Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
File: toF3Ytn8jxGwHPUjS25DHPvsG80.mft (raw, json)
Hash identifier: hH3QJyqqUg3jTGcZLU6qmcv4r7/lUHtDH0i9F/IZ26U=
Subject key identifier: D3:E4:D6:B1:91:94:4B:4A:F6:A6:04:33:A5:AC:5D:0A:AB:B6:F4:07
Authority key identifier: B6:81:77:62:D9:FC:8F:11:B0:1C:F5:23:4B:6E:43:1C:FB:EC:1B:CD
Certificate issuer: /CN=b6817762d9fc8f11b01cf5234b6e431cfbec1bcd
Certificate serial: 019896DC04C5AA2DB15B118C5EAEEA18F571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
Manifest number: 0989
Signing time: Mon 11 Aug 2025 02:00:58 +0000
Manifest this update: Mon 11 Aug 2025 02:00:58 +0000
Manifest next update: Tue 12 Aug 2025 02:00:58 +0000
Files and hashes: 1: iFeMzfeEdL5eLiPhJVZH9fOR9os.roa (hash: Hluf44L3umjh9a1sEhuox24mM0+jKftFeuevrlqeW6M=)
2: toF3Ytn8jxGwHPUjS25DHPvsG80.crl (hash: 241JDQA/35E+mblJOHWui/YqBKkzbYhMURYZOddfT3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:04:c5:aa:2d:b1:5b:11:8c:5e:ae:ea:18:f5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6817762d9fc8f11b01cf5234b6e431cfbec1bcd
Validity
Not Before: Aug 11 02:00:58 2025 GMT
Not After : Aug 12 02:00:58 2025 GMT
Subject: CN=d3e4d6b191944b4af6a60433a5ac5d0aabb6f407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:d0:f5:07:24:a9:11:8a:67:34:91:c4:a6:
c8:2b:ce:e0:2d:6d:0f:ce:4d:3b:7d:03:69:1d:e1:
3a:04:8b:0a:e4:b1:d1:3c:84:07:05:4a:dc:f5:37:
31:ea:a5:57:2c:9d:a8:50:5c:f2:e2:e6:2a:17:bd:
72:5b:7f:14:73:12:81:69:1b:da:77:3a:82:d1:8f:
b9:c2:f2:42:0e:57:c8:30:d8:8f:9c:02:9f:08:4b:
5d:0a:f8:a3:e1:81:27:1f:29:4d:07:d9:97:5c:df:
0e:0e:5a:a8:62:0b:e1:57:08:fe:99:c7:a3:a1:ea:
e2:5c:50:e3:3c:0f:bf:ab:3b:f8:a9:a5:fe:b1:ce:
bb:24:1e:0a:72:03:6e:2c:8c:09:aa:3b:52:50:c5:
71:ab:27:06:2c:51:38:fb:31:58:10:10:d7:5b:56:
14:6b:6f:85:a2:c3:0c:be:9a:54:e9:b1:aa:3e:63:
ca:4d:b4:78:cb:b4:9a:1c:a8:ed:93:6c:47:24:e8:
af:60:b7:b0:9a:a3:16:4c:eb:25:1f:3d:0b:6c:a7:
38:c7:8a:1f:79:8b:0b:be:d7:f5:c8:a7:cb:3b:04:
74:ea:0c:e8:b8:77:82:cd:43:70:cb:bd:3d:ff:40:
83:82:ff:db:f3:f0:b9:7d:e1:4e:75:64:45:51:ff:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E4:D6:B1:91:94:4B:4A:F6:A6:04:33:A5:AC:5D:0A:AB:B6:F4:07
X509v3 Authority Key Identifier:
keyid:B6:81:77:62:D9:FC:8F:11:B0:1C:F5:23:4B:6E:43:1C:FB:EC:1B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fb:9c:23:83:e8:f4:3b:83:67:39:9c:6f:d6:ce:7d:d7:a5:
