Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
File: RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json)
Hash identifier: xqlWRsfJmBHv0K1IoEDzjWwBVEMUDCqlWK6XA7Ey738=
Subject key identifier: 09:EA:DF:F6:F2:18:87:A0:4D:7D:7A:70:08:80:4D:73:89:A0:38:1D
Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Certificate serial: 01987C77F0CEE8871BD69A76A1909A4FC15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 23:01:31 +0000
Manifest this update: Tue 05 Aug 2025 23:01:31 +0000
Manifest next update: Wed 06 Aug 2025 23:01:31 +0000
Files and hashes: 1: 6Ch2BA4EBBViUCewGb6Paaan7YI.roa (hash: WRYMr3XPQ7z0oDRXKp9hN0X+086fzEIRzfg0NuzfPNE=)
2: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: Yrdszectm5i5cWgd4z+d7iDheLblcgvB8Jpmm8deWs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:f0:ce:e8:87:1b:d6:9a:76:a1:90:9a:4f:c1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0
Validity
Not Before: Aug 5 23:01:31 2025 GMT
Not After : Aug 6 23:01:31 2025 GMT
Subject: CN=09eadff6f21887a04d7d7a7008804d7389a0381d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:a5:5f:5d:81:41:e3:c0:98:e5:e1:11:0a:
2a:58:a6:54:43:8c:16:9d:81:9f:01:bc:e6:85:9d:
fb:c5:a2:ad:51:0b:49:28:bb:df:66:bd:55:15:3e:
3b:2f:c5:aa:1c:60:29:82:b7:3f:6a:bf:69:d9:b6:
85:a7:9a:4f:a5:00:c0:66:ec:ee:9c:41:10:30:4d:
c5:a4:ed:f9:b0:e8:d8:59:d5:1f:7b:a0:5c:c4:48:
08:18:58:99:39:c7:68:ff:3a:16:2d:64:b4:3f:e7:
4c:b0:b8:25:40:d3:e0:49:55:da:9c:ba:8e:bb:40:
82:40:49:e8:ee:66:64:4b:af:ff:49:d3:cf:2d:92:
c0:bb:af:24:50:8a:3e:4d:8f:bd:1e:c6:86:62:c0:
97:0f:f2:a5:50:67:a8:c7:22:f8:48:b3:63:d5:6f:
b0:4b:8e:23:ed:ab:ce:25:10:04:24:59:e0:b2:3d:
64:63:f5:63:39:4d:54:fa:78:cd:11:11:05:d1:86:
7e:87:6f:61:fc:ef:0c:14:63:bc:8e:fe:04:c4:c7:
73:e9:0a:66:33:63:92:7e:e8:96:df:49:ad:62:11:
80:49:75:07:86:8f:b5:5d:1f:cf:f7:41:49:ec:20:
c9:61:08:75:fe:09:c3:9d:a4:98:6c:04:1e:d7:b4:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EA:DF:F6:F2:18:87:A0:4D:7D:7A:70:08:80:4D:73:89:A0:38:1D
X509v3 Authority Key Identifier:
keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7d:69:0c:2b:de:7a:94:e3:bd:fb:ae:4d:64:7e:3e:19:60:
dd:55:2e:6a:b7:01:d6:46:5a:87:52:c6:1c:d2:87:31:45:41:
c7:99:6c:7f:13:13:23:df:d9:01:d2:68:de:a3:ca:dc:cc:ff:
4b:5b:42:a6:1f:9a:1c:37:7a:39:30:07:e4:74:a6:b1:20:70:
0f:75:0d:65:f8:35:d5:1a:93:34:50:84:6f:12:8d:09:f7:26:
cb:2a:f5:59:63:90:29:94:1b:fc:e0:99:91:aa:f4:1f:c7:47:
aa:c6:fa:53:31:64:6e:d6:0c:d4:3a:d6:af:6e:5e:48:9b:e4:
e4:79:41:38:d3:8c:b6:6e:c7:4e:f3:7e:e0:dd:fd:e3:e7:b5:
90:9a:9d:fc:a4:7a:16:1e:be:6c:0e:17:bb:8d:8d:14:5a:29:
a1:00:ba:75:ec:fe:e7:16:29:9d:53:06:d0:bb:db:3f:81:00:
64:95:1d:45:05:5d:bf:b3:1c:8a:79:52:ec:00:e5:09:38:19:
99:70:c6:3f:6e:2b:75:6d:f6:d9:d8:0c:9f:1d:be:51:ec:ce:
58:b3:fe:a2:ce:d3:1e:12:b8:58:52:fc:c1:40:cf:20:18:78:
a2:a8:84:96:ef:ae:fa:e2:71:09:8d:8f:fd:02:61:b1:ef:07:
ec:3a:33:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8d/DO6Icb1pp2oZCaT8FaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NWRmMTNkMjBmM2I1NzFhNGJhNjEwYjgxZTYzMDNkYjZk
MDk5YzAwHhcNMjUwODA1MjMwMTMxWhcNMjUwODA2MjMwMTMxWjAzMTEwLwYDVQQD
EygwOWVhZGZmNmYyMTg4N2EwNGQ3ZDdhNzAwODgwNGQ3Mzg5YTAzODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+ClX12BQePAmOXhEQoqWKZUQ4wW
nYGfAbzmhZ37xaKtUQtJKLvfZr1VFT47L8WqHGApgrc/ar9p2baFp5pPpQDAZuzu
nEEQME3FpO35sOjYWdUfe6BcxEgIGFiZOcdo/zoWLWS0P+dMsLglQNPgSVXanLqO
u0CCQEno7mZkS6//SdPPLZLAu68kUIo+TY+9HsaGYsCXD/KlUGeoxyL4SLNj1W+w
S44j7avOJRAEJFngsj1kY/VjOU1U+njNEREF0YZ+h29h/O8MFGO8jv4ExMdz6Qpm
M2OSfuiW30mtYhGASXUHho+1XR/P90FJ7CDJYQh1/gnDnaSYbAQe17RkgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnq3/byGIegTX16cAiATXOJoDgdMB8GA1UdIwQY
MBaAFERd8T0g87VxpLphC4HmMD220JnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTkt
NGY1NGFkNzU1YjIwLzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTktNGY1NGFkNzU1YjIw
LzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHn1pDCve
epTjvfuuTWR+Phlg3VUuarcB1kZah1LGHNKHMUVBx5lsfxMTI9/ZAdJo3qPK3Mz/
S1tCph+aHDd6OTAH5HSmsSBwD3UNZfg11RqTNFCEbxKNCfcmyyr1WWOQKZQb/OCZ
kar0H8dHqsb6UzFkbtYM1DrWr25eSJvk5HlBONOMtm7HTvN+4N394+e1kJqd/KR6
Fh6+bA4Xu42NFFopoQC6dez+5xYpnVMG0LvbP4EAZJUdRQVdv7McinlS7ADlCTgZ
mXDGP24rdW322dgMnx2+UezOWLP+os7THhK4WFL8wUDPIBh4oqiElu+u+uJxCY2P
/QJhse8H7DozJA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:37 2025 by rpki-client