Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
File: x3ER7FVJEVyzR2VNj-WycJ0n998.mft (raw, json)
Hash identifier: 1ulEyPa6tzU1Vt61EtcYjYyo/8uco7MppSCiOjSwVpk=
Subject key identifier: 8F:0A:BE:2C:F4:D8:3C:8B:DC:44:CC:07:EB:B9:2F:C6:5D:E3:C3:D7
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial: 01988EEB7DC3B9707D407C1662F1CB792408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
Manifest number: 1020
Signing time: Sat 09 Aug 2025 13:00:54 +0000
Manifest this update: Sat 09 Aug 2025 13:00:54 +0000
Manifest next update: Sun 10 Aug 2025 13:00:54 +0000
Files and hashes: 1: 9QkZQFFq52UED9EyY0jKnFH-pX8.roa (hash: qLNZsCVw5BE1cHr6HyybImHSaQWc8kutbUnGNRzqfeU=)
2: x3ER7FVJEVyzR2VNj-WycJ0n998.crl (hash: egrcMZsCBUvN/0+/BaRonFolKsIcdNLvhMaeUhKTYhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:7d:c3:b9:70:7d:40:7c:16:62:f1:cb:79:24:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Validity
Not Before: Aug 9 13:00:54 2025 GMT
Not After : Aug 10 13:00:54 2025 GMT
Subject: CN=8f0abe2cf4d83c8bdc44cc07ebb92fc65de3c3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:72:a2:d4:06:6d:7f:dd:e9:b6:2b:1f:9d:
14:a8:dc:b2:ad:92:83:73:13:95:d2:5b:5c:c3:1c:
35:99:cd:dc:6b:ce:e8:cd:15:e6:88:a0:9f:8b:8a:
18:d7:22:32:6a:44:d6:ce:e7:c8:94:86:46:ae:5b:
f7:2c:a3:c4:67:73:c3:a9:ad:67:b6:9a:b0:d7:93:
4a:1f:67:f2:80:e9:81:10:4e:e1:04:06:38:8c:28:
5b:35:72:29:77:f9:8b:f7:ef:1b:b8:c4:59:db:3c:
9b:c5:85:b2:ff:c2:a1:92:f3:11:08:7d:57:75:29:
0e:5b:ac:a3:9f:a1:af:7a:01:75:57:6e:9b:3d:eb:
94:e1:e1:37:4d:0d:d7:cb:38:6c:11:91:7e:af:18:
53:ad:11:f0:bb:54:17:d4:a7:41:f1:cd:ca:15:f6:
90:c6:be:36:6a:f9:8b:e6:d4:15:2a:97:92:75:ec:
13:31:aa:a5:9f:71:29:4d:fc:ec:3d:8e:2e:e7:e4:
34:5e:2a:99:d2:ab:29:b4:90:ff:df:41:00:93:28:
0d:33:07:ca:f2:6d:dc:e3:e1:b1:65:42:6a:e6:bd:
7d:0f:65:04:3d:5d:78:5b:2c:09:a2:ee:54:89:c2:
4b:fb:fa:a8:53:71:c6:0d:4a:2c:69:8b:c3:32:58:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0A:BE:2C:F4:D8:3C:8B:DC:44:CC:07:EB:B9:2F:C6:5D:E3:C3:D7
X509v3 Authority Key Identifier:
keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3d:ab:71:f5:c9:bd:c6:ca:12:f4:7a:c9:12:90:fe:56:d3:
4f:0e:b9:17:8c:55:21:57:f3:63:a6:dd:c5:b1:ee:a4:92:3f:
e2:33:2e:ad:c8:df:7d:a3:8a:ac:8b:67:61:bd:d1:b5:33:0c:
f3:02:aa:a5:97:92:5a:85:b1:37:c7:70:95:39:81:08:7f:2e:
4e:b9:d7:d1:37:92:f6:c3:5c:2e:bc:5e:ea:66:1b:44:17:fb:
80:58:35:20:a7:5c:cc:da:32:a1:b7:4d:76:04:76:1a:2d:7c:
f0:0c:0b:05:81:b3:bf:fb:1f:18:aa:7d:43:40:59:06:e4:41:
f1:8c:af:01:b0:f8:86:7c:e2:8d:5b:eb:72:aa:9e:fc:a9:11:
ec:da:ed:be:18:20:dd:90:2a:a7:bb:1e:60:d4:e2:73:2a:35:
f7:5b:02:55:db:5c:c7:f9:5f:c4:66:8a:00:99:2e:95:78:5d:
0b:80:19:43:a9:29:cd:28:9f:3a:93:a3:6f:a7:f4:00:25:44:
c5:21:55:10:32:28:60:70:71:b0:93:fb:69:71:91:09:7f:f7:
5c:ee:91:a5:be:df:07:ff:3a:ad:61:50:68:05:fc:29:21:15:
26:61:b1:e8:25:8a:0b:1f:ed:c0:7f:9a:55:1a:e7:ea:03:50:
cd:4b:3e:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO633DuXB9QHwWYvHLeSQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzExMWVjNTU0OTExNWNiMzQ3NjU0ZDhmZTViMjcwOWQy
N2Y3ZGYwHhcNMjUwODA5MTMwMDU0WhcNMjUwODEwMTMwMDU0WjAzMTEwLwYDVQQD
Eyg4ZjBhYmUyY2Y0ZDgzYzhiZGM0NGNjMDdlYmI5MmZjNjVkZTNjM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG9yotQGbX/d6bYrH50UqNyyrZKD
cxOV0ltcwxw1mc3ca87ozRXmiKCfi4oY1yIyakTWzufIlIZGrlv3LKPEZ3PDqa1n
tpqw15NKH2fygOmBEE7hBAY4jChbNXIpd/mL9+8buMRZ2zybxYWy/8KhkvMRCH1X
dSkOW6yjn6GvegF1V26bPeuU4eE3TQ3XyzhsEZF+rxhTrRHwu1QX1KdB8c3KFfaQ
xr42avmL5tQVKpeSdewTMaqln3EpTfzsPY4u5+Q0XiqZ0qsptJD/30EAkygNMwfK
8m3c4+GxZUJq5r19D2UEPV14WywJou5UicJL+/qoU3HGDUosaYvDMlgG/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8Kviz02DyL3ETMB+u5L8Zd48PXMB8GA1UdIwQY
MBaAFMdxEexVSRFcs0dlTY/lsnCdJ/ffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lMmQxYWQtY2ZlMC00NDk0LWFhNzUt
ZTBjMmI5NDc5MmNhLzEveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lMmQxYWQtY2ZlMC00NDk0LWFhNzUtZTBjMmI5NDc5MmNh
LzEveDNFUjdGVkpFVnl6UjJWTmotV3ljSjBuOTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgT2rcfXJ
vcbKEvR6yRKQ/lbTTw65F4xVIVfzY6bdxbHupJI/4jMurcjffaOKrItnYb3RtTMM
8wKqpZeSWoWxN8dwlTmBCH8uTrnX0TeS9sNcLrxe6mYbRBf7gFg1IKdczNoyobdN
dgR2Gi188AwLBYGzv/sfGKp9Q0BZBuRB8YyvAbD4hnzijVvrcqqe/KkR7Nrtvhgg
3ZAqp7seYNTicyo191sCVdtcx/lfxGaKAJkulXhdC4AZQ6kpzSifOpOjb6f0ACVE
xSFVEDIoYHBxsJP7aXGRCX/3XO6Rpb7fB/86rWFQaAX8KSEVJmGx6CWKCx/twH+a
VRrn6gNQzUs+Rw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:45 2025 by rpki-client