Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier: lJtr4D1fZkkuBn8qCOh6genOdTZ8wEGl5ZtyN/cuor4=
Subject key identifier: E1:F9:5D:50:BF:F6:8A:8A:83:82:AB:F0:7A:15:56:1F:86:0D:D9:A8
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial: 0198D473B039FB9C15F542E3EDC430E12F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number: 0FE9
Signing time: Sat 23 Aug 2025 01:03:28 +0000
Manifest this update: Sat 23 Aug 2025 01:03:28 +0000
Manifest next update: Sun 24 Aug 2025 01:03:28 +0000
Files and hashes: 1: XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa (hash: H5rv5m3vIYcLSxBobS/ikS6XumhtJHd2OiEi1Eup9mg=)
2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: MgNM8sWvjHoX9szeElkAAo9Ji7JwIDZx+D2Zz4HULLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:b0:39:fb:9c:15:f5:42:e3:ed:c4:30:e1:2f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
Validity
Not Before: Aug 23 01:03:28 2025 GMT
Not After : Aug 24 01:03:28 2025 GMT
Subject: CN=e1f95d50bff68a8a8382abf07a15561f860dd9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:8c:ec:9c:61:5c:ae:1a:a1:53:30:8b:77:
ce:36:32:47:fc:c4:c8:fe:70:58:b1:90:e3:fc:33:
6e:5b:24:65:fa:73:3f:ca:69:63:58:9b:58:08:b5:
d9:89:dd:19:c9:6a:39:b1:fc:ff:49:35:32:af:97:
d8:a9:5c:f9:d2:f6:f4:93:59:aa:18:a4:c0:eb:e4:
2e:b8:3e:d0:f1:ad:99:b1:60:04:8d:85:e6:4d:78:
33:08:34:14:f3:81:04:cd:72:9f:8f:6e:cd:d8:14:
2c:d8:18:49:3f:6e:bb:7e:2c:67:c2:0c:99:45:a6:
bf:f3:92:17:b2:34:37:67:99:20:06:d4:97:a3:f9:
c7:7e:f7:ee:de:d1:7c:78:9b:67:d9:50:6a:ce:f6:
d9:b0:83:a1:66:85:f1:c3:57:12:3e:ee:31:99:0b:
9f:99:b4:e2:83:6f:60:bc:be:26:e7:b7:b4:08:64:
e8:fd:20:fb:34:11:47:86:f8:8b:27:d5:4a:1e:04:
8d:0b:0b:0f:54:47:92:0c:f8:a9:a6:22:4a:9e:a3:
ab:23:b7:61:7f:7b:f3:61:a4:68:64:40:3d:91:66:
cc:9d:fe:4b:8f:2c:d5:44:67:ac:e3:8b:8a:6c:55:
bc:83:9e:dd:46:20:90:f3:a5:e7:a6:0a:29:cb:6e:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F9:5D:50:BF:F6:8A:8A:83:82:AB:F0:7A:15:56:1F:86:0D:D9:A8
X509v3 Authority Key Identifier:
keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:bc:33:ee:4d:4c:f5:60:00:27:fa:71:4f:ee:20:73:95:11:
cd:27:67:3b:7f:07:d5:53:13:68:79:1c:69:b6:02:35:78:c0:
30:e8:85:f1:1c:5e:35:ed:5f:09:b1:53:b4:b0:e2:30:d4:00:
02:5d:43:e2:4e:d4:dd:b8:96:12:2e:0b:14:07:41:b8:78:8c:
f3:d6:47:d0:10:31:74:86:51:c1:6c:50:fa:a3:1e:8b:6f:ab:
71:a4:5c:9e:8b:5f:3e:47:c4:4f:6d:a4:51:1d:86:e2:93:d9:
39:1a:60:c7:24:35:36:3b:fa:76:42:ab:52:19:44:d9:ee:4b:
c7:7c:68:f8:3a:a1:f4:1e:1d:ad:98:c8:91:2b:70:5e:10:10:
4c:c2:a7:45:8b:e6:f2:99:ed:25:fb:42:40:ad:0e:38:27:47:
56:0c:5a:b9:f8:ff:df:25:0a:cf:65:f0:87:d5:9c:fb:ce:a3:
23:1f:ae:c1:11:bb:48:b1:9a:c4:55:5a:1a:95:b0:71:2c:6a:
fb:cf:c4:2d:f4:b2:86:c4:f7:3c:ff:4f:96:97:2e:bd:e5:9c:
2e:03:3b:f5:f6:5f:6e:37:be:c5:1b:97:2c:bc:98:71:fb:21:
88:63:9d:a2:5f:1f:b6:95:b2:fe:42:d3:fb:53:cd:a2:8f:27:
40:57:41:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc7A5+5wV9ULj7cQw4S8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWZhYzY4NTVmMjI5NmJhZDE1OTg3MGY5Y2JlZDIyMzU2
NjEzYWIwHhcNMjUwODIzMDEwMzI4WhcNMjUwODI0MDEwMzI4WjAzMTEwLwYDVQQD
EyhlMWY5NWQ1MGJmZjY4YThhODM4MmFiZjA3YTE1NTYxZjg2MGRkOWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t2M7JxhXK4aoVMwi3fONjJH/MTI
/nBYsZDj/DNuWyRl+nM/ymljWJtYCLXZid0ZyWo5sfz/STUyr5fYqVz50vb0k1mq
GKTA6+QuuD7Q8a2ZsWAEjYXmTXgzCDQU84EEzXKfj27N2BQs2BhJP267fixnwgyZ
Raa/85IXsjQ3Z5kgBtSXo/nHfvfu3tF8eJtn2VBqzvbZsIOhZoXxw1cSPu4xmQuf
mbTig29gvL4m57e0CGTo/SD7NBFHhviLJ9VKHgSNCwsPVEeSDPippiJKnqOrI7dh
f3vzYaRoZEA9kWbMnf5LjyzVRGes44uKbFW8g57dRiCQ86Xnpgopy24xRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOH5XVC/9oqKg4Kr8HoVVh+GDdmoMB8GA1UdIwQY
MBaAFJkfrGhV8ilrrRWYcPnL7SI1ZhOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mMGIzMjAtOTk5MS00ZTcxLWIzZWUt
NDk0ZDkxYWViNjU1LzEvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mMGIzMjAtOTk5MS00ZTcxLWIzZWUtNDk0ZDkxYWViNjU1
LzEvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbwz7k1M
9WAAJ/pxT+4gc5URzSdnO38H1VMTaHkcabYCNXjAMOiF8RxeNe1fCbFTtLDiMNQA
Al1D4k7U3biWEi4LFAdBuHiM89ZH0BAxdIZRwWxQ+qMei2+rcaRcnotfPkfET22k
UR2G4pPZORpgxyQ1Njv6dkKrUhlE2e5Lx3xo+Dqh9B4drZjIkStwXhAQTMKnRYvm
8pntJftCQK0OOCdHVgxaufj/3yUKz2Xwh9Wc+86jIx+uwRG7SLGaxFVaGpWwcSxq
+8/ELfSyhsT3PP9PlpcuveWcLgM79fZfbje+xRuXLLyYcfshiGOdol8ftpWy/kLT
+1PNoo8nQFdBCA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:53 2025 by rpki-client