Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
File: roNVKZN0KXkz0oH1HrdLpcLJHME.mft (raw, json)
Hash identifier: UNHM2/hoZjioKqMXK4bVnD6hWY04YgqCtXd82C7t5LY=
Subject key identifier: E6:43:E9:85:65:EB:D4:A0:2E:D9:B9:6E:61:29:0C:B0:87:7C:ED:3F
Authority key identifier: AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
Certificate issuer: /CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Certificate serial: 019873E1F6301B47AA20BCAFBAF02C6E982A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
Manifest number: 116A
Signing time: Mon 04 Aug 2025 07:00:45 +0000
Manifest this update: Mon 04 Aug 2025 07:00:45 +0000
Manifest next update: Tue 05 Aug 2025 07:00:45 +0000
Files and hashes: 1: RaM_OWQwVXsafD9lAhumGxuaVJ0.roa (hash: 9wqEU77JRh8FONfv1sMAYtuNvig1s1ZaVt3dre8RnDg=)
2: roNVKZN0KXkz0oH1HrdLpcLJHME.crl (hash: n58gN6b+aNt14lhReEhejdIDneYuPcTWgvOOS0dahlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f6:30:1b:47:aa:20:bc:af:ba:f0:2c:6e:98:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Validity
Not Before: Aug 4 07:00:45 2025 GMT
Not After : Aug 5 07:00:45 2025 GMT
Subject: CN=e643e98565ebd4a02ed9b96e61290cb0877ced3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:a0:0e:30:04:54:29:fe:ff:62:d0:8c:3c:
e0:5c:90:55:d6:ff:e3:7a:6e:f9:48:e8:14:c2:e4:
46:e3:08:0c:61:04:af:1a:43:60:66:4c:6c:e2:c3:
fa:7f:e8:8d:1d:aa:28:3d:1d:11:f3:15:7e:cf:21:
9b:ec:e8:fc:dd:5a:a4:e1:08:8a:35:71:51:9f:6e:
60:a9:be:8d:86:36:9e:85:dd:b0:50:f4:de:fa:e8:
a7:ff:38:a5:e5:1c:7b:6f:15:30:cc:77:ff:e3:ab:
29:fe:67:8e:48:2e:00:e5:80:23:4a:14:a1:00:79:
2c:31:97:33:02:be:da:a5:de:91:a8:df:8c:fa:c4:
2d:25:d0:8b:0d:e0:9c:e3:06:63:2f:31:a1:a3:40:
5c:c8:96:f0:bc:e8:d2:7d:68:0e:7e:c1:32:d5:28:
48:dc:22:dd:74:d6:10:f2:82:75:55:01:eb:60:aa:
d7:bc:ef:fd:0b:28:4b:17:d8:b2:41:6b:f7:12:3d:
8f:1b:fb:d1:b8:03:80:54:87:39:ef:0b:b7:3a:6b:
4a:92:ec:6c:b2:d8:15:37:bf:45:db:63:37:69:4a:
47:ec:63:26:39:0e:27:be:7c:67:37:c2:87:a3:aa:
fd:34:5a:f1:e3:bd:b2:9c:e5:d9:0c:eb:6c:45:3a:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:43:E9:85:65:EB:D4:A0:2E:D9:B9:6E:61:29:0C:B0:87:7C:ED:3F
X509v3 Authority Key Identifier:
keyid:AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d8:0c:e8:99:dc:0f:27:10:a3:30:73:1c:cd:a8:a5:8c:36:
1e:86:2d:64:f1:7f:3b:29:46:56:4d:5f:f1:8f:bb:62:03:33:
