Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
File: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft (raw, json)
Hash identifier: dW7DKsHJ5MxjcNMtBNi25t2gKTG/KQfuO3u3AziWUmg=
Subject key identifier: 87:7B:E9:4F:A6:ED:1D:BB:C3:2A:A3:E0:4C:09:72:5F:70:CD:9B:70
Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
Certificate issuer: /CN=46846557b9e42955163e516b02dc8e3ee3828114
Certificate serial: 01988166DCA1AA64D2869107C33AC0368492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
Manifest number: 096A
Signing time: Wed 06 Aug 2025 22:00:58 +0000
Manifest this update: Wed 06 Aug 2025 22:00:58 +0000
Manifest next update: Thu 07 Aug 2025 22:00:58 +0000
Files and hashes: 1: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl (hash: NxgZPuxJmaauKrQV9XOg08fJmN9HbhdZ3OsRbLF8Mms=)
2: Zg1oQlfTlRGn4mPizarntNQVifQ.roa (hash: VCNyDIITF1vB0XbRmzjr12dFWbtUbWzSK0fvTI9GVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:dc:a1:aa:64:d2:86:91:07:c3:3a:c0:36:84:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114
Validity
Not Before: Aug 6 22:00:58 2025 GMT
Not After : Aug 7 22:00:58 2025 GMT
Subject: CN=877be94fa6ed1dbbc32aa3e04c09725f70cd9b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:b1:16:09:0f:41:bb:d9:f5:bf:fd:a4:ee:
8a:c6:c2:b9:c6:d1:7c:38:6f:f3:6f:00:04:e7:3b:
3c:3d:23:43:1c:c5:f5:1d:76:c6:fe:98:1f:26:d5:
c1:80:62:4a:89:71:c0:dd:fa:22:fa:7b:a5:e2:24:
c6:9e:c4:ca:5d:e2:de:35:1b:25:5c:2f:c0:6b:9b:
01:f6:b9:f1:5e:9e:c9:da:5e:9d:3c:c1:05:70:5e:
b1:c3:da:fb:7d:5d:e0:45:1c:1b:29:f3:72:f5:ef:
9f:15:e4:af:2c:4a:e3:66:3b:2c:e7:5f:68:f3:9f:
31:ac:7c:64:b9:e8:6d:97:ec:40:d3:83:50:bd:f0:
b2:52:1e:27:a5:68:b3:9e:79:c2:30:3f:5b:af:db:
e8:fd:38:04:01:71:f3:a7:0a:89:dc:d4:15:ec:42:
ee:80:9c:ea:d1:63:35:57:5b:bf:3a:ae:d3:1f:e7:
82:c6:fe:3d:34:98:80:b0:74:4d:32:7a:d1:ac:1f:
83:f8:10:62:9f:cc:8b:2b:69:8e:07:21:26:be:ba:
ae:c3:ce:2e:67:45:29:37:fc:50:e6:42:bd:84:02:
fb:d6:22:8c:1d:d9:d7:30:c4:92:7e:54:fa:c7:07:
45:ce:cd:6e:b3:5e:aa:55:ba:d2:89:d4:03:5b:78:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7B:E9:4F:A6:ED:1D:BB:C3:2A:A3:E0:4C:09:72:5F:70:CD:9B:70
X509v3 Authority Key Identifier:
keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d6:be:54:57:e3:b1:5c:69:4a:6c:eb:59:0f:cc:f0:66:54:
f7:2d:7e:42:4f:a7:aa:19:0b:ad:91:41:6a:ef:8e:bf:0f:92:
