Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
File: l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json)
Hash identifier: HzLs1HqrcJbqNx9WCj54jQuv+/Qsvc0FB/KIGF43VWM=
Subject key identifier: 9D:13:C5:59:0F:69:51:47:E6:05:78:6A:33:CD:D1:97:0A:8D:9C:B3
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 0198D4E01D01D5D18F7ACD6CA7D9212675B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
Manifest number: 13FE
Signing time: Sat 23 Aug 2025 03:01:53 +0000
Manifest this update: Sat 23 Aug 2025 03:01:53 +0000
Manifest next update: Sun 24 Aug 2025 03:01:53 +0000
Files and hashes: 1: 6rStul-KJYhq6MLDsqFqp0QCJ-w.roa (hash: UgkfY0GpWezlJwqyNlWzjCQU4cnRnYzqK30vIO1treQ=)
2: GAmyQv8-gT8CZ7d-txbZl5EhOio.roa (hash: iUcK9uyMQ6focHOP9BZWCHQasgvLPeszd6U4NOgrxL8=)
3: ZfBa2kOopYZN1zSmKbC-lmjGWMU.roa (hash: XOVEAESgfg7MRdYVfSlFUrFkfMe08NvtY8t3C+PTjsk=)
4: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: zCHgGQaL3GQsm2m6J4blq9RTdbzHjiTxGC5zMrJjIp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1d:01:d5:d1:8f:7a:cd:6c:a7:d9:21:26:75:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Aug 23 03:01:53 2025 GMT
Not After : Aug 24 03:01:53 2025 GMT
Subject: CN=9d13c5590f695147e605786a33cdd1970a8d9cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:78:31:e8:04:0d:8d:8c:39:91:b3:0d:e5:
e3:37:82:c3:c3:40:10:dd:96:bc:42:f5:33:29:98:
ec:63:d5:3e:90:43:dc:c6:e3:23:4e:4c:36:b9:59:
b4:f6:3f:c6:f0:a3:95:92:fd:d2:f4:5a:47:4c:98:
53:31:60:1c:87:2e:fb:23:6a:ad:8a:d5:33:d7:f2:
34:76:ad:df:a2:47:15:13:b2:66:84:08:79:e0:1c:
8f:9e:26:38:79:bb:d8:8c:b7:3b:3f:ca:26:e7:83:
bd:a4:49:98:65:20:c0:7a:0e:4f:74:3f:4f:aa:96:
30:7e:f5:2d:91:4d:8a:6e:49:78:82:3f:be:ca:4c:
c0:e3:14:6a:ae:63:59:19:13:f8:7f:20:32:e7:95:
e5:40:b5:21:1f:bb:a6:a9:02:70:29:4c:c3:f2:e3:
bb:db:37:d8:9a:be:01:49:9a:af:66:44:22:c1:c2:
e0:0d:9d:94:97:df:2d:9e:c1:b7:18:46:29:ab:6e:
db:94:9c:98:23:9b:d4:d4:17:d0:2b:7f:4d:0c:32:
4b:08:59:c6:b0:af:c0:57:4f:ac:f2:dc:bf:0c:d7:
bf:4c:82:f4:2f:e6:a4:f0:a1:66:3c:6c:61:35:b5:
60:bd:10:af:12:43:a4:7f:02:6d:60:e7:8a:86:0d:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:13:C5:59:0F:69:51:47:E6:05:78:6A:33:CD:D1:97:0A:8D:9C:B3
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a9:a3:78:b6:60:78:40:2a:6c:b1:4d:d4:ce:a2:80:40:6c:
f1:7c:53:0b:d9:43:dd:c2:3e:1f:cf:2b:3d:f2:1c:be:8a:a8:
35:36:fd:58:e9:76:cb:d0:d3:80:96:5d:54:4b:8f:3a:84:4b:
5a:d9:b4:3a:93:40:42:13:26:8e:bb:ea:57:4f:7e:cb:f0:e3:
f4:d8:85:cb:82:96:15:bc:d9:03:38:43:15:c9:b2:14:a5:10:
83:e8:dc:d1:1c:ad:7e:43:f5:00:78:d9:45:a1:8a:7c:7d:b2:
86:92:83:dd:bb:6f:4b:03:c0:17:95:66:fc:e1:bd:f0:d6:a4:
f3:c2:06:dd:01:72:9d:bb:33:04:a7:03:40:19:07:d4:58:c3:
4e:80:09:19:38:74:a6:08:12:d5:91:ff:76:a2:6a:ca:02:19:
9e:9d:c8:5b:74:e5:a4:53:a4:18:e4:5d:74:16:2d:f5:ad:f9:
5d:60:90:fe:7a:7e:5b:bf:9b:06:6c:41:91:3f:f7:fb:19:26:
8f:c6:9b:ce:28:e2:fc:a5:c5:1c:92:db:57:5b:b1:ef:d5:f4:
00:23:a4:02:6f:bf:84:b0:a8:0e:14:a9:8c:27:3a:7e:0b:90:
11:a6:72:97:a3:37:2c:9c:c6:e0:0f:51:57:3d:f5:61:d0:8e:
8c:dc:54:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4B0B1dGPes1sp9khJnW5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2
M2Y5YWQwHhcNMjUwODIzMDMwMTUzWhcNMjUwODI0MDMwMTUzWjAzMTEwLwYDVQQD
Eyg5ZDEzYzU1OTBmNjk1MTQ3ZTYwNTc4NmEzM2NkZDE5NzBhOGQ5Y2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGN4MegEDY2MOZGzDeXjN4LDw0AQ
3Za8QvUzKZjsY9U+kEPcxuMjTkw2uVm09j/G8KOVkv3S9FpHTJhTMWAchy77I2qt
itUz1/I0dq3fokcVE7JmhAh54ByPniY4ebvYjLc7P8om54O9pEmYZSDAeg5PdD9P
qpYwfvUtkU2Kbkl4gj++ykzA4xRqrmNZGRP4fyAy55XlQLUhH7umqQJwKUzD8uO7
2zfYmr4BSZqvZkQiwcLgDZ2Ul98tnsG3GEYpq27blJyYI5vU1BfQK39NDDJLCFnG
sK/AV0+s8ty/DNe/TIL0L+ak8KFmPGxhNbVgvRCvEkOkfwJtYOeKhg0U2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0TxVkPaVFH5gV4ajPN0ZcKjZyzMB8GA1UdIwQY
MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt
MzQ2MGNjMjY0ODBiLzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi
LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVamjeLZg
eEAqbLFN1M6igEBs8XxTC9lD3cI+H88rPfIcvoqoNTb9WOl2y9DTgJZdVEuPOoRL
Wtm0OpNAQhMmjrvqV09+y/Dj9NiFy4KWFbzZAzhDFcmyFKUQg+jc0RytfkP1AHjZ
RaGKfH2yhpKD3btvSwPAF5Vm/OG98Nak88IG3QFynbszBKcDQBkH1FjDToAJGTh0
pggS1ZH/dqJqygIZnp3IW3TlpFOkGORddBYt9a35XWCQ/np+W7+bBmxBkT/3+xkm
j8abziji/KXFHJLbV1ux79X0ACOkAm+/hLCoDhSpjCc6fguQEaZyl6M3LJzG4A9R
Vz31YdCOjNxUrg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:10 2025 by rpki-client