Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File: m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier: 1WmKAs+HC6sCMKB3+YS086T6bvOZHB7Ix0u4JuTpP3k=
Subject key identifier: 63:1C:CF:20:3D:3C:B2:F7:02:4D:34:6A:DB:2A:51:9F:61:BB:EF:29
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial: 0198879FC9E9CE8DE7B9273C189CABA2E4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number: 0864
Signing time: Fri 08 Aug 2025 03:00:52 +0000
Manifest this update: Fri 08 Aug 2025 03:00:52 +0000
Manifest next update: Sat 09 Aug 2025 03:00:52 +0000
Files and hashes: 1: 00e-JENKJtNxBi-As1sYUq5EX18.roa (hash: YsSrS2JJTX4eWuRZQoJnhVIIQfCJDpSvv/nCINRxU3I=)
2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: 66Mhb35VNmAhVsRBb6Y+XUZM7v1B0Q7dG7g5w2lrfXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:c9:e9:ce:8d:e7:b9:27:3c:18:9c:ab:a2:e4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Validity
Not Before: Aug 8 03:00:52 2025 GMT
Not After : Aug 9 03:00:52 2025 GMT
Subject: CN=631ccf203d3cb2f7024d346adb2a519f61bbef29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:56:d6:3d:00:10:7b:b8:56:a1:df:56:26:
48:4a:2d:92:18:31:dd:10:03:40:ca:a4:ad:17:ad:
59:5d:30:da:90:01:55:1d:f6:cb:1a:76:f0:e7:f1:
b4:a6:4d:d3:bb:d2:20:7a:e9:d1:56:ed:7e:e5:aa:
ec:35:b0:1b:97:d5:79:be:7a:c8:39:b6:e4:2a:e4:
c5:bc:d3:24:4f:77:6a:f6:63:fb:46:46:a9:74:6b:
77:9f:5f:b5:7b:95:81:88:89:7d:70:10:f8:4d:86:
dc:d4:d2:7e:49:40:25:9b:db:28:ed:67:c3:fd:20:
21:6b:2f:f9:fd:9c:9a:a3:c4:7c:2a:94:54:6e:50:
64:fb:a7:67:5e:01:7f:48:8b:87:cc:cf:75:de:0d:
05:17:8b:cb:64:07:38:29:b8:52:13:85:b5:49:4d:
ae:fd:38:79:8e:4e:41:11:36:29:4b:71:cb:c9:83:
61:18:4b:03:45:63:d0:57:e7:2b:6c:b4:b7:e4:71:
a3:7b:70:4b:e8:6b:d6:1d:50:32:92:ad:d8:01:d7:
1b:ce:a1:09:f9:92:6e:0e:f3:d6:2a:58:b3:1b:fd:
d0:40:f6:19:52:3e:40:87:6d:0e:62:f9:c6:9f:bf:
77:5b:6f:59:80:76:e9:b1:e6:6d:fc:8b:21:c9:81:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1C:CF:20:3D:3C:B2:F7:02:4D:34:6A:DB:2A:51:9F:61:BB:EF:29
X509v3 Authority Key Identifier:
keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:14:5f:0f:ba:a5:20:09:be:17:af:ef:c7:3f:21:a3:25:3e:
c8:ff:c9:d4:1f:21:b9:09:b5:f5:bb:62:78:d4:94:a1:8a:69:
92:4a:f8:46:88:e9:dc:9e:89:08:ff:d5:e7:b2:9d:45:e7:71:
3c:fd:86:75:16:86:78:e6:02:6d:62:f8:3f:ba:d0:4f:b5:4c:
13:29:99:ea:bb:05:74:4d:44:58:6a:78:50:88:07:e5:71:11:
87:71:f4:1b:94:1c:0f:b1:2c:20:00:85:93:bb:e2:3e:b1:66:
3f:fb:84:e7:c2:6b:90:34:be:34:1d:d8:f0:d8:1e:16:ed:1a:
31:c7:7e:a4:a3:bf:21:bb:9e:6e:34:e9:ed:34:f0:f4:c1:34:
d4:c6:67:d2:da:1f:c3:2c:05:f0:bf:c7:06:d3:39:b1:70:28:
59:f3:8c:c0:d7:f3:57:c4:ed:b9:44:65:25:a0:09:21:ad:e4:
95:23:ee:14:51:41:a4:fe:e0:0a:e6:07:0c:c3:b0:d0:0c:e2:
a0:48:7b:cf:75:47:3f:93:73:b0:aa:76:7b:e0:66:f0:11:84:
d2:85:d1:c8:74:28:46:c0:3e:41:d5:8a:ff:dc:0a:43:2d:53:
77:ed:c2:55:4d:29:27:a2:ba:6c:13:f3:00:39:0f:8e:51:6a:
79:c8:b0:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiHn8npzo3nuSc8GJyrouToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNDE1YTAzMDU5ZmIyOTVhNGI5NmM5Y2U1ZWFkYjU4ZmU5
OGZhODYwHhcNMjUwODA4MDMwMDUyWhcNMjUwODA5MDMwMDUyWjAzMTEwLwYDVQQD
Eyg2MzFjY2YyMDNkM2NiMmY3MDI0ZDM0NmFkYjJhNTE5ZjYxYmJlZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYhW1j0AEHu4VqHfViZISi2SGDHd
EANAyqStF61ZXTDakAFVHfbLGnbw5/G0pk3Tu9IgeunRVu1+5arsNbAbl9V5vnrI
ObbkKuTFvNMkT3dq9mP7RkapdGt3n1+1e5WBiIl9cBD4TYbc1NJ+SUAlm9so7WfD
/SAhay/5/Zyao8R8KpRUblBk+6dnXgF/SIuHzM913g0FF4vLZAc4KbhSE4W1SU2u
/Th5jk5BETYpS3HLyYNhGEsDRWPQV+crbLS35HGje3BL6GvWHVAykq3YAdcbzqEJ
+ZJuDvPWKlizG/3QQPYZUj5Ah20OYvnGn793W29ZgHbpseZt/IshyYHFjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMczyA9PLL3Ak00atsqUZ9hu+8pMB8GA1UdIwQY
MBaAFJtBWgMFn7KVpLlsnOXq21j+mPqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NTYxMmEtZGUzMy00MzRiLTg0NzEt
MTgwMWI1NDRiOWZlLzEvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84NTYxMmEtZGUzMy00MzRiLTg0NzEtMTgwMWI1NDRiOWZl
LzEvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBRfD7ql
IAm+F6/vxz8hoyU+yP/J1B8huQm19btieNSUoYppkkr4Rojp3J6JCP/V57KdRedx
PP2GdRaGeOYCbWL4P7rQT7VMEymZ6rsFdE1EWGp4UIgH5XERh3H0G5QcD7EsIACF
k7viPrFmP/uE58JrkDS+NB3Y8NgeFu0aMcd+pKO/IbuebjTp7TTw9ME01MZn0tof
wywF8L/HBtM5sXAoWfOMwNfzV8TtuURlJaAJIa3klSPuFFFBpP7gCuYHDMOw0Azi
oEh7z3VHP5NzsKp2e+Bm8BGE0oXRyHQoRsA+QdWK/9wKQy1Td+3CVU0pJ6K6bBPz
ADkPjlFqeciwhw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:11:19 2025 by rpki-client