:13:52:81
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7d:45:20:40:49:da:96:f4:ff:08:db:06:06:d8:8e:6f:8a:
35:cb:8e:4a:6b:5a:a5:45:53:8f:a3:11:bd:7c:7f:b5:10:ca:
7f:04:dd:a2:d8:a3:80:62:42:f7:1c:88:62:fd:71:d4:80:ac:
7a:c0:39:db:5e:8d:e2:51:d7:09:b8:2a:46:78:cc:61:b9:89:
ba:19:4a:0e:ed:3e:bb:d8:2e:9c:6e:2d:cc:d3:64:2b:85:c3:
86:d3:a5:c7:11:7c:d2:e2:c6:5e:98:91:d0:0c:48:6a:5f:43:
27:4c:80:06:c4:7c:a5:94:5e:8e:8f:60:35:6b:19:c3:79:da:
58:a3:e2:db:eb:f4:b6:75:28:bd:37:e0:bf:31:47:f0:b2:e2:
9a:e6:98:95:3f:0e:cb:33:f5:ac:ef:a6:dc:5d:6e:1c:54:c6:
fe:37:20:3b:27:d4:6f:07:e1:f7:47:97:00:98:a6:6f:90:92:
8a:47:ff:f4:7a:4a:5d:c7:c5:ab:d4:6c:57:de:74:ec:98:37:
cf:8e:dc:b9:f1:f0:0e:97:ca:d7:9d:e9:01:2e:ee:a2:ca:4b:
ac:4c:27:c3:9c:c1:5f:53:a6:f0:b5:d2:cd:53:9e:06:79:ec:
25:0b:d2:49:ac:24:b0:38:20:3e:e0:36:22:67:b6:63:d4:4d:
3c:43:f1:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTpIS3QjPnsmVpbbeWTQpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmRkNzVmMmVmYzI0NGY4NmEzMjFiMTUwZTYyOTM2YTE0
MDI5ZGIwHhcNMjUwODIzMDUwMjMyWhcNMjUwODI0MDUwMjMyWjAzMTEwLwYDVQQD
EyhhN2I2YWI5N2ZlNDhkZGJjN2IyMWRjMzBlZDEyNDUzNzExMTM1MjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCQ0OLsgX7n1EITDMUSDwDcEdjRs
RYIFXRKqZT21KuFF4OyYXFn5B0j0vDhEO6tPwRr6wkDJ+z4xPLgIE8lntjaHdL2E
slA03fAKIdsdSneOYkdtKUE0lYX54dOUWgBAyrxt/qIXkcGVMDMsOUcc4GGXxet5
lpZ1zIFXZGtoID2TJk/GeLI04JlSULxH0g0+RFCnEb5kywIG4Ir1hiI/C7NTLAES
N83qD05J3yW9evPI8BO/7krg/U5qfN/epSL0CLq1OAMJM+XceWqbI4Hio4E7t3W+
7Z4GMywdQ+9Rpa4tszR9AvzUV/6jIL1eR3JCDlziQlc2sWrPrgomTdPH8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKe2q5f+SN28eyHcMO0SRTcRE1KBMB8GA1UdIwQY
MBaAFHe9118u/CRPhqMhsVDmKTahQCnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDczWFh5NzhKRS1Hb3lHeFVPWXBOcUZBS2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yNmEzNGUtMjA5NC00ZTc2LWExZWEt
MWRlZGJlN2I1YmFmLzEvZDczWFh5NzhKRS1Hb3lHeFVPWXBOcUZBS2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yNmEzNGUtMjA5NC00ZTc2LWExZWEtMWRlZGJlN2I1YmFm
LzEvZDczWFh5NzhKRS1Hb3lHeFVPWXBOcUZBS2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKX1FIEBJ
2pb0/wjbBgbYjm+KNcuOSmtapUVTj6MRvXx/tRDKfwTdotijgGJC9xyIYv1x1ICs
esA5216N4lHXCbgqRnjMYbmJuhlKDu0+u9gunG4tzNNkK4XDhtOlxxF80uLGXpiR
0AxIal9DJ0yABsR8pZRejo9gNWsZw3naWKPi2+v0tnUovTfgvzFH8LLimuaYlT8O
yzP1rO+m3F1uHFTG/jcgOyfUbwfh90eXAJimb5CSikf/9HpKXcfFq9RsV9507Jg3
z47cufHwDpfK153pAS7uospLrEwnw5zBX1Om8LXSzVOeBnnsJQvSSawksDggPuA2
Ime2Y9RNPEPxUw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:17 2025 by rpki-client