Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: X0AK56oNkaW4oIp04k8dcbilk108plN4OQqQ29GpPJU=
Subject key identifier: A6:07:71:A9:69:5B:58:95:04:E0:06:8F:5B:E0:78:1A:AE:01:70:15
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 01987D8A0DA284A916B72129A8EA2C73BE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 03AD
Signing time: Wed 06 Aug 2025 04:00:56 +0000
Manifest this update: Wed 06 Aug 2025 04:00:56 +0000
Manifest next update: Thu 07 Aug 2025 04:00:56 +0000
Files and hashes: 1: RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa (hash: N00rEgshheQJFJlnzMgkGFoydAhTWl79InbpFappf/8=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: sieIs235+eOPN2YZlq99ETaMQb8QY7rnrPeoG9d6EmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:0d:a2:84:a9:16:b7:21:29:a8:ea:2c:73:be:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Aug 6 04:00:56 2025 GMT
Not After : Aug 7 04:00:56 2025 GMT
Subject: CN=a60771a9695b589504e0068f5be0781aae017015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b2:ee:ed:af:77:05:72:cb:3e:60:5e:07:64:
d0:bf:b1:92:ac:14:20:0c:8d:90:78:f0:04:69:60:
fb:5b:7b:2d:0e:08:07:d6:ce:07:5c:87:49:81:ad:
15:c1:20:7c:78:b8:17:3e:ee:19:bd:e1:a5:d1:25:
c8:56:28:54:a3:b9:c5:ba:86:40:b6:0c:5b:f3:f3:
00:0e:a4:5d:d7:97:0c:10:69:3e:f2:7f:a1:11:89:
c3:af:5c:ad:2e:50:4f:a8:6e:e9:79:c8:91:66:53:
64:f4:c3:65:67:d8:e0:85:de:78:a2:88:b5:9a:eb:
4a:e1:13:ec:b1:96:0f:9d:66:bd:13:09:4a:13:7e:
80:7d:6e:2c:99:34:f0:49:8c:ff:d9:69:2d:d6:d4:
0d:a8:b2:d7:69:e2:27:bc:98:f0:4f:a4:7e:50:cc:
28:f1:f5:55:bc:69:18:17:f4:05:b4:82:8a:2a:0b:
d6:3c:b4:26:a0:f0:ba:82:8f:a3:02:79:93:7d:76:
41:e3:a9:a6:24:5d:c6:55:03:73:81:7d:f4:88:71:
74:f2:44:d6:35:cf:56:ff:56:21:63:a9:77:d3:ac:
72:2d:36:a6:87:6b:86:67:4a:1c:49:99:71:8d:7e:
89:72:b9:39:50:31:05:b6:94:d3:20:eb:5b:89:26:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:07:71:A9:69:5B:58:95:04:E0:06:8F:5B:E0:78:1A:AE:01:70:15
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f7:d3:fd:b6:7e:4c:c2:59:69:43:47:e6:6c:0b:01:92:30:
5f:8f:35:1d:ba:de:52:22:17:e9:54:b6:b1:a5:b2:7e:90:6a:
35:57:08:cf:59:2f:5b:f1:c1:ef:3e:65:05:68:36:17:63:8b:
9a:ef:ab:07:11:c7:f0:ce:d2:e1:ae:90:0b:e2:83:97:e5:0b:
c0:61:cc:91:bb:fc:72:9a:58:e5:58:2d:05:88:2d:8d:af:af:
f7:fc:62:2b:1c:a7:9b:2d:5a:2f:5f:9b:0b:42:41:a6:80:25:
ef:aa:17:b6:3c:a5:05:a8:99:75:40:da:1c:d7:a5:e1:b7:8d:
0d:5c:b3:ae:ac:a1:ce:c2:25:d7:53:19:1e:ae:83:6d:72:91:
90:6d:0c:7f:81:f5:f4:77:64:b9:b9:83:aa:03:a4:7f:a8:64:
db:2b:55:02:1f:13:d7:f4:7c:ad:19:04:24:96:19:3c:ee:b1:
8e:bf:cc:0c:b7:84:3f:84:fc:8d:bf:07:80:58:8f:5f:00:c2:
e4:42:2b:77:bc:b9:ba:3a:de:dc:9b:bf:f0:aa:a1:5f:83:85:
b9:64:e7:3a:dd:25:70:8a:bf:57:6a:a1:48:ff:5b:bc:76:21:
2e:28:02:ae:d8:34:73:39:a6:bf:f3:af:ff:e0:a1:76:85:33:
79:2e:69:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9ig2ihKkWtyEpqOosc75oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2JkZjJmNWI5NjEyMzJlNThkYjI4OWI0OGE5ZmUyNDVm
YTlkNmMwHhcNMjUwODA2MDQwMDU2WhcNMjUwODA3MDQwMDU2WjAzMTEwLwYDVQQD
EyhhNjA3NzFhOTY5NWI1ODk1MDRlMDA2OGY1YmUwNzgxYWFlMDE3MDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7Lu7a93BXLLPmBeB2TQv7GSrBQg
DI2QePAEaWD7W3stDggH1s4HXIdJga0VwSB8eLgXPu4ZveGl0SXIVihUo7nFuoZA
tgxb8/MADqRd15cMEGk+8n+hEYnDr1ytLlBPqG7peciRZlNk9MNlZ9jghd54ooi1
mutK4RPssZYPnWa9EwlKE36AfW4smTTwSYz/2Wkt1tQNqLLXaeInvJjwT6R+UMwo
8fVVvGkYF/QFtIKKKgvWPLQmoPC6go+jAnmTfXZB46mmJF3GVQNzgX30iHF08kTW
Nc9W/1YhY6l306xyLTamh2uGZ0ocSZlxjX6Jcrk5UDEFtpTTIOtbiSaeEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYHcalpW1iVBOAGj1vgeBquAXAVMB8GA1UdIwQY
MBaAFIp73y9blhIy5Y2yibSKn+JF+p1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAt
Njc2ODViNGRjOGI5LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAtNjc2ODViNGRjOGI5
LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/fT/bZ+
TMJZaUNH5mwLAZIwX481HbreUiIX6VS2saWyfpBqNVcIz1kvW/HB7z5lBWg2F2OL
mu+rBxHH8M7S4a6QC+KDl+ULwGHMkbv8cppY5VgtBYgtja+v9/xiKxynmy1aL1+b
C0JBpoAl76oXtjylBaiZdUDaHNel4beNDVyzrqyhzsIl11MZHq6DbXKRkG0Mf4H1
9HdkubmDqgOkf6hk2ytVAh8T1/R8rRkEJJYZPO6xjr/MDLeEP4T8jb8HgFiPXwDC
5EIrd7y5ujre3Ju/8KqhX4OFuWTnOt0lcIq/V2qhSP9bvHYhLigCrtg0czmmv/Ov
/+ChdoUzeS5p/w==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:21:22 2025 by rpki-client