Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: Y4u46IhH0UUK1x/KBCcgYdvggxMQ3CZNCwIcmYBIXTU=
Subject key identifier: 05:E0:06:E8:66:3E:D7:4D:66:12:A9:D4:BD:01:19:0D:A9:BD:62:EE
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 019A54BFCA8505C14A6909EBE44B767B328C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 04A1
Signing time: Wed 05 Nov 2025 16:00:46 +0000
Manifest this update: Wed 05 Nov 2025 16:00:46 +0000
Manifest next update: Thu 06 Nov 2025 16:00:46 +0000
Files and hashes: 1: RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa (hash: N00rEgshheQJFJlnzMgkGFoydAhTWl79InbpFappf/8=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: iU6usMB9X9aY/qRlFmIaeayuDxegN4OmQwoAM7HRy9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:ca:85:05:c1:4a:69:09:eb:e4:4b:76:7b:32:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Nov 5 16:00:46 2025 GMT
Not After : Nov 6 16:00:46 2025 GMT
Subject: CN=05e006e8663ed74d6612a9d4bd01190da9bd62ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:60:f3:2d:5b:8a:8d:c9:22:15:64:fa:f5:81:
2e:12:f6:9a:47:60:0f:25:d2:da:73:2e:b0:cd:79:
b1:b6:2e:d4:ab:7a:2b:bb:5e:f3:33:60:b2:fb:94:
44:21:45:e5:e7:b8:43:a6:f7:b3:3f:43:ad:68:8e:
03:65:d2:53:6b:62:bf:42:43:37:2e:83:a8:9f:94:
86:d1:f7:2d:d9:f4:97:6b:37:f6:3a:fd:01:3c:42:
f8:45:ae:11:f9:d8:c8:bb:f9:7f:93:e1:bd:34:e2:
a8:17:ef:d6:72:55:3e:78:1a:12:ea:60:10:86:67:
ea:a2:a3:7a:5f:cf:9a:db:de:e7:f6:be:12:e3:e7:
a8:fc:c9:86:30:bc:e6:a0:0c:49:26:3c:66:c0:58:
fd:ce:55:9c:2a:55:0d:38:a0:2b:ca:ae:d6:36:59:
35:f6:59:90:93:e6:5b:f8:46:5e:f8:fa:80:0e:87:
df:94:83:69:28:0f:a6:fb:ea:f7:94:e0:b2:6e:47:
c1:de:64:6e:81:a0:94:3c:cb:d4:09:18:d5:ff:8f:
84:c8:a1:b4:3c:32:29:d2:b5:73:f3:95:30:52:d1:
75:e4:84:4c:1e:f8:40:3e:b9:13:58:5b:e5:46:fe:
8a:90:60:8a:0c:f8:67:b1:37:da:4b:9a:2f:b5:0c:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E0:06:E8:66:3E:D7:4D:66:12:A9:D4:BD:01:19:0D:A9:BD:62:EE
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:20:21:9a:5a:08:bd:46:8f:be:85:9c:1a:24:e0:30:09:3c:
45:ba:50:39:b9:f3:83:28:48:70:2e:9a:95:1a:43:2b:93:06:
a0:46:03:72:ea:00:0f:6a:cf:7e:9b:3c:34:53:f5:af:5a:7f:
fd:53:0e:5b:61:19:31:58:d5:16:1d:91:09:69:a8:0f:ac:93:
16:ee:d6:e3:63:27:20:81:f7:27:e6:60:66:84:b0:a0:37:bf:
89:41:6c:a9:ea:dd:1d:4a:e5:ae:92:c6:10:2e:42:ec:7e:a9:
ab:7c:32:ac:0e:89:9f:78:92:0a:ce:75:1c:fb:e4:cd:8b:82:
56:c2:98:4a:69:c5:95:9c:34:ed:59:94:2e:2b:8e:fe:0b:c6:
10:15:c5:8c:7d:5d:19:7d:12:4d:11:e8:76:18:81:dc:3f:67:
cb:fe:d5:90:1f:85:9a:cc:12:79:26:eb:bb:d5:46:84:d2:e2:
03:93:fb:ef:1e:ed:92:73:32:dd:b5:6e:ba:15:b9:b5:f5:d5:
4c:1b:41:7d:24:1b:a3:d7:15:dc:08:da:90:be:17:17:1e:7d:
cb:b2:fd:02:f5:c0:1b:9b:87:2f:47:c7:d6:8d:47:2f:d3:36:
87:19:70:1d:86:4f:c8:c7:82:4c:81:dd:12:79:72:76:42:c1:
4c:81:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:49 2025 by rpki-client