Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier: o+7PLcAAAv9ctFPjnOHOXEz5yg7dmoDkjsykuj+e1bY=
Subject key identifier: CC:9A:D7:F1:5D:A1:60:27:26:3B:57:B3:32:E7:F1:86:DF:D4:A1:AA
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 019875D0A888E6F44A93D552103300686C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number: 0763
Signing time: Mon 04 Aug 2025 16:01:05 +0000
Manifest this update: Mon 04 Aug 2025 16:01:05 +0000
Manifest next update: Tue 05 Aug 2025 16:01:05 +0000
Files and hashes: 1: HWWs6MqFS2nmbLw3ShctihMbNaY.roa (hash: KSXNNa9oIp9r32J4311J0aN03+Peflc2SZu+HPxriyM=)
2: QUH08L51MfImU-aeLB1gViX82cI.roa (hash: YfmDCd25c+HZBRwpm39HGU+G/47jVrQR3XrIyRY2J8U=)
3: b81h_NWwhKjMbH2-sUXyjP4n64s.roa (hash: e3T+4A186w/5PvOch5tYGnvLHtBctNKp6kP6+X8+j/w=)
4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: 1XdgxNro9YjYM8II4WhcimV0YpLqZzrKwTJd4WYd86c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:a8:88:e6:f4:4a:93:d5:52:10:33:00:68:6c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Aug 4 16:01:05 2025 GMT
Not After : Aug 5 16:01:05 2025 GMT
Subject: CN=cc9ad7f15da16027263b57b332e7f186dfd4a1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:21:3e:38:3f:29:c7:07:6c:1d:80:33:2f:
f4:c6:83:ec:b1:63:8f:3a:32:53:6e:ba:df:dd:b0:
3d:a8:39:51:b6:3a:c7:79:dc:0f:01:a7:bb:5a:7e:
ee:0a:4d:68:fa:aa:11:fe:b2:b2:95:98:10:c3:da:
45:22:5f:9c:01:0c:28:12:e3:62:31:e9:4d:f6:2c:
c4:05:be:25:c1:dd:57:f8:88:45:ff:cf:b4:f1:ee:
37:f8:99:62:e7:b6:e1:e2:ef:74:c0:02:9e:48:0c:
45:b2:4e:84:68:5f:45:c2:63:bc:d0:41:77:51:4a:
2d:3c:1c:41:f5:58:a6:31:73:54:ef:f5:29:8e:99:
bd:de:4e:06:9c:9e:b3:92:cc:8b:cf:03:64:2b:39:
cb:ad:67:77:cf:db:49:3d:ba:ed:fe:67:5d:39:dd:
aa:14:b4:fb:37:e5:75:07:5c:61:9d:57:f9:c6:ae:
81:56:da:24:0e:76:54:7e:76:ec:88:25:61:04:8b:
d5:d2:5b:66:8e:6f:8e:4f:1b:79:b4:c7:9c:dc:89:
16:20:5e:94:dd:c2:ed:58:85:35:fd:81:8c:41:fc:
ac:61:6a:56:df:04:6f:19:67:9f:67:46:1d:75:aa:
95:e3:02:2c:43:01:61:c1:12:4b:d3:00:b4:5a:7c:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9A:D7:F1:5D:A1:60:27:26:3B:57:B3:32:E7:F1:86:DF:D4:A1:AA
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:77:29:18:44:f0:1b:e3:a8:75:b6:d0:62:28:43:b0:4c:f1:
cf:86:9e:e1:84:ca:f9:71:d1:d1:ae:83:1d:bc:dc:76:4a:03:
82:91:51:75:0c:51:62:07:0c:c1:db:3d:68:e6:ad:f5:82:87:
83:c4:af:ad:13:f1:85:79:14:15:c6:5d:f1:d9:3f:81:77:35:
b3:17:84:c1:52:50:9c:af:9f:00:b9:42:d3:ad:35:6b:af:8a:
c8:53:8d:53:1e:5a:ec:4c:00:9c:92:af:6a:57:b0:12:85:6d:
86:d2:e7:1f:5c:7e:38:f3:d1:2a:a8:06:7b:91:74:bb:46:65:
d1:99:4f:29:05:8a:32:a8:09:e5:45:12:36:d6:31:ca:c1:a2:
56:33:23:d5:02:aa:c9:7e:b9:89:e6:33:e0:56:97:d9:ba:5e:
c4:e0:17:65:79:03:ca:32:55:60:06:21:c0:c0:60:74:60:d1:
ce:09:bf:39:73:05:7a:ac:35:e9:dc:2f:5e:8f:3b:5c:41:8c:
f6:8b:35:f5:8d:99:a8:4f:4d:f5:b5:7b:48:49:ce:7b:b5:42:
fc:94:b4:d1:36:3c:74:b8:04:44:47:7f:0e:19:73:c6:b2:38:
f5:7a:34:c9:18:b8:d8:5f:73:73:43:08:e8:46:4a:b7:79:dd:
fe:1b:23:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10KiI5vRKk9VSEDMAaGwIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjODlhZjYwOTg2ZTZkOTU4MzIyZmIwMjZjNmI2NWFlZWM5
NDlhMGQwHhcNMjUwODA0MTYwMTA1WhcNMjUwODA1MTYwMTA1WjAzMTEwLwYDVQQD
EyhjYzlhZDdmMTVkYTE2MDI3MjYzYjU3YjMzMmU3ZjE4NmRmZDRhMWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXMhPjg/KccHbB2AMy/0xoPssWOP
OjJTbrrf3bA9qDlRtjrHedwPAae7Wn7uCk1o+qoR/rKylZgQw9pFIl+cAQwoEuNi
MelN9izEBb4lwd1X+IhF/8+08e43+Jli57bh4u90wAKeSAxFsk6EaF9FwmO80EF3
UUotPBxB9VimMXNU7/Upjpm93k4GnJ6zksyLzwNkKznLrWd3z9tJPbrt/mddOd2q
FLT7N+V1B1xhnVf5xq6BVtokDnZUfnbsiCVhBIvV0ltmjm+OTxt5tMec3IkWIF6U
3cLtWIU1/YGMQfysYWpW3wRvGWefZ0YddaqV4wIsQwFhwRJL0wC0WnzxFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMya1/FdoWAnJjtXszLn8Ybf1KGqMB8GA1UdIwQY
MBaAFKyJr2CYbm2VgyL7AmxrZa7slJoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTIt
OWM4YmJhNjY0ZmYwLzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTItOWM4YmJhNjY0ZmYw
LzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3cpGETw
G+OodbbQYihDsEzxz4ae4YTK+XHR0a6DHbzcdkoDgpFRdQxRYgcMwds9aOat9YKH
g8SvrRPxhXkUFcZd8dk/gXc1sxeEwVJQnK+fALlC0601a6+KyFONUx5a7EwAnJKv
alewEoVthtLnH1x+OPPRKqgGe5F0u0Zl0ZlPKQWKMqgJ5UUSNtYxysGiVjMj1QKq
yX65ieYz4FaX2bpexOAXZXkDyjJVYAYhwMBgdGDRzgm/OXMFeqw16dwvXo87XEGM
9os19Y2ZqE9N9bV7SEnOe7VC/JS00TY8dLgEREd/DhlzxrI49Xo0yRi42F9zc0MI
6EZKt3nd/hsjVw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:38:28 2025 by rpki-client