Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
File: EdnXl1uM2pIypCR8yd6abf28YGk.mft (raw, json)
Hash identifier: tW6eVL2sojQEIacqpRz9QeMaLEK/DZ7a/CA0U1RHSAM=
Subject key identifier: B0:1B:D9:7B:CA:19:9F:F7:A8:5D:14:A4:A2:A9:8E:F7:2C:BE:62:97
Authority key identifier: 11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
Certificate issuer: /CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Certificate serial: 019874BDA3073F2586C62287CDD113C64ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 11:00:41 +0000
Manifest this update: Mon 04 Aug 2025 11:00:41 +0000
Manifest next update: Tue 05 Aug 2025 11:00:41 +0000
Files and hashes: 1: DsnYhz3l-UjW4BEfkskBQyPqFHg.roa (hash: Ca24yg0KQW8MlNf8yUGGudiupYhIqA/czyOnT3n44ic=)
2: EdnXl1uM2pIypCR8yd6abf28YGk.crl (hash: i8wKpILTIgSGvRCJTy3c8Ek0n5bhNAL+b/wUPKQFqwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:a3:07:3f:25:86:c6:22:87:cd:d1:13:c6:4a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Validity
Not Before: Aug 4 11:00:41 2025 GMT
Not After : Aug 5 11:00:41 2025 GMT
Subject: CN=b01bd97bca199ff7a85d14a4a2a98ef72cbe6297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:77:d3:9e:64:0f:ad:dc:4b:1e:6e:e4:83:
03:df:aa:e4:39:ce:61:be:17:c1:65:d1:dd:28:89:
4d:96:62:ac:60:7a:b2:ee:bb:00:99:13:cc:c5:5a:
d1:d5:7a:be:94:2f:58:6b:a6:49:c9:54:46:fa:6b:
2d:c5:57:88:01:72:9c:ca:8d:b9:2a:22:9b:95:93:
46:0b:6a:04:2d:56:4e:55:bf:e8:99:3f:2a:43:5a:
cf:53:4e:05:06:64:2d:26:dd:90:83:e5:a3:2a:12:
32:e6:6d:82:48:fc:f8:a8:3d:cf:39:6a:a8:50:61:
6b:f0:9a:ba:2a:d1:82:e0:6b:2d:9d:f7:16:e4:7b:
ab:df:9e:8f:1f:0b:0b:39:79:4c:ae:1a:21:99:60:
a4:98:26:93:fc:3d:c4:92:87:b3:8b:59:ed:aa:5e:
eb:a5:d5:6e:2d:72:14:c4:3c:89:cd:97:51:89:be:
42:cd:62:a5:42:ab:73:e8:ef:2e:9d:51:fa:59:e4:
28:5f:c2:19:ed:58:ab:fa:cb:2d:3e:4a:2c:df:ab:
e1:08:6e:ba:47:3f:16:dc:cb:f0:74:83:83:46:03:
b0:06:91:72:ec:72:f1:d0:5b:6d:10:38:b2:71:7a:
8a:f4:7d:e6:bd:ed:7b:5e:57:5b:71:3c:0e:b4:10:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1B:D9:7B:CA:19:9F:F7:A8:5D:14:A4:A2:A9:8E:F7:2C:BE:62:97
X509v3 Authority Key Identifier:
keyid:11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b6:fd:c9:4d:bb:30:2e:89:78:aa:53:66:6c:a6:5c:16:22:
8e:61:57:a9:2b:79:26:ed:5b:19:71:f3:62:39:ee:b2:a7:c1:
06:dc:5e:d2:4e:f0:8f:23:ba:e3:c1:f4:55:e4:24:01:0d:20:
