Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier: TqT9fV+NpTjb3xwqRjy7qC4kYlgz9Yfefquc4dkDDLM=
Subject key identifier: 48:61:B7:E8:D5:84:80:F7:4B:55:F2:90:97:14:EC:32:39:ED:34:4F
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 0198756274EF2D1B6F2B8F06642C1AB3B6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number: 0CED
Signing time: Mon 04 Aug 2025 14:00:43 +0000
Manifest this update: Mon 04 Aug 2025 14:00:43 +0000
Manifest next update: Tue 05 Aug 2025 14:00:43 +0000
Files and hashes: 1: Puy-0P_jBepIb5u3SpvEh4v47j8.roa (hash: ZN41z34tLWoaRsScijTCdX/mIzcEneubj96rKehXEgw=)
2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: RJAhPA0xEjLkhk059P/eKgbmp0iC2jy0XQ051hubQyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:74:ef:2d:1b:6f:2b:8f:06:64:2c:1a:b3:b6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Aug 4 14:00:43 2025 GMT
Not After : Aug 5 14:00:43 2025 GMT
Subject: CN=4861b7e8d58480f74b55f2909714ec3239ed344f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:f7:8f:5a:2c:25:78:39:f2:0f:ce:4e:34:
a0:6e:25:68:f0:f2:ea:15:30:cc:0e:6b:07:d9:0b:
32:fc:a6:50:88:d6:48:42:1a:4f:ad:12:c9:41:c2:
48:e2:14:1f:bd:19:e5:70:47:59:dc:f0:78:49:f4:
c9:97:dd:a1:da:5e:57:2f:3d:60:5f:79:30:d3:54:
b0:86:8d:f3:fc:ce:30:0e:72:9a:0e:bd:ca:7a:a2:
aa:ea:46:2a:f2:08:71:14:06:a0:ef:cb:b5:65:5f:
da:04:de:d1:70:8d:41:58:c3:ea:1e:fe:c2:53:ef:
3c:fa:e9:dc:fd:5d:20:43:b6:b7:05:1b:f7:60:3b:
5a:21:9b:02:b2:43:45:dd:47:6e:16:68:29:ca:02:
5d:de:7a:1d:06:ea:e1:02:e1:b7:fb:fb:4d:23:c9:
82:7e:04:4e:e6:93:6d:35:d9:74:4a:66:f1:2a:68:
a7:7e:f8:7a:d0:90:a6:c9:4b:42:26:5b:2b:6f:8d:
bd:9a:3e:db:df:5e:f5:32:80:3b:72:88:4a:2a:2a:
06:a8:ac:21:30:2f:ab:33:88:8a:d9:c8:99:a8:e3:
a1:b3:d1:91:6a:70:fb:4b:c8:72:eb:85:df:18:c7:
97:d9:20:18:4c:69:bc:92:8f:73:0c:71:de:8f:f4:
aa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:61:B7:E8:D5:84:80:F7:4B:55:F2:90:97:14:EC:32:39:ED:34:4F
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0e:8e:28:2d:07:5e:ce:10:ef:34:a1:4f:67:fe:d8:e0:ef:
17:55:1a:09:e4:8d:4c:56:55:17:28:d3:ab:48:eb:97:75:a2:
5c:89:47:67:3f:c1:b6:66:ca:3e:dd:6b:5b:ce:a4:be:eb:7a:
94:3a:04:38:2d:80:24:cc:94:b7:85:78:65:91:07:1f:31:dc:
11:97:76:c2:2e:ef:cc:44:ad:e2:92:ad:47:73:b4:c4:56:8c:
da:05:1a:4c:61:cf:c4:ed:68:35:8b:33:e0:55:a2:48:28:d1:
d8:ec:80:98:65:ad:cd:35:de:ce:dd:b5:f5:05:eb:5d:df:4e:
c5:5d:45:4b:1c:16:bf:c4:0d:87:e7:b7:63:b8:50:28:1e:d1:
bb:f6:ce:04:18:c7:0e:80:06:71:0b:70:41:09:cf:40:84:75:
9b:d7:03:4f:a8:28:18:b1:4c:6b:d0:1f:bf:12:6e:3f:42:56:
08:ec:f5:b8:c8:0b:08:7a:64:f4:f1:0c:f7:5a:72:03:42:db:
a4:70:07:6c:63:06:1c:e6:13:51:01:e1:95:ca:72:7b:3b:af:
a0:27:89:c5:80:87:24:9a:75:ad:c1:dc:79:84:53:54:4c:c8:
8c:22:27:88:26:02:da:36:a8:4b:94:6e:f8:7e:ec:f0:4b:ea:
cf:2f:c3:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1YnTvLRtvK48GZCwas7b1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzA3ZTc3NjczMGMyYzJlY2JhNmI5ZWU5NTcyMTJhZDU4
ZDVjZGIwHhcNMjUwODA0MTQwMDQzWhcNMjUwODA1MTQwMDQzWjAzMTEwLwYDVQQD
Eyg0ODYxYjdlOGQ1ODQ4MGY3NGI1NWYyOTA5NzE0ZWMzMjM5ZWQzNDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYH3j1osJXg58g/OTjSgbiVo8PLq
FTDMDmsH2Qsy/KZQiNZIQhpPrRLJQcJI4hQfvRnlcEdZ3PB4SfTJl92h2l5XLz1g
X3kw01Swho3z/M4wDnKaDr3KeqKq6kYq8ghxFAag78u1ZV/aBN7RcI1BWMPqHv7C
U+88+unc/V0gQ7a3BRv3YDtaIZsCskNF3UduFmgpygJd3nodBurhAuG3+/tNI8mC
fgRO5pNtNdl0SmbxKminfvh60JCmyUtCJlsrb429mj7b3171MoA7cohKKioGqKwh
MC+rM4iK2ciZqOOhs9GRanD7S8hy64XfGMeX2SAYTGm8ko9zDHHej/SqpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhht+jVhID3S1XykJcU7DI57TRPMB8GA1UdIwQY
MBaAFP5wfndnMMLC7LprnulXISrVjVzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGIt
ODcxNTQwMzMwODU5LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGItODcxNTQwMzMwODU5
LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIg6OKC0H
Xs4Q7zShT2f+2ODvF1UaCeSNTFZVFyjTq0jrl3WiXIlHZz/BtmbKPt1rW86kvut6
lDoEOC2AJMyUt4V4ZZEHHzHcEZd2wi7vzESt4pKtR3O0xFaM2gUaTGHPxO1oNYsz
4FWiSCjR2OyAmGWtzTXezt219QXrXd9OxV1FSxwWv8QNh+e3Y7hQKB7Ru/bOBBjH
DoAGcQtwQQnPQIR1m9cDT6goGLFMa9AfvxJuP0JWCOz1uMgLCHpk9PEM91pyA0Lb
pHAHbGMGHOYTUQHhlcpyezuvoCeJxYCHJJp1rcHceYRTVEzIjCIniCYC2jaoS5Ru
+H7s8Evqzy/Dfw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:59:59 2025 by rpki-client