Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
File: dI6Zox81gkAKtd-nd8YNFqyu3bM.mft (raw, json)
Hash identifier: mFmD/kWX4Upo9W2Xih7oic4mUgL1AOYleecF9SCcWxw=
Subject key identifier: 4D:99:68:BF:56:40:CD:07:76:8F:7E:A6:26:EB:34:0A:D7:F0:79:63
Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Certificate serial: 0198A04E6EAA795BC01869A55567D7E9197F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
Manifest number: 07FD
Signing time: Tue 12 Aug 2025 22:02:31 +0000
Manifest this update: Tue 12 Aug 2025 22:02:31 +0000
Manifest next update: Wed 13 Aug 2025 22:02:31 +0000
Files and hashes: 1: VWVp9Cs0S9PvQSERU4KTGGzQ8JI.roa (hash: SxWsENl0azYTplSpEg/TKtQu0dvHaU6Cl+WjOSHnKaA=)
2: dI6Zox81gkAKtd-nd8YNFqyu3bM.crl (hash: cV419jUVQZp42h94Nca+1t30VyRGOQ6NzIKiuqltyDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:6e:aa:79:5b:c0:18:69:a5:55:67:d7:e9:19:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Validity
Not Before: Aug 12 22:02:31 2025 GMT
Not After : Aug 13 22:02:31 2025 GMT
Subject: CN=4d9968bf5640cd07768f7ea626eb340ad7f07963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:24:37:7c:f8:4a:47:f3:95:52:3c:36:48:
9c:00:ec:e9:21:4d:bc:7d:f1:9e:f9:54:1a:28:22:
96:52:2d:88:fb:94:c7:40:8e:83:21:0e:ee:61:22:
e2:82:d0:5d:11:64:78:f4:4f:0e:f5:5d:5a:50:cd:
84:60:38:d3:cd:e1:d5:5b:44:e2:83:b9:3b:49:73:
4e:db:90:0b:f8:b9:f9:8e:f2:b6:fc:43:f4:07:73:
6b:bf:df:6e:f2:ce:1d:fe:f4:20:78:23:e9:aa:35:
bf:c8:39:bb:00:f9:68:43:48:87:8c:6f:1e:45:ba:
3b:54:9e:e9:c8:2e:89:69:67:7f:ef:22:60:55:17:
3f:be:41:4e:25:87:3f:da:b6:5b:8d:b8:32:d9:cc:
59:4c:f1:30:63:42:e9:96:3d:71:43:4c:60:b2:cb:
cb:f1:5e:d4:61:88:12:e6:9a:fa:38:6e:78:1f:34:
cf:fb:21:8b:39:ed:6f:48:24:42:70:b2:1c:be:09:
f2:48:80:3d:41:be:05:af:e5:5f:24:2a:e6:f1:cd:
38:7e:e3:07:c1:28:23:1e:ce:18:7f:b8:1e:ce:f0:
d4:52:93:4b:fc:47:b4:31:4c:4f:c2:2c:c5:69:03:
da:ef:e5:9d:36:c7:59:37:81:42:a6:1b:d8:be:c5:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:99:68:BF:56:40:CD:07:76:8F:7E:A6:26:EB:34:0A:D7:F0:79:63
X509v3 Authority Key Identifier:
keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a0:1d:a9:ad:d1:c7:32:b5:ca:d3:fb:b4:ea:e9:56:b4:5b:
f1:51:a4:15:c5:fa:93:40:26:37:6f:05:9b:2a:db:35:1e:73:
52:08:89:06:5a:20:77:ed:77:c5:92:b0:d8:57:06:37:f4:aa:
02:90:e5:44:b1:d9:5e:7c:a8:a8:cc:8d:9e:28:1b:e1:8c:5a:
9f:f4:1d:ff:6d:4a:56:1b:14:a7:51:c1:70:94:13:d2:3f:96:
0f:d4:fb:05:e5:8e:33:ac:53:38:c7:f1:6c:d3:da:b4:39:c8:
42:f3:02:b7:41:0b:6f:e8:da:5e:7d:1d:42:72:86:0e:18:81:
13:69:21:ac:69:a1:44:bb:ab:d7:02:42:04:f7:3b:e8:48:b1:
2d:d1:31:0b:4f:cd:8d:70:59:db:71:21:f9:ba:1d:73:97:ca:
e2:48:62:c2:14:09:e1:79:20:d5:2e:c2:d2:c2:cb:6d:16:46:
b6:7c:66:d9:04:31:ab:d4:99:e7:1c:97:60:61:d5:87:74:ae:
db:03:a0:25:fc:3a:fb:04:aa:0d:c7:f9:cc:9a:02:81:4d:dd:
58:63:82:40:ed:48:5d:26:75:7b:02:6a:b4:51:48:c9:e0:17:
76:86:20:0a:bf:9c:ff:42:76:0a:bf:d3:73:c1:fe:93:15:e7:
91:db:33:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTm6qeVvAGGmlVWfX6Rl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OGU5OWEzMWYzNTgyNDAwYWI1ZGZhNzc3YzYwZDE2YWNh
ZWRkYjMwHhcNMjUwODEyMjIwMjMxWhcNMjUwODEzMjIwMjMxWjAzMTEwLwYDVQQD
Eyg0ZDk5NjhiZjU2NDBjZDA3NzY4ZjdlYTYyNmViMzQwYWQ3ZjA3OTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43okN3z4SkfzlVI8NkicAOzpIU28
ffGe+VQaKCKWUi2I+5THQI6DIQ7uYSLigtBdEWR49E8O9V1aUM2EYDjTzeHVW0Ti
g7k7SXNO25AL+Ln5jvK2/EP0B3Nrv99u8s4d/vQgeCPpqjW/yDm7APloQ0iHjG8e
Rbo7VJ7pyC6JaWd/7yJgVRc/vkFOJYc/2rZbjbgy2cxZTPEwY0Lplj1xQ0xgssvL
8V7UYYgS5pr6OG54HzTP+yGLOe1vSCRCcLIcvgnySIA9Qb4Fr+VfJCrm8c04fuMH
wSgjHs4Yf7gezvDUUpNL/Ee0MUxPwizFaQPa7+WdNsdZN4FCphvYvsUHnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2ZaL9WQM0Hdo9+pibrNArX8HljMB8GA1UdIwQY
MBaAFHSOmaMfNYJACrXfp3fGDRasrt2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYt
ZmVjNmMyNzAxZWRhLzEvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYtZmVjNmMyNzAxZWRh
LzEvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaAdqa3R
xzK1ytP7tOrpVrRb8VGkFcX6k0AmN28FmyrbNR5zUgiJBlogd+13xZKw2FcGN/Sq
ApDlRLHZXnyoqMyNnigb4Yxan/Qd/21KVhsUp1HBcJQT0j+WD9T7BeWOM6xTOMfx
bNPatDnIQvMCt0ELb+jaXn0dQnKGDhiBE2khrGmhRLur1wJCBPc76EixLdExC0/N
jXBZ23Eh+bodc5fK4khiwhQJ4Xkg1S7C0sLLbRZGtnxm2QQxq9SZ5xyXYGHVh3Su
2wOgJfw6+wSqDcf5zJoCgU3dWGOCQO1IXSZ1ewJqtFFIyeAXdoYgCr+c/0J2Cr/T
c8H+kxXnkdszVQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:47 2025 by rpki-client