
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier: qx4Z/qkVLlGaXWj5V1VIxBvHWuMXdDZea2/ctlwlWtw=
Subject key identifier: F9:83:0C:72:BE:0E:06:9B:E8:65:01:70:04:8F:A0:11:F1:57:E6:66
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 0198D73B72C806523BF7AE0319930BA90D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number: 0F74
Signing time: Sat 23 Aug 2025 14:00:54 +0000
Manifest this update: Sat 23 Aug 2025 14:00:54 +0000
Manifest next update: Sun 24 Aug 2025 14:00:54 +0000
Files and hashes: 1: GyhAtf15yZqMprvOSAG-mSzNZTU.roa (hash: jfVjDUAXNOWRUx2duW7NqVNPhOHvwJFkEOJDlRjLf1c=)
2: Jn9LNrC4wIy3yIlbSkthFN9Albs.roa (hash: 6lIOMorBJKMVKOZBPqKcGfElc6xi+Wc/c9B3Sn6wFrA=)
3: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: sdRrhIGR2Dy7MY6fXt9OxWi9n6j5cAVsg6w/rWFH9h8=)
4: Y2_bnui3NBLO8jQirmiUuAzGyRw.roa (hash: Sj4Gp5iophRPrZcWhz+iS2BZX0tuH2ZNqq3e2/zFjig=)
5: ntrt1qLEp7JFw_l17Dbev4liPcY.roa (hash: 5lVCUBQu1df/S1FQOKl/MyF/XxoO3ZxscsaY8Q1dPLk=)
6: vfMCWDXHqUhfE9pCWjy3UIK3sYE.roa (hash: cZ4cjZLkxHd/pGP9SjokJ4j+E/I+MNHdDpithj4CeCo=)
7: zaxDDa76odJm9ePdrwAGeOqRpTk.roa (hash: LPUFtmetdpPIYathbUV2AsqucuRhOg7pKFky/Ou4leU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:72:c8:06:52:3b:f7:ae:03:19:93:0b:a9:0d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Aug 23 14:00:54 2025 GMT
Not After : Aug 24 14:00:54 2025 GMT
Subject: CN=f9830c72be0e069be8650170048fa011f157e666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4f:41:fc:1a:64:fa:22:0d:6b:3b:f5:62:ea:
d7:3d:21:39:03:d8:ad:8a:68:81:ee:01:d2:0b:cb:
21:eb:56:a8:e3:19:17:cb:e5:9d:bc:3a:a8:44:e6:
83:f2:3e:ea:66:1c:26:2f:84:be:80:36:cf:ef:e4:
a0:30:3b:66:61:0a:44:25:7f:b2:8d:29:fa:1a:9b:
70:3a:56:88:7b:ec:bd:aa:03:5c:c8:55:cf:5f:88:
12:ef:5e:8c:f3:7a:97:d4:3c:4b:d6:49:01:87:ca:
cd:3c:c0:44:9b:b3:df:c4:36:e7:c1:bb:77:58:2f:
95:03:90:1d:06:c5:58:de:e2:f1:64:eb:f1:91:84:
bd:e9:e6:a4:72:a6:34:0a:3d:84:da:b6:e4:e7:1c:
17:74:a3:62:a6:ed:00:52:01:3d:cd:16:7e:d1:29:
0c:2b:60:3b:33:23:41:33:d8:92:92:a0:9a:a9:db:
4e:03:56:6d:a2:7c:f6:d1:53:28:0a:a8:fe:8d:f0:
8d:d1:b1:7d:0e:fb:6a:52:d8:f4:b6:2b:c5:e7:30:
dd:52:fc:75:9e:bc:e3:7b:c7:65:e7:7a:24:1c:55:
38:c6:5e:00:0f:f2:42:92:88:e2:26:d6:69:70:47:
