Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
File: v3rjZp-Ef6J6abFLuH-Me_15nuA.mft (raw, json)
Hash identifier: CLLqqrzB97bUgO4YWTpAQ/WXwL6MLocMjocgsd8PYBs=
Subject key identifier: FD:5E:B1:D7:20:9F:75:B0:FD:32:0A:BC:5D:AA:31:7F:50:0B:70:F7
Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Certificate issuer: /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Certificate serial: 01988F2296F72D72337978E2451BBB7A7A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
Manifest number: 0D9A
Signing time: Sat 09 Aug 2025 14:01:05 +0000
Manifest this update: Sat 09 Aug 2025 14:01:05 +0000
Manifest next update: Sun 10 Aug 2025 14:01:05 +0000
Files and hashes: 1: Z6k4PVUyfZNvtBW6nB5nR2R0amg.roa (hash: gFgurKpY3RWD/+pqzWGTie0De0tX7ossY01q+RXg6WE=)
2: v3rjZp-Ef6J6abFLuH-Me_15nuA.crl (hash: wG3n9OEYokZmQ+D6xV2DmDMm9T9TeTvk+AUNUuQI5NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:96:f7:2d:72:33:79:78:e2:45:1b:bb:7a:7a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Validity
Not Before: Aug 9 14:01:05 2025 GMT
Not After : Aug 10 14:01:05 2025 GMT
Subject: CN=fd5eb1d7209f75b0fd320abc5daa317f500b70f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6e:e8:80:38:35:fa:d9:28:44:ab:38:7b:21:
f6:65:46:04:10:08:ca:9d:0d:be:03:12:34:ec:02:
ad:46:8a:73:78:b7:e4:da:eb:bd:30:d0:d2:c4:ef:
fd:c3:9b:ea:e0:35:0c:57:86:9d:bc:c2:74:96:4e:
56:97:82:4a:99:b9:bb:a1:66:48:39:aa:f1:28:86:
07:a3:4a:55:e8:5e:24:1c:b2:de:ff:47:e7:02:6f:
95:be:33:5e:25:27:1c:70:2b:9e:f1:e6:67:b2:ea:
71:de:b2:94:fb:f5:02:77:43:96:a2:03:06:7d:c2:
7f:8e:13:1d:44:39:04:66:1c:56:65:84:3d:f2:e0:
00:7f:5b:57:8c:19:f2:0c:8c:1f:57:a3:94:fa:08:
5e:96:e4:7c:18:8e:e1:04:72:01:82:8b:67:ab:9a:
63:a1:f0:fc:81:01:a8:59:61:44:0b:37:39:ec:6e:
1a:33:69:12:55:ca:e8:34:eb:3f:c4:73:3e:f2:13:
88:ee:26:42:fa:ea:1a:e2:11:3d:be:e5:33:5c:e4:
57:41:20:a9:61:96:62:69:ae:ec:d5:35:00:79:aa:
8c:be:6f:b7:c3:86:cd:49:92:34:b1:a2:9a:e8:22:
eb:9b:c6:86:0e:9a:0b:b2:f4:2b:fa:86:04:ae:dd:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5E:B1:D7:20:9F:75:B0:FD:32:0A:BC:5D:AA:31:7F:50:0B:70:F7
X509v3 Authority Key Identifier:
keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0b:ae:e6:37:c0:bb:c0:42:84:79:bc:c9:de:2c:51:c2:e5:
0c:f2:78:8f:75:34:32:15:7a:71:4d:c3:6d:94:cd:2d:2f:03:
85:46:e0:b4:d7:95:b7:30:e6:45:0d:fb:e7:34:76:47:b9:12:
4a:f2:41:64:3a:21:3a:98:07:75:c3:cc:37:cd:66:06:ce:be:
3b:db:68:f0:d5:30:31:08:68:52:fe:2f:d9:80:e0:5e:3d:10:
4b:b9:1d:9b:6c:e6:4d:46:82:ea:82:b6:28:e4:ab:56:34:e6:
ff:3e:fc:49:48:4c:be:99:e6:5c:e4:94:bf:a4:97:ce:7f:f4:
21:31:0b:05:85:d5:96:b4:77:04:d7:d3:a4:57:32:49:15:4c:
6f:8c:01:90:81:8b:7c:fc:f0:80:14:a9:eb:50:14:40:fd:bc:
1b:7d:1d:22:0f:ec:f9:cf:db:32:1b:62:d2:40:72:9c:b7:62:
0f:6e:2a:f2:d5:ea:ae:97:d7:37:bf:32:89:a4:c8:28:80:ea:
60:63:9b:fb:87:90:f7:ec:9f:01:47:fd:41:65:ea:d0:b5:be:
76:4c:f8:d1:45:e6:09:06:ab:f7:0d:e5:d2:74:70:46:f3:3b:
92:53:d9:13:63:2d:15:0c:2e:aa:e6:20:55:2c:d4:92:19:56:
aa:8a:2b:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPIpb3LXIzeXjiRRu7enqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmN2FlMzY2OWY4NDdmYTI3YTY5YjE0YmI4N2Y4YzdiZmQ3
OTllZTAwHhcNMjUwODA5MTQwMTA1WhcNMjUwODEwMTQwMTA1WjAzMTEwLwYDVQQD
EyhmZDVlYjFkNzIwOWY3NWIwZmQzMjBhYmM1ZGFhMzE3ZjUwMGI3MGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6m7ogDg1+tkoRKs4eyH2ZUYEEAjK
nQ2+AxI07AKtRopzeLfk2uu9MNDSxO/9w5vq4DUMV4advMJ0lk5Wl4JKmbm7oWZI
OarxKIYHo0pV6F4kHLLe/0fnAm+VvjNeJScccCue8eZnsupx3rKU+/UCd0OWogMG
fcJ/jhMdRDkEZhxWZYQ98uAAf1tXjBnyDIwfV6OU+gheluR8GI7hBHIBgotnq5pj
ofD8gQGoWWFECzc57G4aM2kSVcroNOs/xHM+8hOI7iZC+uoa4hE9vuUzXORXQSCp
YZZiaa7s1TUAeaqMvm+3w4bNSZI0saKa6CLrm8aGDpoLsvQr+oYErt2PDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1esdcgn3Ww/TIKvF2qMX9QC3D3MB8GA1UdIwQY
MBaAFL9642afhH+iemmxS7h/jHv9eZ7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjNyalpwLUVmNko2YWJGTHVILU1lXzE1bnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zNDkzZjYtOTYzNi00ZmEzLWJlNTYt
ZGI4MDMwODc5ZjUxLzEvdjNyalpwLUVmNko2YWJGTHVILU1lXzE1bnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8zNDkzZjYtOTYzNi00ZmEzLWJlNTYtZGI4MDMwODc5ZjUx
LzEvdjNyalpwLUVmNko2YWJGTHVILU1lXzE1bnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwuu5jfA
u8BChHm8yd4sUcLlDPJ4j3U0MhV6cU3DbZTNLS8DhUbgtNeVtzDmRQ375zR2R7kS
SvJBZDohOpgHdcPMN81mBs6+O9to8NUwMQhoUv4v2YDgXj0QS7kdm2zmTUaC6oK2
KOSrVjTm/z78SUhMvpnmXOSUv6SXzn/0ITELBYXVlrR3BNfTpFcySRVMb4wBkIGL
fPzwgBSp61AUQP28G30dIg/s+c/bMhti0kBynLdiD24q8tXqrpfXN78yiaTIKIDq
YGOb+4eQ9+yfAUf9QWXq0LW+dkz40UXmCQar9w3l0nRwRvM7klPZE2MtFQwuquYg
VSzUkhlWqoorAw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:40:52 2025 by rpki-client