50:f7:99:56:31:ee:73:0d:45:41:9b:f6:e8:d6:72:9c:31:36:
03:c9:b6:2c:25:81:45:95:93:04:85:78:c6:40:4a:ff:88:c2:
fe:20:89:cc:d0:b2:ae:a7:ef:d5:1a:6f:2b:2e:3b:a0:01:67:
04:dd:72:fd:40:64:00:ba:eb:91:90:54:15:da:cb:55:d1:e2:
a5:38:a2:37:9a:42:84:37:b1:84:ee:4f:34:2a:a1:76:11:1d:
8a:cb:87:d8:5b:e8:21:3c:b9:a9:45:d5:86:e2:b9:0d:bb:b2:
13:9a:5d:c1:af:3c:81:0a:7f:8d:ff:6c:a7:50:d2:08:cc:82:
74:79:79:53:2f:53:95:6f:f9:27:50:ff:22:ee:81:c6:f7:89:
86:2e:bd:37:df:ca:a6:66:48:4f:87:ff:55:96:ae:41:c6:5d:
c5:a2:59:e5:17:cc:8f:2b:91:03:21:c6:7d:ea:98:e7:19:7a:
75:d2:18:e1:60:cf:7e:9d:d8:6b:0e:9d:e3:9e:e1:58:c6:2e:
1e:69:51:1d:6f:ce:39:96:f1:db:99:90:17:07:eb:90:e7:f7:
44:0c:28:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZtyhqmTShpEHwzrANoSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ODQ2NTU3YjllNDI5NTUxNjNlNTE2YjAyZGM4ZTNlZTM4
MjgxMTQwHhcNMjUwODA2MjIwMDU4WhcNMjUwODA3MjIwMDU4WjAzMTEwLwYDVQQD
Eyg4NzdiZTk0ZmE2ZWQxZGJiYzMyYWEzZTA0YzA5NzI1ZjcwY2Q5YjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQuxFgkPQbvZ9b/9pO6KxsK5xtF8
OG/zbwAE5zs8PSNDHMX1HXbG/pgfJtXBgGJKiXHA3foi+nul4iTGnsTKXeLeNRsl
XC/Aa5sB9rnxXp7J2l6dPMEFcF6xw9r7fV3gRRwbKfNy9e+fFeSvLErjZjss519o
858xrHxkuehtl+xA04NQvfCyUh4npWiznnnCMD9br9vo/TgEAXHzpwqJ3NQV7ELu
gJzq0WM1V1u/Oq7TH+eCxv49NJiAsHRNMnrRrB+D+BBin8yLK2mOByEmvrquw84u
Z0UpN/xQ5kK9hAL71iKMHdnXMMSSflT6xwdFzs1us16qVbrSidQDW3iVhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId76U+m7R27wyqj4EwJcl9wzZtwMB8GA1UdIwQY
MBaAFEaEZVe55ClVFj5RawLcjj7jgoEUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm9SbFY3bmtLVlVXUGxGckF0eU9QdU9DZ1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85ODdjNGUtNzg5Yi00YzI2LThjZTUt
YWJiMjIyNTA3ZjE3LzEvUm9SbFY3bmtLVlVXUGxGckF0eU9QdU9DZ1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC85ODdjNGUtNzg5Yi00YzI2LThjZTUtYWJiMjIyNTA3ZjE3
LzEvUm9SbFY3bmtLVlVXUGxGckF0eU9QdU9DZ1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOda+VFfj
sVxpSmzrWQ/M8GZU9y1+Qk+nqhkLrZFBau+Ovw+SUPeZVjHucw1FQZv26NZynDE2
A8m2LCWBRZWTBIV4xkBK/4jC/iCJzNCyrqfv1RpvKy47oAFnBN1y/UBkALrrkZBU
FdrLVdHipTiiN5pChDexhO5PNCqhdhEdisuH2FvoITy5qUXVhuK5DbuyE5pdwa88
gQp/jf9sp1DSCMyCdHl5Uy9TlW/5J1D/Iu6BxveJhi69N9/KpmZIT4f/VZauQcZd
xaJZ5RfMjyuRAyHGfeqY5xl6ddIY4WDPfp3Yaw6d457hWMYuHmlRHW/OOZbx25mQ
FwfrkOf3RAwo/g==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:11 2025 by rpki-client