Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
File: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json)
Hash identifier: ojEIOFHsxohNESFyWqxXsLBSMnK+NdlT27PuUOJz5ro=
Subject key identifier: 3F:20:20:40:55:BA:ED:84:F7:1E:2C:4E:E9:9A:61:FB:4D:37:77:D9
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial: 0198D4738E1E122533AC4F07D0FF01EED165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
Manifest number: 09F4
Signing time: Sat 23 Aug 2025 01:03:19 +0000
Manifest this update: Sat 23 Aug 2025 01:03:19 +0000
Manifest next update: Sun 24 Aug 2025 01:03:19 +0000
Files and hashes: 1: E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa (hash: AbosUOGwDkylbwXsNTmNDaibnmXnMj0HIqZzxGPKQ6U=)
2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: Tvy9221mLaPIs3W3tGaJEP1qJvvJnSHm+Tas/1gdVog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:8e:1e:12:25:33:ac:4f:07:d0:ff:01:ee:d1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Validity
Not Before: Aug 23 01:03:19 2025 GMT
Not After : Aug 24 01:03:19 2025 GMT
Subject: CN=3f20204055baed84f71e2c4ee99a61fb4d3777d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:e5:f7:73:35:25:ad:87:9a:2d:83:e7:b0:
a1:b3:d1:a6:86:09:17:15:e9:31:dd:b7:59:a6:20:
13:03:14:07:af:86:8e:08:25:dd:64:89:0f:86:46:
66:5b:65:65:ed:2e:87:0d:69:67:dc:99:f7:83:e2:
02:83:31:d5:09:0b:5b:c2:0f:94:71:23:e5:46:24:
88:e7:b2:09:32:47:fc:5f:2e:a3:3e:7d:97:10:32:
7a:d5:c8:c3:d2:bd:f9:84:eb:69:4c:99:fe:a1:74:
b9:70:84:62:78:32:61:f0:8d:13:55:ab:8e:a9:77:
d6:31:86:7d:66:0e:75:53:8c:56:a3:4a:73:d5:db:
78:3b:bc:05:c3:97:fd:d7:35:5a:de:c2:24:08:98:
e9:2e:74:e0:67:00:07:20:cb:2b:cc:39:24:f2:7c:
5c:9c:d3:d7:0f:57:fa:03:18:6b:85:f0:3b:01:42:
d5:18:bb:2a:e8:88:12:2e:82:5d:fd:d1:34:98:44:
80:ca:6d:98:c8:31:9b:aa:30:07:39:92:1c:be:b4:
2c:91:9f:a2:f6:7f:e8:1b:47:6f:97:21:63:34:12:
72:4c:ec:ce:eb:1d:e2:a0:ca:55:af:8b:64:2a:42:
a6:b4:8b:eb:94:f1:2e:53:18:4e:c6:df:bb:c1:e8:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:20:20:40:55:BA:ED:84:F7:1E:2C:4E:E9:9A:61:FB:4D:37:77:D9
X509v3 Authority Key Identifier:
keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:dd:f3:eb:c6:d1:82:ed:b5:f5:66:31:58:1c:14:58:bc:06:
b8:06:42:75:3a:89:8f:b4:28:77:9c:05:f5:f6:56:c4:05:8d:
52:47:66:5a:70:b9:b3:1b:be:e9:a3:c6:46:03:17:43:80:55:
94:c2:4f:0d:60:43:5f:0d:17:be:31:55:11:d9:fe:e8:b4:c9:
1a:5e:dd:c7:66:2c:7b:63:9f:70:d2:ac:40:1d:e9:ab:9c:ce:
d7:f4:af:e9:6c:a6:d0:8b:b8:1c:72:ad:2f:98:1a:7e:71:c4:
df:60:1d:81:78:25:73:e7:de:57:25:b4:34:d0:50:bb:41:15:
00:24:37:19:f6:f9:94:e2:1f:aa:b8:b4:9b:1c:1f:71:69:84:
be:e2:cb:83:7e:5c:cb:4b:30:b5:2b:04:a4:e0:86:b3:3e:cf:
56:98:60:45:5e:09:e6:5e:e4:ec:0e:3b:1e:35:7f:85:f0:06:
90:93:68:fd:ff:c0:95:3a:20:26:1d:4a:40:db:8f:a2:ef:97:
05:fd:bd:42:f2:c2:e6:e9:d5:2d:3c:1c:ec:5a:f3:22:2e:62:
e8:28:29:8c:8f:fa:59:14:50:09:2c:ee:bb:d5:0b:22:ee:6a:
b2:62:ff:9f:09:43:b8:ee:f9:81:a6:7a:86:ba:f7:80:14:37:
fe:c4:c7:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc44eEiUzrE8H0P8B7tFlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYmQ1ZjhiYjVhNTk0ZDY3YjVjZTgwN2E4NGM1OWRkZTU2
OWE3NzUwHhcNMjUwODIzMDEwMzE5WhcNMjUwODI0MDEwMzE5WjAzMTEwLwYDVQQD
EygzZjIwMjA0MDU1YmFlZDg0ZjcxZTJjNGVlOTlhNjFmYjRkMzc3N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkLl93M1Ja2Hmi2D57Chs9GmhgkX
Fekx3bdZpiATAxQHr4aOCCXdZIkPhkZmW2Vl7S6HDWln3Jn3g+ICgzHVCQtbwg+U
cSPlRiSI57IJMkf8Xy6jPn2XEDJ61cjD0r35hOtpTJn+oXS5cIRieDJh8I0TVauO
qXfWMYZ9Zg51U4xWo0pz1dt4O7wFw5f91zVa3sIkCJjpLnTgZwAHIMsrzDkk8nxc
nNPXD1f6AxhrhfA7AULVGLsq6IgSLoJd/dE0mESAym2YyDGbqjAHOZIcvrQskZ+i
9n/oG0dvlyFjNBJyTOzO6x3ioMpVr4tkKkKmtIvrlPEuUxhOxt+7weiuBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8gIEBVuu2E9x4sTumaYftNN3fZMB8GA1UdIwQY
MBaAFD69X4u1pZTWe1zoB6hMWd3laad1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jZWE1Y2YtMDc4Mi00MGQxLTg5MTMt
OTI3MTJmOTVlMzM2LzEvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jZWE1Y2YtMDc4Mi00MGQxLTg5MTMtOTI3MTJmOTVlMzM2
LzEvUHIxZmk3V2xsTlo3WE9nSHFFeFozZVZwcDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKd3z68bR
gu219WYxWBwUWLwGuAZCdTqJj7Qod5wF9fZWxAWNUkdmWnC5sxu+6aPGRgMXQ4BV
lMJPDWBDXw0XvjFVEdn+6LTJGl7dx2Yse2OfcNKsQB3pq5zO1/Sv6Wym0Iu4HHKt
L5gafnHE32AdgXglc+feVyW0NNBQu0EVACQ3Gfb5lOIfqri0mxwfcWmEvuLLg35c
y0swtSsEpOCGsz7PVphgRV4J5l7k7A47HjV/hfAGkJNo/f/AlTogJh1KQNuPou+X
Bf29QvLC5unVLTwc7FrzIi5i6CgpjI/6WRRQCSzuu9ULIu5qsmL/nwlDuO75gaZ6
hrr3gBQ3/sTHfQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:53 2025 by rpki-client