Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: OqxdjRa1IO6DGEhofCyTKhALwz5oWK3M8YZYGYjeaUw=
Subject key identifier: 9A:B4:ED:7D:22:9C:3E:C5:B9:A7:6D:3D:95:97:21:01:01:C1:86:2F
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 0198793F4D3D7DA96FF3675324E18F5ED7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 0E48
Signing time: Tue 05 Aug 2025 08:00:48 +0000
Manifest this update: Tue 05 Aug 2025 08:00:48 +0000
Manifest next update: Wed 06 Aug 2025 08:00:48 +0000
Files and hashes: 1: B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa (hash: qvvp5nQI7KpPFAu+iSrl9WmgfsagnJRM0T+yv2PLO1U=)
2: MyfnN7_GeDEIFOv2Po3D--A0qr4.roa (hash: Q+ck4wNBk8gHUXF8i3xSK2P0e3p9/YGq6s+8125aWKo=)
3: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: cKMY1O5FZ6VyDb+m6AlD95CwbD9FLZpwrF6o3lUeJII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:3f:4d:3d:7d:a9:6f:f3:67:53:24:e1:8f:5e:d7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Aug 5 08:00:48 2025 GMT
Not After : Aug 6 08:00:48 2025 GMT
Subject: CN=9ab4ed7d229c3ec5b9a76d3d9597210101c1862f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:b4:40:34:35:f4:72:d3:ca:88:55:2f:43:
fc:be:ae:d7:84:41:61:14:a5:b9:7d:89:db:f0:d6:
3e:b4:2f:38:58:2c:98:08:62:96:81:98:3f:f5:76:
25:c5:02:79:44:e0:a2:67:26:60:16:b1:46:4d:1e:
bd:c7:ba:21:a3:56:ee:b8:e4:76:2b:60:13:8b:73:
10:b2:77:06:57:ba:81:75:38:2c:a8:ea:3a:02:c5:
ab:b7:14:c1:20:83:ff:97:cc:09:f4:ee:63:28:32:
7f:ff:6f:71:8a:f1:2c:48:71:b3:bb:53:3d:4e:79:
79:38:20:e4:44:c4:2d:d1:a3:dd:97:98:29:46:36:
bf:c1:a0:58:b9:0c:0b:70:57:90:57:db:36:fe:9a:
21:2b:f4:2f:5a:99:1e:a3:b3:5b:aa:ba:9f:5d:4b:
30:6a:dd:2a:9c:01:53:d2:59:15:30:7d:e7:8f:96:
21:3a:8a:7f:70:46:61:4c:8b:4d:8f:bb:ee:77:20:
b6:85:c9:a3:3b:1f:ca:ee:b2:2d:21:9f:34:70:84:
3f:26:c5:e6:0c:e0:c1:35:08:54:1a:e4:0b:f1:d8:
99:71:9c:23:58:f3:b0:ea:0b:46:52:7f:29:25:77:
50:4e:aa:83:31:9f:3f:81:e1:0f:10:04:7d:27:71:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B4:ED:7D:22:9C:3E:C5:B9:A7:6D:3D:95:97:21:01:01:C1:86:2F
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f9:a7:b7:a9:0a:33:6d:a4:57:21:24:82:95:5c:5d:96:3a:
c5:82:57:dc:32:f3:2e:35:4a:60:b6:d8:b8:9c:97:e5:67:91:
47:a8:27:20:d7:d6:9d:3a:27:3f:47:12:4c:fd:e0:2f:28:5e:
c5:09:50:f2:33:00:fb:70:14:32:36:1b:cc:22:b0:d2:6d:61:
3a:d6:e9:26:db:a9:c5:d3:62:a3:22:15:59:64:c5:27:f1:c9:
cd:57:cc:44:2d:b5:21:02:ec:62:ed:6e:c2:18:23:cc:68:69:
b3:30:10:59:d5:b4:8f:6d:05:34:d6:97:01:d9:e6:4d:30:cf:
5e:a8:c1:ef:b5:d5:66:9d:c3:b3:ea:ab:90:a9:43:c0:3e:be:
f6:ad:0d:3a:b4:4d:f9:96:42:b6:54:24:df:35:28:b1:be:d9:
6b:a6:e9:3c:06:3e:ad:b7:58:32:8f:4c:d8:f3:aa:fe:3c:12:
f3:cf:cb:c4:a7:cf:4f:1e:47:a3:0a:54:29:1d:a6:b8:26:a4:
26:ad:6c:d6:54:25:4a:1b:63:80:a7:db:20:8f:40:9f:53:3a:
71:7f:30:e0:37:ad:9f:b3:14:fa:e8:7b:f9:0f:e6:52:2b:17:
c4:0f:21:c9:a8:61:8d:8c:27:12:df:57:b8:d9:12:4d:58:0f:
7b:df:cf:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5P009falv82dTJOGPXtfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzY2JkMTQ3NzA0NGEwMzQwNGM3ZmM0Mzk2MWMyYzgzYmJh
NzViYmMwHhcNMjUwODA1MDgwMDQ4WhcNMjUwODA2MDgwMDQ4WjAzMTEwLwYDVQQD
Eyg5YWI0ZWQ3ZDIyOWMzZWM1YjlhNzZkM2Q5NTk3MjEwMTAxYzE4NjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOO0QDQ19HLTyohVL0P8vq7XhEFh
FKW5fYnb8NY+tC84WCyYCGKWgZg/9XYlxQJ5ROCiZyZgFrFGTR69x7oho1buuOR2
K2ATi3MQsncGV7qBdTgsqOo6AsWrtxTBIIP/l8wJ9O5jKDJ//29xivEsSHGzu1M9
Tnl5OCDkRMQt0aPdl5gpRja/waBYuQwLcFeQV9s2/pohK/QvWpkeo7NbqrqfXUsw
at0qnAFT0lkVMH3nj5YhOop/cEZhTItNj7vudyC2hcmjOx/K7rItIZ80cIQ/JsXm
DODBNQhUGuQL8diZcZwjWPOw6gtGUn8pJXdQTqqDMZ8/geEPEAR9J3GECwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJq07X0inD7FuadtPZWXIQEBwYYvMB8GA1UdIwQY
MBaAFFPL0UdwRKA0BMf8Q5YcLIO7p1u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kY2U0NGEtNGE5MC00M2VhLWIxZmIt
YTJkMTE2NTYwYWNhLzEvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kY2U0NGEtNGE5MC00M2VhLWIxZmItYTJkMTE2NTYwYWNh
LzEvVTh2UlIzQkVvRFFFeF94RGxod3NnN3VuVzd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/mnt6kK
M22kVyEkgpVcXZY6xYJX3DLzLjVKYLbYuJyX5WeRR6gnINfWnTonP0cSTP3gLyhe
xQlQ8jMA+3AUMjYbzCKw0m1hOtbpJtupxdNioyIVWWTFJ/HJzVfMRC21IQLsYu1u
whgjzGhpszAQWdW0j20FNNaXAdnmTTDPXqjB77XVZp3Ds+qrkKlDwD6+9q0NOrRN
+ZZCtlQk3zUosb7Za6bpPAY+rbdYMo9M2POq/jwS88/LxKfPTx5HowpUKR2muCak
Jq1s1lQlShtjgKfbII9An1M6cX8w4Detn7MU+uh7+Q/mUisXxA8hyahhjYwnEt9X
uNkSTVgPe9/P6g==
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:49:44 2025 by rpki-client