Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier: Bmw6TG+9wBDSTHmqHJeXJJxra2wZ6OpcXyLlzIeT3u0=
Subject key identifier: 17:62:A9:C3:18:7A:39:CF:72:0B:A0:26:51:ED:FB:16:31:E7:57:FE
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 0198D7A8CCB716A73F9BCEC40EF9FD3D69A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number: 0898
Signing time: Sat 23 Aug 2025 16:00:20 +0000
Manifest this update: Sat 23 Aug 2025 16:00:20 +0000
Manifest next update: Sun 24 Aug 2025 16:00:20 +0000
Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: 8CyQeybXytt9Ecl0AxHWXq0QGam6Pd7Btoso8cpFldo=)
2: xY4E3yQDPueuZRFyGHMpuwD_2xI.roa (hash: JFOzMGNC8f6WUb/Ik4daKoB04MNWXOUy7eceKB/AaN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:cc:b7:16:a7:3f:9b:ce:c4:0e:f9:fd:3d:69:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Aug 23 16:00:20 2025 GMT
Not After : Aug 24 16:00:20 2025 GMT
Subject: CN=1762a9c3187a39cf720ba02651edfb1631e757fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:6b:a3:4c:cf:f2:7c:ff:7a:29:86:9b:a2:
c0:da:a2:f4:2a:d2:d0:a8:c1:23:a4:ed:ed:02:7c:
dd:16:ea:1c:0f:ff:ce:2a:7a:e4:66:8f:bc:c2:5e:
9f:2e:d4:80:b3:a0:34:d3:74:1b:8f:87:81:b3:93:
47:8b:50:e1:15:17:9d:81:e9:ee:b2:d6:6d:90:74:
85:22:c4:2a:38:ec:32:8b:9e:14:60:f4:f7:a8:63:
03:fb:13:ce:03:ac:d5:4c:6f:72:63:13:77:80:c5:
df:b0:83:ae:a2:75:ae:a2:02:73:8a:92:51:31:ef:
76:04:ec:1a:2b:a9:b4:e8:35:33:87:94:38:04:d5:
e0:ff:43:57:a4:a9:3f:38:bd:90:9b:19:bd:54:80:
83:84:59:56:5a:e4:16:7e:97:83:7d:ac:87:7f:57:
13:b9:a4:68:18:c6:02:08:84:41:47:32:8d:5d:52:
91:d9:d9:eb:b3:17:8e:40:6e:ce:83:c0:2b:2e:24:
c7:13:00:86:39:fc:1c:2f:3e:ba:44:91:2b:5f:2f:
a6:0d:28:4c:b1:54:05:19:42:18:63:63:a1:66:05:
63:b1:1c:7a:32:55:a9:84:9c:25:5d:d2:f0:a0:bd:
47:23:8d:b8:63:ed:d6:1d:01:82:6c:48:8b:9d:fc:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:A9:C3:18:7A:39:CF:72:0B:A0:26:51:ED:FB:16:31:E7:57:FE
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:53:ac:32:c7:81:4b:ae:49:b0:e1:d7:e8:50:49:19:92:3e:
70:5a:a3:fd:58:e4:c9:0a:0c:fa:83:37:4b:43:0a:55:27:34:
07:03:06:c1:68:8a:59:f0:a6:90:5e:9c:8f:01:68:d2:af:26:
b2:b2:6e:c5:7c:d3:38:4b:b0:95:2b:b1:95:b3:5e:79:d0:ca:
c0:c4:2a:da:46:7c:ee:7c:52:f7:65:cd:50:3d:0c:3b:89:95:
09:f6:34:9a:0d:22:a9:1a:57:93:73:66:aa:16:7e:6e:8b:c1:
ce:58:02:62:13:f6:52:3b:92:37:5d:9e:a3:dd:6b:47:67:d3:
e2:b9:d5:ea:f9:e8:2f:cf:f5:86:44:d7:54:19:31:60:b9:85:
85:43:42:ba:25:3e:cb:f4:78:67:cc:51:20:6f:20:63:bb:c2:
e6:92:6f:68:c0:f9:51:b0:8f:5d:76:44:91:ad:a4:21:98:2c:
95:69:93:6e:fc:14:42:af:5e:83:d1:fb:c7:3c:66:28:aa:e3:
da:b9:b0:fb:28:a3:bd:af:04:3c:61:b4:4d:8f:75:63:45:e2:
1f:69:f5:1b:81:34:97:23:8c:90:00:ec:76:0d:78:0b:78:71:
83:51:39:8e:5f:6f:08:6c:fb:56:95:73:60:63:12:46:54:7f:
db:e1:ab:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqMy3Fqc/m87EDvn9PWmhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMjZkNDVmZDU2OTIxZDM0NjlkMTljNDc1NzJmMjc1Zjlk
NTUyNDIwHhcNMjUwODIzMTYwMDIwWhcNMjUwODI0MTYwMDIwWjAzMTEwLwYDVQQD
EygxNzYyYTljMzE4N2EzOWNmNzIwYmEwMjY1MWVkZmIxNjMxZTc1N2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7hro0zP8nz/eimGm6LA2qL0KtLQ
qMEjpO3tAnzdFuocD//OKnrkZo+8wl6fLtSAs6A003Qbj4eBs5NHi1DhFRedgenu
stZtkHSFIsQqOOwyi54UYPT3qGMD+xPOA6zVTG9yYxN3gMXfsIOuonWuogJzipJR
Me92BOwaK6m06DUzh5Q4BNXg/0NXpKk/OL2Qmxm9VICDhFlWWuQWfpeDfayHf1cT
uaRoGMYCCIRBRzKNXVKR2dnrsxeOQG7Og8ArLiTHEwCGOfwcLz66RJErXy+mDShM
sVQFGUIYY2OhZgVjsRx6MlWphJwlXdLwoL1HI424Y+3WHQGCbEiLnfw0GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdiqcMYejnPcgugJlHt+xYx51f+MB8GA1UdIwQY
MBaAFA4m1F/VaSHTRp0ZxHVy8nX51VJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YTFiYWEtNWY4Zi00MjBhLTkwYzQt
NjY1YTY5Y2I4OTAwLzEvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82YTFiYWEtNWY4Zi00MjBhLTkwYzQtNjY1YTY5Y2I4OTAw
LzEvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1OsMseB
S65JsOHX6FBJGZI+cFqj/VjkyQoM+oM3S0MKVSc0BwMGwWiKWfCmkF6cjwFo0q8m
srJuxXzTOEuwlSuxlbNeedDKwMQq2kZ87nxS92XNUD0MO4mVCfY0mg0iqRpXk3Nm
qhZ+bovBzlgCYhP2UjuSN12eo91rR2fT4rnV6vnoL8/1hkTXVBkxYLmFhUNCuiU+
y/R4Z8xRIG8gY7vC5pJvaMD5UbCPXXZEka2kIZgslWmTbvwUQq9eg9H7xzxmKKrj
2rmw+yijva8EPGG0TY91Y0XiH2n1G4E0lyOMkADsdg14C3hxg1E5jl9vCGz7VpVz
YGMSRlR/2+Grrg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:37:51 2025 by rpki-client