Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier: 29U29SB8XtIv1B/TTvGOeS+pZS/yoXv30P9QaiLgAQ8=
Subject key identifier: 5C:CD:BB:F5:78:A8:05:0F:52:F4:4E:B4:46:45:69:D3:A3:79:72:25
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 0198D4E01143D37618397757A1D9CBB66445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number: 0FBE
Signing time: Sat 23 Aug 2025 03:01:50 +0000
Manifest this update: Sat 23 Aug 2025 03:01:50 +0000
Manifest next update: Sun 24 Aug 2025 03:01:50 +0000
Files and hashes: 1: KOQetqGXnr-_jcGLAAJM_EFGncg.roa (hash: J0d7xN2IM4WNzPNloLfdHQukDngK3dzlCPcUmKT74Iw=)
2: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: RHw9mxOel+9MQ0wY14cPchXF3NC47yJv+FrTYACew6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:11:43:d3:76:18:39:77:57:a1:d9:cb:b6:64:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Aug 23 03:01:50 2025 GMT
Not After : Aug 24 03:01:50 2025 GMT
Subject: CN=5ccdbbf578a8050f52f44eb4464569d3a3797225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:bc:d6:18:11:51:3f:78:3b:ce:18:25:03:
55:7a:ec:0d:33:f4:68:f0:2a:4e:82:b9:eb:54:63:
c8:89:cb:0f:a8:d9:61:c6:cc:a0:51:fd:83:9a:e2:
61:ea:7f:aa:46:56:06:bf:ec:ff:96:09:1c:a0:d9:
96:38:c9:e1:35:bd:be:de:85:37:5c:18:9d:f8:f6:
cb:87:77:91:33:66:94:da:bc:22:79:1a:d4:de:eb:
d9:93:45:e5:3b:6d:65:2c:16:4b:aa:29:9b:e1:54:
45:75:a4:30:64:56:cc:20:5d:56:01:96:40:5d:cb:
2c:e9:58:e6:a5:f0:4e:cf:4a:db:3d:b8:be:69:66:
01:47:4d:fd:da:08:0b:94:39:52:2f:30:57:d9:d3:
79:7f:fd:3e:a1:8d:18:2a:b0:9a:82:64:82:d1:36:
30:a7:32:0f:56:3b:96:d6:19:43:c9:4a:af:ec:fa:
63:d8:8e:93:a3:f2:ca:75:61:b4:7b:6e:42:b9:8e:
af:b9:0b:4e:12:fb:21:6f:82:10:e8:41:f4:a5:73:
5e:86:94:8a:04:79:5e:b3:97:48:61:31:11:84:b2:
db:b9:c5:91:ce:f5:e4:3b:94:09:84:3b:fd:91:f3:
79:34:e6:e7:ee:f0:1f:f8:44:4f:17:01:ac:27:ca:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CD:BB:F5:78:A8:05:0F:52:F4:4E:B4:46:45:69:D3:A3:79:72:25
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5a:bd:45:44:73:62:82:b1:25:61:69:22:a8:63:45:fc:9a:
5d:e5:d2:99:e7:ae:fa:c8:f1:74:46:cb:9d:80:c4:b1:9c:ac:
20:00:8e:67:2a:f9:90:02:38:b0:de:f2:58:3a:39:7e:33:fb:
57:c1:41:6a:b8:fc:71:42:56:ba:cd:c9:f0:59:8e:5d:91:96:
90:30:a5:57:2e:df:7d:a4:30:ce:d7:d5:f4:3f:64:33:15:c4:
de:7d:c3:6a:51:5d:38:79:c5:17:ec:24:db:61:5b:98:53:71:
e5:fc:f6:12:c8:a2:4f:bf:2a:af:23:c6:10:0d:cf:3d:ec:c1:
85:e5:c0:35:cc:fe:6e:bb:c9:bc:af:8e:18:76:e4:7d:27:52:
a0:59:ce:0e:e8:82:cd:ae:db:d2:c5:c2:1c:d9:81:cd:8e:ec:
2c:05:f6:11:37:92:92:46:e9:0a:8f:6e:db:09:9f:bc:44:b6:
f9:22:17:04:f4:bc:bd:96:fe:1f:d1:a5:cc:d8:ff:19:87:a5:
04:b4:7e:1f:2e:d0:17:42:f5:43:7c:9f:83:d0:bd:47:9a:05:
3b:9d:68:54:b9:c7:c4:9f:3a:37:ca:36:af:a7:e0:34:15:4d:
ae:3b:bc:25:f9:f7:6a:5d:e9:72:17:dc:83:86:d0:34:9a:0b:
d0:81:c6:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4BFD03YYOXdXodnLtmRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0M2VkNGFlNDNmYTE5MGMxMGZkMmM1M2ExMGUzZGUwYWJk
OThiNzgwHhcNMjUwODIzMDMwMTUwWhcNMjUwODI0MDMwMTUwWjAzMTEwLwYDVQQD
Eyg1Y2NkYmJmNTc4YTgwNTBmNTJmNDRlYjQ0NjQ1NjlkM2EzNzk3MjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3C81hgRUT94O84YJQNVeuwNM/Ro
8CpOgrnrVGPIicsPqNlhxsygUf2DmuJh6n+qRlYGv+z/lgkcoNmWOMnhNb2+3oU3
XBid+PbLh3eRM2aU2rwieRrU3uvZk0XlO21lLBZLqimb4VRFdaQwZFbMIF1WAZZA
Xcss6VjmpfBOz0rbPbi+aWYBR0392ggLlDlSLzBX2dN5f/0+oY0YKrCagmSC0TYw
pzIPVjuW1hlDyUqv7Ppj2I6To/LKdWG0e25CuY6vuQtOEvshb4IQ6EH0pXNehpSK
BHles5dIYTERhLLbucWRzvXkO5QJhDv9kfN5NObn7vAf+ERPFwGsJ8r/0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzNu/V4qAUPUvROtEZFadOjeXIlMB8GA1UdIwQY
MBaAFEQ+1K5D+hkMEP0sU6EOPeCr2Yt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ODQxNWEtZjEyZS00YzFlLTg4MDYt
MjFmZTVhZTllZjNiLzEvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85ODQxNWEtZjEyZS00YzFlLTg4MDYtMjFmZTVhZTllZjNi
LzEvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1q9RURz
YoKxJWFpIqhjRfyaXeXSmeeu+sjxdEbLnYDEsZysIACOZyr5kAI4sN7yWDo5fjP7
V8FBarj8cUJWus3J8FmOXZGWkDClVy7ffaQwztfV9D9kMxXE3n3DalFdOHnFF+wk
22FbmFNx5fz2EsiiT78qryPGEA3PPezBheXANcz+brvJvK+OGHbkfSdSoFnODuiC
za7b0sXCHNmBzY7sLAX2ETeSkkbpCo9u2wmfvES2+SIXBPS8vZb+H9GlzNj/GYel
BLR+Hy7QF0L1Q3yfg9C9R5oFO51oVLnHxJ86N8o2r6fgNBVNrju8Jfn3al3pchfc
g4bQNJoL0IHGQA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:32 2025 by rpki-client