Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
File: u_iwZ3moMGXb3FgI4ef_r5x9jag.mft (raw, json)
Hash identifier: W9KIOIHcwBjKDPOdn+BeJRfKtlN3DzpcxZJEnaIJCHQ=
Subject key identifier: 4E:C4:A3:9E:24:EA:F4:6F:7B:46:91:39:C6:10:78:D5:CA:87:D6:1C
Authority key identifier: BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
Certificate issuer: /CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Certificate serial: 0198D73BDAF34F57CF29B4108ACB9EA26AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
Manifest number: ED
Signing time: Sat 23 Aug 2025 14:01:20 +0000
Manifest this update: Sat 23 Aug 2025 14:01:20 +0000
Manifest next update: Sun 24 Aug 2025 14:01:20 +0000
Files and hashes: 1: p50yN57F3LkXuY7-mhCsw823E8k.roa (hash: dyK2Pi+JnZP3NZuI9yP93De2BsaZ3Ntgr/tFvxnQ/R0=)
2: u_iwZ3moMGXb3FgI4ef_r5x9jag.crl (hash: XCB+vAjtrhNE2EVL8tBRGreRID357v3hX0pGsSevnKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:da:f3:4f:57:cf:29:b4:10:8a:cb:9e:a2:6a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Validity
Not Before: Aug 23 14:01:20 2025 GMT
Not After : Aug 24 14:01:20 2025 GMT
Subject: CN=4ec4a39e24eaf46f7b469139c61078d5ca87d61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6b:98:88:9c:dc:68:a3:cc:87:7b:d9:04:49:
d0:14:3a:28:ae:9d:e9:89:92:f8:41:98:8e:d7:fa:
68:e5:30:c7:d7:0f:4e:92:c6:44:ea:60:c9:d9:68:
a0:e3:32:bf:89:6a:80:ff:cb:79:bc:15:35:ee:66:
20:78:97:1f:8c:a0:b8:e5:b2:c6:51:29:3d:02:f3:
cc:e1:48:82:a6:6e:e4:a2:ad:8e:4b:75:75:54:3a:
a9:b3:c7:ab:6b:2b:ef:ab:48:f7:5c:6d:a1:ca:57:
b0:cf:9d:cd:00:7c:da:96:4c:67:83:84:22:9a:9a:
e5:69:2d:29:d1:09:ea:40:8a:04:c5:4b:90:de:85:
b6:c2:08:f8:f3:a1:b5:29:db:b9:00:20:40:15:13:
9f:16:ed:e5:10:6f:e5:8f:15:3d:71:22:56:a0:90:
b3:1f:27:70:ac:e5:69:d7:ec:d4:30:20:a7:5c:e2:
90:cc:09:ad:ac:7b:6a:76:f0:9a:b5:e9:21:97:05:
83:31:0e:c1:69:42:44:d5:e9:3b:97:3d:8f:51:3e:
5e:97:25:bc:28:60:ea:21:39:05:2b:98:f8:f6:44:
a3:35:4c:40:3f:01:b8:0d:d7:92:70:85:f6:12:88:
36:c8:a0:23:48:83:bb:20:36:79:df:2e:65:aa:67:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C4:A3:9E:24:EA:F4:6F:7B:46:91:39:C6:10:78:D5:CA:87:D6:1C
X509v3 Authority Key Identifier:
keyid:BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:13:c7:48:0f:54:4e:12:91:94:66:f9:20:f5:1e:ee:48:d8:
d5:03:73:df:c1:bc:79:ef:7e:54:63:ca:a2:50:17:ec:d3:ad:
