Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
File: v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json)
Hash identifier: mts/zdNAHXDPUj+7kHgawRcMVaIoOqqQiA47WNNzj94=
Subject key identifier: CE:A6:47:1F:46:26:26:0F:56:78:7B:46:EF:2E:33:95:1E:2F:11:89
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial: 0198D73AEBF5D39DB6FB6D0DAD8727118044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 14:00:19 +0000
Manifest this update: Sat 23 Aug 2025 14:00:19 +0000
Manifest next update: Sun 24 Aug 2025 14:00:19 +0000
Files and hashes: 1: B_BBQaqQOZZdiFqzJdt68RGvVTU.roa (hash: p8nyxzChdTcqx5QWY5bjhUZqFlEO6HaoHatKb5Ff2uw=)
2: THgpYsuwtp7Ym3zY6av8RgfZzLY.roa (hash: uQpggmJggCBeqYH5pLAJ2yEpa7lh8jrstdPPyiUJ77Q=)
3: cQNCKEPPhAFzmHj-XbDsRfptwBU.roa (hash: ymcXQ0jfpJoz4wb2MWPQfmWBhQPG8KLXmWx/brPfkUI=)
4: nofXYpB0FisO0jICtG3Ef-GQMH0.roa (hash: 6sPkKup7pdVWKTBxrRqOcxcRj13RLFPr/8N1XCriJwg=)
5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: swvV+yN2iYE7bSbfyaMvueC2fMp9Cv1QXNHfbmGFj4o=)
6: zoiZaQy1X6uA_fb18sRqVooSN48.roa (hash: +vAm2rSORgkYs00N65eNpRyENjf55QylaufRqfKzfJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:eb:f5:d3:9d:b6:fb:6d:0d:ad:87:27:11:80:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Validity
Not Before: Aug 23 14:00:19 2025 GMT
Not After : Aug 24 14:00:19 2025 GMT
Subject: CN=cea6471f4626260f56787b46ef2e33951e2f1189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:38:be:d1:7b:54:35:15:51:5a:ad:ca:8f:
91:6a:9b:60:65:b1:bb:20:a1:22:76:78:15:05:f7:
a0:93:ec:33:a6:0d:a3:73:97:89:da:19:a7:f5:7d:
e6:07:46:04:c0:be:17:46:8e:ee:2f:a8:41:94:44:
c5:a1:28:fd:ce:9e:19:13:bb:f8:0b:98:2d:d4:ff:
72:02:f2:62:b3:95:b5:0d:c3:45:cc:be:5c:93:11:
bc:6b:a2:33:8f:31:7e:0a:be:e2:25:7d:57:e2:d0:
29:1e:e1:bd:44:16:cd:67:cd:bc:d4:f0:9a:57:a0:
5f:14:79:71:c6:14:a1:c6:bb:c7:a5:89:36:2f:78:
c9:02:54:39:ad:38:10:22:fb:e5:01:e9:c0:b1:24:
4a:94:0a:27:eb:9a:12:c2:af:af:17:a8:72:a6:42:
72:2c:f3:df:b8:ca:06:eb:ed:53:b5:85:46:01:58:
fe:c5:31:78:86:d4:e6:01:03:6d:d2:9d:c1:62:23:
b6:e9:35:75:e6:df:59:4d:e7:e3:38:3a:66:4c:b2:
c0:4a:0d:ca:75:91:5c:98:84:9c:67:fb:7c:09:08:
f4:5b:d7:2a:01:cf:3c:0e:1f:ec:d7:3e:ed:7f:fe:
16:de:da:64:91:c0:e4:91:05:83:53:91:3f:85:90:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A6:47:1F:46:26:26:0F:56:78:7B:46:EF:2E:33:95:1E:2F:11:89
