Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: CAbPwlhr2aa61cXMr8SqnZ0gbWBtb0Z6IIxNFXegAAI=
Subject key identifier: C5:6D:C2:69:EC:D3:A3:6B:8C:D3:DD:8C:69:C8:50:9F:A7:7F:55:30
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 0198733DC9A1546A6B4DA808FA6CF4A11932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 06E6
Signing time: Mon 04 Aug 2025 04:01:25 +0000
Manifest this update: Mon 04 Aug 2025 04:01:25 +0000
Manifest next update: Tue 05 Aug 2025 04:01:25 +0000
Files and hashes: 1: 1-AKJmO9q5axmG2bLlo_CKWpT7rI.roa (hash: IzbOHhtlqnCQLwohTNVhlpmomMZIZO83L4rK6yCvODA=)
2: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: 5cdJU71cLrRmOjX4Q97Kx64IH961HUot/KjhJwOh4c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:c9:a1:54:6a:6b:4d:a8:08:fa:6c:f4:a1:19:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Aug 4 04:01:25 2025 GMT
Not After : Aug 5 04:01:25 2025 GMT
Subject: CN=c56dc269ecd3a36b8cd3dd8c69c8509fa77f5530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:99:12:11:e9:77:8e:26:35:e0:c7:9a:70:
e8:80:82:8f:44:37:75:ab:0b:89:a9:1e:df:38:e2:
33:71:04:f4:47:f9:eb:5b:85:14:7e:f9:4e:a2:bc:
43:ae:69:5f:e4:f8:30:6e:62:e7:e0:b1:54:50:37:
b5:a0:9f:60:9b:08:48:b3:0e:a4:a7:d0:68:b1:46:
12:b2:45:83:e1:44:aa:e3:27:9f:b6:99:9c:25:e1:
b1:a0:b6:ab:f5:f4:3a:56:85:64:ee:83:e9:1d:78:
6f:28:57:e7:a7:e7:4e:ed:58:4d:7d:a4:6f:11:f0:
ef:2f:0e:87:14:b2:42:a2:ac:f2:68:bf:f6:46:70:
68:eb:bd:59:10:78:19:7c:95:e3:91:c5:26:f2:11:
8e:40:07:88:f9:c6:43:e9:a0:a6:9a:18:73:59:e6:
b6:82:2f:01:ef:cf:f9:28:d1:ae:72:60:a2:c4:06:
6f:9d:1c:35:77:e2:7a:be:80:2c:87:21:96:d3:31:
cc:43:e7:7f:b2:66:de:99:04:3d:ef:d6:e7:58:67:
df:65:35:c6:01:3c:07:31:3a:a1:77:71:05:b0:b2:
36:01:24:90:1f:cc:c3:77:32:3f:f3:60:89:58:11:
71:4d:c2:4a:4d:cb:39:cf:f7:08:0b:77:1d:3f:31:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6D:C2:69:EC:D3:A3:6B:8C:D3:DD:8C:69:C8:50:9F:A7:7F:55:30
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:95:cd:5d:38:3f:8c:b2:8c:3d:64:3b:77:a0:d8:63:60:f5:
73:d7:1d:d1:03:df:41:3c:bc:ed:d0:2c:d1:1d:29:43:23:5e:
ba:3f:ce:96:41:8d:5d:80:3d:a4:6c:fd:5b:ab:1c:ca:c3:1b:
6d:4e:5f:03:d6:42:d2:81:e6:32:dd:82:47:21:59:30:db:6f:
0c:90:b8:30:ed:a0:e1:1a:bd:a6:f0:e3:cb:b2:81:62:ff:1d:
91:27:48:7e:24:fe:c3:d1:e9:a6:2c:00:cc:33:4a:b4:2f:74:
23:49:55:3a:a1:f4:05:18:66:48:e1:fd:e3:46:18:9c:11:ce:
62:f3:44:96:4a:9e:fd:fc:8b:16:2d:37:e0:2c:9e:dc:29:eb:
ab:93:3c:da:22:c9:79:85:d5:8f:66:b4:b4:25:0a:29:62:9f:
10:0e:87:a1:fd:8a:42:32:6b:cf:b1:e4:07:07:c1:9b:12:84:
da:d7:3a:92:81:44:ef:de:0a:40:6f:35:d1:90:e6:33:79:9d:
59:23:d4:60:99:6a:45:56:94:9b:54:33:c8:c6:3e:fa:1a:1a:
c6:fa:3c:de:c9:9f:0f:22:74:4a:d1:ed:a2:50:20:40:9d:8c:
30:6f:ad:b6:6d:f8:5a:78:b9:74:4a:29:94:6a:a1:74:21:05:
13:6d:3d:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPcmhVGprTagI+mz0oRkyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzNiY2QzMjU1YTBkYWQ1ZjRhMzUwZDExZGM4OTFmYTBi
ZTA0MzcwHhcNMjUwODA0MDQwMTI1WhcNMjUwODA1MDQwMTI1WjAzMTEwLwYDVQQD
EyhjNTZkYzI2OWVjZDNhMzZiOGNkM2RkOGM2OWM4NTA5ZmE3N2Y1NTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B6ZEhHpd44mNeDHmnDogIKPRDd1
qwuJqR7fOOIzcQT0R/nrW4UUfvlOorxDrmlf5PgwbmLn4LFUUDe1oJ9gmwhIsw6k
p9BosUYSskWD4USq4yeftpmcJeGxoLar9fQ6VoVk7oPpHXhvKFfnp+dO7VhNfaRv
EfDvLw6HFLJCoqzyaL/2RnBo671ZEHgZfJXjkcUm8hGOQAeI+cZD6aCmmhhzWea2
gi8B78/5KNGucmCixAZvnRw1d+J6voAshyGW0zHMQ+d/smbemQQ979bnWGffZTXG
ATwHMTqhd3EFsLI2ASSQH8zDdzI/82CJWBFxTcJKTcs5z/cIC3cdPzEBuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVtwmns06NrjNPdjGnIUJ+nf1UwMB8GA1UdIwQY
MBaAFONzvNMlWg2tX0o1DRHciR+gvgQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMjBkYmMtMmFiNC00M2ZiLTgwYTIt
MDRlN2IxYThjZTE4LzEvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kMjBkYmMtMmFiNC00M2ZiLTgwYTItMDRlN2IxYThjZTE4
LzEvNDNPODB5VmFEYTFmU2pVTkVkeUpINkMtQkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZXNXTg/
jLKMPWQ7d6DYY2D1c9cd0QPfQTy87dAs0R0pQyNeuj/OlkGNXYA9pGz9W6scysMb
bU5fA9ZC0oHmMt2CRyFZMNtvDJC4MO2g4Rq9pvDjy7KBYv8dkSdIfiT+w9HppiwA
zDNKtC90I0lVOqH0BRhmSOH940YYnBHOYvNElkqe/fyLFi034Cye3Cnrq5M82iLJ
eYXVj2a0tCUKKWKfEA6Hof2KQjJrz7HkBwfBmxKE2tc6koFE794KQG810ZDmM3md
WSPUYJlqRVaUm1QzyMY++hoaxvo83smfDyJ0StHtolAgQJ2MMG+ttm34Wni5dEop
lGqhdCEFE209nA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:27 2025 by rpki-client