Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: 7dglxGyax4Cb7gSIY5hee6H4dP2wNZ/bqHre2fgNmTM=
Subject key identifier: 76:5B:04:91:E0:BF:A0:F2:6F:6C:F5:CB:48:08:8C:D7:3C:7F:A3:83
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 0199FBEB4E354D6FEA538759A08124C9BC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 0473
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa (hash: N00rEgshheQJFJlnzMgkGFoydAhTWl79InbpFappf/8=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: ar7smES0/1CIezz2osZPcvu+MJLCKqlJX4NFKuUool0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4e:35:4d:6f:ea:53:87:59:a0:81:24:c9:bc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=765b0491e0bfa0f26f6cf5cb48088cd73c7fa383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:5d:e9:04:ae:4d:ff:6b:e1:d3:ed:a2:fb:
49:df:f8:96:67:10:44:ac:ce:b3:5f:ea:1b:90:6d:
c8:39:a1:8f:93:2a:3d:42:a2:00:3f:39:cd:c3:32:
e0:68:87:ff:15:43:5e:f5:e2:93:48:d2:ed:ac:e3:
ad:6f:b5:44:ad:ec:85:01:20:d9:4f:ff:d3:2a:d5:
5b:d1:01:a4:49:9f:91:a7:4b:38:5a:c5:50:0a:cf:
3e:dd:f5:7b:49:32:96:4a:50:27:a1:b5:68:d8:51:
de:d1:82:e6:82:14:29:14:ac:51:1d:9a:b2:95:d2:
df:d7:0e:bd:d0:d1:41:09:af:ab:b4:0b:8e:92:fc:
40:de:b5:1b:66:c1:40:54:5b:be:ff:ac:35:71:e3:
45:96:53:85:96:00:3c:38:37:f7:b6:4c:cd:da:fc:
0a:fe:e0:75:d2:6f:2c:c8:cb:06:ba:84:e0:73:8a:
cc:68:1e:af:92:1f:02:a2:3e:e5:bf:24:65:12:ac:
b2:58:f9:f8:21:e6:9c:79:c3:ac:1c:26:a7:f6:82:
ca:dc:74:d8:36:94:87:97:d2:6d:bd:37:ac:1c:39:
fa:cf:6f:19:a3:fa:26:32:94:03:cd:4e:61:8c:63:
64:38:b7:f0:fa:51:29:84:b1:8e:cb:11:d8:2b:bc:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5B:04:91:E0:BF:A0:F2:6F:6C:F5:CB:48:08:8C:D7:3C:7F:A3:83
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a2:08:b2:b1:96:18:ef:8b:1b:7c:ae:64:f7:92:0d:25:6d:
51:91:b7:d4:4e:9b:d0:b9:17:ee:79:97:f1:85:52:07:b4:20:
e7:78:7a:8f:dc:4b:b8:b6:bd:1a:3b:83:ad:69:cb:11:02:02:
db:0c:92:19:f5:0b:f0:7a:c3:40:58:a4:a1:d4:5b:ed:d4:e8:
d6:e8:fa:34:6d:19:13:a3:af:63:6f:9f:0a:67:7c:31:49:51:
c9:fc:f2:05:44:15:40:96:99:ae:82:51:73:b7:56:71:a3:f1:
57:cd:f5:1f:19:87:bf:f5:f6:95:f2:a5:f4:68:aa:b0:f1:b9:
77:ac:37:f3:74:f7:cd:d5:66:c0:2a:38:01:79:9b:c1:bc:c2:
24:2d:68:db:cd:e8:d7:cd:74:5b:e0:e5:35:e6:f6:03:2b:f4:
87:e8:6a:e2:45:b7:2c:ad:74:40:ed:a5:7a:06:a0:65:d7:05:
f2:01:ee:e2:3b:0a:47:5f:0e:a7:24:82:79:0e:a4:b2:2e:e3:
d3:64:f7:6c:d3:24:1e:04:6e:78:c8:0a:f5:53:46:2b:f9:48:
ad:5a:8b:3f:74:62:ca:3d:06:d4:19:05:d6:6f:90:a2:38:a8:
f6:80:67:db:3d:4f:05:b9:d1:8d:df:59:ed:f2:d5:68:6e:7b:
a1:22:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:20 2025 by rpki-client