Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: LyDHWlb8JOpVpn9JowRp8fIKiNDoDNyuGFd+hIw8RVA=
Subject key identifier: ED:98:75:1D:33:F2:57:48:8D:25:6D:47:36:20:C3:F4:FD:AC:E0:21
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 0198D5F17FDB2BFA14D23EA83D7DFDEED8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 1113
Signing time: Sat 23 Aug 2025 08:00:30 +0000
Manifest this update: Sat 23 Aug 2025 08:00:30 +0000
Manifest next update: Sun 24 Aug 2025 08:00:30 +0000
Files and hashes: 1: 1-jgtOPobXCJDbrHGNdmL9rzJbgM.roa (hash: uCWGxr32WWfEG1/b7Z2jim0tRFwDuOHUsX5k577/0+I=)
2: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: F86T9ydg5QglaiFO6IGbQKDwReCjogPfgUB4S0WM95c=)
3: x3drftlfvyiEtkh0afmWcroU9Js.roa (hash: NILZn8jb2pSCwJZ594oMmV5sakNi3NDJXkj51QTnCsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:7f:db:2b:fa:14:d2:3e:a8:3d:7d:fd:ee:d8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Aug 23 08:00:30 2025 GMT
Not After : Aug 24 08:00:30 2025 GMT
Subject: CN=ed98751d33f257488d256d473620c3f4fdace021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:bd:07:0b:a8:48:64:45:a3:e7:d3:a1:d2:
96:82:08:38:29:a4:26:71:86:b0:99:09:e6:28:a8:
d1:74:42:6a:25:fd:e1:c5:d4:2c:fb:e5:fa:f9:ac:
95:48:3f:f7:5d:5f:88:ce:d8:0f:e0:66:b7:aa:de:
03:84:bf:c9:af:61:3b:a5:60:a0:08:ed:52:c4:4d:
17:f0:c0:3d:36:8d:f4:70:96:ad:32:b3:c3:37:2b:
11:80:65:2a:e7:f2:ca:0c:f7:c1:34:a9:20:bd:65:
06:df:47:aa:e5:54:40:70:10:d3:0c:5f:5a:ba:85:
36:56:cd:95:ad:5f:c2:58:89:38:24:24:6f:74:ee:
25:18:7d:3b:f0:6b:bb:e9:57:f8:ec:91:4c:7e:ed:
cb:61:d5:47:e1:31:21:f9:fb:5b:f5:87:4d:16:f4:
93:86:75:74:6e:d0:23:c1:4c:b4:3f:21:93:da:f3:
cf:f3:27:1b:87:0c:7c:41:07:75:3d:b5:49:f8:c3:
2b:68:51:75:85:72:0c:f4:ee:c4:64:35:47:99:ba:
8e:ce:8c:fc:36:cf:6f:79:2e:cc:2c:4d:99:0f:bf:
b1:c1:10:0a:65:3d:8b:7a:27:21:dd:e4:b2:57:ce:
e6:13:af:c7:9a:d5:28:21:8d:a6:eb:c3:09:57:f6:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:98:75:1D:33:F2:57:48:8D:25:6D:47:36:20:C3:F4:FD:AC:E0:21
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:68:e3:2b:6e:81:df:ac:13:57:59:7a:68:3c:ef:a6:af:06:
70:80:a0:90:ee:74:bf:f5:22:8b:b3:b8:94:25:e1:b7:71:27:
94:35:f8:02:3e:54:d6:cf:e7:2d:37:d9:bc:16:a1:ba:73:9b:
6c:88:8b:fe:ad:c6:e1:11:fb:7e:6c:3d:7a:94:9b:94:f9:46:
6e:e2:fd:96:d2:87:19:13:a4:61:e3:40:a3:38:c9:64:ec:cb:
51:f6:46:a3:4a:a9:dd:61:83:d3:07:9e:3c:5c:9e:a6:fe:6b:
24:9a:7e:bc:4a:9e:6e:4c:fd:1b:ab:d6:84:f6:b0:ea:7d:51:
9a:7c:04:35:7d:e8:1a:57:db:85:56:03:ce:71:01:30:25:8f:
63:ae:19:31:68:b2:b8:40:bc:f2:97:53:37:ff:7e:1d:9a:63:
9b:07:0e:54:75:1a:0a:4d:78:94:18:d0:73:38:78:e0:03:ad:
b5:c4:2a:f2:61:41:28:3b:70:b1:69:7d:96:88:58:ff:3b:11:
27:99:87:ed:21:9d:9c:6e:92:b9:16:f5:bc:80:55:ae:16:c5:
57:9b:e5:79:fb:7a:94:88:b8:8b:4c:47:3a:d0:8e:f7:92:31:
39:3a:54:d7:65:bc:78:b1:ed:ec:26:df:00:ab:53:e4:fd:35:
aa:ac:e6:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8X/bK/oU0j6oPX397tioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi
NzA1ZjcwHhcNMjUwODIzMDgwMDMwWhcNMjUwODI0MDgwMDMwWjAzMTEwLwYDVQQD
EyhlZDk4NzUxZDMzZjI1NzQ4OGQyNTZkNDczNjIwYzNmNGZkYWNlMDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fO9BwuoSGRFo+fTodKWggg4KaQm
cYawmQnmKKjRdEJqJf3hxdQs++X6+ayVSD/3XV+IztgP4Ga3qt4DhL/Jr2E7pWCg
CO1SxE0X8MA9No30cJatMrPDNysRgGUq5/LKDPfBNKkgvWUG30eq5VRAcBDTDF9a
uoU2Vs2VrV/CWIk4JCRvdO4lGH078Gu76Vf47JFMfu3LYdVH4TEh+ftb9YdNFvST
hnV0btAjwUy0PyGT2vPP8ycbhwx8QQd1PbVJ+MMraFF1hXIM9O7EZDVHmbqOzoz8
Ns9veS7MLE2ZD7+xwRAKZT2Leich3eSyV87mE6/HmtUoIY2m68MJV/ZSxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2YdR0z8ldIjSVtRzYgw/T9rOAhMB8GA1UdIwQY
MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt
MWRhZjgwYzUxOWQwLzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw
LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2jjK26B
36wTV1l6aDzvpq8GcICgkO50v/Uii7O4lCXht3EnlDX4Aj5U1s/nLTfZvBahunOb
bIiL/q3G4RH7fmw9epSblPlGbuL9ltKHGROkYeNAozjJZOzLUfZGo0qp3WGD0wee
PFyepv5rJJp+vEqebkz9G6vWhPaw6n1RmnwENX3oGlfbhVYDznEBMCWPY64ZMWiy
uEC88pdTN/9+HZpjmwcOVHUaCk14lBjQczh44AOttcQq8mFBKDtwsWl9lohY/zsR
J5mH7SGdnG6SuRb1vIBVrhbFV5vleft6lIi4i0xHOtCO95IxOTpU12W8eLHt7Cbf
AKtT5P01qqzmPA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:02 2025 by rpki-client