Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: vqWPkkODPclkVQxAzHFDIqpyWqLLFZdxlIyFsVZXTrM=
Subject key identifier: E9:BC:40:59:4E:47:37:21:E2:CA:F8:27:89:A6:C3:E5:17:37:EF:E6
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 01987F0ABE98830D01E5ABF0A9D94FC729DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 05BC
Signing time: Wed 06 Aug 2025 11:01:07 +0000
Manifest this update: Wed 06 Aug 2025 11:01:07 +0000
Manifest next update: Thu 07 Aug 2025 11:01:07 +0000
Files and hashes: 1: 91Ml2kQH8w2tLiMLT6Fbcu6KSJM.roa (hash: EmTDmBXIKNOaEr2bWKxBRH3EXyiQ1ZJtO/knk/QxnbE=)
2: OI1uK9LvyBYMrxZk6Wtsms4rrxQ.roa (hash: r4xm6yQr/cgOXWzX1uA52pwqnclq3721sVsfso5FXPI=)
3: RuN1CEEKgWM9o41cCPWtfZFuKKk.roa (hash: KY9kNkQ0Sz03RyPbQ91gb1ujhJwFYP1J5IWur4t9itw=)
4: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=)
5: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: DlmzMQpD/hAfQyUMWyrDbQlj8+Wp9K+oqT47n7GpNMw=)
6: iw9kNkv-dkyYtEoLjtCHmwGGJs0.roa (hash: WAVrCgR0Lig7wZih5a6i+wCsRj3CJZHI3ntVJTN6GcM=)
7: jEuhOWOO-QlWKQlP_vQxpSPLQb4.roa (hash: T76BJeDOcF7APO1x6/gqGhi/5iskR6Zu3KBZKjePpuU=)
8: m07e6_Z6kS56JVFoiRbJDvuGsTk.roa (hash: VoYIwiaKUUQlxS0/2rdwETdn1uq8+mUfKc36O3nLq/M=)
9: w065yF2KMBb9aVnQ4BfNT-qmTRU.roa (hash: jJgjEmmyXXQf+/0rV+v9URt/GJe8fT1hRfQv43u3dw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:be:98:83:0d:01:e5:ab:f0:a9:d9:4f:c7:29:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Aug 6 11:01:07 2025 GMT
Not After : Aug 7 11:01:07 2025 GMT
Subject: CN=e9bc40594e473721e2caf82789a6c3e51737efe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:36:2d:9e:05:46:5c:ad:23:07:78:21:12:
92:2c:32:78:75:78:e0:72:47:10:9d:93:6b:45:b9:
12:95:af:d7:9c:57:a7:d0:20:6f:d4:db:ab:e9:85:
2c:be:11:44:60:da:33:c5:e1:bf:aa:f2:03:12:e9:
83:00:0a:8a:29:53:27:1f:60:45:7d:17:f7:8e:bb:
07:3a:83:0a:18:7b:59:ef:18:b8:b5:db:bd:e3:18:
a3:a9:47:9c:8d:0a:a2:c6:fc:2f:d5:ed:24:19:0e:
fe:85:d3:f5:c9:ad:f0:e7:92:e5:e6:8f:92:b9:04:
03:b8:d5:1a:f4:13:1c:d6:50:16:96:40:03:8e:8f:
89:0b:7d:b2:31:a0:6c:d3:56:fe:b5:a8:38:98:94:
e6:c2:1f:f4:ee:c5:5b:41:50:5a:bb:9a:b2:8d:17:
ed:ed:8a:f0:4f:ce:db:cf:f2:8a:7b:95:7e:fb:af:
48:c8:68:ae:1f:44:df:f1:99:f7:bb:a8:aa:19:4b:
d3:e4:9e:24:65:33:22:52:4d:93:28:bd:58:34:b1:
72:33:7a:02:13:8b:ee:11:0b:75:63:eb:ff:3e:ce:
a2:06:9f:2d:70:61:6a:bc:05:bd:88:33:e3:cd:7e:
