Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
File: RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json)
Hash identifier: p5htbuO+poZLBEmcC4on0Hq1CQeYin+TchL5fetr+yY=
Subject key identifier: A2:09:FA:9C:DF:FD:BA:0B:A4:05:5B:15:F7:89:14:E8:36:72:6A:75
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial: 0198D583A503F4BC81157A5328860C798DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
Manifest number: 10D1
Signing time: Sat 23 Aug 2025 06:00:31 +0000
Manifest this update: Sat 23 Aug 2025 06:00:31 +0000
Manifest next update: Sun 24 Aug 2025 06:00:31 +0000
Files and hashes: 1: 0MiQGDuP-2KHqgPkUVqX2ggP6Xw.roa (hash: NonlM+H8k9TxA6ceFqWkm9nyMbEovf9PE4ZCtGqStgk=)
2: L11MObU2nfX5tH-1x602KEbM5GM.roa (hash: HEVauMqoyVrcLnG8IoffxDGm/vSrfN8OpGRNiQEHWho=)
3: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: kWjko6L3lcThD/nLNXPJdrMQJQLvHc9DjIrB9o/M1yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a5:03:f4:bc:81:15:7a:53:28:86:0c:79:8d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Validity
Not Before: Aug 23 06:00:31 2025 GMT
Not After : Aug 24 06:00:31 2025 GMT
Subject: CN=a209fa9cdffdba0ba4055b15f78914e836726a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:42:dc:de:42:6c:34:ed:38:40:bd:2b:2f:
19:47:c1:ca:e9:f9:30:64:ac:67:17:c7:f3:7a:74:
1e:8c:66:be:ac:a9:a1:df:20:bd:ba:44:e1:a5:5f:
e3:3c:c8:b5:5b:19:43:4c:9c:ce:1a:9e:5b:9f:64:
50:f2:c9:bb:f6:04:5e:c4:71:be:12:f2:98:1c:e0:
17:96:0e:3e:f5:d2:02:0a:be:1b:aa:21:8b:c5:96:
06:48:26:3f:3b:9f:8c:f0:8a:73:5f:d0:cd:40:cf:
d2:58:18:fe:76:82:6f:cb:f8:a7:8b:83:16:9b:9f:
30:17:e0:0b:42:88:4e:1e:e2:04:df:7b:71:e9:b2:
33:7c:74:e0:b8:39:ce:70:32:b7:cf:6a:be:28:a4:
56:8c:08:69:c3:3b:f4:70:a6:81:ce:09:98:1a:4b:
a2:40:47:4d:97:fc:06:70:5e:f4:dc:f0:32:66:ac:
6e:b3:3e:3d:3c:28:87:3d:30:05:75:71:35:77:1d:
be:54:e5:e2:38:fc:03:70:34:10:75:1f:da:2d:6f:
ec:9f:ab:10:84:75:3b:71:2b:c8:e7:42:69:96:9e:
90:07:64:99:d6:26:de:a8:e3:cd:f4:5e:a5:6c:6b:
4f:08:b9:c9:7e:7f:33:3b:8a:7c:14:5c:01:56:41:
dd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:09:FA:9C:DF:FD:BA:0B:A4:05:5B:15:F7:89:14:E8:36:72:6A:75
X509v3 Authority Key Identifier:
keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cd:99:26:dd:ba:81:5f:65:69:c3:79:f5:aa:94:dd:a2:d7:
73:f5:fd:9d:d0:19:2a:3d:6d:51:e3:de:57:0c:aa:62:98:89:
58:c5:da:d3:55:71:63:43:1b:07:8e:76:2c:71:20:3f:d0:72:
df:bd:c1:44:fc:46:21:cf:b9:1b:bb:1a:ab:fd:5e:60:b8:0a:
95:e9:3b:1e:7c:e0:3a:39:22:a4:ca:d5:39:06:0e:e9:98:d0:
51:a8:41:16:d5:b2:b5:62:fd:73:db:fc:c7:9a:3e:71:9a:a9:
b2:a5:d6:1d:18:ca:b5:b0:7d:97:05:54:48:60:a2:19:41:15:
a5:ce:28:9c:d6:00:b6:13:b5:5d:9c:42:ea:45:29:07:a5:a2:
e4:d6:b4:0d:12:bb:c5:46:12:a3:cd:4c:f7:ab:df:7b:43:61:
c1:3e:ae:66:3a:df:25:06:67:30:2e:fa:4c:f3:2c:a2:34:86:
4d:26:9a:d1:b8:17:64:49:8a:13:da:db:a8:70:e0:de:0d:2f:
f5:bc:f0:02:94:ea:11:01:17:6f:67:51:f9:41:55:85:1d:46:
01:97:8a:7b:07:68:d9:09:da:c0:51:a4:35:9d:0e:23:f8:df:
87:92:82:ac:9d:3c:f8:aa:df:b3:75:b7:17:13:59:ab:5c:ac:
af:05:bd:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg6UD9LyBFXpTKIYMeY3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NGJmNTgxMTljZmU5OWYxNzQ5YmNkOWJkMTI0NzAyYmE5
Y2I3MTMwHhcNMjUwODIzMDYwMDMxWhcNMjUwODI0MDYwMDMxWjAzMTEwLwYDVQQD
EyhhMjA5ZmE5Y2RmZmRiYTBiYTQwNTViMTVmNzg5MTRlODM2NzI2YTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEJC3N5CbDTtOEC9Ky8ZR8HK6fkw
ZKxnF8fzenQejGa+rKmh3yC9ukThpV/jPMi1WxlDTJzOGp5bn2RQ8sm79gRexHG+
EvKYHOAXlg4+9dICCr4bqiGLxZYGSCY/O5+M8IpzX9DNQM/SWBj+doJvy/ini4MW
m58wF+ALQohOHuIE33tx6bIzfHTguDnOcDK3z2q+KKRWjAhpwzv0cKaBzgmYGkui
QEdNl/wGcF703PAyZqxusz49PCiHPTAFdXE1dx2+VOXiOPwDcDQQdR/aLW/sn6sQ
hHU7cSvI50Jplp6QB2SZ1ibeqOPN9F6lbGtPCLnJfn8zO4p8FFwBVkHdGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIJ+pzf/boLpAVbFfeJFOg2cmp1MB8GA1UdIwQY
MBaAFEVL9YEZz+mfF0m82b0SRwK6nLcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNmQwOTItY2M2MC00YTUxLWIwMTAt
MGE2ZTZkZmJkMmUzLzEvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jNmQwOTItY2M2MC00YTUxLWIwMTAtMGE2ZTZkZmJkMmUz
LzEvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASs2ZJt26
gV9lacN59aqU3aLXc/X9ndAZKj1tUePeVwyqYpiJWMXa01VxY0MbB452LHEgP9By
373BRPxGIc+5G7saq/1eYLgKlek7HnzgOjkipMrVOQYO6ZjQUahBFtWytWL9c9v8
x5o+cZqpsqXWHRjKtbB9lwVUSGCiGUEVpc4onNYAthO1XZxC6kUpB6Wi5Na0DRK7
xUYSo81M96vfe0NhwT6uZjrfJQZnMC76TPMsojSGTSaa0bgXZEmKE9rbqHDg3g0v
9bzwApTqEQEXb2dR+UFVhR1GAZeKewdo2QnawFGkNZ0OI/jfh5KCrJ08+Krfs3W3
FxNZq1ysrwW9KA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:28 2025 by rpki-client