Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: givIMRt/nj2GYefjIdndc93ux5ARveAMbXXvK1/Q3gc=
Subject key identifier: A7:67:A6:7A:5D:AD:2E:58:9B:D9:F9:C5:6D:13:AD:0B:0C:85:5A:B1
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 01988DA18FC179456A91FEE3AB4C55183C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 160A
Signing time: Sat 09 Aug 2025 07:00:32 +0000
Manifest this update: Sat 09 Aug 2025 07:00:32 +0000
Manifest next update: Sun 10 Aug 2025 07:00:32 +0000
Files and hashes: 1: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (hash: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: B7lT4T2KnBCt1slaAknWRAq05k02+F4MlBcR7AbB1QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:8f:c1:79:45:6a:91:fe:e3:ab:4c:55:18:3c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Aug 9 07:00:32 2025 GMT
Not After : Aug 10 07:00:32 2025 GMT
Subject: CN=a767a67a5dad2e589bd9f9c56d13ad0b0c855ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:23:e6:7d:5c:6a:fd:43:df:8d:68:99:22:
a7:9b:3d:f8:99:eb:a8:6e:04:13:7a:98:1d:43:bb:
d1:65:95:00:d5:6e:17:65:6d:3b:98:3d:10:36:44:
98:4b:42:4d:f1:f5:6c:85:34:f8:fa:d8:d5:80:d3:
66:4d:b1:ea:8b:1f:e3:8e:bb:d2:68:54:76:60:5a:
06:5c:69:20:88:9f:92:94:94:07:17:97:79:fd:ed:
57:de:70:e5:75:69:f8:d8:9b:4c:83:aa:32:cb:18:
67:37:32:88:c2:14:48:91:f7:4b:18:88:af:c7:81:
8f:0c:ae:42:e4:8a:42:ec:df:7a:92:e7:7a:b8:19:
b3:c2:dc:e0:97:5d:f7:f4:fc:02:78:99:70:b0:12:
6c:c7:fb:21:72:48:88:0b:19:aa:ad:ac:2d:9c:f5:
84:d1:32:ed:79:8f:62:90:15:16:42:fc:c6:cd:83:
71:9d:7f:c3:94:4b:0e:fa:8f:31:ad:61:b8:53:25:
56:ca:70:54:3e:d9:23:73:47:b4:13:55:60:f0:8f:
cd:e8:5b:46:1f:99:4a:3e:ce:21:d4:f5:01:82:f0:
6e:ac:35:8c:46:0a:6e:40:0b:39:87:19:4b:c5:60:
ec:77:a3:75:6a:71:20:04:a8:a3:ff:be:34:df:ce:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:67:A6:7A:5D:AD:2E:58:9B:D9:F9:C5:6D:13:AD:0B:0C:85:5A:B1
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:71:a5:f1:a4:67:69:a3:da:73:57:2d:85:f6:86:c2:e1:b4:
55:a0:7e:f0:40:ca:bc:90:cb:2e:c5:da:28:45:65:3a:93:38:
00:54:4f:3e:f1:90:64:8c:70:b1:ff:b5:e6:76:be:c0:c8:e0:
be:35:da:94:2b:92:ba:49:92:28:a3:34:f8:d8:5b:45:57:5f:
01:d1:33:d0:6f:20:66:83:62:51:a8:b6:35:61:06:e9:67:7d:
83:f3:99:27:3a:10:0f:c2:43:b2:e9:ac:ea:38:2a:ba:b3:ff:
a7:b7:ba:99:35:27:9c:98:f4:40:77:89:fe:ef:ca:22:be:55:
a3:e7:d0:56:ef:2a:29:4a:21:9f:38:a2:6f:46:aa:2c:40:14:
49:4d:fd:e8:0f:c6:34:ec:13:8f:78:77:4f:b7:fe:f9:dd:43:
fc:00:1a:79:db:6d:6e:db:b5:e1:b9:d2:e0:8b:28:61:b7:13:
d3:9f:81:1b:72:14:59:d4:dd:7b:ac:d7:cd:1a:0b:c9:04:38:
cf:a6:5c:c0:78:26:e7:3e:20:9f:5d:1e:24:2d:95:19:20:7b:
d4:39:c6:41:63:84:ba:49:aa:d9:e8:63:18:73:01:3b:a4:30:
e7:8a:83:78:62:a0:75:82:b7:69:8a:5c:c5:1f:ef:34:7c:68:
25:55:19:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNoY/BeUVqkf7jq0xVGDxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNDA3ZGVhNDk5ZDczZDdlYmQ0ZTY4ODI1MTg4Njg3NTU5
Y2IxZjkwHhcNMjUwODA5MDcwMDMyWhcNMjUwODEwMDcwMDMyWjAzMTEwLwYDVQQD
EyhhNzY3YTY3YTVkYWQyZTU4OWJkOWY5YzU2ZDEzYWQwYjBjODU1YWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE0j5n1cav1D341omSKnmz34meuo
bgQTepgdQ7vRZZUA1W4XZW07mD0QNkSYS0JN8fVshTT4+tjVgNNmTbHqix/jjrvS
aFR2YFoGXGkgiJ+SlJQHF5d5/e1X3nDldWn42JtMg6oyyxhnNzKIwhRIkfdLGIiv
x4GPDK5C5IpC7N96kud6uBmzwtzgl1339PwCeJlwsBJsx/shckiICxmqrawtnPWE
0TLteY9ikBUWQvzGzYNxnX/DlEsO+o8xrWG4UyVWynBUPtkjc0e0E1Vg8I/N6FtG
H5lKPs4h1PUBgvBurDWMRgpuQAs5hxlLxWDsd6N1anEgBKij/740385v3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdnpnpdrS5Ym9n5xW0TrQsMhVqxMB8GA1UdIwQY
MBaAFC9AfepJnXPX69TmiCUYhodVnLH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDct
MTkwMDVjYjk4OTg5LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDctMTkwMDVjYjk4OTg5
LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHGl8aRn
aaPac1cthfaGwuG0VaB+8EDKvJDLLsXaKEVlOpM4AFRPPvGQZIxwsf+15na+wMjg
vjXalCuSukmSKKM0+NhbRVdfAdEz0G8gZoNiUai2NWEG6Wd9g/OZJzoQD8JDsums
6jgqurP/p7e6mTUnnJj0QHeJ/u/KIr5Vo+fQVu8qKUohnziib0aqLEAUSU396A/G
NOwTj3h3T7f++d1D/AAaedttbtu14bnS4IsoYbcT05+BG3IUWdTde6zXzRoLyQQ4
z6ZcwHgm5z4gn10eJC2VGSB71DnGQWOEukmq2ehjGHMBO6Qw54qDeGKgdYK3aYpc
xR/vNHxoJVUZ1w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:07 2025 by rpki-client