Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: LO1QiY0h6/qpFtM6xJQDMYVRSKyNbtEEVWTaixOMEQk=
Subject key identifier: 0D:2B:A5:0D:B7:60:A1:5B:D4:D6:D6:01:C8:58:C1:EA:EA:D1:FB:82
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 0198A04EA8B9D5B1779CB1069AB645DD9146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 0D75
Signing time: Tue 12 Aug 2025 22:02:46 +0000
Manifest this update: Tue 12 Aug 2025 22:02:46 +0000
Manifest next update: Wed 13 Aug 2025 22:02:46 +0000
Files and hashes: 1: FEcS4r4exxMjD0nglmKeIAtctK4.roa (hash: +HFzMpDrNpue0Xiy7JUR7oMq1bW3JIOW3LrAITAVXg0=)
2: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: 2ib1at998AJwg5MA7GKkI6FSA9heqaMhwb7tr7CgrNQ=)
3: ecFUW2z0XsJzdPaPmfmi1NbravY.roa (hash: B/1KiGYT9I28lQbSFekF4v776yFSZOm/z2BZeazx7uo=)
4: pqlbIbNJ9fb6HI0B5-w4UgSYcbY.roa (hash: mcYLCtbaBwaS/xS6dmXpUntAVPZrHZ1andB/RjcjVcA=)
5: tY7BHUvnSszc7zTuhTRehaET6sI.roa (hash: KeG1ndmoCZ2IjHvkM2LPj9WePrlmC0S+eFWuoo10hmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:a8:b9:d5:b1:77:9c:b1:06:9a:b6:45:dd:91:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Aug 12 22:02:46 2025 GMT
Not After : Aug 13 22:02:46 2025 GMT
Subject: CN=0d2ba50db760a15bd4d6d601c858c1eaead1fb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:3d:fc:40:11:77:03:74:08:a0:a1:e9:e5:
c3:85:2d:a0:bd:61:db:c0:68:ff:a6:8c:0e:be:63:
7a:6c:9c:03:e2:12:45:29:f0:45:2c:73:fe:f4:fa:
48:4b:c9:9d:df:22:dc:cf:3c:9a:15:b7:0a:50:ac:
47:ad:67:cc:c1:6a:90:9c:ff:51:6c:10:63:e6:ef:
ec:03:17:46:4c:66:1c:61:e5:21:80:88:94:d5:39:
6c:f1:49:dd:b2:96:0c:60:80:04:28:07:04:e1:ab:
18:87:7c:eb:ec:ae:17:76:a0:3c:89:29:ba:3d:9f:
85:67:7f:46:60:97:08:3d:f8:79:75:b0:0a:ab:66:
cd:ca:a5:70:d0:3c:a6:e5:20:c5:bf:06:e5:e7:f0:
fe:4b:b9:65:1f:f6:c6:5a:0b:de:ac:8d:14:94:4b:
90:61:02:75:71:09:9f:f8:d8:e7:54:06:00:b2:2a:
9c:44:e8:79:73:c7:ae:13:3b:21:32:02:dd:e9:ba:
61:75:d6:ea:3d:79:b6:58:5e:9f:db:ed:fa:c5:d7:
90:6a:b9:5f:8a:c3:c1:b1:61:35:da:85:8b:a4:98:
c6:6b:c5:71:9d:15:48:a6:66:ad:54:23:3b:d8:f8:
49:bb:62:48:57:a7:bc:6a:19:d2:8e:d8:b6:74:eb:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2B:A5:0D:B7:60:A1:5B:D4:D6:D6:01:C8:58:C1:EA:EA:D1:FB:82
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:2a:ae:56:53:84:48:fa:13:20:37:d7:c6:4b:8b:21:92:ca:
2f:d7:2e:75:2c:ba:1f:9a:a4:58:5a:ec:34:1b:6b:5d:0a:6e:
6e:ca:22:9e:62:fc:4e:30:cc:9e:3d:ae:d9:c8:ca:e0:e6:5e:
9a:04:79:45:2d:7e:93:c8:7b:48:d5:b3:d8:bb:70:b5:79:2c:
45:9e:41:47:3a:36:39:9a:1e:47:90:d3:2b:3a:5c:30:5a:14:
b3:55:11:0e:a9:7f:90:6d:0b:ca:c6:ad:ee:e4:93:50:d7:d9:
20:bc:06:25:c9:89:c0:86:11:1c:83:05:82:60:29:78:0e:9f:
f2:18:86:11:2b:3f:fa:98:4e:c8:53:8e:0d:b8:2a:1b:79:28:
38:41:3d:e3:0f:66:73:8a:b6:a9:6e:83:6c:11:48:77:81:a0:
8b:af:15:78:d9:e8:49:c7:19:ae:76:61:c8:d1:1a:e3:55:f6:
41:e6:e6:02:13:52:de:60:b7:e6:f8:83:34:38:3d:ee:9f:7e:
d2:9f:2e:59:dd:50:33:32:09:77:34:32:02:be:b9:43:ed:2d:
24:7a:64:3c:3b:73:87:9a:95:4a:d8:04:59:1e:cf:2e:1a:bf:
a8:5f:c5:17:9f:fb:41:4c:ee:bf:ae:78:52:ed:90:70:92:7b:
0e:c7:32:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTqi51bF3nLEGmrZF3ZFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3
Mjk3Y2EwHhcNMjUwODEyMjIwMjQ2WhcNMjUwODEzMjIwMjQ2WjAzMTEwLwYDVQQD
EygwZDJiYTUwZGI3NjBhMTViZDRkNmQ2MDFjODU4YzFlYWVhZDFmYjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K49/EARdwN0CKCh6eXDhS2gvWHb
wGj/powOvmN6bJwD4hJFKfBFLHP+9PpIS8md3yLczzyaFbcKUKxHrWfMwWqQnP9R
bBBj5u/sAxdGTGYcYeUhgIiU1Tls8UndspYMYIAEKAcE4asYh3zr7K4XdqA8iSm6
PZ+FZ39GYJcIPfh5dbAKq2bNyqVw0Dym5SDFvwbl5/D+S7llH/bGWgverI0UlEuQ
YQJ1cQmf+NjnVAYAsiqcROh5c8euEzshMgLd6bphddbqPXm2WF6f2+36xdeQarlf
isPBsWE12oWLpJjGa8VxnRVIpmatVCM72PhJu2JIV6e8ahnSjti2dOtzlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0rpQ23YKFb1NbWAchYwerq0fuCMB8GA1UdIwQY
MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt
NTM1ODQwMWZiNzk2LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2
LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3iquVlOE
SPoTIDfXxkuLIZLKL9cudSy6H5qkWFrsNBtrXQpubsoinmL8TjDMnj2u2cjK4OZe
mgR5RS1+k8h7SNWz2LtwtXksRZ5BRzo2OZoeR5DTKzpcMFoUs1URDql/kG0Lysat
7uSTUNfZILwGJcmJwIYRHIMFgmApeA6f8hiGESs/+phOyFOODbgqG3koOEE94w9m
c4q2qW6DbBFId4Ggi68VeNnoSccZrnZhyNEa41X2QebmAhNS3mC35viDNDg97p9+
0p8uWd1QMzIJdzQyAr65Q+0tJHpkPDtzh5qVStgEWR7PLhq/qF/FF5/7QUzuv654
Uu2QcJJ7DscyhQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:32 2025 by rpki-client