Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: PTIROW2nzfRQoPMSZ1W5d5StUlgTL52khpycjHceMgo=
Subject key identifier: 33:85:8E:67:2F:D4:A9:EF:8C:E8:A9:7F:F2:07:4C:3C:DE:86:81:87
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 019883578200FE84DA6DA9ED087911EE3FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 1336
Signing time: Thu 07 Aug 2025 07:03:26 +0000
Manifest this update: Thu 07 Aug 2025 07:03:26 +0000
Manifest next update: Fri 08 Aug 2025 07:03:26 +0000
Files and hashes: 1: 0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa (hash: rLEoAgpILfeLseNAIpfgmASNTffHIHsRIbvYzKEOLhA=)
2: GoeAUL2QksRS16LiLx9M0SmG6h8.roa (hash: Lp7ZvoPe3FFQc8UoBl571bW941fIgYX0UUaKwSRXqLI=)
3: p9gQbHg8IpMtNLW0NQ42q_UAiDc.roa (hash: t3Lsla/WvydRj60ad7MeBwokpBl+kvF1NmkVZ9213jY=)
4: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: nS7t+AzgTFjfN3gxV3ZLVyKpc1olQ+ivwhU9vnMy4LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:57:82:00:fe:84:da:6d:a9:ed:08:79:11:ee:3f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Aug 7 07:03:26 2025 GMT
Not After : Aug 8 07:03:26 2025 GMT
Subject: CN=33858e672fd4a9ef8ce8a97ff2074c3cde868187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:aa:41:e7:4c:31:52:36:1c:e7:68:22:c3:
5f:e5:ee:b8:b3:27:98:fa:38:5e:da:e8:71:3b:4a:
27:e7:e7:3f:9c:2c:65:15:71:b5:58:d2:50:38:39:
ea:d1:df:1b:60:db:de:c0:ca:23:9a:78:a9:a3:70:
d1:33:03:05:6d:93:44:90:a1:bc:11:40:d9:f7:b5:
b5:fc:39:dd:e3:d0:39:49:4b:70:12:2c:d6:b6:9e:
c6:16:9a:6e:c5:9e:01:71:3f:1a:b1:f6:44:64:fe:
9d:63:64:f5:8f:d9:6f:d9:20:12:5f:c6:f2:b4:72:
3c:e6:c7:6f:4e:d4:7c:e3:69:b2:ac:f4:05:de:96:
a2:10:c8:61:48:9b:4f:6b:05:a8:8f:ae:c2:bd:e3:
cb:a7:41:5a:bd:a6:5f:4e:cd:46:1b:4c:f9:03:69:
8f:21:b9:7d:03:de:5c:ec:44:01:3e:c1:3e:ab:5d:
f2:b3:e1:ae:4d:29:23:f5:07:57:e2:58:c4:63:07:
83:d5:bc:4b:96:21:10:52:bf:93:19:2c:d5:17:1c:
7d:f7:67:36:2b:96:41:d2:a9:78:f3:05:59:6c:7d:
b8:25:28:7d:2c:ca:e9:00:ef:ef:1f:93:4b:fb:ee:
d0:0e:39:d8:1c:98:12:18:9a:e4:3e:ab:94:14:bc:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:85:8E:67:2F:D4:A9:EF:8C:E8:A9:7F:F2:07:4C:3C:DE:86:81:87
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:97:96:61:a2:83:14:23:d1:57:70:59:0b:dd:3d:54:04:5f:
e4:13:92:17:3e:26:9e:51:75:7b:99:8d:c7:05:c6:9b:39:37:
d5:43:ec:1c:7f:ef:d7:45:11:93:67:c2:5d:34:bc:d1:a0:c9:
01:e8:1d:1c:3b:00:bb:50:8b:3d:cc:2f:c5:3f:1e:a7:2a:84:
93:d4:de:1f:15:9c:be:4c:56:ce:4f:4b:df:e9:d9:53:cd:18:
6f:ab:5c:0f:3c:72:7d:dd:f7:04:7f:59:6b:4f:76:81:a6:eb:
f5:f4:44:95:f1:5d:d6:95:41:b7:1b:20:ab:06:6c:26:1b:76:
d9:19:d9:db:0a:db:f5:91:a6:86:5b:83:91:4b:a8:01:15:57:
c5:8d:35:d6:f7:bd:78:86:2d:33:66:13:b2:9d:ce:47:25:0e:
73:12:5f:de:37:3c:3b:1d:44:11:a4:ef:48:2b:f0:6b:fc:dd:
c5:61:3a:0f:62:38:10:8b:59:99:41:13:53:c0:ac:67:ed:7a:
8b:c4:48:6e:fc:66:f5:eb:db:4e:21:13:ce:cb:8d:e9:7a:60:
b3:61:92:d4:ee:c9:d9:7e:66:66:02:7e:58:fd:6e:a2:2d:f7:
65:58:dd:30:5f:c6:ec:74:06:57:14:86:72:21:06:73:6a:f0:
95:8c:c3:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDV4IA/oTabantCHkR7j+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMGY1YTliZDJhZDFlOTY4NjVmMDBkMDg1MjJiOWFhZDNl
OTFhNGQwHhcNMjUwODA3MDcwMzI2WhcNMjUwODA4MDcwMzI2WjAzMTEwLwYDVQQD
EygzMzg1OGU2NzJmZDRhOWVmOGNlOGE5N2ZmMjA3NGMzY2RlODY4MTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzmqQedMMVI2HOdoIsNf5e64syeY
+jhe2uhxO0on5+c/nCxlFXG1WNJQODnq0d8bYNvewMojmnipo3DRMwMFbZNEkKG8
EUDZ97W1/Dnd49A5SUtwEizWtp7GFppuxZ4BcT8asfZEZP6dY2T1j9lv2SASX8by
tHI85sdvTtR842myrPQF3paiEMhhSJtPawWoj67CvePLp0FavaZfTs1GG0z5A2mP
Ibl9A95c7EQBPsE+q13ys+GuTSkj9QdX4ljEYweD1bxLliEQUr+TGSzVFxx992c2
K5ZB0ql48wVZbH24JSh9LMrpAO/vH5NL++7QDjnYHJgSGJrkPquUFLw7lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOFjmcv1KnvjOipf/IHTDzehoGHMB8GA1UdIwQY
MBaAFK8PWpvSrR6Whl8A0IUiuarT6RpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAt
M2FjM2I2NzM3MDQyLzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAtM2FjM2I2NzM3MDQy
LzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZeWYaKD
FCPRV3BZC909VARf5BOSFz4mnlF1e5mNxwXGmzk31UPsHH/v10URk2fCXTS80aDJ
AegdHDsAu1CLPcwvxT8epyqEk9TeHxWcvkxWzk9L3+nZU80Yb6tcDzxyfd33BH9Z
a092gabr9fRElfFd1pVBtxsgqwZsJht22RnZ2wrb9ZGmhluDkUuoARVXxY011ve9
eIYtM2YTsp3ORyUOcxJf3jc8Ox1EEaTvSCvwa/zdxWE6D2I4EItZmUETU8CsZ+16
i8RIbvxm9evbTiETzsuN6Xpgs2GS1O7J2X5mZgJ+WP1uoi33ZVjdMF/G7HQGVxSG
ciEGc2rwlYzDJA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 12:58:18 2025 by rpki-client