Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: An9l/qEQzGKHfUTcaTK3xwxofHy5laH14gl2PLUmcSo=
Subject key identifier: 44:88:D3:E2:DF:A5:57:DC:1E:A1:7B:BF:AF:9E:44:4D:47:F6:B5:A4
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 0198D54E732667FF2786ABC5CB72329FDE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:24 +0000
Manifest this update: Sat 23 Aug 2025 05:02:24 +0000
Manifest next update: Sun 24 Aug 2025 05:02:24 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: LniFvwGGDkScJKM2NYSfKvUUuPfxy4QgO7Y9cD/JIh8=)
2: Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa (hash: yNGOiWMyz1u0T1szDPmkVxet3IhLc4ljiBf05yJrLuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:73:26:67:ff:27:86:ab:c5:cb:72:32:9f:de:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Aug 23 05:02:24 2025 GMT
Not After : Aug 24 05:02:24 2025 GMT
Subject: CN=4488d3e2dfa557dc1ea17bbfaf9e444d47f6b5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:14:9f:c1:30:04:8e:b3:45:b3:59:d0:56:
96:69:90:bb:1d:63:28:4d:80:97:d7:52:99:a6:e4:
48:29:13:30:04:5e:b1:e7:7f:9c:d1:88:0e:27:bf:
e1:b4:2b:0c:64:ce:d7:0f:f6:66:0d:66:92:70:e4:
03:67:f8:f1:9f:00:da:7f:6c:3b:37:9b:18:9a:5e:
08:da:32:55:66:68:12:76:d5:b8:cb:29:c5:38:5a:
55:c3:0f:90:d0:93:bc:9c:c6:17:15:dc:e8:52:8c:
47:6a:74:8f:4b:61:56:74:dc:36:c0:fa:a7:74:3a:
86:b6:73:0b:11:b0:0b:91:bc:d7:a3:21:a7:d6:5a:
a0:e5:0e:2b:7a:be:62:82:e5:65:bd:ae:0e:59:4d:
a1:2c:c4:ff:40:9d:46:82:4d:5a:84:4c:68:28:93:
8a:00:b1:b7:5c:6c:34:f1:a2:26:c9:aa:be:b2:9f:
d0:95:a2:5c:df:ad:cc:46:2c:4d:2d:c8:37:56:68:
68:56:61:09:45:29:8a:1f:20:36:95:46:fb:30:6c:
0f:c4:df:03:57:32:fd:b5:4d:78:33:c0:05:d6:e6:
06:50:d8:33:05:e0:08:3d:77:64:cd:69:a8:34:32:
8e:cb:5b:8b:ae:6c:63:4b:9d:d0:39:48:38:d8:a1:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:88:D3:E2:DF:A5:57:DC:1E:A1:7B:BF:AF:9E:44:4D:47:F6:B5:A4
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d8:7e:1d:92:02:74:fd:fa:d1:8d:bc:b1:41:96:e6:0f:ee:
1c:51:7b:e3:35:1e:31:6a:e4:b9:97:88:92:58:64:40:02:46:
2c:93:7c:09:5f:bc:74:02:3a:98:9a:f1:7c:27:57:af:4a:31:
0b:b8:9b:7c:8d:f8:55:a7:81:97:1d:d8:5d:e6:ff:c3:f5:22:
fe:f3:50:32:bb:42:3d:d5:00:37:ec:ab:cd:27:aa:38:3e:40:
c0:4f:63:ac:7e:02:23:bf:7c:b3:b3:77:7b:27:d1:01:03:0d:
55:f2:fe:24:43:b7:ef:8a:ee:42:aa:a6:df:d9:32:13:93:5b:
2a:17:a5:66:3e:c9:57:44:11:ee:af:bc:70:87:af:a6:1f:e0:
da:12:9e:21:0f:a8:7e:a8:c9:9e:94:d9:5d:06:fa:8b:1f:44:
76:bf:5e:22:79:07:35:10:23:4b:98:7c:f1:88:0f:67:0e:6a:
e7:b5:4c:b5:0e:59:7f:ca:f5:0f:b3:80:a0:68:78:cd:98:d2:
8c:31:e3:44:70:bd:d2:a4:3f:9b:8c:41:b7:85:ea:16:47:76:
99:30:a0:46:c7:29:b2:50:f6:87:34:58:d4:9e:5a:99:55:70:
b4:de:7f:c0:8c:9d:78:f5:fc:67:9b:43:c1:b4:2d:ea:20:c2:
5b:4a:9d:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTnMmZ/8nhqvFy3Iyn95kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzIwNjE0MDU5NTY5OTNjYzYzYTYwZGIwZjk2MzUyNWQz
NTc3MzEwHhcNMjUwODIzMDUwMjI0WhcNMjUwODI0MDUwMjI0WjAzMTEwLwYDVQQD
Eyg0NDg4ZDNlMmRmYTU1N2RjMWVhMTdiYmZhZjllNDQ0ZDQ3ZjZiNWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzYUn8EwBI6zRbNZ0FaWaZC7HWMo
TYCX11KZpuRIKRMwBF6x53+c0YgOJ7/htCsMZM7XD/ZmDWaScOQDZ/jxnwDaf2w7
N5sYml4I2jJVZmgSdtW4yynFOFpVww+Q0JO8nMYXFdzoUoxHanSPS2FWdNw2wPqn
dDqGtnMLEbALkbzXoyGn1lqg5Q4rer5iguVlva4OWU2hLMT/QJ1Ggk1ahExoKJOK
ALG3XGw08aImyaq+sp/QlaJc363MRixNLcg3VmhoVmEJRSmKHyA2lUb7MGwPxN8D
VzL9tU14M8AF1uYGUNgzBeAIPXdkzWmoNDKOy1uLrmxjS53QOUg42KHjKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESI0+LfpVfcHqF7v6+eRE1H9rWkMB8GA1UdIwQY
MBaAFA3CBhQFlWmTzGOmDbD5Y1JdNXcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgt
MjM0OGJhNmZiNGMzLzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgtMjM0OGJhNmZiNGMz
LzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADth+HZIC
dP360Y28sUGW5g/uHFF74zUeMWrkuZeIklhkQAJGLJN8CV+8dAI6mJrxfCdXr0ox
C7ibfI34VaeBlx3YXeb/w/Ui/vNQMrtCPdUAN+yrzSeqOD5AwE9jrH4CI798s7N3
eyfRAQMNVfL+JEO374ruQqqm39kyE5NbKhelZj7JV0QR7q+8cIevph/g2hKeIQ+o
fqjJnpTZXQb6ix9Edr9eInkHNRAjS5h88YgPZw5q57VMtQ5Zf8r1D7OAoGh4zZjS
jDHjRHC90qQ/m4xBt4XqFkd2mTCgRscpslD2hzRY1J5amVVwtN5/wIydePX8Z5tD
wbQt6iDCW0qdeg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:37 2025 by rpki-client