Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier: buTnI/2yayf4o/7CfLrZrQOZXy0AS6phkJyFv01+lqA=
Subject key identifier: 22:74:C3:FF:DA:67:6B:E6:9E:E9:5C:1C:53:4A:96:E6:88:88:4C:E6
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 019873E375064B4A807C8F833CDAEB83DCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number: 0EEF
Signing time: Mon 04 Aug 2025 07:02:23 +0000
Manifest this update: Mon 04 Aug 2025 07:02:23 +0000
Manifest next update: Tue 05 Aug 2025 07:02:23 +0000
Files and hashes: 1: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (hash: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=)
2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: OKKcKjImiu+KE4auFuFutXNekMzb52EpAygpKYTibMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:75:06:4b:4a:80:7c:8f:83:3c:da:eb:83:dc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Aug 4 07:02:23 2025 GMT
Not After : Aug 5 07:02:23 2025 GMT
Subject: CN=2274c3ffda676be69ee95c1c534a96e688884ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:e0:05:d5:1f:f2:2b:1f:25:68:83:3a:e5:
b3:7b:35:05:3f:73:85:9a:85:2c:ca:bf:55:ac:2b:
33:31:11:8b:e2:17:43:0b:fe:be:cf:14:17:fa:22:
9a:6b:e7:26:37:c2:ba:67:6b:70:d6:b4:ec:62:45:
8e:63:f9:72:16:79:0a:49:60:d4:dc:2a:e8:84:b1:
70:0d:3f:1b:26:93:e0:f1:2f:4e:1e:ba:35:c7:2d:
88:7b:8d:ba:c6:7b:96:e5:d7:c5:92:79:a2:f5:a5:
fa:b3:62:fc:c2:a0:18:a7:74:37:e6:00:f0:f5:b3:
c1:e5:c9:bc:8b:c9:82:f7:e4:db:67:ff:89:c3:55:
c1:08:c6:d5:55:ca:1e:c7:d6:11:db:dd:9e:dd:d4:
18:92:b8:af:db:c9:53:55:a3:e7:51:e3:81:59:25:
91:5f:ce:2a:7f:6f:75:b0:2c:67:3a:ea:49:9d:49:
80:13:6d:0d:18:96:e8:82:9c:a3:2b:14:60:9e:42:
d3:57:67:71:ee:dd:3a:ef:76:72:54:8e:58:bf:f9:
ad:62:6e:a6:33:a3:57:a6:89:66:7b:e5:79:c0:88:
c6:4a:9d:56:6e:8d:5d:96:e2:cd:74:01:f0:3d:be:
57:28:32:8f:22:a1:20:fc:41:50:81:1c:dd:ee:40:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:74:C3:FF:DA:67:6B:E6:9E:E9:5C:1C:53:4A:96:E6:88:88:4C:E6
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e8:43:c8:7e:fe:3f:2c:e6:81:41:1e:c9:01:57:7e:c0:b2:
4f:a4:eb:28:0a:1c:60:b9:3c:5e:8a:ca:64:ff:50:9e:02:43:
98:87:48:ee:09:b9:78:d6:3b:2d:86:8b:28:92:fa:79:e2:b5:
77:97:37:36:8e:a8:9d:0e:74:6a:00:b4:90:f0:ec:ab:d7:5e:
ab:73:74:00:37:bc:aa:7a:ed:e9:ed:3f:ac:64:8e:6e:cb:d2:
5a:00:47:2f:e5:64:9c:48:24:de:56:39:be:9a:9d:ba:84:06:
9a:74:0e:9d:02:f9:be:c3:f9:85:be:ef:ee:a1:2f:cc:6f:4a:
eb:e4:77:1f:8c:d2:3a:e8:aa:95:f7:94:23:2f:1c:43:4e:bb:
4b:9d:2d:93:d7:79:0b:9b:b5:c8:57:d8:6f:95:1a:af:ff:73:
f7:fe:5e:a9:41:71:d8:f6:81:40:7a:d4:c7:cf:f7:ca:fd:01:
cb:d0:26:eb:b5:52:c7:18:89:9f:20:ff:9b:7e:0f:6f:b1:af:
55:dc:69:97:c4:f7:17:36:20:46:0c:81:33:61:52:72:fa:d2:
d2:71:7d:83:a8:f0:5e:a1:99:e9:94:7a:44:39:2c:ae:a1:df:
e5:08:38:e6:9a:f2:5a:f4:df:06:61:4c:a2:72:87:d2:09:21:
9c:6c:66:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz43UGS0qAfI+DPNrrg9z+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZGJmNDU2MDEwYTliZDE0OTQxY2EyYzkxY2E1MzNlN2Vm
NTE3OGEwHhcNMjUwODA0MDcwMjIzWhcNMjUwODA1MDcwMjIzWjAzMTEwLwYDVQQD
EygyMjc0YzNmZmRhNjc2YmU2OWVlOTVjMWM1MzRhOTZlNjg4ODg0Y2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWTgBdUf8isfJWiDOuWzezUFP3OF
moUsyr9VrCszMRGL4hdDC/6+zxQX+iKaa+cmN8K6Z2tw1rTsYkWOY/lyFnkKSWDU
3CrohLFwDT8bJpPg8S9OHro1xy2Ie426xnuW5dfFknmi9aX6s2L8wqAYp3Q35gDw
9bPB5cm8i8mC9+TbZ/+Jw1XBCMbVVcoex9YR292e3dQYkriv28lTVaPnUeOBWSWR
X84qf291sCxnOupJnUmAE20NGJbogpyjKxRgnkLTV2dx7t0673ZyVI5Yv/mtYm6m
M6NXpolme+V5wIjGSp1Wbo1dluLNdAHwPb5XKDKPIqEg/EFQgRzd7kD+RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJ0w//aZ2vmnulcHFNKluaIiEzmMB8GA1UdIwQY
MBaAFK/b9FYBCpvRSUHKLJHKUz5+9ReKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQt
M2NkZGYxNzUxZjU5LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQtM2NkZGYxNzUxZjU5
LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+hDyH7+
PyzmgUEeyQFXfsCyT6TrKAocYLk8XorKZP9QngJDmIdI7gm5eNY7LYaLKJL6eeK1
d5c3No6onQ50agC0kPDsq9deq3N0ADe8qnrt6e0/rGSObsvSWgBHL+VknEgk3lY5
vpqduoQGmnQOnQL5vsP5hb7v7qEvzG9K6+R3H4zSOuiqlfeUIy8cQ067S50tk9d5
C5u1yFfYb5Uar/9z9/5eqUFx2PaBQHrUx8/3yv0By9Am67VSxxiJnyD/m34Pb7Gv
Vdxpl8T3FzYgRgyBM2FScvrS0nF9g6jwXqGZ6ZR6RDksrqHf5Qg45pryWvTfBmFM
onKH0gkhnGxmRA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:05 2025 by rpki-client