Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: C2I3qs8H8E+ijAggrEcrujnZs1+q0zNYA+GDmeBJ39c=
Subject key identifier: 48:3B:90:AF:68:51:57:81:76:27:3F:61:EC:9F:D4:A3:42:BC:9D:A7
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 01987ED37DC25ECAD590B6750A2840516299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 10:00:46 +0000
Manifest this update: Wed 06 Aug 2025 10:00:46 +0000
Manifest next update: Thu 07 Aug 2025 10:00:46 +0000
Files and hashes: 1: a5yaKlijnL4kZ_oj1IyssANoPrY.roa (hash: Ldfc6br/bRY5cT98+AAZmtT6be1fhfXCxblPXo1RRow=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: dG0bhA6/F1/aSzDnK4V5CeczX0/gGS5pG6Lu3puTvXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:7d:c2:5e:ca:d5:90:b6:75:0a:28:40:51:62:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Aug 6 10:00:46 2025 GMT
Not After : Aug 7 10:00:46 2025 GMT
Subject: CN=483b90af6851578176273f61ec9fd4a342bc9da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:82:e5:ca:da:f5:6c:15:7c:01:60:e1:b9:
41:83:bd:18:58:43:45:ef:3b:4b:71:f8:2c:7c:cd:
dd:24:3a:54:2d:3a:3a:83:b3:40:e1:bd:b1:f8:c0:
35:f6:72:6f:8a:b1:74:54:a3:2c:a0:5e:4c:d6:4a:
da:c2:ed:b2:b6:c4:4e:33:d8:b4:6c:f6:d8:d7:0c:
fe:33:e1:6d:16:77:f1:e8:47:60:43:07:9a:6a:98:
61:e9:c0:21:24:d4:d8:9a:b8:b7:ec:79:8e:ef:23:
b8:84:45:fd:b4:36:21:7d:60:cd:4d:3c:93:6f:39:
fa:a2:b3:31:2c:00:69:16:1a:b1:1d:68:fb:33:dd:
5c:96:6f:32:dc:70:7a:82:88:57:b9:53:77:9b:53:
5d:8d:10:be:1f:b8:9d:9d:df:4a:24:0f:97:5c:96:
b9:30:48:22:14:15:66:a2:34:39:d9:9c:7c:a5:11:
d1:9b:d4:e7:98:14:62:1a:64:1b:e8:92:3f:92:2c:
1d:da:20:89:79:25:8a:0f:15:52:f5:eb:77:4f:13:
3e:f3:ef:fa:f7:4b:88:58:3c:58:c5:45:3e:0e:f6:
17:fd:45:3d:48:39:97:21:43:33:48:01:c1:7e:71:
c2:2c:29:30:9b:99:8e:7c:f0:e9:3f:a8:95:a4:fe:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3B:90:AF:68:51:57:81:76:27:3F:61:EC:9F:D4:A3:42:BC:9D:A7
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b1:e5:e4:ac:28:3d:2f:bb:5d:a8:61:35:5f:ce:ae:cb:5a:
7e:ed:28:3f:b6:f2:69:8c:52:8b:34:41:94:ec:98:af:9f:1b:
b9:ea:7c:c8:4f:c7:56:f9:e6:e1:9e:6e:11:e3:96:59:d6:59:
42:c3:c8:7e:bc:46:7c:e9:77:17:2d:af:2f:79:a5:ef:3a:55:
50:56:d6:57:d5:b8:9f:8a:b7:4f:17:05:e0:6c:31:74:8c:af:
cf:2c:b2:09:96:5f:e4:a3:40:75:75:de:95:e9:62:cc:be:e8:
2f:7c:c6:ba:ce:0a:32:cd:4b:9a:a9:c3:9c:f4:e8:2a:b5:47:
1f:da:ac:c9:d8:1e:0d:01:58:2e:78:d0:5c:c3:a8:cc:26:3e:
0a:bb:36:94:af:ea:14:b1:ef:e7:88:e1:07:73:3f:e5:20:51:
20:91:97:11:1e:43:ab:81:0b:1b:6b:bc:ce:f3:a2:2d:52:98:
98:13:92:49:81:ab:e6:f9:7f:40:b8:13:c7:0e:18:df:26:ef:
ac:07:f0:4a:77:7d:e6:fe:34:bb:e2:9c:ac:44:4d:c2:cd:c6:
9b:f0:fa:4c:02:8a:7a:27:e9:9c:e8:b1:5b:6f:1d:d5:52:24:
2f:f9:13:d5:c4:9c:24:e2:7b:7d:05:65:c0:72:02:84:00:85:
b7:ac:24:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+033CXsrVkLZ1CihAUWKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZmZmMWJkNzcxMjg3Y2VkNGM0ZGQ2ZDhhODUxZDJhZDc3
MDY2MWQwHhcNMjUwODA2MTAwMDQ2WhcNMjUwODA3MTAwMDQ2WjAzMTEwLwYDVQQD
Eyg0ODNiOTBhZjY4NTE1NzgxNzYyNzNmNjFlYzlmZDRhMzQyYmM5ZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVuC5cra9WwVfAFg4blBg70YWENF
7ztLcfgsfM3dJDpULTo6g7NA4b2x+MA19nJvirF0VKMsoF5M1krawu2ytsROM9i0
bPbY1wz+M+FtFnfx6EdgQweaaphh6cAhJNTYmri37HmO7yO4hEX9tDYhfWDNTTyT
bzn6orMxLABpFhqxHWj7M91clm8y3HB6gohXuVN3m1NdjRC+H7idnd9KJA+XXJa5
MEgiFBVmojQ52Zx8pRHRm9TnmBRiGmQb6JI/kiwd2iCJeSWKDxVS9et3TxM+8+/6
90uIWDxYxUU+DvYX/UU9SDmXIUMzSAHBfnHCLCkwm5mOfPDpP6iVpP5FtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEg7kK9oUVeBdic/Yeyf1KNCvJ2nMB8GA1UdIwQY
MBaAFK3/8b13EofO1MTdbYqFHSrXcGYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82MjNlMTEtZTcwYy00ZjViLTg1MmMt
NDk0M2I0YjQyZWJiLzEvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy82MjNlMTEtZTcwYy00ZjViLTg1MmMtNDk0M2I0YjQyZWJi
LzEvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbHl5Kwo
PS+7XahhNV/Orstafu0oP7byaYxSizRBlOyYr58buep8yE/HVvnm4Z5uEeOWWdZZ
QsPIfrxGfOl3Fy2vL3ml7zpVUFbWV9W4n4q3TxcF4GwxdIyvzyyyCZZf5KNAdXXe
lelizL7oL3zGus4KMs1LmqnDnPToKrVHH9qsydgeDQFYLnjQXMOozCY+Crs2lK/q
FLHv54jhB3M/5SBRIJGXER5Dq4ELG2u8zvOiLVKYmBOSSYGr5vl/QLgTxw4Y3ybv
rAfwSnd95v40u+KcrERNws3Gm/D6TAKKeifpnOixW28d1VIkL/kT1cScJOJ7fQVl
wHIChACFt6wk+g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:48:46 2025 by rpki-client