X509v3 Authority Key Identifier:
keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ed:7f:6b:d8:3d:a6:8c:53:55:d6:9b:d4:aa:17:16:f0:34:
7c:58:fe:97:37:a6:da:a6:0c:15:62:3e:11:08:d9:40:ab:ba:
67:17:4c:f6:fc:04:2a:39:c7:69:66:d9:62:b1:a8:3b:46:b4:
d8:4e:b0:d1:1f:bc:f3:16:75:8a:0c:d7:b7:b0:e3:5c:c6:a0:
4d:81:ce:ce:92:c9:1e:96:1c:e3:69:a9:39:0d:ba:70:12:43:
0f:20:5a:5a:ab:32:23:a8:5f:97:d1:d5:a4:c4:4d:f1:d2:58:
37:6d:a4:33:12:bb:60:ab:5a:7f:c8:8c:05:96:ce:98:b4:01:
79:68:04:38:c6:ed:7f:06:f5:2f:a6:d8:70:79:a7:82:c6:47:
8a:4a:8e:a3:59:9f:1c:5d:4e:ee:f8:06:68:ee:42:8a:d6:05:
73:5a:bc:84:fc:f3:0a:e1:c8:c4:4b:7d:73:5f:a9:db:91:cf:
4d:dc:89:18:af:f0:70:7d:5e:87:04:02:b5:a8:b4:fb:cf:e3:
0f:61:95:bd:1f:31:0e:98:d6:e0:f4:1a:3f:56:cd:bc:dc:77:
69:15:24:a1:95:6a:b0:d2:fe:53:0b:0c:91:68:ef:2d:89:41:
04:58:e3:c6:f3:9e:a4:11:72:71:64:eb:a2:d8:85:60:35:32:
c3:51:c6:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOuv10522+20NrYcnEYBEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDA5YTg3NzQzODE3YzU2ZjgwODgwMDdhNTc0NmViNjlm
ZjJlMzAwHhcNMjUwODIzMTQwMDE5WhcNMjUwODI0MTQwMDE5WjAzMTEwLwYDVQQD
EyhjZWE2NDcxZjQ2MjYyNjBmNTY3ODdiNDZlZjJlMzM5NTFlMmYxMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhk4vtF7VDUVUVqtyo+RaptgZbG7
IKEidngVBfegk+wzpg2jc5eJ2hmn9X3mB0YEwL4XRo7uL6hBlETFoSj9zp4ZE7v4
C5gt1P9yAvJis5W1DcNFzL5ckxG8a6IzjzF+Cr7iJX1X4tApHuG9RBbNZ8281PCa
V6BfFHlxxhShxrvHpYk2L3jJAlQ5rTgQIvvlAenAsSRKlAon65oSwq+vF6hypkJy
LPPfuMoG6+1TtYVGAVj+xTF4htTmAQNt0p3BYiO26TV15t9ZTefjODpmTLLASg3K
dZFcmIScZ/t8CQj0W9cqAc88Dh/s1z7tf/4W3tpkkcDkkQWDU5E/hZDNRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6mRx9GJiYPVnh7Ru8uM5UeLxGJMB8GA1UdIwQY
MBaAFL/Qmod0OBfFb4CIAHpXRutp/y4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUt
ZGJjYThjMzFlYmM4LzEvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUtZGJjYThjMzFlYmM4
LzEvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdu1/a9g9
poxTVdab1KoXFvA0fFj+lzem2qYMFWI+EQjZQKu6ZxdM9vwEKjnHaWbZYrGoO0a0
2E6w0R+88xZ1igzXt7DjXMagTYHOzpLJHpYc42mpOQ26cBJDDyBaWqsyI6hfl9HV
pMRN8dJYN22kMxK7YKtaf8iMBZbOmLQBeWgEOMbtfwb1L6bYcHmngsZHikqOo1mf
HF1O7vgGaO5CitYFc1q8hPzzCuHIxEt9c1+p25HPTdyJGK/wcH1ehwQCtai0+8/j
D2GVvR8xDpjW4PQaP1bNvNx3aRUkoZVqsNL+UwsMkWjvLYlBBFjjxvOepBFycWTr
otiFYDUyw1HGsQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:45:09 2025 by rpki-client