Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File: 9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier: g+JR1IxhNx9W7O/54H9yxRMujCLnKpEnXjmmU/UJxiM=
Subject key identifier: 4D:C4:8C:8C:79:6C:0F:65:07:E9:E1:A2:39:7E:E5:E3:2F:BB:9F:51
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial: 01987261A281D28256C54D24D6A4EB9A0391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number: 1010
Signing time: Mon 04 Aug 2025 00:00:57 +0000
Manifest this update: Mon 04 Aug 2025 00:00:57 +0000
Manifest next update: Tue 05 Aug 2025 00:00:57 +0000
Files and hashes: 1: 2Qdf3KbNG5NqoZJX8HW2axOKIks.roa (hash: aZGBYQ1YtddzlVOGQVr+1nQgozPaUhvPhqEz391ISKs=)
2: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: 0iyn152A/upT7q5W73UyXMazFNfzwsnRPwRAu6JhTOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:a2:81:d2:82:56:c5:4d:24:d6:a4:eb:9a:03:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
Validity
Not Before: Aug 4 00:00:57 2025 GMT
Not After : Aug 5 00:00:57 2025 GMT
Subject: CN=4dc48c8c796c0f6507e9e1a2397ee5e32fbb9f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:da:b0:74:4c:58:e1:9c:92:a9:a5:ca:f0:
27:3a:22:db:99:2b:7b:84:c0:12:8b:26:fe:3f:24:
ff:ca:73:90:e8:09:f7:ab:b5:15:9d:bb:23:e5:c3:
ce:1d:5f:1b:16:b8:30:a4:0c:99:e1:1a:93:bd:be:
2f:6d:62:d1:31:31:5a:07:9e:78:8d:c1:ca:37:76:
36:0a:54:08:39:0b:4c:47:c1:45:ef:dc:9d:dc:6b:
96:55:0d:a9:d8:2c:9d:31:6d:8e:f7:3b:61:aa:85:
1d:ff:f7:4f:81:b5:40:6a:af:fb:91:bb:a2:39:e2:
be:55:7b:dd:6f:70:49:de:b1:20:05:af:e1:7a:d9:
98:38:bd:ca:24:40:b2:40:27:93:5f:ab:2c:0e:12:
5c:60:2f:86:4e:f2:cb:1b:03:47:16:dd:9d:d1:a1:
f5:af:bd:90:2f:5d:31:0d:7f:ee:0d:c2:2d:22:2b:
20:4d:ba:99:16:12:80:3e:69:9a:2d:6b:87:93:2d:
b9:44:ae:49:5d:65:32:32:49:3a:d2:3e:eb:04:21:
94:55:51:1e:37:c7:cc:96:8f:8d:64:9f:41:c4:ba:
3d:0c:02:27:39:5d:f6:36:a0:7d:b5:66:18:ce:42:
e4:23:2f:96:00:74:b5:de:91:a8:66:ae:d4:e7:8b:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C4:8C:8C:79:6C:0F:65:07:E9:E1:A2:39:7E:E5:E3:2F:BB:9F:51
X509v3 Authority Key Identifier:
keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ba:a3:27:92:e8:6b:4a:7a:e2:99:0b:4d:d5:27:67:ee:8b:
15:ae:ae:fb:39:7c:58:4b:bc:d7:f7:f1:08:1e:a4:98:d9:a9:
ca:86:be:7d:30:67:bb:b1:51:92:2c:b7:8e:3f:86:78:09:0e:
ca:54:a5:d6:d4:95:e0:17:d6:8e:4a:34:cb:65:70:be:48:a0:
9c:1e:6a:30:94:d2:33:82:68:24:ad:6d:8a:60:9e:b5:75:49:
91:e7:a4:6e:a8:dd:45:a6:f6:59:eb:fe:a4:ad:92:a4:bb:4f:
14:69:78:4b:a3:36:8f:27:da:36:a4:5f:c3:c4:e9:3d:5d:b0:
d0:b6:57:f5:eb:13:f4:af:d7:72:cd:d8:db:0c:6e:43:0f:23:
98:39:0c:ef:52:94:16:7e:b4:09:40:01:13:a0:fd:7d:ac:66:
32:e3:17:f3:f1:d1:e8:53:30:53:16:0f:73:eb:b4:c3:5d:03:
8c:e8:9c:b5:5e:40:55:0f:d8:cf:19:b9:97:7f:7f:c0:91:88:
c5:9a:3d:be:7e:dc:7d:3a:26:f6:52:d3:fa:b2:8b:48:6e:9a:
36:15:c1:41:d2:d4:28:8c:b0:19:93:07:39:02:40:fd:38:6b:
28:e4:4a:2c:5f:6a:cc:6c:a5:d7:03:88:a1:a5:d1:20:7a:9e:
23:dd:13:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyYaKB0oJWxU0k1qTrmgORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZjgwNzM4MzUxZGNmYzc1YWY5OTY5OTNhMjkyOWMzNzEz
NGEyMDgwHhcNMjUwODA0MDAwMDU3WhcNMjUwODA1MDAwMDU3WjAzMTEwLwYDVQQD
Eyg0ZGM0OGM4Yzc5NmMwZjY1MDdlOWUxYTIzOTdlZTVlMzJmYmI5ZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNTasHRMWOGckqmlyvAnOiLbmSt7
hMASiyb+PyT/ynOQ6An3q7UVnbsj5cPOHV8bFrgwpAyZ4RqTvb4vbWLRMTFaB554
jcHKN3Y2ClQIOQtMR8FF79yd3GuWVQ2p2CydMW2O9zthqoUd//dPgbVAaq/7kbui
OeK+VXvdb3BJ3rEgBa/hetmYOL3KJECyQCeTX6ssDhJcYC+GTvLLGwNHFt2d0aH1
r72QL10xDX/uDcItIisgTbqZFhKAPmmaLWuHky25RK5JXWUyMkk60j7rBCGUVVEe
N8fMlo+NZJ9BxLo9DAInOV32NqB9tWYYzkLkIy+WAHS13pGoZq7U54v7SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3EjIx5bA9lB+nhojl+5eMvu59RMB8GA1UdIwQY
MBaAFPX4Bzg1Hc/HWvmWmTopKcNxNKIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hNGQzNzgtNDg1Yy00YjUxLWE3MjYt
ZWE4NDExZDU3MmFlLzEvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9hNGQzNzgtNDg1Yy00YjUxLWE3MjYtZWE4NDExZDU3MmFl
LzEvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7qjJ5Lo
a0p64pkLTdUnZ+6LFa6u+zl8WEu81/fxCB6kmNmpyoa+fTBnu7FRkiy3jj+GeAkO
ylSl1tSV4BfWjko0y2VwvkignB5qMJTSM4JoJK1timCetXVJkeekbqjdRab2Wev+
pK2SpLtPFGl4S6M2jyfaNqRfw8TpPV2w0LZX9esT9K/Xcs3Y2wxuQw8jmDkM71KU
Fn60CUABE6D9faxmMuMX8/HR6FMwUxYPc+u0w10DjOictV5AVQ/Yzxm5l39/wJGI
xZo9vn7cfTom9lLT+rKLSG6aNhXBQdLUKIywGZMHOQJA/ThrKORKLF9qzGyl1wOI
oaXRIHqeI90TTA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:28 2025 by rpki-client