Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json)
Hash identifier: wv3/yVJ8lQYJBBg+Pv6OUNL7pmubhP5E+trlKGQNoZM=
Subject key identifier: DA:83:AE:45:7B:C5:94:EA:97:3E:B8:FB:76:1E:D4:33:86:96:B1:5E
Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Certificate serial: 0198D65FFF347A2F38CCBA0FE4011A2358BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
Manifest number: BF
Signing time: Sat 23 Aug 2025 10:01:12 +0000
Manifest this update: Sat 23 Aug 2025 10:01:12 +0000
Manifest next update: Sun 24 Aug 2025 10:01:12 +0000
Files and hashes: 1: dlXIk7WimVWVHc3ungqiNoZMusw.roa (hash: RfuMfcHrLbRg0Y3xsz3a1+VdHPSrzNKZ40aYKpVDn2E=)
2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: piDUtv0Ezk/3O8qa7s5g9cYqxsf3kV34AfC9BJZw0YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ff:34:7a:2f:38:cc:ba:0f:e4:01:1a:23:58:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438
Validity
Not Before: Aug 23 10:01:12 2025 GMT
Not After : Aug 24 10:01:12 2025 GMT
Subject: CN=da83ae457bc594ea973eb8fb761ed4338696b15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4b:ff:b0:4d:f1:df:4e:0f:36:60:0a:2e:3f:
b3:64:45:7c:bf:a4:ce:97:7a:46:fa:75:a4:f2:67:
87:52:c7:75:9c:f4:d5:11:b1:2f:f7:77:fa:ff:bf:
c0:5f:cc:c6:c0:8f:ff:d3:24:7f:3a:58:d0:bf:7d:
dc:b6:cc:17:e5:07:68:39:4a:07:f6:85:95:4f:dc:
c0:86:b0:0e:f4:64:40:d8:42:71:92:75:a9:4c:47:
7f:e7:3a:1c:e5:30:93:81:ba:ae:ce:52:c3:25:33:
1d:1a:05:59:63:85:7c:64:c1:a3:64:9a:83:4a:ed:
8a:0f:d8:af:55:6f:ef:9b:9c:a1:d6:ca:7f:a1:56:
56:0e:e3:b7:49:f2:e3:27:35:b3:22:f5:84:0f:f9:
9d:a7:ed:bf:a6:19:f8:88:da:b3:1e:f7:aa:f7:0b:
ff:14:b1:2e:bd:e2:7f:44:2f:02:d6:03:f3:37:ae:
d1:6c:6e:ea:9b:93:4a:af:2e:89:f5:0e:47:4c:19:
aa:d6:d6:4f:82:43:8d:66:84:7b:cd:f0:68:43:a9:
fa:4c:aa:2e:56:f4:36:24:20:f2:3a:eb:97:4e:22:
7b:f7:48:fa:f0:79:94:26:8c:22:68:0d:00:9d:3b:
d5:e7:3a:d5:c4:a3:50:9a:36:e6:ca:f3:5e:bc:1f:
0c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:83:AE:45:7B:C5:94:EA:97:3E:B8:FB:76:1E:D4:33:86:96:B1:5E
X509v3 Authority Key Identifier:
keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:86:85:46:9a:2c:82:4d:a0:42:a8:45:f8:85:12:1a:f2:63:
14:17:ee:74:a5:95:17:b8:f8:07:a9:72:4e:86:3d:69:f5:ef:
ac:30:a6:1e:59:80:65:b4:6e:02:17:e9:04:94:69:04:03:10:
8f:b2:4e:4f:ca:0b:7d:7e:9e:5a:7c:18:5a:83:34:2f:53:73:
ae:87:24:e5:8b:ec:ea:e4:3f:a1:5b:9a:8e:fd:97:0b:1a:fb:
50:b4:3d:15:7e:2d:75:97:99:11:53:3d:ac:65:5b:97:b7:7d:
c4:ab:44:f0:11:30:10:60:f2:bd:a3:64:c1:e0:76:08:b7:72:
3e:ba:8b:22:df:ef:d6:f2:a6:d7:78:8e:57:a3:88:2e:a0:95:
68:6d:f9:42:46:4e:ea:b7:51:98:33:e2:a4:40:f1:29:b0:1a:
e6:64:bc:5b:6d:4d:65:5c:bf:b9:cc:a4:e5:56:ca:85:35:a4:
8f:cc:f0:9e:f0:f2:6f:d2:3a:2b:68:6d:64:c5:0d:05:d1:8a:
7a:8a:ed:b1:db:66:b5:1a:bb:30:1c:4a:fe:de:8b:17:be:ab:
69:dd:b4:45:a4:cd:ee:ea:56:cb:1d:61:ba:ad:8e:8f:f1:d5:
52:c6:7e:0b:c6:00:2f:29:24:2d:f2:4d:c6:32:0b:c4:7c:d7:
7f:85:23:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX/80ei84zLoP5AEaI1i9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYWY1YWU0NmYwNWVmZjM0NDMzYjVmMzcxMDYwZGQ0Y2Ni
ZGU0MzgwHhcNMjUwODIzMTAwMTEyWhcNMjUwODI0MTAwMTEyWjAzMTEwLwYDVQQD
EyhkYTgzYWU0NTdiYzU5NGVhOTczZWI4ZmI3NjFlZDQzMzg2OTZiMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkv/sE3x304PNmAKLj+zZEV8v6TO
l3pG+nWk8meHUsd1nPTVEbEv93f6/7/AX8zGwI//0yR/OljQv33ctswX5QdoOUoH
9oWVT9zAhrAO9GRA2EJxknWpTEd/5zoc5TCTgbquzlLDJTMdGgVZY4V8ZMGjZJqD
Su2KD9ivVW/vm5yh1sp/oVZWDuO3SfLjJzWzIvWED/mdp+2/phn4iNqzHveq9wv/
FLEuveJ/RC8C1gPzN67RbG7qm5NKry6J9Q5HTBmq1tZPgkONZoR7zfBoQ6n6TKou
VvQ2JCDyOuuXTiJ790j68HmUJowiaA0AnTvV5zrVxKNQmjbmyvNevB8MhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqDrkV7xZTqlz64+3Ye1DOGlrFeMB8GA1UdIwQY
MBaAFKyvWuRvBe/zRDO183EGDdTMveQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgt
MTNjMmVhOTJhYTllLzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgtMTNjMmVhOTJhYTll
LzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYaFRpos
gk2gQqhF+IUSGvJjFBfudKWVF7j4B6lyToY9afXvrDCmHlmAZbRuAhfpBJRpBAMQ
j7JOT8oLfX6eWnwYWoM0L1Nzrock5Yvs6uQ/oVuajv2XCxr7ULQ9FX4tdZeZEVM9
rGVbl7d9xKtE8BEwEGDyvaNkweB2CLdyPrqLIt/v1vKm13iOV6OILqCVaG35QkZO
6rdRmDPipEDxKbAa5mS8W21NZVy/ucyk5VbKhTWkj8zwnvDyb9I6K2htZMUNBdGK
eortsdtmtRq7MBxK/t6LF76rad20RaTN7upWyx1huq2Oj/HVUsZ+C8YALykkLfJN
xjILxHzXf4UjnA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:06:35 2025 by rpki-client