Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
File: RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json)
Hash identifier: cLA4Y6xnFFBRghpt/SeGhOEdZs8Zlp7Y7g4wNdRj7d8=
Subject key identifier: 15:CC:2F:64:6E:C3:F0:C1:B6:46:68:7C:43:59:ED:5E:1A:66:21:38
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial: 0199FBEBD8770512DB0226C7C8C356404C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
Manifest number: 0228
Signing time: Sun 19 Oct 2025 10:02:41 +0000
Manifest this update: Sun 19 Oct 2025 10:02:41 +0000
Manifest next update: Mon 20 Oct 2025 10:02:41 +0000
Files and hashes: 1: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (hash: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=)
2: 4lqvUj_aarjM1QCov1WKcZ47cD4.roa (hash: CUeCuFIy+7/m+7Rp9JxCjE4itMo0nF9rOUfz1A83JwI=)
3: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: odWsHx3CdSMcfVPLAwLoteigqbn6xmUh7KmS9RQPnX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d8:77:05:12:db:02:26:c7:c8:c3:56:40:4c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Validity
Not Before: Oct 19 10:02:41 2025 GMT
Not After : Oct 20 10:02:41 2025 GMT
Subject: CN=15cc2f646ec3f0c1b646687c4359ed5e1a662138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:97:9c:6f:81:cd:d5:77:c2:e6:8c:50:22:
45:86:2b:ee:28:73:bc:7b:b8:d6:a0:7d:ee:5a:ab:
4d:9d:19:b4:c8:75:d0:7d:07:bf:66:a3:b6:43:eb:
ba:3d:73:a0:8d:f4:d5:20:1f:08:b7:44:d9:aa:72:
1a:8c:3f:78:9b:23:53:5f:d7:5d:b4:e9:46:c7:18:
34:cc:9d:03:44:f2:a3:fb:bc:03:d9:7a:77:da:27:
81:b4:41:6c:e8:b0:18:74:1c:4f:e6:8e:72:50:d3:
0b:f4:31:fc:af:a0:a6:96:85:46:e3:20:a9:b7:b0:
8f:1f:85:dd:43:cc:02:c8:b5:ad:1e:19:6a:10:f3:
af:e9:36:27:22:3c:4f:92:17:43:ca:e7:ca:42:f8:
be:6c:bc:13:00:ac:b8:eb:a0:1f:88:33:38:46:e1:
a7:1c:26:5a:76:c9:5f:52:38:4e:08:a2:5c:d3:16:
27:0f:4e:5c:f1:28:8a:84:20:52:9c:91:68:32:5b:
dc:8a:cb:12:a9:ae:1b:57:31:54:e7:b2:a3:1e:2c:
e5:4c:e8:6f:06:a9:7f:39:fb:ab:3d:77:92:cf:e4:
77:8b:b5:1a:45:63:6a:88:b3:fa:46:cb:bd:24:99:
fc:9e:da:d6:8e:d3:da:d6:e9:05:c0:b3:08:85:85:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CC:2F:64:6E:C3:F0:C1:B6:46:68:7C:43:59:ED:5E:1A:66:21:38
X509v3 Authority Key Identifier:
keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6f:3d:ed:d1:27:07:1e:eb:2f:48:f0:18:68:0b:c7:ea:0a:
89:1e:e1:2a:69:54:6b:44:ea:88:a7:c0:bb:aa:21:43:23:57:
e9:82:3d:98:12:65:e2:64:09:66:07:ec:b4:a9:36:ac:21:50:
97:bf:3b:df:88:dd:23:22:15:5c:ea:e5:8b:e4:0a:18:80:32:
be:f0:13:41:74:53:b5:d9:fe:57:79:76:4c:af:df:16:27:6e:
42:91:a9:2d:68:66:a4:dc:62:09:b2:0f:fa:47:9f:00:00:0c:
98:02:e0:6d:1f:67:cd:80:26:40:56:cb:e7:d4:e3:53:c5:75:
de:48:ea:2f:f9:fd:76:2f:af:10:b3:45:06:f9:d1:62:f4:20:
b3:30:8c:fe:5e:2b:b5:ec:35:ad:e7:fc:c1:3b:31:58:a8:66:
ca:6f:62:94:a8:df:90:eb:7a:01:49:43:92:2b:e8:eb:67:e7:
a9:ab:83:92:53:6f:1a:f4:4b:32:1a:5b:f5:06:18:42:79:c6:
6d:cc:b3:18:55:61:92:06:53:6d:36:4f:5c:26:83:45:3c:6d:
76:43:d7:f0:49:35:ed:fb:04:d6:d3:18:b7:44:20:33:ab:7a:
1f:7a:bb:81:84:a1:c1:b4:aa:89:bc:11:82:5c:7c:a6:65:94:
7b:c6:5b:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn769h3BRLbAibHyMNWQExmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MDQ4NWY1ZWFjNjc1YTI0MWFiNmUwMmQ4ZTUzZGQyODU1
NmQyZWUwHhcNMjUxMDE5MTAwMjQxWhcNMjUxMDIwMTAwMjQxWjAzMTEwLwYDVQQD
EygxNWNjMmY2NDZlYzNmMGMxYjY0NjY4N2M0MzU5ZWQ1ZTFhNjYyMTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5mXnG+BzdV3wuaMUCJFhivuKHO8
e7jWoH3uWqtNnRm0yHXQfQe/ZqO2Q+u6PXOgjfTVIB8It0TZqnIajD94myNTX9dd
tOlGxxg0zJ0DRPKj+7wD2Xp32ieBtEFs6LAYdBxP5o5yUNML9DH8r6CmloVG4yCp
t7CPH4XdQ8wCyLWtHhlqEPOv6TYnIjxPkhdDyufKQvi+bLwTAKy466AfiDM4RuGn
HCZadslfUjhOCKJc0xYnD05c8SiKhCBSnJFoMlvcissSqa4bVzFU57KjHizlTOhv
Bql/OfurPXeSz+R3i7UaRWNqiLP6Rsu9JJn8ntrWjtPa1ukFwLMIhYWzyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXML2Ruw/DBtkZofENZ7V4aZiE4MB8GA1UdIwQY
MBaAFEcEhfXqxnWiQatuAtjlPdKFVtLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jNjBkODEtNzE0Mi00YTViLTliNTAt
MDA3N2MyYmRiZjM3LzEvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jNjBkODEtNzE0Mi00YTViLTliNTAtMDA3N2MyYmRiZjM3
LzEvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2897dEn
Bx7rL0jwGGgLx+oKiR7hKmlUa0TqiKfAu6ohQyNX6YI9mBJl4mQJZgfstKk2rCFQ
l78734jdIyIVXOrli+QKGIAyvvATQXRTtdn+V3l2TK/fFiduQpGpLWhmpNxiCbIP
+kefAAAMmALgbR9nzYAmQFbL59TjU8V13kjqL/n9di+vELNFBvnRYvQgszCM/l4r
tew1ref8wTsxWKhmym9ilKjfkOt6AUlDkivo62fnqauDklNvGvRLMhpb9QYYQnnG
bcyzGFVhkgZTbTZPXCaDRTxtdkPX8Ek17fsE1tMYt0QgM6t6H3q7gYShwbSqibwR
glx8pmWUe8Zbwg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:48 2025 by rpki-client