
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File: dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier: FISZx5rBb8UFFmKY+W8WYBMyyueD0atKJwsThX150sU=
Subject key identifier: A5:A6:A8:9B:1F:A5:BA:16:9C:29:66:56:A0:1E:42:36:43:A6:84:7F
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial: 0198D583CF597D8DCEA3F67CD196F07DC1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number: 0292
Signing time: Sat 23 Aug 2025 06:00:41 +0000
Manifest this update: Sat 23 Aug 2025 06:00:41 +0000
Manifest next update: Sun 24 Aug 2025 06:00:41 +0000
Files and hashes: 1: 7-iGt4e7trCrvhjbqw5ailuotG8.roa (hash: cy0FH1gqtKBfDPhq2ot6+GUFGCM2/G1KgLpKIId8UGA=)
2: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: Cr5wQTucu/86+4SUqNNVj4oIJv83hu3YeulAofQgZNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:cf:59:7d:8d:ce:a3:f6:7c:d1:96:f0:7d:c1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
Validity
Not Before: Aug 23 06:00:41 2025 GMT
Not After : Aug 24 06:00:41 2025 GMT
Subject: CN=a5a6a89b1fa5ba169c296656a01e423643a6847f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:01:7f:47:47:1b:d8:51:cb:8a:6a:1c:6b:
92:f4:67:db:66:6c:8d:1d:3b:d8:a6:82:b1:45:99:
18:5b:79:04:92:56:92:de:2c:68:c3:da:93:9b:ae:
0e:02:22:03:18:c3:65:04:23:79:d5:bd:41:c2:35:
85:b3:0e:66:27:d4:dc:31:78:03:e4:5b:57:5b:1a:
ab:56:36:1c:67:bf:9c:29:59:28:66:ef:c5:6e:d4:
8b:30:be:74:a4:d4:cc:2a:da:18:8f:72:27:81:52:
47:45:ac:34:e6:67:df:40:35:6a:0f:80:d5:64:be:
38:e8:fe:47:ee:a2:f3:6c:32:3c:c2:39:75:6e:1b:
e0:e6:b6:48:ad:42:3d:8b:1d:6e:ea:eb:ed:41:df:
7c:3e:a6:c3:0a:98:27:8e:a9:53:c0:a6:00:93:16:
e5:65:f2:4f:25:e2:24:18:6e:2c:b5:91:a7:c0:7f:
32:0c:ba:ff:13:86:ba:a5:ad:d5:53:aa:db:b4:b2:
69:b5:b1:6d:a5:ac:83:ef:c0:ae:c7:95:f7:ed:a2:
c9:96:97:a9:fb:89:2c:84:35:ff:3a:d6:49:98:0d:
83:08:88:d5:e9:cb:13:02:4e:da:68:17:dc:1c:a9:
b5:d7:0c:f2:70:aa:ee:8e:8e:13:3c:61:fe:ef:51:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:A8:9B:1F:A5:BA:16:9C:29:66:56:A0:1E:42:36:43:A6:84:7F
X509v3 Authority Key Identifier:
keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:40:f2:fc:ac:5d:79:66:94:40:d1:35:fc:2f:0f:16:d0:b2:
73:2d:3e:20:08:2b:65:1d:d3:f1:37:69:08:ec:9c:c6:9e:ca:
23:2a:5d:f8:9f:c3:64:0e:19:7a:8d:94:35:dd:b6:38:38:71:
a8:2f:d3:5b:8a:b5:f7:1a:35:13:97:09:92:1b:0c:91:b8:54:
cf:82:d0:ff:af:d5:6e:ca:ea:fd:37:34:03:27:c5:9d:06:f5:
b6:4b:a8:f5:b0:0b:06:37:f2:5c:69:dd:d5:d3:a9:c2:18:dd:
88:ce:4a:fa:ab:ef:d3:fc:51:ba:08:cd:1a:a3:8d:02:23:93:
92:f4:6f:8d:fc:52:12:01:dc:bd:ea:24:ac:f2:e1:07:26:e5:
45:d2:86:b0:dc:4c:f6:fd:52:f5:8e:90:2e:09:15:5f:a3:55:
66:8a:f4:4a:92:43:15:8a:38:b8:46:a2:c5:b9:24:62:fa:64:
31:33:d3:92:a1:37:89:f6:62:d8:77:5a:52:91:6d:ab:a7:6a:
3b:bf:1e:ca:3d:04:d8:54:52:cc:b1:3a:e4:ed:74:3e:92:64:
93:cd:ee:df:29:df:69:7b:37:44:5a:d3:c9:06:ef:98:bf:0d:
da:2a:07:f1:8a:a1:1f:0a:eb:29:ea:17:89:54:04:68:59:82:
44:53:1b:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg89ZfY3Oo/Z80ZbwfcHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZjgxYTk4YjQ4NzAyMGM5ODEwNWQ2MzEzYmNkNjlkZTUw
YWMxN2IwHhcNMjUwODIzMDYwMDQxWhcNMjUwODI0MDYwMDQxWjAzMTEwLwYDVQQD
EyhhNWE2YTg5YjFmYTViYTE2OWMyOTY2NTZhMDFlNDIzNjQzYTY4NDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiwBf0dHG9hRy4pqHGuS9GfbZmyN
HTvYpoKxRZkYW3kEklaS3ixow9qTm64OAiIDGMNlBCN51b1BwjWFsw5mJ9TcMXgD
5FtXWxqrVjYcZ7+cKVkoZu/FbtSLML50pNTMKtoYj3IngVJHRaw05mffQDVqD4DV
ZL446P5H7qLzbDI8wjl1bhvg5rZIrUI9ix1u6uvtQd98PqbDCpgnjqlTwKYAkxbl
ZfJPJeIkGG4stZGnwH8yDLr/E4a6pa3VU6rbtLJptbFtpayD78Cux5X37aLJlpep
+4kshDX/OtZJmA2DCIjV6csTAk7aaBfcHKm11wzycKrujo4TPGH+71H0hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWmqJsfpboWnClmVqAeQjZDpoR/MB8GA1UdIwQY
MBaAFHT4Gpi0hwIMmBBdYxO81p3lCsF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYt
MDFlNzEzMWFlMWRlLzEvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYtMDFlNzEzMWFlMWRl
LzEvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEDy/Kxd
eWaUQNE1/C8PFtCycy0+IAgrZR3T8TdpCOycxp7KIypd+J/DZA4Zeo2UNd22ODhx
qC/TW4q19xo1E5cJkhsMkbhUz4LQ/6/Vbsrq/Tc0AyfFnQb1tkuo9bALBjfyXGnd
1dOpwhjdiM5K+qvv0/xRugjNGqONAiOTkvRvjfxSEgHcveokrPLhByblRdKGsNxM
9v1S9Y6QLgkVX6NVZor0SpJDFYo4uEaixbkkYvpkMTPTkqE3ifZi2HdaUpFtq6dq
O78eyj0E2FRSzLE65O10PpJkk83u3ynfaXs3RFrTyQbvmL8N2ioH8YqhHwrrKeoX
iVQEaFmCRFMbrw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:19 2025 by rpki-client