ce:64:bd:9a:08:65:c8:10:5e:8b:c4:a0:43:96:02:4a:c8:79:
09:bd:b0:68:e6:9b:66:78:01:02:e5:ff:3f:c3:5b:fc:cd:76:
11:f8:06:67:18:58:56:fc:f0:87:2c:4a:44:96:73:e0:8d:58:
2f:d4:f5:d0:93:62:9c:5b:e5:5e:b3:05:6a:84:6c:f0:11:02:
a1:50:40:ee:49:9f:be:92:a8:aa:a7:51:60:a3:c8:fb:58:9b:
c2:b0:14:e3:eb:28:39:8d:be:aa:4d:00:54:01:17:0f:73:67:
7e:b9:03:64:4a:21:dc:25:0d:2c:c0:ae:91:07:11:61:41:1e:
cc:7e:d3:a5:19:8a:c1:7f:56:c1:96:48:e8:3e:ab:21:6e:32:
06:27:68:e2:9f:b1:8c:4f:07:b8:4b:5b:c1:14:69:68:48:8c:
21:57:23:5f:8a:d9:bb:46:24:17:56:81:84:9f:62:29:97:c9:
c6:bf:f8:6f:4f:d0:c5:7e:40:3a:c0:a8:1c:b9:e9:49:82:83:
43:24:52:30:76:72:59:99:d8:b9:69:29:39:d8:70:e2:95:5d:
d4:3c:e1:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4fYwG0eqILyvuvAsbpgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlODM1NTI5OTM3NDI5NzkzM2QyODFmNTFlYjc0YmE1YzJj
OTFjYzEwHhcNMjUwODA0MDcwMDQ1WhcNMjUwODA1MDcwMDQ1WjAzMTEwLwYDVQQD
EyhlNjQzZTk4NTY1ZWJkNGEwMmVkOWI5NmU2MTI5MGNiMDg3N2NlZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT2gDjAEVCn+/2LQjDzgXJBV1v/j
em75SOgUwuRG4wgMYQSvGkNgZkxs4sP6f+iNHaooPR0R8xV+zyGb7Oj83Vqk4QiK
NXFRn25gqb6Nhjaehd2wUPTe+uin/zil5Rx7bxUwzHf/46sp/meOSC4A5YAjShSh
AHksMZczAr7apd6RqN+M+sQtJdCLDeCc4wZjLzGho0BcyJbwvOjSfWgOfsEy1ShI
3CLddNYQ8oJ1VQHrYKrXvO/9CyhLF9iyQWv3Ej2PG/vRuAOAVIc57wu3OmtKkuxs
stgVN79F22M3aUpH7GMmOQ4nvnxnN8KHo6r9NFrx472ynOXZDOtsRTrFbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZD6YVl69SgLtm5bmEpDLCHfO0/MB8GA1UdIwQY
MBaAFK6DVSmTdCl5M9KB9R63S6XCyRzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm9OVktaTjBLWGt6MG9IMUhyZExwY0xKSE1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wZjJlYjgtOTgwMC00NjIxLWI2NzQt
M2I0ZDAyYTYxZWMyLzEvcm9OVktaTjBLWGt6MG9IMUhyZExwY0xKSE1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8wZjJlYjgtOTgwMC00NjIxLWI2NzQtM2I0ZDAyYTYxZWMy
LzEvcm9OVktaTjBLWGt6MG9IMUhyZExwY0xKSE1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtgM6Jnc
DycQozBzHM2opYw2HoYtZPF/OylGVk1f8Y+7YgMzzmS9mghlyBBei8SgQ5YCSsh5
Cb2waOabZngBAuX/P8Nb/M12EfgGZxhYVvzwhyxKRJZz4I1YL9T10JNinFvlXrMF
aoRs8BECoVBA7kmfvpKoqqdRYKPI+1ibwrAU4+soOY2+qk0AVAEXD3NnfrkDZEoh
3CUNLMCukQcRYUEezH7TpRmKwX9WwZZI6D6rIW4yBido4p+xjE8HuEtbwRRpaEiM
IVcjX4rZu0YkF1aBhJ9iKZfJxr/4b0/QxX5AOsCoHLnpSYKDQyRSMHZyWZnYuWkp
Odhw4pVd1Dzhuw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:43 2025 by rpki-client