42:78:d0:7d:35:5e:f0:bb:e6:d0:d6:87:35:29:f4:79:03:f8:
c2:9a:b5:4d:ca:db:13:03:46:62:c4:28:5f:6d:0b:80:8d:e1:
f8:c5:7e:a5:eb:eb:c8:bc:7a:85:6d:54:df:dc:a2:40:f9:fd:
93:58:32:42:9a:83:ca:24:47:d3:80:24:c6:44:eb:82:0c:e9:
19:d2:a9:02:3d:5b:21:b7:36:ce:75:bc:0b:6f:d1:5e:a3:df:
7c:9c:51:02:0e:a5:4e:6d:9d:1f:3b:51:89:5c:62:2f:0b:77:
4f:59:5c:b2:fb:87:05:e5:e2:92:6c:70:0d:7e:9e:7e:ab:50:
5d:c6:e3:47:6c:0b:0a:b2:89:0e:29:28:3d:fb:e6:39:f6:32:
b0:07:20:75:d1:c6:b9:e6:c6:00:3c:ce:fb:af:72:c8:8f:c3:
9b:ef:b1:28:df:c3:e2:a0:e2:20:3d:11:68:76:28:d3:e2:5e:
2e:0d:59:40:23:2d:d2:ae:fd:33:89:34:84:0c:54:91:0f:49:
69:17:72:74:24:12:7b:c9:97:04:aa:65:63:ee:b8:50:17:95:
72:ee:4e:67:52:29:72:2e:97:72:bf:cc:d1:84:63:02:5f:55:
34:0b:65:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiW3ATFqi2xWxGMXq7qGPVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ODE3NzYyZDlmYzhmMTFiMDFjZjUyMzRiNmU0MzFjZmJl
YzFiY2QwHhcNMjUwODExMDIwMDU4WhcNMjUwODEyMDIwMDU4WjAzMTEwLwYDVQQD
EyhkM2U0ZDZiMTkxOTQ0YjRhZjZhNjA0MzNhNWFjNWQwYWFiYjZmNDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEzQ9QckqRGKZzSRxKbIK87gLW0P
zk07fQNpHeE6BIsK5LHRPIQHBUrc9Tcx6qVXLJ2oUFzy4uYqF71yW38UcxKBaRva
dzqC0Y+5wvJCDlfIMNiPnAKfCEtdCvij4YEnHylNB9mXXN8ODlqoYgvhVwj+mcej
oeriXFDjPA+/qzv4qaX+sc67JB4KcgNuLIwJqjtSUMVxqycGLFE4+zFYEBDXW1YU
a2+FosMMvppU6bGqPmPKTbR4y7SaHKjtk2xHJOivYLewmqMWTOslHz0LbKc4x4of
eYsLvtf1yKfLOwR06gzouHeCzUNwy709/0CDgv/b8/C5feFOdWRFUf/kdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPk1rGRlEtK9qYEM6WsXQqrtvQHMB8GA1UdIwQY
MBaAFLaBd2LZ/I8RsBz1I0tuQxz77BvNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9GM1l0bjhqeEd3SFBValMyNURIUHZzRzgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xZTYzYTMtYjMwNi00MTNhLWFkZjQt
ZDNmMjY1YWQ1MTRmLzEvdG9GM1l0bjhqeEd3SFBValMyNURIUHZzRzgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xZTYzYTMtYjMwNi00MTNhLWFkZjQtZDNmMjY1YWQ1MTRm
LzEvdG9GM1l0bjhqeEd3SFBValMyNURIUHZzRzgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPucI4Po
9DuDZzmcb9bOfdelQnjQfTVe8Lvm0NaHNSn0eQP4wpq1TcrbEwNGYsQoX20LgI3h
+MV+pevryLx6hW1U39yiQPn9k1gyQpqDyiRH04AkxkTrggzpGdKpAj1bIbc2znW8
C2/RXqPffJxRAg6lTm2dHztRiVxiLwt3T1lcsvuHBeXikmxwDX6efqtQXcbjR2wL
CrKJDikoPfvmOfYysAcgddHGuebGADzO+69yyI/Dm++xKN/D4qDiID0RaHYo0+Je
Lg1ZQCMt0q79M4k0hAxUkQ9JaRdydCQSe8mXBKplY+64UBeVcu5OZ1Ipci6Xcr/M
0YRjAl9VNAtlsw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 06:09:29 2025 by rpki-client