Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier: zPjEGDx8Ml1WtVDdIBZuQZ0T7LVG7/F8wNGxTtO1oNc=
Subject key identifier: DD:C2:AA:7D:C6:84:50:2C:E0:00:BA:66:99:26:E5:51:14:2F:4C:56
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer: /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial: 0198887B5CE737FDB5DFB6711F810FFFE870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number: 117E
Signing time: Fri 08 Aug 2025 07:00:42 +0000
Manifest this update: Fri 08 Aug 2025 07:00:42 +0000
Manifest next update: Sat 09 Aug 2025 07:00:42 +0000
Files and hashes: 1: Qm0v2QB0N6w8qGQL8ta92rDkpA0.roa (hash: aEK3PYUQq1E1pzkJ/CLkmP6YwUe047cyT3qoeHQ2dn8=)
2: dS8Rkw8dzyED62hL_7OXnHLvH04.roa (hash: qEmro5fJia38aDC86kQ3vNKBrJLyPDYdvwDe7Qknl6I=)
3: jIx4n0qvGCMbvZ4nZHfe7AlAvc4.roa (hash: PbvVUSgN0dLFWz6bc4odaxxggERGNNwAo8M1AiayrEs=)
4: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: 2f6gYKSWjTszZSrizlMuqqBJmwN69Xu5QolT/269H3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:5c:e7:37:fd:b5:df:b6:71:1f:81:0f:ff:e8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
Validity
Not Before: Aug 8 07:00:42 2025 GMT
Not After : Aug 9 07:00:42 2025 GMT
Subject: CN=ddc2aa7dc684502ce000ba669926e551142f4c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:0c:1e:a5:c1:8e:d7:45:ce:0a:56:60:86:
23:6d:cc:2c:f8:76:55:d7:a0:b1:6d:53:b0:4a:c7:
a9:03:2a:18:7b:18:c7:d5:11:a5:be:de:7d:92:39:
f6:70:6e:02:88:03:09:51:98:c3:72:8d:d0:9a:1a:
f2:31:e5:10:72:84:45:f6:4c:4f:ae:63:83:33:ad:
8c:22:3d:66:5c:c3:a0:17:78:6c:fa:3f:2e:9d:aa:
6c:0f:49:a9:21:bf:cf:5e:ad:27:25:c3:d6:0e:26:
36:f1:40:f0:ee:6e:22:59:29:a1:59:59:43:6f:1d:
9d:03:7f:76:93:8f:aa:bd:4d:1c:ed:28:95:d4:10:
dd:2b:59:5b:61:de:77:2c:2f:e8:02:91:af:be:c0:
d8:1c:b8:a1:63:5b:82:36:a4:b1:a1:5a:65:84:bd:
ac:27:55:57:43:91:3c:35:24:90:15:25:f0:d1:5c:
c3:f9:37:a6:29:ba:5e:ef:d4:04:27:e0:e9:c6:ab:
f2:c9:66:57:8f:22:e7:4a:b6:8e:ec:07:21:6f:a1:
fa:82:84:e7:78:62:a9:85:b5:85:fa:d7:04:55:3b:
f4:52:c3:0b:b2:37:66:61:1f:f3:43:5d:2a:35:f9:
42:fc:c4:5d:a9:2c:26:48:0a:58:bb:48:96:46:18:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C2:AA:7D:C6:84:50:2C:E0:00:BA:66:99:26:E5:51:14:2F:4C:56
X509v3 Authority Key Identifier:
keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e5:6e:9f:75:91:7f:cb:81:24:f9:02:02:5e:28:f3:be:5f:
f5:e8:99:da:c3:fc:e0:dc:b4:19:c2:58:6a:c6:09:29:73:e1:
4a:05:e1:1f:c0:2c:e4:31:1c:6d:88:4f:d5:74:f9:7c:29:43:
92:36:1c:85:5a:a7:18:71:b1:1c:ba:44:fb:25:8f:5c:f6:0d:
56:b0:d4:7f:78:93:a5:0d:e1:01:19:5e:35:be:f1:1e:64:fe:
44:c3:5a:0f:64:2e:a0:c5:3a:3e:e9:b3:3a:20:0a:2c:42:83:
26:1d:12:37:18:7b:c9:10:33:e2:ed:81:01:3e:a5:00:04:25:
48:8c:9e:1e:7e:6f:d4:61:85:47:e7:b5:6f:53:0b:63:2a:bb:
f4:76:78:8a:a5:c3:43:e0:e9:59:46:ce:5e:36:2d:d4:43:df:
71:6a:e3:3a:42:2a:ae:97:9f:b0:22:ff:7a:c0:4d:9e:19:60:
d9:28:1a:ab:e5:08:54:7a:50:36:2d:15:34:29:bf:eb:71:32:
43:6f:87:19:e2:ae:da:d0:d0:44:bd:bb:79:c1:14:c6:3a:28:
e8:84:65:b7:f6:91:3b:f7:4b:98:a8:06:66:b9:5d:eb:82:c8:
dd:5e:98:65:3f:8f:3b:ea:83:02:64:4d:70:bf:5e:31:41:d4:
0b:bd:47:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIe1znN/2137ZxH4EP/+hwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYTkyOWJlNzM0OTFhY2Q5OWQ1OTAzNzJhNTJiODE1ZmEx
ZjIzZjUwHhcNMjUwODA4MDcwMDQyWhcNMjUwODA5MDcwMDQyWjAzMTEwLwYDVQQD
EyhkZGMyYWE3ZGM2ODQ1MDJjZTAwMGJhNjY5OTI2ZTU1MTE0MmY0YzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR4MHqXBjtdFzgpWYIYjbcws+HZV
16CxbVOwSsepAyoYexjH1RGlvt59kjn2cG4CiAMJUZjDco3QmhryMeUQcoRF9kxP
rmODM62MIj1mXMOgF3hs+j8unapsD0mpIb/PXq0nJcPWDiY28UDw7m4iWSmhWVlD
bx2dA392k4+qvU0c7SiV1BDdK1lbYd53LC/oApGvvsDYHLihY1uCNqSxoVplhL2s
J1VXQ5E8NSSQFSXw0VzD+TemKbpe79QEJ+DpxqvyyWZXjyLnSraO7Achb6H6goTn
eGKphbWF+tcEVTv0UsMLsjdmYR/zQ10qNflC/MRdqSwmSApYu0iWRhhJFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3Cqn3GhFAs4AC6Zpkm5VEUL0xWMB8GA1UdIwQY
MBaAFK+pKb5zSRrNmdWQNypSuBX6HyP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTIt
M2I2ZjFiZGY0MTJhLzEvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTItM2I2ZjFiZGY0MTJh
LzEvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOVun3WR
f8uBJPkCAl4o875f9eiZ2sP84Ny0GcJYasYJKXPhSgXhH8As5DEcbYhP1XT5fClD
kjYchVqnGHGxHLpE+yWPXPYNVrDUf3iTpQ3hARleNb7xHmT+RMNaD2QuoMU6Pumz
OiAKLEKDJh0SNxh7yRAz4u2BAT6lAAQlSIyeHn5v1GGFR+e1b1MLYyq79HZ4iqXD
Q+DpWUbOXjYt1EPfcWrjOkIqrpefsCL/esBNnhlg2Sgaq+UIVHpQNi0VNCm/63Ey
Q2+HGeKu2tDQRL27ecEUxjoo6IRlt/aRO/dLmKgGZrld64LI3V6YZT+PO+qDAmRN
cL9eMUHUC71HRw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:15:39 2025 by rpki-client