Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: HEC3sgccDnOSc1EnP4m0DmvM+8WaP5hZu0LnZhavPjY=
Subject key identifier: 8F:F9:C0:DA:2A:49:D5:35:D1:E3:B7:3B:76:78:04:AA:86:42:05:28
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 0198D5BC0D41AB0B89815BD8C7CCA2F8C6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:07 +0000
Manifest this update: Sat 23 Aug 2025 07:02:07 +0000
Manifest next update: Sun 24 Aug 2025 07:02:07 +0000
Files and hashes: 1: c_4VrUZIMtuPlYj4DhW8ouhaRQw.roa (hash: 3ElLAVX1FXo1T4VYhDu+QaMztPbJUQVgeIUdwTADFRI=)
2: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: UrBhhRtrpZYKO2M6j1bGI8UNmK10CtRaJruICA1rcR4=)
3: r_WAi-eWzHC7Psr81UVNU3kzOJw.roa (hash: ZETLofVAHwa7kjk2pEcSj1ALX1XE9n9Z4taPD31cXSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0d:41:ab:0b:89:81:5b:d8:c7:cc:a2:f8:c6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Aug 23 07:02:07 2025 GMT
Not After : Aug 24 07:02:07 2025 GMT
Subject: CN=8ff9c0da2a49d535d1e3b73b767804aa86420528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:3f:ed:01:56:68:ea:db:46:23:fa:98:74:
ca:12:d7:65:53:61:bd:ee:6b:73:ea:27:d3:ca:6f:
c7:f7:3d:c5:e0:a2:ea:a5:b1:8f:5f:61:b9:72:ce:
61:be:35:87:46:7d:a1:34:b6:2f:8c:bc:57:9c:20:
d2:fd:66:1e:12:ae:c1:17:03:80:91:e3:68:d0:31:
ff:84:ca:fe:94:14:34:b8:67:9d:56:17:ab:c2:e2:
36:1c:0d:6c:56:93:2b:8c:cc:e6:60:eb:54:f4:a4:
1a:15:aa:f1:c3:83:60:75:a3:89:0b:b4:63:d0:f2:
a1:45:df:70:ed:fa:e8:c3:ca:ae:ee:4a:94:0c:8d:
9d:4b:c5:4b:0a:88:e4:4a:1b:9f:76:7e:07:58:02:
b8:43:a9:9e:50:8c:d2:b1:98:d1:99:71:b5:55:bd:
df:8a:62:51:02:1e:cd:86:7f:60:f5:8f:ab:f6:02:
a5:3a:41:fd:95:02:a8:5a:0b:8a:89:30:a9:a9:d4:
e7:e9:4d:0e:8b:fb:76:99:f1:b8:bc:92:a5:96:98:
79:3a:20:3b:65:fb:5d:c5:8a:41:df:8b:1e:a4:6f:
2a:7f:e8:63:be:03:9e:ec:52:2f:c0:16:b1:20:23:
1b:ca:63:8c:16:8b:9b:3e:8d:45:10:fc:10:70:0b:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F9:C0:DA:2A:49:D5:35:D1:E3:B7:3B:76:78:04:AA:86:42:05:28
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cd:2c:da:8c:76:8a:07:36:74:c9:09:45:36:43:25:74:7f:
94:d3:6c:82:86:b1:4a:c8:a7:5b:6a:21:76:2a:6c:78:4a:5f:
5a:63:ee:3f:bd:72:0e:7f:43:f6:85:25:23:02:75:fc:2b:5d:
f1:66:98:b7:f9:c2:c2:de:a4:45:29:3c:d3:be:58:10:97:cd:
e9:16:f8:ef:98:72:63:42:fb:c3:09:36:4c:ab:17:6d:6f:98:
1a:2c:77:1e:78:21:1a:5b:fd:22:04:50:54:41:87:ab:a7:af:
d3:f8:66:4c:98:76:cd:78:0d:71:8c:0d:8c:ab:06:59:fc:e4:
e3:81:0e:d5:f3:54:bc:aa:8e:62:c2:cf:8c:77:0a:50:0f:0d:
69:12:7c:05:16:5b:70:e0:a3:75:08:37:18:ef:06:36:56:c4:
98:3c:72:84:46:53:ae:1b:75:48:91:18:55:b8:6e:a0:e8:bf:
d9:37:7a:a2:8a:8e:e5:8d:17:cb:fc:07:da:40:60:35:c5:34:
f9:33:51:6c:24:84:9e:a2:46:a0:fc:47:5b:c9:77:01:df:f0:
ed:9d:74:ef:61:a5:3c:83:4f:a6:7c:7d:ad:9f:7d:25:b9:f8:
05:fd:5c:9f:86:b6:97:49:2c:d5:85:e4:00:1b:57:56:1d:39:
e8:ad:95:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvA1BqwuJgVvYx8yi+Mb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTczNmY2NTcyMjFmYzEzNDMxNjMyM2IwNzQwNTg1YTlj
MWIyMGMwHhcNMjUwODIzMDcwMjA3WhcNMjUwODI0MDcwMjA3WjAzMTEwLwYDVQQD
Eyg4ZmY5YzBkYTJhNDlkNTM1ZDFlM2I3M2I3Njc4MDRhYTg2NDIwNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGc/7QFWaOrbRiP6mHTKEtdlU2G9
7mtz6ifTym/H9z3F4KLqpbGPX2G5cs5hvjWHRn2hNLYvjLxXnCDS/WYeEq7BFwOA
keNo0DH/hMr+lBQ0uGedVherwuI2HA1sVpMrjMzmYOtU9KQaFarxw4NgdaOJC7Rj
0PKhRd9w7frow8qu7kqUDI2dS8VLCojkShufdn4HWAK4Q6meUIzSsZjRmXG1Vb3f
imJRAh7Nhn9g9Y+r9gKlOkH9lQKoWguKiTCpqdTn6U0Oi/t2mfG4vJKllph5OiA7
ZftdxYpB34sepG8qf+hjvgOe7FIvwBaxICMbymOMFoubPo1FEPwQcAvTQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/5wNoqSdU10eO3O3Z4BKqGQgUoMB8GA1UdIwQY
MBaAFHQXNvZXIh/BNDFjI7B0BYWpwbIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUt
Y2JmYmE0NTlkOGY3LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUtY2JmYmE0NTlkOGY3
LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACc0s2ox2
igc2dMkJRTZDJXR/lNNsgoaxSsinW2ohdipseEpfWmPuP71yDn9D9oUlIwJ1/Ctd
8WaYt/nCwt6kRSk8075YEJfN6Rb475hyY0L7wwk2TKsXbW+YGix3HnghGlv9IgRQ
VEGHq6ev0/hmTJh2zXgNcYwNjKsGWfzk44EO1fNUvKqOYsLPjHcKUA8NaRJ8BRZb
cOCjdQg3GO8GNlbEmDxyhEZTrht1SJEYVbhuoOi/2Td6ooqO5Y0Xy/wH2kBgNcU0
+TNRbCSEnqJGoPxHW8l3Ad/w7Z1072GlPINPpnx9rZ99Jbn4Bf1cn4a2l0ks1YXk
ABtXVh056K2VvQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:34 2025 by rpki-client