Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: ojCaUpMLemisKYHLzzFShhjZv/BaPLaru6u8N3xyJWg=
Subject key identifier: FB:C3:AB:18:AB:0B:26:36:E4:52:20:71:86:6F:24:F9:9B:17:CD:4B
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 01988B106874346B4398633CB2565C884F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 08A4
Signing time: Fri 08 Aug 2025 19:02:44 +0000
Manifest this update: Fri 08 Aug 2025 19:02:44 +0000
Manifest next update: Sat 09 Aug 2025 19:02:44 +0000
Files and hashes: 1: DTxczwIBr_nfZRTIPgBtQYWGTi8.roa (hash: +VMycRtyrx3wbrRNOQ5x4frKIMykN9VHtpPYdKmVF5w=)
2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: 6wftaeems7GIWyLvbhV2lZ5V4lVhearAN2h3JtXXpwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:68:74:34:6b:43:98:63:3c:b2:56:5c:88:4f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Aug 8 19:02:44 2025 GMT
Not After : Aug 9 19:02:44 2025 GMT
Subject: CN=fbc3ab18ab0b2636e4522071866f24f99b17cd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b1:4c:cc:ea:f1:ae:48:46:17:d2:e3:c6:3b:
6b:f7:d4:4c:ab:d8:57:d0:bb:c9:06:93:d8:6a:2c:
72:f1:85:42:3d:8b:96:5e:16:07:b2:77:7d:fd:be:
d7:ea:3d:dc:dd:7e:5f:66:1c:53:07:03:43:fa:50:
92:c2:c1:1b:d5:51:6a:46:6b:16:cb:fd:b3:17:3f:
7f:02:d8:7e:59:ea:76:ee:7e:e8:95:44:0d:1d:1f:
48:4c:8d:2b:b3:7a:a8:ca:ab:b6:37:d9:41:c5:48:
ad:8a:4b:d6:0a:1b:61:2a:24:a0:41:54:dd:42:3d:
0c:66:d9:3f:6d:49:a8:e8:9a:ae:e0:41:01:ae:6d:
32:f7:e8:22:70:8e:55:da:0a:c9:8e:7e:b5:ce:08:
23:4b:60:40:5b:7d:aa:f7:ce:64:d5:4c:13:ec:79:
b0:84:36:43:cd:b7:a3:29:94:eb:8b:42:dd:e1:4e:
b1:b6:fd:17:2e:2c:2f:af:ed:b4:4f:92:3c:9d:e4:
d9:a9:68:eb:dd:f2:e5:b1:61:38:0a:26:fd:c7:25:
d3:70:11:3d:ed:49:e7:b6:d3:ef:9b:e5:ab:df:e3:
f8:8d:39:2c:50:36:15:74:ce:0d:f8:87:90:06:38:
75:f4:67:9d:b6:82:69:bf:9e:29:7d:07:0c:b9:53:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C3:AB:18:AB:0B:26:36:E4:52:20:71:86:6F:24:F9:9B:17:CD:4B
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e3:78:b8:7f:ee:f8:d1:5c:81:1e:e2:ff:72:ac:5e:02:17:
0b:ed:32:54:c9:68:ed:ed:78:cc:91:ba:10:64:e8:08:cf:fd:
32:fa:43:14:7b:0b:d9:1d:95:47:db:11:e5:c6:04:36:9d:57:
5a:14:9b:74:4a:f0:9f:27:55:49:6e:53:ee:69:c9:31:09:e8:
8b:ce:be:14:10:ce:bf:51:9c:06:44:b9:25:18:ba:a7:cc:68:
4b:12:85:89:8c:f0:39:06:b2:7c:38:1e:68:49:36:14:1a:99:
92:36:04:a0:ae:6f:c9:e7:d5:89:4d:29:c8:a4:93:35:6b:c6:
e0:ec:4c:ae:e8:26:be:44:81:ef:6a:88:41:cb:99:33:29:9f:
f7:9c:05:cd:4f:5f:95:36:51:4f:91:60:bc:98:d7:33:6e:43:
d3:19:09:59:15:73:f1:de:a3:5f:9c:17:3b:10:23:13:48:5b:
59:fb:5a:cb:13:1c:54:ee:ba:63:f4:f4:ee:a9:d4:b6:bb:8a:
7d:54:3c:68:1b:bd:b6:83:cc:cc:82:3e:18:14:dc:a3:ce:aa:
ec:15:23:4c:43:a6:cd:80:34:22:e6:a2:4b:ca:42:bb:b7:ba:
ba:3a:8b:b2:97:7a:c8:d9:00:01:14:c7:e8:dc:3a:4c:da:14:
a8:14:b4:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLEGh0NGtDmGM8slZciE+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDc4Y2NkYzA0ODBhNmI0M2JhY2Q4YWFlZTAwNzliMTZl
YzJlNjgwHhcNMjUwODA4MTkwMjQ0WhcNMjUwODA5MTkwMjQ0WjAzMTEwLwYDVQQD
EyhmYmMzYWIxOGFiMGIyNjM2ZTQ1MjIwNzE4NjZmMjRmOTliMTdjZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7FMzOrxrkhGF9Ljxjtr99RMq9hX
0LvJBpPYaixy8YVCPYuWXhYHsnd9/b7X6j3c3X5fZhxTBwND+lCSwsEb1VFqRmsW
y/2zFz9/Ath+Wep27n7olUQNHR9ITI0rs3qoyqu2N9lBxUitikvWChthKiSgQVTd
Qj0MZtk/bUmo6Jqu4EEBrm0y9+gicI5V2grJjn61zggjS2BAW32q985k1UwT7Hmw
hDZDzbejKZTri0Ld4U6xtv0XLiwvr+20T5I8neTZqWjr3fLlsWE4Cib9xyXTcBE9
7UnnttPvm+Wr3+P4jTksUDYVdM4N+IeQBjh19GedtoJpv54pfQcMuVOT3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvDqxirCyY25FIgcYZvJPmbF81LMB8GA1UdIwQY
MBaAFK9HjM3ASAprQ7rNiq7gB5sW7C5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2Yt
Y2M4YmYzZmJlZjk5LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2YtY2M4YmYzZmJlZjk5
LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouN4uH/u
+NFcgR7i/3KsXgIXC+0yVMlo7e14zJG6EGToCM/9MvpDFHsL2R2VR9sR5cYENp1X
WhSbdErwnydVSW5T7mnJMQnoi86+FBDOv1GcBkS5JRi6p8xoSxKFiYzwOQayfDge
aEk2FBqZkjYEoK5vyefViU0pyKSTNWvG4OxMrugmvkSB72qIQcuZMymf95wFzU9f
lTZRT5FgvJjXM25D0xkJWRVz8d6jX5wXOxAjE0hbWftayxMcVO66Y/T07qnUtruK
fVQ8aBu9toPMzII+GBTco86q7BUjTEOmzYA0IuaiS8pCu7e6ujqLspd6yNkAARTH
6Nw6TNoUqBS0gA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:08:52 2025 by rpki-client