Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: 3w+na7I10QGzoIlM/RKXxC7mOMfMcVzTyMTtM8ckEIY=
Subject key identifier: 0E:8F:8F:18:D0:8B:38:16:53:C1:75:93:AC:25:52:8F:C8:68:89:B5
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 0198D4A7897677CA68599E5EEA1658583B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 02:00:06 +0000
Manifest this update: Sat 23 Aug 2025 02:00:06 +0000
Manifest next update: Sun 24 Aug 2025 02:00:06 +0000
Files and hashes: 1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: /1UW+klqV+dxSKfVJKGhq33+j2roTJ2Kwb9MbTijhTA=)
2: PGpk2qjaEHATBO5WJqpwQvvo-t4.roa (hash: sxUY6k6RZnsEb5wstWgn4/zoH8gCs5vVrsT2wup6jP0=)
3: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (hash: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:89:76:77:ca:68:59:9e:5e:ea:16:58:58:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Aug 23 02:00:06 2025 GMT
Not After : Aug 24 02:00:06 2025 GMT
Subject: CN=0e8f8f18d08b381653c17593ac25528fc86889b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:d8:c9:55:5c:b4:14:cb:e4:8f:18:b4:1b:
3c:c2:86:97:4b:11:e2:35:12:1e:9b:ef:87:f0:c8:
ef:1a:8f:ed:3e:cb:22:b8:d3:b3:12:5a:8b:53:8c:
5c:ea:a8:65:e4:32:c0:1d:98:df:13:d6:e2:2b:f8:
5c:a6:d6:68:c7:f3:76:29:bf:32:fe:f4:b2:8d:60:
32:31:97:9c:dd:b8:3f:99:82:cf:bc:94:47:0d:96:
e5:45:6d:f0:cb:41:88:59:83:e4:c8:de:ab:ba:c9:
62:dc:87:ce:bc:3e:17:9b:e4:4b:82:8d:82:20:9a:
38:e4:0c:24:65:4f:15:c9:e1:4d:36:d3:ad:90:35:
52:27:70:2d:99:63:19:8f:7f:ca:17:31:56:67:d9:
a4:98:b5:f6:4f:71:7b:86:c8:72:32:b9:d1:ba:ea:
41:9d:19:17:e6:2c:e7:9f:12:b3:c7:5f:92:72:9f:
5c:9c:f0:53:e1:7c:21:a0:75:3e:76:a9:7f:db:a2:
aa:6d:52:49:cd:7f:5d:07:ea:3e:39:f8:e6:63:6d:
a4:b7:32:b7:e7:3b:15:ff:43:2f:3e:23:ca:af:b3:
40:bd:75:6a:7f:14:fb:2c:d6:be:14:61:15:13:f4:
1f:33:4e:fe:3d:3a:2c:c0:75:13:09:0d:2e:5f:2d:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8F:8F:18:D0:8B:38:16:53:C1:75:93:AC:25:52:8F:C8:68:89:B5
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0b:1a:f4:cd:b3:9d:5f:00:02:8b:8d:41:08:a2:f3:c5:a7:
4e:5e:9c:56:0b:44:4f:d6:7d:09:e3:92:1c:6d:a0:f7:a7:46:
49:64:fc:12:f8:79:9e:92:c7:01:e6:0c:e5:c2:eb:11:6a:29:
46:bb:19:31:5a:99:0a:c9:fe:f3:4c:35:36:68:07:89:bd:db:
3c:6d:dc:84:8d:19:b4:1d:e4:f8:e1:3a:05:55:86:a6:76:af:
f8:1f:34:8e:1b:fe:24:19:4a:0c:e7:a3:c8:2a:34:53:e2:bc:
1e:7c:ef:75:41:99:b8:d0:48:24:19:53:df:48:4b:f2:2e:72:
d6:ff:69:60:03:70:0a:d1:6a:7e:05:ac:b1:8e:a3:39:dd:2b:
a8:a2:22:39:9c:36:35:9f:84:4e:46:07:a3:0d:d8:eb:b9:df:
80:1c:84:04:1a:85:5e:91:9b:4d:64:12:71:47:e3:c8:ce:dc:
e2:84:1b:ca:71:e8:5c:24:57:ec:b3:e8:72:3a:a3:b1:8f:e1:
89:a4:4a:9b:b3:ef:87:27:26:06:4b:4d:cc:9a:49:c7:19:70:
dd:28:5d:57:aa:63:94:63:bc:38:8e:86:5c:f9:8d:62:66:8a:
07:2b:4e:c5:86:ee:32:66:f6:91:8c:05:de:bd:1a:cc:96:a9:
8d:6c:9e:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp4l2d8poWZ5e6hZYWDsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDEzNGZhZmJhNzJlMDYzMzljYWRjNTVkNWYxM2JhZTQ4
MmIxMmQwHhcNMjUwODIzMDIwMDA2WhcNMjUwODI0MDIwMDA2WjAzMTEwLwYDVQQD
EygwZThmOGYxOGQwOGIzODE2NTNjMTc1OTNhYzI1NTI4ZmM4Njg4OWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGPYyVVctBTL5I8YtBs8woaXSxHi
NRIem++H8MjvGo/tPssiuNOzElqLU4xc6qhl5DLAHZjfE9biK/hcptZox/N2Kb8y
/vSyjWAyMZec3bg/mYLPvJRHDZblRW3wy0GIWYPkyN6rusli3IfOvD4Xm+RLgo2C
IJo45AwkZU8VyeFNNtOtkDVSJ3AtmWMZj3/KFzFWZ9mkmLX2T3F7hshyMrnRuupB
nRkX5iznnxKzx1+Scp9cnPBT4XwhoHU+dql/26KqbVJJzX9dB+o+OfjmY22ktzK3
5zsV/0MvPiPKr7NAvXVqfxT7LNa+FGEVE/QfM07+PToswHUTCQ0uXy06eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6PjxjQizgWU8F1k6wlUo/IaIm1MB8GA1UdIwQY
MBaAFA4BNPr7py4GM5ytxV1fE7rkgrEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzct
ZDEyNDZjYzJjMzRlLzEvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzctZDEyNDZjYzJjMzRl
LzEvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgsa9M2z
nV8AAouNQQii88WnTl6cVgtET9Z9CeOSHG2g96dGSWT8Evh5npLHAeYM5cLrEWop
RrsZMVqZCsn+80w1NmgHib3bPG3chI0ZtB3k+OE6BVWGpnav+B80jhv+JBlKDOej
yCo0U+K8HnzvdUGZuNBIJBlT30hL8i5y1v9pYANwCtFqfgWssY6jOd0rqKIiOZw2
NZ+ETkYHow3Y67nfgByEBBqFXpGbTWQScUfjyM7c4oQbynHoXCRX7LPocjqjsY/h
iaRKm7PvhycmBktNzJpJxxlw3ShdV6pjlGO8OI6GXPmNYmaKBytOxYbuMmb2kYwF
3r0azJapjWye+g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:24 2025 by rpki-client