Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: HRd6OIzAoqFnoklTqhX/hQmAGa8wKFcu6H3beGnRy0E=
Subject key identifier: C6:7C:50:15:E2:6B:D9:43:01:5F:DD:48:83:7C:27:4F:95:CD:DE:FE
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 0198D65FC1822813792F9D6F7ED4D18B204F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 1045
Signing time: Sat 23 Aug 2025 10:00:56 +0000
Manifest this update: Sat 23 Aug 2025 10:00:56 +0000
Manifest next update: Sun 24 Aug 2025 10:00:56 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: tUkJXtNNzcS3Jyr6K8Lp43nnOJHs4Mdhx+PTjzrfsUI=)
2: uzHsVm3pK-eWySg6DxW1LNadfN4.roa (hash: f7Ekdfxt1w1Ik7dpXGT0WWQ4k0292INTL/KsMP+l94c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c1:82:28:13:79:2f:9d:6f:7e:d4:d1:8b:20:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: Aug 23 10:00:56 2025 GMT
Not After : Aug 24 10:00:56 2025 GMT
Subject: CN=c67c5015e26bd943015fdd48837c274f95cddefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:8e:6c:ac:ff:c0:a5:2d:26:71:23:17:4c:
04:5f:f8:78:6a:44:a3:0a:37:4f:59:0c:e3:2f:ab:
eb:d0:66:65:2b:70:1e:8b:09:c4:7c:d5:e3:2a:07:
fd:d7:4d:f5:5b:15:c6:77:84:fd:e9:8b:d2:03:9f:
f1:fa:69:cb:bc:7c:84:d0:3e:fb:9f:43:15:91:1b:
1c:9f:c4:51:c5:8e:19:39:2a:8e:2f:1e:27:ca:ee:
80:10:c6:e5:1e:17:1b:6a:45:17:7a:ee:f6:fe:5c:
41:af:f2:25:0d:2f:65:23:8a:69:72:9f:30:c5:54:
16:da:16:db:c4:3e:88:8e:13:dc:ea:c0:67:18:c3:
5f:bb:6e:50:9e:ba:80:92:27:64:f5:fc:c7:09:97:
b7:a5:1f:24:d9:57:b7:fb:95:09:70:e7:02:69:13:
ed:95:63:02:b0:3a:2d:94:7b:05:c3:82:d9:d1:78:
73:0a:75:b4:f9:c9:e0:c7:ec:74:26:25:fb:fa:b2:
d8:fb:91:2c:dd:1e:f6:d6:69:a0:f9:8b:dc:6d:90:
2b:64:a9:f7:56:a2:c1:c1:07:58:3b:59:c5:ec:32:
a0:af:81:fd:a8:f9:1d:74:23:36:9d:f8:02:8b:91:
76:da:6d:68:82:80:ef:ed:2f:54:26:31:6d:c9:e8:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7C:50:15:E2:6B:D9:43:01:5F:DD:48:83:7C:27:4F:95:CD:DE:FE
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:38:df:63:0a:8f:34:ae:d6:6c:f6:c3:fc:02:03:b1:43:f1:
4d:aa:8b:1f:c5:a5:06:96:aa:23:c6:47:8a:6c:23:c4:14:6d:
83:3d:ae:cf:4f:75:aa:08:86:8c:25:ac:dd:0b:97:ae:b0:bf:
fa:cb:b2:87:2a:10:48:e9:21:51:5f:f1:ac:e5:94:48:15:81:
d4:eb:f8:82:f8:c6:5a:c1:da:84:f8:89:75:33:13:aa:d8:75:
71:03:83:dd:62:e0:a7:84:25:be:1b:13:a2:86:36:e9:38:d4:
cb:76:29:51:a7:14:cd:75:92:90:de:09:62:09:d9:28:46:ed:
e8:7d:0d:c4:f1:fa:93:ed:03:c6:5b:6a:5e:d0:1a:18:02:d8:
34:b6:75:a4:f1:3f:32:96:79:51:f8:15:9b:f2:9e:38:4d:aa:
f8:4c:59:73:1c:74:04:b6:0d:33:ee:d3:87:98:50:09:64:28:
d7:b2:be:73:70:47:63:76:cf:ee:a4:34:69:ab:f3:ef:e4:11:
d1:ea:d6:7c:b6:fe:b6:74:b7:da:e0:ab:43:61:e6:d0:3a:55:
e0:53:bd:61:4c:8d:ba:6f:81:f5:80:c0:7f:b7:fe:b3:13:a2:
c7:3c:56:19:0d:70:16:db:ff:f3:ff:17:ad:8d:c4:4c:e9:66:
ac:ab:84:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX8GCKBN5L51vftTRiyBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDcwMDJiZjNhMmVhY2ZjODgxZDVlMWEwMjExMDk4YzY2
OTk1NmMwHhcNMjUwODIzMTAwMDU2WhcNMjUwODI0MTAwMDU2WjAzMTEwLwYDVQQD
EyhjNjdjNTAxNWUyNmJkOTQzMDE1ZmRkNDg4MzdjMjc0Zjk1Y2RkZWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8KObKz/wKUtJnEjF0wEX/h4akSj
CjdPWQzjL6vr0GZlK3AeiwnEfNXjKgf91031WxXGd4T96YvSA5/x+mnLvHyE0D77
n0MVkRscn8RRxY4ZOSqOLx4nyu6AEMblHhcbakUXeu72/lxBr/IlDS9lI4ppcp8w
xVQW2hbbxD6IjhPc6sBnGMNfu25QnrqAkidk9fzHCZe3pR8k2Ve3+5UJcOcCaRPt
lWMCsDotlHsFw4LZ0XhzCnW0+cngx+x0JiX7+rLY+5Es3R721mmg+YvcbZArZKn3
VqLBwQdYO1nF7DKgr4H9qPkddCM2nfgCi5F22m1ogoDv7S9UJjFtyejzFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZ8UBXia9lDAV/dSIN8J0+Vzd7+MB8GA1UdIwQY
MBaAFP3XACvzourPyIHV4aAhEJjGaZVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMDFiY2YtZDFkZi00N2M0LWEyZWIt
MjE2MWZmNDc4ODFjLzEvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xMDFiY2YtZDFkZi00N2M0LWEyZWItMjE2MWZmNDc4ODFj
LzEvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjjfYwqP
NK7WbPbD/AIDsUPxTaqLH8WlBpaqI8ZHimwjxBRtgz2uz091qgiGjCWs3QuXrrC/
+suyhyoQSOkhUV/xrOWUSBWB1Ov4gvjGWsHahPiJdTMTqth1cQOD3WLgp4QlvhsT
ooY26TjUy3YpUacUzXWSkN4JYgnZKEbt6H0NxPH6k+0DxltqXtAaGALYNLZ1pPE/
MpZ5UfgVm/KeOE2q+ExZcxx0BLYNM+7Th5hQCWQo17K+c3BHY3bP7qQ0aavz7+QR
0erWfLb+tnS32uCrQ2Hm0DpV4FO9YUyNum+B9YDAf7f+sxOixzxWGQ1wFtv/8/8X
rY3ETOlmrKuEZw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:21 2025 by rpki-client