Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json)
Hash identifier: CRqLLT/eJOnaOGdyuiwptDGTjbGTZum7e2X7g/aSvNs=
Subject key identifier: A3:B2:B3:79:B4:8C:16:F3:DA:13:40:34:C3:A3:69:B0:CF:C7:85:9A
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial: 0198D4DFF7E5A1F604649C7F6CA03486A7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:01:44 +0000
Manifest this update: Sat 23 Aug 2025 03:01:44 +0000
Manifest next update: Sun 24 Aug 2025 03:01:44 +0000
Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: 1dbly2TFRDXYT1hZouE5cyJAdIWaROyUPu3P70MFKcc=)
2: JKIB76zKkkKrBoUXjR0hAQtGTdM.roa (hash: ykn0vkdS9mLj16yNgBoFWQshZXTgOTHfF/eRZDldNCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f7:e5:a1:f6:04:64:9c:7f:6c:a0:34:86:a7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Validity
Not Before: Aug 23 03:01:44 2025 GMT
Not After : Aug 24 03:01:44 2025 GMT
Subject: CN=a3b2b379b48c16f3da134034c3a369b0cfc7859a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:52:9e:c1:ef:de:49:08:14:ee:54:07:ed:
03:60:71:dd:80:3d:77:a8:4d:89:e8:5a:e6:42:1b:
77:6f:27:bd:8e:b1:4b:d5:8c:66:fb:02:65:4d:54:
1b:59:ef:65:b6:88:13:13:88:b0:ab:54:6d:7e:27:
68:99:ab:34:40:43:c4:09:0b:df:1f:c8:d7:cb:bb:
c5:3a:52:56:2c:26:0d:85:3c:01:22:ee:a1:5f:0b:
5c:d5:33:0f:77:0c:a9:a5:a8:21:68:79:06:a5:c1:
76:13:f7:0b:49:a5:00:32:c5:51:5a:ce:62:a8:2a:
56:0c:eb:bc:d9:67:a8:85:14:06:09:bd:f1:b1:52:
8e:a6:94:e6:d8:a9:3e:e5:a7:c6:31:d4:ab:c5:01:
1f:5a:50:46:5c:fb:7e:36:f8:7f:2c:70:a2:bf:1a:
0b:5a:6c:d4:59:51:3c:83:bd:75:82:ee:a9:2a:5c:
45:34:1f:b4:5a:54:05:3c:b3:df:4a:e2:e7:e2:37:
64:72:d1:05:43:6a:f9:59:d0:8d:aa:8e:eb:ff:27:
22:4f:f7:8c:63:df:93:34:72:2d:c4:23:d6:7d:ad:
f8:b7:d4:1e:c8:71:e0:ab:20:cf:3a:18:8d:ec:3f:
a1:3b:77:0e:12:4f:3f:cb:d7:26:71:b3:b5:5b:eb:
d1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B2:B3:79:B4:8C:16:F3:DA:13:40:34:C3:A3:69:B0:CF:C7:85:9A
X509v3 Authority Key Identifier:
keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ee:d4:b2:bc:8d:94:12:b6:38:6b:4b:95:a0:ac:97:a6:cb:
b6:d0:dc:75:80:f9:be:df:50:c2:f9:3d:da:83:01:db:50:54:
77:48:fc:03:95:4a:b0:e9:c9:97:63:bd:44:04:3f:57:bc:53:
8d:f2:a8:99:02:06:7c:dc:bb:8f:03:24:8d:a8:91:1c:14:02:
a4:3d:07:91:3d:33:a1:37:36:1b:ac:f8:34:4b:be:3a:98:ec:
cc:00:9a:67:f7:aa:ff:07:86:81:47:c0:55:01:b1:5d:58:7e:
0c:67:c0:2d:ca:eb:8f:05:02:ee:73:5a:89:07:c6:25:d9:6a:
8b:8a:b4:5d:8f:6f:e2:94:70:23:a9:2d:45:c3:56:9c:6d:2b:
16:ea:b2:c6:73:88:1b:fb:eb:14:54:ef:92:54:50:07:ec:8c:
0d:9e:54:b2:4b:15:f9:df:41:e6:de:4d:83:71:2d:23:42:e1:
87:8a:b4:80:d1:33:5b:07:94:da:d4:9b:88:79:bc:60:95:8f:
9d:aa:eb:e3:a4:3c:6d:d0:8d:47:6e:fe:27:dd:ef:d1:f5:23:
ae:2c:43:2f:dd:cb:97:ba:91:0e:a4:ba:fc:fd:8c:a4:63:64:
bf:4b:46:a1:ae:d1:02:a6:64:eb:f9:01:ac:36:38:b8:24:ec:
2c:a8:10:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/flofYEZJx/bKA0hqerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZjZlNjMzMDY3YzA2NmFlOWJlZjFkMzc3MWNjMzAwZTRi
NGQxYTcwHhcNMjUwODIzMDMwMTQ0WhcNMjUwODI0MDMwMTQ0WjAzMTEwLwYDVQQD
EyhhM2IyYjM3OWI0OGMxNmYzZGExMzQwMzRjM2EzNjliMGNmYzc4NTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuZSnsHv3kkIFO5UB+0DYHHdgD13
qE2J6FrmQht3bye9jrFL1Yxm+wJlTVQbWe9ltogTE4iwq1Rtfidomas0QEPECQvf
H8jXy7vFOlJWLCYNhTwBIu6hXwtc1TMPdwyppaghaHkGpcF2E/cLSaUAMsVRWs5i
qCpWDOu82WeohRQGCb3xsVKOppTm2Kk+5afGMdSrxQEfWlBGXPt+Nvh/LHCivxoL
WmzUWVE8g711gu6pKlxFNB+0WlQFPLPfSuLn4jdkctEFQ2r5WdCNqo7r/yciT/eM
Y9+TNHItxCPWfa34t9QeyHHgqyDPOhiN7D+hO3cOEk8/y9cmcbO1W+vRPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOys3m0jBbz2hNANMOjabDPx4WaMB8GA1UdIwQY
MBaAFA325jMGfAZq6b7x03ccwwDktNGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mYWUxYzEtYWExOC00NmFhLTgzYTct
OGQxYzlkMTE5MmIwLzEvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mYWUxYzEtYWExOC00NmFhLTgzYTctOGQxYzlkMTE5MmIw
LzEvRGZibU13WjhCbXJwdnZIVGR4ekRBT1MwMGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAce7UsryN
lBK2OGtLlaCsl6bLttDcdYD5vt9Qwvk92oMB21BUd0j8A5VKsOnJl2O9RAQ/V7xT
jfKomQIGfNy7jwMkjaiRHBQCpD0HkT0zoTc2G6z4NEu+OpjszACaZ/eq/weGgUfA
VQGxXVh+DGfALcrrjwUC7nNaiQfGJdlqi4q0XY9v4pRwI6ktRcNWnG0rFuqyxnOI
G/vrFFTvklRQB+yMDZ5UsksV+d9B5t5Ng3EtI0Lhh4q0gNEzWweU2tSbiHm8YJWP
narr46Q8bdCNR27+J93v0fUjrixDL93Ll7qRDqS6/P2MpGNkv0tGoa7RAqZk6/kB
rDY4uCTsLKgQBQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:51 2025 by rpki-client