Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: bfblJQiLIkE4NjR7Udb+Kf/FqFxHIEyi5ZAIY+Do8uE=
Subject key identifier: 58:37:F2:C2:A5:73:FA:56:19:00:FC:73:E9:F1:AA:BD:F8:05:90:3D
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 0198D65F9F4C9806A5A0B4584EEB237EDD0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 03DB
Signing time: Sat 23 Aug 2025 10:00:47 +0000
Manifest this update: Sat 23 Aug 2025 10:00:47 +0000
Manifest next update: Sun 24 Aug 2025 10:00:47 +0000
Files and hashes: 1: RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa (hash: N00rEgshheQJFJlnzMgkGFoydAhTWl79InbpFappf/8=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: 7k+T3MtaJutFV4HNCTrYBelTzhQTW/2q0NzXiRJ6Fz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9f:4c:98:06:a5:a0:b4:58:4e:eb:23:7e:dd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Aug 23 10:00:47 2025 GMT
Not After : Aug 24 10:00:47 2025 GMT
Subject: CN=5837f2c2a573fa561900fc73e9f1aabdf805903d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:bc:38:19:ba:48:02:b8:4f:53:b1:ae:41:
83:85:7a:af:3b:bf:d2:7c:fc:e8:f9:b8:29:25:a4:
04:e4:da:ee:d3:22:41:f0:02:b6:34:e6:c9:92:22:
12:90:f1:42:90:cf:04:79:5b:23:55:4e:cb:ac:6d:
f9:71:9d:a9:de:21:92:53:fb:0e:af:29:5f:80:71:
c8:3a:e3:40:b5:76:ea:83:95:95:48:e3:c9:77:71:
60:27:8e:5c:93:ca:34:6e:85:6e:93:41:e4:a1:c3:
b0:3c:37:a5:30:80:1f:1b:2c:75:42:0f:7d:06:72:
7d:fc:b3:dd:fd:ed:94:09:da:a3:d5:5e:c1:8a:1f:
9d:33:62:74:9a:be:a9:bb:80:92:48:31:5e:c8:d8:
47:09:de:d6:50:ab:b1:6e:4d:17:15:bc:0e:b1:eb:
16:f3:e9:c0:25:1c:18:b1:39:9e:e0:e5:5a:0d:48:
1a:40:92:a9:fa:20:4a:11:ba:6b:9d:ba:51:2c:93:
69:15:79:87:bc:56:c0:7d:e0:2f:86:62:34:b1:b7:
b9:af:29:b2:fa:30:e9:54:6e:8e:94:11:37:f7:23:
ed:dc:93:93:7d:7f:9f:00:1b:68:71:16:7e:03:56:
5e:9b:68:80:91:5a:01:54:04:10:72:f1:24:db:18:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:37:F2:C2:A5:73:FA:56:19:00:FC:73:E9:F1:AA:BD:F8:05:90:3D
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ec:03:24:6d:5d:23:d0:94:1d:4a:42:fe:6d:4c:27:3c:c2:
ec:8c:b9:bc:aa:83:db:cc:6c:1c:6e:a2:5c:fb:4b:bb:95:22:
84:26:64:01:8c:29:d7:44:f3:4c:ae:27:8c:2c:91:f9:f2:28:
22:5c:bb:80:c3:8a:ab:16:01:a3:29:d9:0e:b1:38:6e:4f:c3:
79:ee:62:55:22:ab:ba:63:81:dd:dc:56:53:ec:99:2e:85:0d:
72:00:96:e2:e0:b0:1d:7d:9a:25:88:ee:df:d7:c4:6b:59:fa:
44:ea:77:23:fd:28:5b:b5:b4:6b:5d:68:66:a5:ed:6d:59:95:
36:73:fa:2e:29:e3:af:13:17:23:63:e3:9d:f6:7a:46:ad:b0:
12:de:6d:b4:eb:cb:8b:73:ba:bf:67:71:da:aa:21:88:b8:2d:
b9:3b:63:ce:96:23:8f:62:55:ad:ba:55:9c:83:6a:06:8f:eb:
52:6c:9e:9a:a2:79:5d:94:a8:f6:e6:35:d1:0a:2c:d9:25:85:
b8:f4:01:02:32:51:6d:f0:1a:43:df:ca:69:c5:e7:49:31:cc:
53:52:25:24:da:5c:13:c6:7d:3c:fa:01:56:68:50:f3:6a:47:
89:db:5c:56:07:ad:14:ad:7f:d2:1c:86:14:2a:88:43:cf:7b:
68:e9:df:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX59MmAaloLRYTusjft0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2JkZjJmNWI5NjEyMzJlNThkYjI4OWI0OGE5ZmUyNDVm
YTlkNmMwHhcNMjUwODIzMTAwMDQ3WhcNMjUwODI0MTAwMDQ3WjAzMTEwLwYDVQQD
Eyg1ODM3ZjJjMmE1NzNmYTU2MTkwMGZjNzNlOWYxYWFiZGY4MDU5MDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPC8OBm6SAK4T1OxrkGDhXqvO7/S
fPzo+bgpJaQE5Nru0yJB8AK2NObJkiISkPFCkM8EeVsjVU7LrG35cZ2p3iGSU/sO
rylfgHHIOuNAtXbqg5WVSOPJd3FgJ45ck8o0boVuk0HkocOwPDelMIAfGyx1Qg99
BnJ9/LPd/e2UCdqj1V7Bih+dM2J0mr6pu4CSSDFeyNhHCd7WUKuxbk0XFbwOsesW
8+nAJRwYsTme4OVaDUgaQJKp+iBKEbprnbpRLJNpFXmHvFbAfeAvhmI0sbe5rymy
+jDpVG6OlBE39yPt3JOTfX+fABtocRZ+A1Zem2iAkVoBVAQQcvEk2xhISQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFg38sKlc/pWGQD8c+nxqr34BZA9MB8GA1UdIwQY
MBaAFIp73y9blhIy5Y2yibSKn+JF+p1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAt
Njc2ODViNGRjOGI5LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAtNjc2ODViNGRjOGI5
LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOewDJG1d
I9CUHUpC/m1MJzzC7Iy5vKqD28xsHG6iXPtLu5UihCZkAYwp10TzTK4njCyR+fIo
Ily7gMOKqxYBoynZDrE4bk/Dee5iVSKrumOB3dxWU+yZLoUNcgCW4uCwHX2aJYju
39fEa1n6ROp3I/0oW7W0a11oZqXtbVmVNnP6LinjrxMXI2PjnfZ6Rq2wEt5ttOvL
i3O6v2dx2qohiLgtuTtjzpYjj2JVrbpVnINqBo/rUmyemqJ5XZSo9uY10Qos2SWF
uPQBAjJRbfAaQ9/KacXnSTHMU1IlJNpcE8Z9PPoBVmhQ82pHidtcVgetFK1/0hyG
FCqIQ897aOnfSg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:14 2025 by rpki-client