Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
File: fOl4IyXTBUy2lWrSJwRTDekqDwU.mft (raw, json)
Hash identifier: 23ZKuzPW5T8ykStPLZA6Ji8Ze20bROcwLrFdYbo/DzY=
Subject key identifier: AD:6B:59:3B:FC:BB:BF:27:21:96:3C:83:AA:07:60:0A:94:72:0A:43
Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Certificate issuer: /CN=7ce9782325d3054cb6956ad22704530de92a0f05
Certificate serial: 0198D515B405C43BAA49CA0DDD93397DF737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
Manifest number: 05AD
Signing time: Sat 23 Aug 2025 04:00:25 +0000
Manifest this update: Sat 23 Aug 2025 04:00:25 +0000
Manifest next update: Sun 24 Aug 2025 04:00:25 +0000
Files and hashes: 1: 2DvVU95orox5IeGSdibufOYyF_M.roa (hash: zYc2kejhvwZAMUP9rtgZ0VImRS6xXrZBfW+6RhgOP2c=)
2: _vBlwHfpCbgKUBFoqSs3ggu60nI.roa (hash: AsAILNa2VMgTcOZ13cTcAxG+d9Mwo5a4AZ6ZUVGbk/c=)
3: fOl4IyXTBUy2lWrSJwRTDekqDwU.crl (hash: 2a2/T1E2rOfudT0cH42WWlDLXsqflhUcaTD+x0qHlQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b4:05:c4:3b:aa:49:ca:0d:dd:93:39:7d:f7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05
Validity
Not Before: Aug 23 04:00:25 2025 GMT
Not After : Aug 24 04:00:25 2025 GMT
Subject: CN=ad6b593bfcbbbf2721963c83aa07600a94720a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d6:6b:1b:6a:8a:c7:0a:19:fa:c3:4f:50:02:
b8:fa:b5:15:66:71:a8:f3:ea:59:f4:97:36:41:ac:
67:33:9d:f1:72:b5:b6:bc:44:02:c4:8f:31:cd:e8:
86:b8:96:b6:c6:9f:dc:cf:b0:a9:3e:87:62:7b:a2:
5d:0d:17:c3:a6:46:34:30:85:87:81:2c:80:58:d0:
d1:69:1a:6f:b0:e3:3d:99:0a:d4:65:cb:96:aa:c2:
50:69:2e:23:f6:a1:a1:42:d1:b3:ab:d6:93:26:90:
84:23:cf:1f:f6:01:e3:a9:88:26:c4:9f:5f:21:cd:
d8:81:34:45:ce:a3:7b:3d:9f:d0:e6:8f:d5:f4:3b:
89:fa:6a:0f:80:a8:3e:75:39:ca:b9:5d:6a:05:44:
d5:60:3f:08:0e:bd:24:44:ee:3e:29:53:e7:10:f2:
f1:6b:d0:bf:25:3e:c7:6a:ae:4d:5a:f6:54:e0:0d:
61:0b:74:d2:4e:6f:fc:5a:87:30:47:3e:ee:3c:6f:
26:0a:d7:e1:9c:0c:c3:4a:a1:37:c6:85:31:0b:6c:
85:8c:46:c2:10:b0:d3:09:65:cf:ca:cf:28:9e:9b:
7a:53:a8:17:64:e0:a1:ff:ae:c8:f0:06:0c:73:3e:
e2:d4:af:28:07:2f:4a:89:27:9e:dd:09:73:dd:0f:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6B:59:3B:FC:BB:BF:27:21:96:3C:83:AA:07:60:0A:94:72:0A:43
X509v3 Authority Key Identifier:
keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:22:1b:e3:6e:bd:fb:a6:4e:14:08:27:da:ab:8a:c3:27:4f:
5c:ea:a4:f5:33:31:f4:1b:c2:91:ac:fe:6a:e3:20:88:98:8c:
b0:0d:01:a0:5b:fe:05:65:af:5b:48:48:b8:92:6c:8b:a3:81:
a8:5b:25:00:dd:6f:53:08:6d:49:be:eb:0e:cf:c2:4c:f8:03:
99:4d:6d:72:9f:7a:bc:5c:de:39:35:de:67:e8:10:1a:c7:f0:
fc:16:31:60:ae:8b:71:d8:1d:cc:28:be:53:f9:a7:c2:60:ec:
e2:9c:ea:d7:6e:c7:13:63:1e:f9:c1:9f:6d:d8:d0:ef:12:c2:
1b:cd:7c:35:e0:24:42:92:73:7e:0d:68:57:13:05:f9:e5:d4:
2e:eb:85:a7:53:17:e4:e8:82:c7:e6:27:eb:32:ac:b5:2a:b3:
cc:49:96:6a:13:4f:d2:39:fe:7f:dc:de:4e:58:34:80:58:47:
b9:a6:a4:55:cd:58:4d:5d:dd:38:20:db:55:cf:90:37:f9:98:
3f:42:52:ff:4e:77:55:30:8f:db:8e:09:4a:d4:1e:9b:33:aa:
2c:a6:f2:89:21:2b:fc:84:0a:6f:21:78:c6:a0:d1:1f:b0:b4:
3e:aa:4f:d8:14:50:74:9d:94:93:6c:ca:76:b5:39:78:d3:5b:
f2:57:83:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFbQFxDuqScoN3ZM5ffc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZTk3ODIzMjVkMzA1NGNiNjk1NmFkMjI3MDQ1MzBkZTky
YTBmMDUwHhcNMjUwODIzMDQwMDI1WhcNMjUwODI0MDQwMDI1WjAzMTEwLwYDVQQD
EyhhZDZiNTkzYmZjYmJiZjI3MjE5NjNjODNhYTA3NjAwYTk0NzIwYTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitZrG2qKxwoZ+sNPUAK4+rUVZnGo
8+pZ9Jc2QaxnM53xcrW2vEQCxI8xzeiGuJa2xp/cz7CpPodie6JdDRfDpkY0MIWH
gSyAWNDRaRpvsOM9mQrUZcuWqsJQaS4j9qGhQtGzq9aTJpCEI88f9gHjqYgmxJ9f
Ic3YgTRFzqN7PZ/Q5o/V9DuJ+moPgKg+dTnKuV1qBUTVYD8IDr0kRO4+KVPnEPLx
a9C/JT7Haq5NWvZU4A1hC3TSTm/8WocwRz7uPG8mCtfhnAzDSqE3xoUxC2yFjEbC
ELDTCWXPys8onpt6U6gXZOCh/67I8AYMcz7i1K8oBy9KiSee3Qlz3Q+DVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1rWTv8u78nIZY8g6oHYAqUcgpDMB8GA1UdIwQY
MBaAFHzpeCMl0wVMtpVq0icEUw3pKg8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk9sNEl5WFRCVXkybFdyU0p3UlREZWtxRHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xMTk0MDItYjliYi00Mzc0LWJmZWEt
OTg4ZTc3MGIwMTViLzEvZk9sNEl5WFRCVXkybFdyU0p3UlREZWtxRHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8xMTk0MDItYjliYi00Mzc0LWJmZWEtOTg4ZTc3MGIwMTVi
LzEvZk9sNEl5WFRCVXkybFdyU0p3UlREZWtxRHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSIb4269
+6ZOFAgn2quKwydPXOqk9TMx9BvCkaz+auMgiJiMsA0BoFv+BWWvW0hIuJJsi6OB
qFslAN1vUwhtSb7rDs/CTPgDmU1tcp96vFzeOTXeZ+gQGsfw/BYxYK6LcdgdzCi+
U/mnwmDs4pzq127HE2Me+cGfbdjQ7xLCG818NeAkQpJzfg1oVxMF+eXULuuFp1MX
5OiCx+Yn6zKstSqzzEmWahNP0jn+f9zeTlg0gFhHuaakVc1YTV3dOCDbVc+QN/mY
P0JS/053VTCP244JStQemzOqLKbyiSEr/IQKbyF4xqDRH7C0PqpP2BRQdJ2Uk2zK
drU5eNNb8leDSA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:08 2025 by rpki-client