c5:30:88:d4:1d:d0:a3:4a:eb:6e:c1:43:41:ad:80:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:83:0C:72:BE:0E:06:9B:E8:65:01:70:04:8F:A0:11:F1:57:E6:66
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e5:3d:ae:19:d6:7d:8c:1c:9b:23:31:00:ab:e5:f4:00:4c:
e4:7d:7c:2b:7e:d0:9d:cd:70:29:a7:19:35:e7:64:e9:ac:06:
97:4c:c5:0d:85:19:f4:65:af:5e:96:bc:53:d4:aa:6b:a0:a6:
e0:ad:80:76:87:75:13:ec:3e:77:54:86:c1:7b:33:69:3e:c7:
54:fb:e8:ce:1a:5b:97:56:90:ea:78:bf:d5:cd:6f:5d:4a:85:
4f:12:22:42:ca:03:f5:5a:5e:df:30:31:b0:42:42:3b:2c:01:
c4:ed:74:a6:8f:f9:da:fd:62:d5:3e:47:c5:9c:43:78:eb:16:
d3:29:39:90:67:f9:94:59:84:d7:fa:39:72:a0:ea:cd:7d:d5:
0c:2c:9d:c2:34:26:48:01:8a:a6:53:23:9f:cc:cc:8f:67:a5:
8d:a3:fb:d8:bf:c8:4a:43:59:49:b2:80:23:c9:85:b1:0f:61:
ff:b4:24:3e:57:7b:ef:a6:61:55:c5:fa:16:69:a3:a5:47:d2:
fd:ae:c6:d6:53:1c:a1:8b:fc:e8:20:fd:9a:73:0f:ee:b6:41:
96:0a:c1:59:87:84:50:61:b0:36:30:86:5f:29:7d:ba:09:40:
ee:59:58:cc:8a:53:40:d1:b9:84:79:5d:df:9d:2b:0a:61:04:
74:d7:a7:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO3LIBlI7964DGZMLqQ1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh
OWZhM2IwHhcNMjUwODIzMTQwMDU0WhcNMjUwODI0MTQwMDU0WjAzMTEwLwYDVQQD
EyhmOTgzMGM3MmJlMGUwNjliZTg2NTAxNzAwNDhmYTAxMWYxNTdlNjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU9B/Bpk+iINazv1YurXPSE5A9it
imiB7gHSC8sh61ao4xkXy+WdvDqoROaD8j7qZhwmL4S+gDbP7+SgMDtmYQpEJX+y
jSn6GptwOlaIe+y9qgNcyFXPX4gS716M83qX1DxL1kkBh8rNPMBEm7PfxDbnwbt3
WC+VA5AdBsVY3uLxZOvxkYS96eakcqY0Cj2E2rbk5xwXdKNipu0AUgE9zRZ+0SkM
K2A7MyNBM9iSkqCaqdtOA1Ztonz20VMoCqj+jfCN0bF9DvtqUtj0tivF5zDdUvx1
nrzje8dl53okHFU4xl4AD/JCkojiJtZpcEfFMIjUHdCjSutuwUNBrYC2XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmDDHK+Dgab6GUBcASPoBHxV+ZmMB8GA1UdIwQY
MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt
YzkwN2FlMWMyMTFlLzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl
LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOU9rhnW
fYwcmyMxAKvl9ABM5H18K37Qnc1wKacZNedk6awGl0zFDYUZ9GWvXpa8U9Sqa6Cm
4K2Adod1E+w+d1SGwXszaT7HVPvozhpbl1aQ6ni/1c1vXUqFTxIiQsoD9Vpe3zAx
sEJCOywBxO10po/52v1i1T5HxZxDeOsW0yk5kGf5lFmE1/o5cqDqzX3VDCydwjQm
SAGKplMjn8zMj2eljaP72L/ISkNZSbKAI8mFsQ9h/7QkPld776ZhVcX6FmmjpUfS
/a7G1lMcoYv86CD9mnMP7rZBlgrBWYeEUGGwNjCGXyl9uglA7llYzIpTQNG5hHld
350rCmEEdNenKw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:14:10 2025 by rpki-client