7b:02:c8:17:d9:86:e1:8a:87:c7:3c:c6:4d:8b:67:98:11:f4:
be:ad:de:e2:55:a7:6a:29:59:08:b1:2d:53:e0:37:e3:ee:00:
6a:85:30:92:3c:80:bd:26:85:c6:69:b6:a1:9d:e8:00:a3:d4:
c6:61:a0:15:1f:9f:a4:71:0c:5b:5b:4d:e4:47:25:19:a3:f0:
91:92:c1:e0:43:d2:a4:e4:5e:a1:43:c3:db:32:b9:a6:6f:f6:
15:c8:84:e6:77:46:b7:6b:60:23:ea:51:75:b3:42:49:db:12:
a4:32:67:83:14:dd:b1:bc:a5:a8:a8:6e:31:e1:f4:b6:a9:30:
17:86:bb:cd:52:34:ff:2f:66:05:1a:23:c1:53:2e:77:53:3e:
7b:d5:30:1d:48:46:9b:e3:eb:65:89:cf:62:ec:cc:27:ed:19:
5f:f4:54:77:16:52:b2:2e:ca:2f:b9:5d:9c:bb:52:ab:75:15:
15:85:18:3e:ab:c0:c9:4e:14:21:ef:1d:0d:84:40:e5:8a:70:
f5:70:6e:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vaMHPyWGxiKHzdETxkrbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZDlkNzk3NWI4Y2RhOTIzMmE0MjQ3Y2M5ZGU5YTZkZmRi
YzYwNjkwHhcNMjUwODA0MTEwMDQxWhcNMjUwODA1MTEwMDQxWjAzMTEwLwYDVQQD
EyhiMDFiZDk3YmNhMTk5ZmY3YTg1ZDE0YTRhMmE5OGVmNzJjYmU2Mjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns53055kD63cSx5u5IMD36rkOc5h
vhfBZdHdKIlNlmKsYHqy7rsAmRPMxVrR1Xq+lC9Ya6ZJyVRG+mstxVeIAXKcyo25
KiKblZNGC2oELVZOVb/omT8qQ1rPU04FBmQtJt2Qg+WjKhIy5m2CSPz4qD3POWqo
UGFr8Jq6KtGC4GstnfcW5Hur356PHwsLOXlMrhohmWCkmCaT/D3Ekoezi1ntql7r
pdVuLXIUxDyJzZdRib5CzWKlQqtz6O8unVH6WeQoX8IZ7Vir+sstPkos36vhCG66
Rz8W3MvwdIODRgOwBpFy7HLx0FttEDiycXqK9H3mve17XldbcTwOtBD0qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAb2XvKGZ/3qF0UpKKpjvcsvmKXMB8GA1UdIwQY
MBaAFBHZ15dbjNqSMqQkfMnemm39vGBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWRuWGwxdU0ycEl5cENSOHlkNmFiZjI4WUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMDY2OGItNmVjMi00ZGI0LWE5NTct
YWY3MzgyMzk1ZTAwLzEvRWRuWGwxdU0ycEl5cENSOHlkNmFiZjI4WUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iMDY2OGItNmVjMi00ZGI0LWE5NTctYWY3MzgyMzk1ZTAw
LzEvRWRuWGwxdU0ycEl5cENSOHlkNmFiZjI4WUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrb9yU27
MC6JeKpTZmymXBYijmFXqSt5Ju1bGXHzYjnusqfBBtxe0k7wjyO648H0VeQkAQ0g
ewLIF9mG4YqHxzzGTYtnmBH0vq3e4lWnailZCLEtU+A34+4AaoUwkjyAvSaFxmm2
oZ3oAKPUxmGgFR+fpHEMW1tN5EclGaPwkZLB4EPSpOReoUPD2zK5pm/2FciE5ndG
t2tgI+pRdbNCSdsSpDJngxTdsbylqKhuMeH0tqkwF4a7zVI0/y9mBRojwVMud1M+
e9UwHUhGm+PrZYnPYuzMJ+0ZX/RUdxZSsi7KL7ldnLtSq3UVFYUYPqvAyU4UIe8d
DYRA5Ypw9XBu4Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:15:02 2025 by rpki-client