Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
File: 484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json)
Hash identifier: 2vyRvKLMiKFxvuTJyiJHRHdnkLTTEliDoNZpsiLo2xs=
Subject key identifier: 40:56:62:85:2E:9B:BA:D8:FF:7F:14:99:97:49:A7:7E:FB:5D:85:91
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Certificate issuer: /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial: 019895C90BBD6C5A7FFFF21DE82E611C692A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
Manifest number: 0CBB
Signing time: Sun 10 Aug 2025 21:00:37 +0000
Manifest this update: Sun 10 Aug 2025 21:00:37 +0000
Manifest next update: Mon 11 Aug 2025 21:00:37 +0000
Files and hashes: 1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: 7Vmq07ru0M1TE4MsO0FIAOdjpEW7jL1AbXwoVrhHQ84=)
2: qcoI9QRYFLMa_u8cjDZFd9W6S20.roa (hash: G2neLmn+8/k9VBrxT3PrvfgosA6NhKRornhd6evsbec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:0b:bd:6c:5a:7f:ff:f2:1d:e8:2e:61:1c:69:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Validity
Not Before: Aug 10 21:00:37 2025 GMT
Not After : Aug 11 21:00:37 2025 GMT
Subject: CN=405662852e9bbad8ff7f14999749a77efb5d8591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:35:bb:99:2d:3a:f2:b6:72:0c:11:f3:88:
3b:b3:98:f7:51:13:c2:a6:6b:83:a0:cd:5b:ff:a3:
8c:67:4c:9b:19:4c:36:eb:4c:20:d3:3d:65:46:29:
a7:41:93:67:ac:bd:fa:e2:f2:44:18:1a:ec:56:ed:
3e:19:18:d6:58:b8:f3:c3:8f:a8:fe:26:8c:6d:5c:
e3:c6:25:3f:cb:84:c4:55:eb:3d:ec:9a:a8:bc:6f:
3b:75:4b:1a:93:4a:11:2b:b9:b8:ed:15:48:14:b3:
cf:c6:e9:b4:4e:19:8d:22:1c:cb:e4:cc:e8:b4:f0:
b0:60:a6:15:28:0a:81:bb:43:84:38:84:e5:fa:ef:
06:ba:d9:90:7c:30:ac:b8:82:43:66:58:32:f5:88:
31:70:c5:63:50:64:52:bc:9e:56:9d:6e:68:f3:70:
f1:ee:b5:31:90:03:90:a0:f1:ae:3c:03:fd:9f:67:
68:d3:65:ff:43:17:b1:bf:35:6d:a2:b2:06:2b:78:
91:47:10:8b:0b:89:7c:7a:22:9d:8c:71:c8:f4:36:
a9:9b:b6:f6:a9:f2:2a:75:95:68:f6:5b:87:66:ad:
cc:75:f2:62:2f:61:b4:90:a7:6e:8c:d1:36:31:68:
c1:4a:3c:ca:a1:21:31:85:30:20:f5:10:cf:37:ce:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:56:62:85:2E:9B:BA:D8:FF:7F:14:99:97:49:A7:7E:FB:5D:85:91
X509v3 Authority Key Identifier:
keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6a:d5:f7:db:03:2d:62:5c:cc:f5:f4:fd:85:8d:af:c9:05:
af:65:1e:72:4d:2c:a7:d0:bd:03:9a:39:e5:d6:8d:4c:08:5f:
d0:b9:6d:bf:3e:44:7a:18:ef:1e:e4:0c:f9:3c:98:23:4e:bb:
87:d6:4d:7a:cc:c8:6a:82:b6:12:78:7c:a1:4b:ea:22:a2:72:
72:17:4a:63:6a:cc:28:34:7a:81:67:5e:7e:15:55:ad:6c:8c:
39:f4:88:28:eb:ee:10:34:30:3b:5a:d3:86:c9:02:9e:b5:7f:
c7:38:b9:5a:74:8c:0f:e2:9e:99:0f:62:13:05:e2:eb:37:be:
b6:a7:4d:16:bc:ca:63:7b:47:94:33:2c:45:18:84:96:eb:f1:
fd:40:96:69:fe:83:13:e3:94:ec:05:70:7d:87:f7:90:4c:44:
93:29:8e:a0:c0:bf:ce:a4:d3:cc:bb:40:4b:81:5a:48:1a:b0:
00:2b:eb:aa:b7:8f:56:d8:aa:63:86:c4:90:d4:ae:d6:c0:7c:
c8:0a:25:4e:37:51:99:62:af:8a:1a:b0:49:e1:75:e0:12:b5:
b9:1d:3f:40:db:75:e7:24:04:89:a9:a7:00:4d:15:11:2e:66:
1e:aa:8b:46:1f:b6:ef:64:ef:cf:45:e8:d6:c9:12:5f:00:87:
18:a7:70:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVyQu9bFp///Id6C5hHGkqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzY2UwNjlkZmM1YjYwODg3NmQ2NDI0YTMyZTc4M2E5OGE5
MmVmZjIwHhcNMjUwODEwMjEwMDM3WhcNMjUwODExMjEwMDM3WjAzMTEwLwYDVQQD
Eyg0MDU2NjI4NTJlOWJiYWQ4ZmY3ZjE0OTk5NzQ5YTc3ZWZiNWQ4NTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqM1u5ktOvK2cgwR84g7s5j3URPC
pmuDoM1b/6OMZ0ybGUw260wg0z1lRimnQZNnrL364vJEGBrsVu0+GRjWWLjzw4+o
/iaMbVzjxiU/y4TEVes97JqovG87dUsak0oRK7m47RVIFLPPxum0ThmNIhzL5Mzo
tPCwYKYVKAqBu0OEOITl+u8GutmQfDCsuIJDZlgy9YgxcMVjUGRSvJ5WnW5o83Dx
7rUxkAOQoPGuPAP9n2do02X/QxexvzVtorIGK3iRRxCLC4l8eiKdjHHI9Dapm7b2
qfIqdZVo9luHZq3MdfJiL2G0kKdujNE2MWjBSjzKoSExhTAg9RDPN84XcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBWYoUum7rY/38UmZdJp377XYWRMB8GA1UdIwQY
MBaAFOPOBp38W2CIdtZCSjLng6mKku/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81NWFlMmQtMzdhMi00ZjY3LTk1MTYt
OTA4MTU0NWY1NjkxLzEvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81NWFlMmQtMzdhMi00ZjY3LTk1MTYtOTA4MTU0NWY1Njkx
LzEvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWrV99sD
LWJczPX0/YWNr8kFr2Ueck0sp9C9A5o55daNTAhf0Lltvz5EehjvHuQM+TyYI067
h9ZNeszIaoK2Enh8oUvqIqJychdKY2rMKDR6gWdefhVVrWyMOfSIKOvuEDQwO1rT
hskCnrV/xzi5WnSMD+KemQ9iEwXi6ze+tqdNFrzKY3tHlDMsRRiEluvx/UCWaf6D
E+OU7AVwfYf3kExEkymOoMC/zqTTzLtAS4FaSBqwACvrqrePVtiqY4bEkNSu1sB8
yAolTjdRmWKvihqwSeF14BK1uR0/QNt15yQEiamnAE0VES5mHqqLRh+272Tvz0Xo
1skSXwCHGKdwmA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:56:20 2025 by rpki-client