Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File: RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier: B4ITGkUtSnO3CJp8v9icgkAlQdJQQ3WvVv4hc6w/H3s=
Subject key identifier: A4:C5:FA:C1:F3:C7:6D:57:E8:D0:DA:F1:67:B7:B5:EA:EF:E4:49:D1
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial: 01988B0EB188849CBF0D67AA9E757E101FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number: 070A
Signing time: Fri 08 Aug 2025 19:00:52 +0000
Manifest this update: Fri 08 Aug 2025 19:00:52 +0000
Manifest next update: Sat 09 Aug 2025 19:00:52 +0000
Files and hashes: 1: 8bsQRC6tEXl8CBwmVFzVd76zzgI.roa (hash: C8qiZHuVAIBOKIv/baZ/CLEIEY2S6o8WOpdp6qtA5us=)
2: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: qtFnghcjjIOr+i4IZMR5kAz9A/HxLUU7nrFygXXfK5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:b1:88:84:9c:bf:0d:67:aa:9e:75:7e:10:1f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
Validity
Not Before: Aug 8 19:00:52 2025 GMT
Not After : Aug 9 19:00:52 2025 GMT
Subject: CN=a4c5fac1f3c76d57e8d0daf167b7b5eaefe449d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:43:27:e7:75:f6:19:ad:15:d2:d5:0b:3c:f4:
f9:12:30:18:62:af:a4:6c:b2:6e:bf:be:ed:81:83:
29:fc:c1:df:ad:28:90:79:ba:ce:ba:9e:17:4e:20:
f5:26:0f:47:6a:9d:07:9f:ba:da:35:31:1f:a1:82:
f8:5f:e2:eb:ff:8f:52:68:50:07:11:1a:3f:2d:2d:
03:49:4f:55:b4:36:bd:5d:50:98:2f:d4:23:ec:57:
2a:85:39:b7:99:40:53:dd:74:b2:60:b3:02:1a:d1:
4c:dc:e2:c2:f4:63:ea:54:64:e7:f8:88:fa:20:c5:
91:2f:50:7f:a2:9c:cf:2d:63:b9:8d:8c:a0:4f:b8:
74:53:e5:68:98:4f:88:d8:73:86:5c:31:cd:b0:32:
5f:36:06:9f:e3:1c:64:65:6b:09:75:c5:ff:c4:43:
6a:3b:86:1e:ee:0a:d6:b1:7d:d6:61:47:47:5d:9d:
28:ea:d4:a0:14:7e:83:7f:6c:2d:00:ad:71:47:18:
1d:42:bb:0c:81:09:19:73:24:45:aa:3a:c5:5e:4b:
ec:25:b6:1f:db:f9:f3:06:2a:fd:0a:72:e4:e8:66:
f1:bb:5c:2f:3f:12:11:0d:24:f8:1c:c9:1e:94:81:
85:5d:b6:53:3d:c3:fa:23:9b:a7:c8:da:ae:19:28:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C5:FA:C1:F3:C7:6D:57:E8:D0:DA:F1:67:B7:B5:EA:EF:E4:49:D1
X509v3 Authority Key Identifier:
keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fa:c6:0b:f3:d9:23:ea:15:1f:00:2a:94:18:0c:b5:2c:4a:
00:c6:6f:18:7a:d4:c7:ce:74:0d:31:98:33:84:60:fc:33:f8:
5c:d0:69:66:5c:fe:35:9b:3d:da:26:67:cd:fa:2a:91:a9:3c:
4e:55:49:b0:49:3e:9a:b6:18:5d:d0:83:53:07:9e:d6:0a:9b:
dd:81:fe:ff:9e:3e:aa:71:cb:db:ef:0a:77:1b:03:c8:44:e7:
8c:8a:2a:9f:5b:d1:09:14:b1:5d:31:df:84:e8:c7:94:1d:6a:
ae:92:9c:bc:ff:51:9b:65:6f:de:49:9e:b4:7d:bb:7d:0d:a9:
ef:72:9a:cf:6d:e5:38:ba:49:8f:5b:fd:ce:5a:e5:3d:de:c2:
e7:12:d3:05:71:ff:2b:57:56:fd:7d:03:21:1f:0b:51:9d:22:
b0:1d:99:a6:db:fd:d1:eb:b7:60:d8:8f:a7:45:c9:c8:72:c0:
51:6a:3e:da:d6:f9:9d:aa:e3:ea:c3:4f:ab:a1:2d:10:2e:51:
40:70:92:09:c3:72:ea:34:87:62:95:2c:66:5a:3e:7b:6f:63:
89:75:6f:89:1e:86:2d:ba:bd:3b:18:9f:63:7e:b9:00:62:5c:
0d:23:5b:57:0d:83:15:d4:26:fa:9b:5d:bc:58:04:9a:c5:7c:
d5:52:09:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLDrGIhJy/DWeqnnV+EB/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NTdkZjNlNTQ2ZDU2ZGJiNWQyMzBmNjExYzcyNGM1OTlh
NzIyNTEwHhcNMjUwODA4MTkwMDUyWhcNMjUwODA5MTkwMDUyWjAzMTEwLwYDVQQD
EyhhNGM1ZmFjMWYzYzc2ZDU3ZThkMGRhZjE2N2I3YjVlYWVmZTQ0OWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UMn53X2Ga0V0tULPPT5EjAYYq+k
bLJuv77tgYMp/MHfrSiQebrOup4XTiD1Jg9Hap0Hn7raNTEfoYL4X+Lr/49SaFAH
ERo/LS0DSU9VtDa9XVCYL9Qj7FcqhTm3mUBT3XSyYLMCGtFM3OLC9GPqVGTn+Ij6
IMWRL1B/opzPLWO5jYygT7h0U+VomE+I2HOGXDHNsDJfNgaf4xxkZWsJdcX/xENq
O4Ye7grWsX3WYUdHXZ0o6tSgFH6Df2wtAK1xRxgdQrsMgQkZcyRFqjrFXkvsJbYf
2/nzBir9CnLk6Gbxu1wvPxIRDST4HMkelIGFXbZTPcP6I5unyNquGShvxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTF+sHzx21X6NDa8We3terv5EnRMB8GA1UdIwQY
MBaAFEVX3z5UbVbbtdIw9hHHJMWZpyJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQt
MGE4OTJhYjQ3ZGIzLzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQtMGE4OTJhYjQ3ZGIz
LzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPrGC/PZ
I+oVHwAqlBgMtSxKAMZvGHrUx850DTGYM4Rg/DP4XNBpZlz+NZs92iZnzfoqkak8
TlVJsEk+mrYYXdCDUwee1gqb3YH+/54+qnHL2+8KdxsDyETnjIoqn1vRCRSxXTHf
hOjHlB1qrpKcvP9Rm2Vv3kmetH27fQ2p73Kaz23lOLpJj1v9zlrlPd7C5xLTBXH/
K1dW/X0DIR8LUZ0isB2Zptv90eu3YNiPp0XJyHLAUWo+2tb5narj6sNPq6EtEC5R
QHCSCcNy6jSHYpUsZlo+e29jiXVviR6GLbq9OxifY365AGJcDSNbVw2DFdQm+ptd
vFgEmsV81VIJug==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:39:42 2025 by rpki-client