Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: ksAuf1DfCEgqeR0S8LScMGQvSFeKhXnbCw/m4JdtJDE=
Subject key identifier: 11:CD:E5:BC:D1:FF:A8:47:4B:02:DA:F8:87:7F:47:1B:DA:4E:03:EF
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 01987D1CA641B6C4AF009A99C2B7F5141479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0A86
Signing time: Wed 06 Aug 2025 02:01:26 +0000
Manifest this update: Wed 06 Aug 2025 02:01:26 +0000
Manifest next update: Thu 07 Aug 2025 02:01:26 +0000
Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=)
3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: vzYaj4WK3+9sQ7bY9hwq7gZ+grSYsCOirxhoVfqV/Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:a6:41:b6:c4:af:00:9a:99:c2:b7:f5:14:14:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Aug 6 02:01:26 2025 GMT
Not After : Aug 7 02:01:26 2025 GMT
Subject: CN=11cde5bcd1ffa8474b02daf8877f471bda4e03ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:36:de:94:69:c6:41:19:63:1c:1f:25:8c:
2e:f3:14:5a:5a:5a:5e:a2:3d:05:57:0b:8d:db:26:
95:bd:1f:fe:30:bb:a5:da:bd:e3:09:5b:bc:6b:0a:
0e:38:d6:63:c8:14:76:f6:ea:ca:d7:0b:20:8b:4e:
7b:b5:ad:79:9b:d9:f3:d2:92:5c:74:5a:b8:ed:33:
c1:25:db:e2:a2:7f:95:74:de:1b:cf:f9:92:45:ac:
f2:4a:bd:bd:dc:a4:e7:3b:5d:e7:cb:7b:31:59:d3:
fd:ed:3b:4b:cc:39:7e:46:c7:eb:73:96:f0:93:55:
eb:78:d3:8f:42:a0:73:2c:09:91:88:95:d3:3b:bf:
a7:1a:63:f2:86:0a:86:39:1f:fe:51:48:0e:67:51:
73:19:7a:73:c3:b2:15:14:b8:a7:09:ed:4d:59:36:
f2:7e:32:26:b6:9a:59:82:ef:4e:5e:a0:3e:ef:92:
27:c8:8d:13:1b:4e:7a:cc:f2:53:5a:54:99:83:06:
52:35:f5:23:d0:ea:84:c8:cb:98:19:48:92:b0:91:
31:aa:f1:2f:50:79:24:41:7a:d6:cd:08:a2:03:e1:
72:04:dd:f7:da:91:17:0a:fc:cd:8f:05:b5:ae:a2:
45:5c:40:f0:80:e6:44:4d:f3:e6:f4:43:53:6d:10:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CD:E5:BC:D1:FF:A8:47:4B:02:DA:F8:87:7F:47:1B:DA:4E:03:EF
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:57:15:b5:02:fb:42:70:4a:c1:8a:0b:05:75:71:4d:92:c5:
48:ea:79:cf:7e:9f:56:de:e0:63:73:b0:cd:c8:7a:d3:f4:c4:
dd:74:a2:58:ea:e1:18:67:48:25:1a:32:b4:cf:c5:a0:15:00:
3f:c2:3e:f1:2d:70:28:9f:e1:7b:28:12:26:78:cd:ba:df:3c:
1d:4f:55:40:f0:64:b3:88:93:85:6b:48:e3:66:6b:43:52:6f:
61:b6:c4:82:0b:9d:3e:1e:8c:bd:26:e8:db:d2:07:31:ce:5c:
73:33:b2:d8:28:61:0a:95:b4:0a:b0:26:32:b5:eb:bd:67:35:
11:99:0d:ec:c8:f5:98:af:2d:03:40:11:54:3d:a8:68:78:f5:
cb:cd:9d:09:00:a9:8f:d1:54:76:f5:0f:07:9d:b6:e1:12:50:
fc:3d:6d:b5:80:9d:c4:d9:3a:ee:52:46:bd:b6:f3:b9:f5:21:
07:6e:a9:ec:9a:cf:6a:a9:54:6c:e7:5c:36:bf:4c:1f:5b:3b:
69:cb:24:36:ed:91:08:67:e4:18:e6:d5:9c:aa:10:7d:fc:79:
0c:f9:a3:57:c2:11:83:a6:12:81:3f:09:3c:6f:b3:b9:ce:c5:
e9:b1:f3:60:72:1c:57:a4:7a:c5:48:e2:45:2a:7c:09:5d:df:
09:6a:f8:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9HKZBtsSvAJqZwrf1FBR5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDM0ZmQ5OGMxMWQ4ZDcyZGYzODBjYTgzZWRmNzlmY2Mw
MDg1OWYwHhcNMjUwODA2MDIwMTI2WhcNMjUwODA3MDIwMTI2WjAzMTEwLwYDVQQD
EygxMWNkZTViY2QxZmZhODQ3NGIwMmRhZjg4NzdmNDcxYmRhNGUwM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6o23pRpxkEZYxwfJYwu8xRaWlpe
oj0FVwuN2yaVvR/+MLul2r3jCVu8awoOONZjyBR29urK1wsgi057ta15m9nz0pJc
dFq47TPBJdvion+VdN4bz/mSRazySr293KTnO13ny3sxWdP97TtLzDl+Rsfrc5bw
k1XreNOPQqBzLAmRiJXTO7+nGmPyhgqGOR/+UUgOZ1FzGXpzw7IVFLinCe1NWTby
fjImtppZgu9OXqA+75InyI0TG056zPJTWlSZgwZSNfUj0OqEyMuYGUiSsJExqvEv
UHkkQXrWzQiiA+FyBN332pEXCvzNjwW1rqJFXEDwgOZETfPm9ENTbRDIgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHN5bzR/6hHSwLa+Id/RxvaTgPvMB8GA1UdIwQY
MBaAFERDT9mMEdjXLfOAyoPt95/MAIWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYt
MjM3YmIzMGQ3MzA1LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYtMjM3YmIzMGQ3MzA1
LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFcVtQL7
QnBKwYoLBXVxTZLFSOp5z36fVt7gY3Owzch60/TE3XSiWOrhGGdIJRoytM/FoBUA
P8I+8S1wKJ/heygSJnjNut88HU9VQPBks4iThWtI42ZrQ1JvYbbEggudPh6MvSbo
29IHMc5cczOy2ChhCpW0CrAmMrXrvWc1EZkN7Mj1mK8tA0ARVD2oaHj1y82dCQCp
j9FUdvUPB5224RJQ/D1ttYCdxNk67lJGvbbzufUhB26p7JrPaqlUbOdcNr9MH1s7
acskNu2RCGfkGObVnKoQffx5DPmjV8IRg6YSgT8JPG+zuc7F6bHzYHIcV6R6xUji
RSp8CV3fCWr43Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:06 2025 by rpki-client