40:31:dd:f5:ea:eb:aa:61:f6:28:1c:bd:87:e6:3e:21:ab:32:
41:c6:89:b2:2f:79:a7:e1:1e:e2:dd:cc:91:6f:5c:1b:44:84:
c1:c6:41:7a:a5:b8:de:3b:8b:52:e1:0f:6d:6f:eb:65:69:79:
c8:41:e3:47:bb:27:ee:2b:13:69:2e:71:d9:46:0e:25:bf:f3:
e6:da:88:96:39:e9:7c:1a:80:17:ab:02:24:0a:c1:8b:4c:c6:
38:2f:7e:13:8d:16:37:61:31:12:da:5a:90:9a:a4:93:d0:0a:
87:32:5c:a4:db:0c:d9:80:80:e5:f1:96:ad:19:89:10:23:59:
90:1c:ff:0a:fa:c3:b7:71:fd:63:46:88:77:23:ac:27:28:8f:
78:93:86:bc:71:1b:14:18:c0:25:10:ee:83:29:b7:2e:12:08:
0c:7f:cb:a2:f8:0b:ba:42:46:c6:31:70:6f:18:7a:32:59:b8:
4a:57:4b:10:85:af:67:e3:83:91:36:74:40:66:bd:fd:86:b7:
d9:51:20:17:d3:d4:91:0b:89:66:3a:31:bd:e0:bf:2a:39:35:
78:f7:cc:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO9rzT1fPKbQQisueomrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjhiMDY3NzlhODMwNjVkYmRjNTgwOGUxZTdmZmFmOWM3
ZDhkYTgwHhcNMjUwODIzMTQwMTIwWhcNMjUwODI0MTQwMTIwWjAzMTEwLwYDVQQD
Eyg0ZWM0YTM5ZTI0ZWFmNDZmN2I0NjkxMzljNjEwNzhkNWNhODdkNjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WuYiJzcaKPMh3vZBEnQFDoorp3p
iZL4QZiO1/po5TDH1w9OksZE6mDJ2Wig4zK/iWqA/8t5vBU17mYgeJcfjKC45bLG
USk9AvPM4UiCpm7koq2OS3V1VDqps8erayvvq0j3XG2hylewz53NAHzalkxng4Qi
mprlaS0p0QnqQIoExUuQ3oW2wgj486G1Kdu5ACBAFROfFu3lEG/ljxU9cSJWoJCz
HydwrOVp1+zUMCCnXOKQzAmtrHtqdvCatekhlwWDMQ7BaUJE1ek7lz2PUT5elyW8
KGDqITkFK5j49kSjNUxAPwG4DdeScIX2Eog2yKAjSIO7IDZ53y5lqmfXUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7Eo54k6vRve0aROcYQeNXKh9YcMB8GA1UdIwQY
MBaAFLv4sGd5qDBl29xYCOHn/6+cfY2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9pd1ozbW9NR1hiM0ZnSTRlZl9yNXg5amFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82OWUxMDktMGUwMi00ZjNjLTk4MWYt
NTQ4ZDQ3YTQ2YWQ0LzEvdV9pd1ozbW9NR1hiM0ZnSTRlZl9yNXg5amFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82OWUxMDktMGUwMi00ZjNjLTk4MWYtNTQ4ZDQ3YTQ2YWQ0
LzEvdV9pd1ozbW9NR1hiM0ZnSTRlZl9yNXg5amFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxPHSA9U
ThKRlGb5IPUe7kjY1QNz38G8ee9+VGPKolAX7NOtQDHd9errqmH2KBy9h+Y+Iasy
QcaJsi95p+Ee4t3MkW9cG0SEwcZBeqW43juLUuEPbW/rZWl5yEHjR7sn7isTaS5x
2UYOJb/z5tqIljnpfBqAF6sCJArBi0zGOC9+E40WN2ExEtpakJqkk9AKhzJcpNsM
2YCA5fGWrRmJECNZkBz/CvrDt3H9Y0aIdyOsJyiPeJOGvHEbFBjAJRDugym3LhII
DH/LovgLukJGxjFwbxh6Mlm4SldLEIWvZ+ODkTZ0QGa9/Ya32VEgF9PUkQuJZjox
veC/Kjk1ePfMzQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:43 2025 by rpki-client