74:63:19:75:2e:ad:d0:bc:f8:64:88:27:95:2e:50:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:40:59:4E:47:37:21:E2:CA:F8:27:89:A6:C3:E5:17:37:EF:E6
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f4:44:cf:e7:89:84:52:9f:83:67:74:25:65:9b:9e:09:ab:
3d:de:fe:32:9d:0a:7d:ec:92:87:cb:de:1e:61:af:d4:0d:c3:
34:f9:56:14:67:cb:ee:2c:45:7d:81:de:07:de:3a:bc:91:af:
33:f0:19:1f:4e:d2:97:a6:a1:ca:96:b3:9b:2d:7a:5e:7c:1b:
d0:fc:c1:b7:de:f8:23:a6:e1:3a:fb:a1:12:4d:80:0a:f8:51:
a5:b4:cf:03:81:f9:fa:72:26:12:da:42:a5:4f:ce:60:68:6e:
07:52:fd:2d:24:5c:b8:34:26:05:55:cc:8d:df:da:c4:48:c1:
67:9a:b7:b0:40:1f:64:2c:1a:ca:7e:4a:94:02:2d:ae:f0:38:
cf:b6:29:93:f8:6d:9e:0a:f3:01:e8:29:bb:e5:97:f9:e9:1b:
6f:6b:e0:e8:80:d6:81:4b:81:df:78:8e:83:bc:9e:fd:9b:7f:
72:a2:76:dc:71:4e:e5:2b:ea:b9:81:82:e8:c2:06:e4:bf:f1:
36:ca:8c:fc:51:60:76:90:24:ae:57:89:f9:0a:c5:04:c1:a0:
82:14:31:cb:a7:a5:83:30:72:2d:8e:dc:4e:25:b1:ea:ee:11:
6e:6b:a2:ad:6d:81:a3:f8:c0:8e:e2:73:50:ee:92:bd:05:55:
55:ab:a1:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/Cr6Ygw0B5avwqdlPxynfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw
ZTY5MWQwHhcNMjUwODA2MTEwMTA3WhcNMjUwODA3MTEwMTA3WjAzMTEwLwYDVQQD
EyhlOWJjNDA1OTRlNDczNzIxZTJjYWY4Mjc4OWE2YzNlNTE3MzdlZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXE2LZ4FRlytIwd4IRKSLDJ4dXjg
ckcQnZNrRbkSla/XnFen0CBv1Nur6YUsvhFEYNozxeG/qvIDEumDAAqKKVMnH2BF
fRf3jrsHOoMKGHtZ7xi4tdu94xijqUecjQqixvwv1e0kGQ7+hdP1ya3w55Ll5o+S
uQQDuNUa9BMc1lAWlkADjo+JC32yMaBs01b+tag4mJTmwh/07sVbQVBau5qyjRft
7YrwT87bz/KKe5V++69IyGiuH0Tf8Zn3u6iqGUvT5J4kZTMiUk2TKL1YNLFyM3oC
E4vuEQt1Y+v/Ps6iBp8tcGFqvAW9iDPjzX50Yxl1Lq3QvPhkiCeVLlA14wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOm8QFlORzch4sr4J4mmw+UXN+/mMB8GA1UdIwQY
MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt
MTk3NjlmNTc4ZWZkLzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk
LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/REz+eJ
hFKfg2d0JWWbngmrPd7+Mp0KfeySh8veHmGv1A3DNPlWFGfL7ixFfYHeB946vJGv
M/AZH07Sl6ahypazmy16Xnwb0PzBt974I6bhOvuhEk2ACvhRpbTPA4H5+nImEtpC
pU/OYGhuB1L9LSRcuDQmBVXMjd/axEjBZ5q3sEAfZCwayn5KlAItrvA4z7Ypk/ht
ngrzAegpu+WX+ekbb2vg6IDWgUuB33iOg7ye/Zt/cqJ23HFO5SvquYGC6MIG5L/x
NsqM/FFgdpAkrleJ+QrFBMGgghQxy6elgzByLY7cTiWx6u4RbmuirW2Bo/jAjuJz
UO6SvQVVVauhCA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:25:01 2025 by rpki-client