Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
File: RWF9LghjWN2nvbDcRmyhyG7U_so.mft (raw, json)
Hash identifier: OgAB/lcyDVpUqr0hN2vOk9B1oIDWC6qIklYat0UZgbM=
Subject key identifier: B8:93:54:DB:E7:E8:69:B7:12:BE:C6:30:CA:6A:E4:EB:6C:91:FC:75
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial: 0198D4A82EE2CF3351BF783A084BE3BF59F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 02:00:48 +0000
Manifest this update: Sat 23 Aug 2025 02:00:48 +0000
Manifest next update: Sun 24 Aug 2025 02:00:48 +0000
Files and hashes: 1: Kp8YOETyXn_CJNlkKRcjiHTajds.roa (hash: pE4tiu3XHnbIpJeimbwG8Yyb4EwnGUv1VJS0J7muojA=)
2: RWF9LghjWN2nvbDcRmyhyG7U_so.crl (hash: dg2jR80wx/DPJMm51SCoHok3LTYFs95aqFit9y0RyLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2e:e2:cf:33:51:bf:78:3a:08:4b:e3:bf:59:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Validity
Not Before: Aug 23 02:00:48 2025 GMT
Not After : Aug 24 02:00:48 2025 GMT
Subject: CN=b89354dbe7e869b712bec630ca6ae4eb6c91fc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:28:2f:80:c2:39:8d:db:21:7c:1a:48:48:
1a:ea:87:9b:5f:94:61:71:cb:02:84:ff:71:c1:7f:
c2:96:65:1d:10:cb:3e:b0:5a:a3:be:33:5e:60:74:
59:38:ca:e7:56:b0:6b:1f:32:43:ca:5e:38:df:ac:
9f:57:f9:c1:55:22:a5:0f:1f:34:32:13:49:3b:c4:
a2:49:01:60:50:74:ae:66:80:f1:1b:31:15:ae:93:
bd:c8:74:14:86:51:86:9c:93:0a:8e:24:58:2b:03:
84:ca:4b:c5:01:3e:b3:a4:89:7c:64:cc:32:9b:11:
fc:f1:20:28:5f:a3:aa:09:d3:cd:c6:9f:a8:83:56:
3e:4e:f1:87:ad:c1:a1:ab:ef:d8:c2:cb:e5:62:1c:
b8:f4:44:39:1d:13:e4:7f:8b:40:28:38:f4:04:68:
3d:9a:e1:e5:75:7f:76:83:eb:94:a4:26:4f:94:29:
00:08:c2:9c:b1:ac:32:0e:c4:dc:38:21:09:9d:d8:
7d:4b:91:ab:f3:73:4b:33:b3:65:4b:14:33:0f:ac:
9d:0f:e2:11:09:95:b4:58:78:91:ce:5b:cf:c5:f7:
ba:03:b9:01:dd:71:6f:78:91:56:5b:c0:fd:05:d4:
59:2b:af:1d:aa:9c:6d:6c:6b:50:e1:be:90:5d:ee:
b5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:93:54:DB:E7:E8:69:B7:12:BE:C6:30:CA:6A:E4:EB:6C:91:FC:75
X509v3 Authority Key Identifier:
keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d5:46:67:1b:7f:e8:45:4d:fc:37:cb:6c:b4:0f:af:b9:7f:
35:c1:fc:2e:2f:49:85:23:cb:13:f1:33:86:83:12:bb:23:c7:
56:4d:67:91:81:90:f5:bd:30:24:bf:a1:ba:f7:98:ea:b3:4f:
67:a4:fc:b4:c0:6f:24:1a:fd:6c:13:f4:91:92:a2:12:a1:1b:
40:4c:b4:a3:b4:bf:0f:fb:4c:ae:91:cf:d3:8f:a2:3d:5c:dc:
45:53:47:42:50:6d:fe:84:94:3a:e6:97:81:5f:91:56:df:cf:
02:34:85:05:bc:91:ae:1f:51:a1:27:b3:9b:7b:8a:f2:cc:92:
70:04:36:c7:d2:f5:c4:bd:36:30:25:80:f6:44:8e:42:d6:49:
0d:69:74:81:e1:9d:f1:39:4c:eb:3f:ba:49:3f:d2:01:dd:ea:
60:ba:19:67:c4:d4:54:01:7d:2d:3f:20:98:e6:73:68:83:b4:
fa:76:c0:92:92:8b:9e:30:fd:31:5c:65:4c:1e:ca:eb:9b:e5:
f7:90:67:a6:37:73:1e:e1:fa:ef:21:4d:60:3f:55:ab:19:00:
30:b1:76:60:81:8a:8c:de:d4:70:83:4d:0f:d7:f9:50:0d:17:
ee:e1:76:ae:71:86:12:76:21:a2:56:73:9d:3c:61:5e:d0:6e:
86:5b:a2:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqC7izzNRv3g6CEvjv1n3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NjE3ZDJlMDg2MzU4ZGRhN2JkYjBkYzQ2NmNhMWM4NmVk
NGZlY2EwHhcNMjUwODIzMDIwMDQ4WhcNMjUwODI0MDIwMDQ4WjAzMTEwLwYDVQQD
EyhiODkzNTRkYmU3ZTg2OWI3MTJiZWM2MzBjYTZhZTRlYjZjOTFmYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWUoL4DCOY3bIXwaSEga6oebX5Rh
ccsChP9xwX/ClmUdEMs+sFqjvjNeYHRZOMrnVrBrHzJDyl4436yfV/nBVSKlDx80
MhNJO8SiSQFgUHSuZoDxGzEVrpO9yHQUhlGGnJMKjiRYKwOEykvFAT6zpIl8ZMwy
mxH88SAoX6OqCdPNxp+og1Y+TvGHrcGhq+/YwsvlYhy49EQ5HRPkf4tAKDj0BGg9
muHldX92g+uUpCZPlCkACMKcsawyDsTcOCEJndh9S5Gr83NLM7NlSxQzD6ydD+IR
CZW0WHiRzlvPxfe6A7kB3XFveJFWW8D9BdRZK68dqpxtbGtQ4b6QXe61swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiTVNvn6Gm3Er7GMMpq5Otskfx1MB8GA1UdIwQY
MBaAFEVhfS4IY1jdp72w3EZsochu1P7KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUldGOUxnaGpXTjJudmJEY1JteWh5RzdVX3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kODFiNTktYzA1YS00OGZlLWI1YjEt
MTU4OTI3MzM3Njg5LzEvUldGOUxnaGpXTjJudmJEY1JteWh5RzdVX3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9kODFiNTktYzA1YS00OGZlLWI1YjEtMTU4OTI3MzM3Njg5
LzEvUldGOUxnaGpXTjJudmJEY1JteWh5RzdVX3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNVGZxt/
6EVN/DfLbLQPr7l/NcH8Li9JhSPLE/EzhoMSuyPHVk1nkYGQ9b0wJL+huveY6rNP
Z6T8tMBvJBr9bBP0kZKiEqEbQEy0o7S/D/tMrpHP04+iPVzcRVNHQlBt/oSUOuaX
gV+RVt/PAjSFBbyRrh9RoSezm3uK8syScAQ2x9L1xL02MCWA9kSOQtZJDWl0geGd
8TlM6z+6ST/SAd3qYLoZZ8TUVAF9LT8gmOZzaIO0+nbAkpKLnjD9MVxlTB7K65vl
95BnpjdzHuH67yFNYD9VqxkAMLF2YIGKjN7UcINND9f5UA0X7uF2rnGGEnYholZz
nTxhXtBuhluiQg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:34 2025 by rpki-client