Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
File: IAs7I0VxCglvajTX8Im-seP8U4g.mft (raw, json)
Hash identifier: VIEw+K+fwcPpSXhjtQ0AYDraHR7PxLXiBcDrdZLAvHI=
Subject key identifier: AF:2B:53:E4:7F:EE:B0:2E:97:B1:D5:5B:FA:13:9D:FD:09:92:21:20
Authority key identifier: 20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
Certificate issuer: /CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Certificate serial: 0198D5BBE655B23EDD7B4B1050D19D5C11C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
Manifest number: 046B
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: 3twUXXIP_KmiWrUBvyT5612yZdA.roa (hash: i8TOwD+JQVgsZynDBd1FE+mCLj4YL4GBf0bnlreCNh4=)
2: IAs7I0VxCglvajTX8Im-seP8U4g.crl (hash: 1r4FJ1hoYbyJPz/v7lDnEPVHAxeo3bKMc0YvoDFP3b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e6:55:b2:3e:dd:7b:4b:10:50:d1:9d:5c:11:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=af2b53e47feeb02e97b1d55bfa139dfd09922120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:db:e6:b4:dd:0e:20:21:8b:d0:d3:44:24:d5:
ee:70:c9:7b:2f:de:c0:35:4f:a6:88:b1:ed:ed:0d:
cc:43:1f:a6:bf:95:dc:61:98:ef:62:fb:9e:86:64:
af:08:b8:0b:35:76:39:db:b8:be:e0:97:1b:b3:b7:
df:46:bf:92:3d:f4:c2:25:bd:fa:39:48:d8:b8:63:
3b:0d:8f:6e:c8:d8:81:b7:6a:5c:5a:c1:76:b3:57:
56:ba:e1:9a:fe:d5:a0:28:66:9c:1e:55:3c:cc:20:
41:9f:63:f9:76:4f:91:0e:8b:d6:f4:e6:b8:cf:c9:
e4:ec:e8:51:68:bf:ff:15:de:67:6a:66:81:78:0e:
03:59:f2:96:2b:32:1c:9b:7b:dd:9f:c3:bc:de:6a:
ab:b9:24:85:f8:15:00:90:c7:fe:5f:61:a7:96:d1:
b9:58:d4:3a:26:62:0c:ef:b0:8e:16:4a:30:e6:a8:
18:48:8e:02:30:82:0a:c6:8e:e4:8d:4a:e9:14:98:
a2:b6:17:ed:24:14:fa:c4:64:ff:10:20:7d:24:57:
18:8b:5f:8e:bb:fb:0b:23:19:ab:52:5d:09:3f:52:
d8:16:59:99:0f:f5:e8:e2:a4:10:69:df:09:e9:2a:
c9:b4:84:e0:9c:f0:ae:f4:b9:fd:f2:17:e1:05:c3:
a1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2B:53:E4:7F:EE:B0:2E:97:B1:D5:5B:FA:13:9D:FD:09:92:21:20
X509v3 Authority Key Identifier:
keyid:20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ca:b5:a3:f8:d3:62:21:54:53:0a:05:d9:4d:cb:f0:b5:1c:
ce:88:ed:0c:0b:d2:59:d7:e4:e4:cb:f4:7c:23:a6:55:60:a2:
49:45:5b:d1:d2:61:57:65:54:25:97:5d:53:e6:16:01:c4:28:
da:19:15:2b:59:fb:5b:93:ca:3c:95:54:ba:32:97:0c:67:7e:
39:42:c9:20:14:51:13:58:7c:e8:ab:63:04:94:cf:43:10:0d:
07:6e:08:2c:8a:ef:b5:24:17:3f:88:13:fc:39:79:6d:1b:e4:
1d:4c:44:92:1e:5c:49:23:6e:9d:54:4f:5c:34:24:71:6f:8d:
98:d2:c2:9d:ae:a0:8b:25:63:fc:99:48:20:5e:c7:71:d9:19:
80:60:51:2c:84:1d:30:7e:0c:d5:e4:b8:9a:68:22:57:e1:b5:
ab:52:a0:66:8a:0a:62:48:c9:16:b8:86:d4:77:d1:20:07:f1:
84:3b:c6:1c:fa:bf:c4:d1:24:76:90:6c:01:94:21:d7:59:63:
66:0d:1e:5f:e1:43:45:b2:10:67:84:07:7c:d7:56:93:02:77:
3e:1b:cf:9f:82:6f:05:97:01:f5:bc:cc:14:87:16:71:b4:32:
f3:74:9c:13:75:2d:60:47:b6:c4:b3:8c:54:ec:b1:ad:13:df:
21:b4:80:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu+ZVsj7de0sQUNGdXBHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMGIzYjIzNDU3MTBhMDk2ZjZhMzRkN2YwODliZWIxZTNm
YzUzODgwHhcNMjUwODIzMDcwMTU3WhcNMjUwODI0MDcwMTU3WjAzMTEwLwYDVQQD
EyhhZjJiNTNlNDdmZWViMDJlOTdiMWQ1NWJmYTEzOWRmZDA5OTIyMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdvmtN0OICGL0NNEJNXucMl7L97A
NU+miLHt7Q3MQx+mv5XcYZjvYvuehmSvCLgLNXY527i+4Jcbs7ffRr+SPfTCJb36
OUjYuGM7DY9uyNiBt2pcWsF2s1dWuuGa/tWgKGacHlU8zCBBn2P5dk+RDovW9Oa4
z8nk7OhRaL//Fd5namaBeA4DWfKWKzIcm3vdn8O83mqruSSF+BUAkMf+X2GnltG5
WNQ6JmIM77COFkow5qgYSI4CMIIKxo7kjUrpFJiithftJBT6xGT/ECB9JFcYi1+O
u/sLIxmrUl0JP1LYFlmZD/Xo4qQQad8J6SrJtITgnPCu9Ln98hfhBcOheQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8rU+R/7rAul7HVW/oTnf0JkiEgMB8GA1UdIwQY
MBaAFCALOyNFcQoJb2o01/CJvrHj/FOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUFzN0kwVnhDZ2x2YWpUWDhJbS1zZVA4VTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kZjlhNGMtNzlmZS00MDA0LTk0MTMt
NGI0N2U4ZjhjODZmLzEvSUFzN0kwVnhDZ2x2YWpUWDhJbS1zZVA4VTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kZjlhNGMtNzlmZS00MDA0LTk0MTMtNGI0N2U4ZjhjODZm
LzEvSUFzN0kwVnhDZ2x2YWpUWDhJbS1zZVA4VTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcq1o/jT
YiFUUwoF2U3L8LUczojtDAvSWdfk5Mv0fCOmVWCiSUVb0dJhV2VUJZddU+YWAcQo
2hkVK1n7W5PKPJVUujKXDGd+OULJIBRRE1h86KtjBJTPQxANB24ILIrvtSQXP4gT
/Dl5bRvkHUxEkh5cSSNunVRPXDQkcW+NmNLCna6giyVj/JlIIF7HcdkZgGBRLIQd
MH4M1eS4mmgiV+G1q1KgZooKYkjJFriG1HfRIAfxhDvGHPq/xNEkdpBsAZQh11lj
Zg0eX+FDRbIQZ4QHfNdWkwJ3PhvPn4JvBZcB9bzMFIcWcbQy83ScE3UtYEe2xLOM
VOyxrRPfIbSAHA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:40 2025 by rpki-client