Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: ydvHYcg8YXNxFH9VU3euISfQcgCYEkoSDvjflMB4PGU=
Subject key identifier: 7D:C7:04:FE:BB:CF:AE:A9:A6:16:C9:F1:8E:57:47:86:2F:10:65:EC
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 01987B2DD586E3B67176F9EA608F23D454F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 161F
Signing time: Tue 05 Aug 2025 17:00:57 +0000
Manifest this update: Tue 05 Aug 2025 17:00:57 +0000
Manifest next update: Wed 06 Aug 2025 17:00:57 +0000
Files and hashes: 1: Sk4x_HD1LPLgRyf7btPjY4ncmxU.roa (hash: +rugmwU9Eq5brIUvEJKCQXzHVBLNVvEt2u6gto3U47Q=)
2: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: rllcqsK39ydMRXyKalNtEpuuvc1Gwj2fQaQx10EgVMQ=)
3: xNwSYwAbBI1je8GEBcLJwVabZvM.roa (hash: rsROgVJBvuKbZk2mF1z0pX159BnG002ygt7Nhxzcdxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:d5:86:e3:b6:71:76:f9:ea:60:8f:23:d4:54:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Aug 5 17:00:57 2025 GMT
Not After : Aug 6 17:00:57 2025 GMT
Subject: CN=7dc704febbcfaea9a616c9f18e5747862f1065ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:f4:15:e8:2f:e5:76:bf:8c:90:33:6b:92:
c6:8d:61:94:18:8a:cb:92:ba:92:6a:d5:95:0d:29:
0d:bf:58:f5:d5:17:2a:e4:15:e1:5f:52:31:75:25:
3c:7c:24:4a:c7:92:3a:3c:7a:e5:1c:14:1f:61:1e:
8d:85:d4:29:c7:dd:de:7d:ed:e6:48:85:ad:5a:33:
89:20:eb:0c:f2:ee:11:6d:b5:37:8e:ae:c0:0f:8d:
d5:c7:e2:6c:eb:2f:de:94:3c:2a:c4:ed:39:ad:a7:
39:e3:48:02:d8:4f:db:d2:b5:36:e8:1e:51:6a:e2:
0e:e5:b9:a9:84:26:4e:e9:d6:1b:4e:e5:e2:91:2c:
9d:d3:c7:0a:ff:bb:0f:02:dc:9f:b4:46:64:3d:2d:
86:80:9b:bc:c5:b8:93:ff:50:7c:41:d3:ad:97:fc:
19:c7:a2:b2:b3:ce:47:9c:91:30:b8:d0:96:d0:96:
83:61:ce:da:ac:cd:59:d1:ee:c8:07:1d:c3:aa:c2:
f9:0f:d4:79:02:3c:79:02:c3:77:bb:94:64:13:9e:
7c:ad:af:1d:dd:71:b8:3c:59:f7:01:cd:f4:f7:88:
ce:05:b1:f8:4e:54:e7:58:4d:7f:43:45:39:56:e7:
d1:1a:ed:7d:aa:de:56:31:05:d3:b9:52:74:d1:54:
cf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C7:04:FE:BB:CF:AE:A9:A6:16:C9:F1:8E:57:47:86:2F:10:65:EC
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d9:f8:db:50:6c:30:1a:e6:c2:f8:7c:b0:0d:a1:26:03:99:
4d:7a:15:ec:d9:f2:10:8a:c4:04:4f:13:f2:23:e3:73:51:9c:
c6:b5:34:6a:6a:f1:33:d4:f0:b2:2c:f4:53:62:43:d6:1b:84:
6b:b1:4a:02:37:4d:ab:15:67:6d:ca:e3:ad:5c:22:81:f4:5e:
c9:a3:db:49:a3:cd:dd:66:1a:24:fa:e5:ac:c5:fc:58:98:91:
76:91:ca:f4:02:bf:9a:3a:66:47:12:b6:6f:5e:34:f1:fa:9a:
27:f9:15:f7:c7:0c:c8:0b:fc:9f:47:95:ea:66:57:bf:2e:79:
e8:9f:e1:d8:77:72:a2:a4:bc:a9:99:ad:b9:5f:4e:4c:97:54:
93:7f:0d:8b:57:53:e7:96:d6:79:c9:fc:6a:71:ca:d3:bd:4e:
22:1e:ce:93:fa:22:8e:7c:72:58:78:b8:6d:e7:b8:2a:af:97:
32:5b:b9:87:8d:59:9d:79:cd:07:5a:31:82:da:ed:ac:97:18:
e6:ad:87:ca:a3:6b:f8:78:30:91:64:8b:70:fd:24:ac:a8:d3:
e8:56:dd:6d:45:3f:9a:46:5c:f7:06:2e:25:fa:a8:31:72:92:
47:76:ef:46:2a:34:40:80:e3:de:34:25:45:b9:ce:60:73:e4:
54:9e:68:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7LdWG47ZxdvnqYI8j1FTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDcwNWEzNjNkYzFkOGQwZWE1MWM5YjlhMWVjYmQzODA3
YmQwNTQwHhcNMjUwODA1MTcwMDU3WhcNMjUwODA2MTcwMDU3WjAzMTEwLwYDVQQD
Eyg3ZGM3MDRmZWJiY2ZhZWE5YTYxNmM5ZjE4ZTU3NDc4NjJmMTA2NWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbH0Fegv5Xa/jJAza5LGjWGUGIrL
krqSatWVDSkNv1j11Rcq5BXhX1IxdSU8fCRKx5I6PHrlHBQfYR6NhdQpx93efe3m
SIWtWjOJIOsM8u4RbbU3jq7AD43Vx+Js6y/elDwqxO05rac540gC2E/b0rU26B5R
auIO5bmphCZO6dYbTuXikSyd08cK/7sPAtyftEZkPS2GgJu8xbiT/1B8QdOtl/wZ
x6Kys85HnJEwuNCW0JaDYc7arM1Z0e7IBx3DqsL5D9R5Ajx5AsN3u5RkE558ra8d
3XG4PFn3Ac3094jOBbH4TlTnWE1/Q0U5VufRGu19qt5WMQXTuVJ00VTPpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3HBP67z66pphbJ8Y5XR4YvEGXsMB8GA1UdIwQY
MBaAFP9HBaNj3B2NDqUcm5oey9OAe9BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYt
NTZiYmUzOGY3NDA3LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYtNTZiYmUzOGY3NDA3
LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtn421Bs
MBrmwvh8sA2hJgOZTXoV7NnyEIrEBE8T8iPjc1GcxrU0amrxM9Twsiz0U2JD1huE
a7FKAjdNqxVnbcrjrVwigfReyaPbSaPN3WYaJPrlrMX8WJiRdpHK9AK/mjpmRxK2
b1408fqaJ/kV98cMyAv8n0eV6mZXvy556J/h2HdyoqS8qZmtuV9OTJdUk38Ni1dT
55bWecn8anHK071OIh7Ok/oijnxyWHi4bee4Kq+XMlu5h41ZnXnNB1oxgtrtrJcY
5q2HyqNr+HgwkWSLcP0krKjT6FbdbUU/mkZc9wYuJfqoMXKSR3bvRio0QIDj3jQl
RbnOYHPkVJ5oZw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:34:49 2025 by rpki-client