Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
File: Rv57VnIiRRFtQjS-SEoCpIod3h8.mft (raw, json)
Hash identifier: GADQXqsEmC5XnDaZY8ZC0zRaVDyn3wC56FjQaFDz2cE=
Subject key identifier: 35:27:34:24:53:42:05:4D:EC:B6:DA:E0:8C:1D:F0:1C:34:89:9F:0E
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Certificate issuer: /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial: 0198D6CD5F231B365DA2C9203D42C88F47C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
Manifest number: 0FCD
Signing time: Sat 23 Aug 2025 12:00:40 +0000
Manifest this update: Sat 23 Aug 2025 12:00:40 +0000
Manifest next update: Sun 24 Aug 2025 12:00:40 +0000
Files and hashes: 1: IhchjAlH7wZG7kzQTy4JNv3HhP8.roa (hash: MX+poTln1XfrF458aN+rzETZ5ejTHBJDcPW84QX3+eg=)
2: Rv57VnIiRRFtQjS-SEoCpIod3h8.crl (hash: HeMJsm23E9ic1je28RYZTybZbbkVkS3JGbNFcwjfxzE=)
3: m7K3o6zKpvccw8S7oHzkq7OVkd4.roa (hash: GgfDl73eI/b08tNz06PPsn6okyEEe2tBCJUd3Gjwvrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:5f:23:1b:36:5d:a2:c9:20:3d:42:c8:8f:47:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
Validity
Not Before: Aug 23 12:00:40 2025 GMT
Not After : Aug 24 12:00:40 2025 GMT
Subject: CN=352734245342054decb6dae08c1df01c34899f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:ff:1c:81:d5:75:e3:fd:89:26:40:e6:5c:
c2:39:7b:fe:1b:ff:2d:7a:29:fb:38:29:b8:e0:cd:
18:c0:e7:45:fa:11:8f:0b:1a:58:29:dd:bd:37:fb:
9b:99:3c:58:37:a0:e7:a6:35:25:3d:56:df:a1:b3:
12:14:14:54:6e:56:10:4b:b6:97:63:1a:26:0a:9c:
05:75:13:f0:6f:08:64:ce:f4:57:d4:d0:ad:5c:ec:
b2:0d:bf:d0:2d:c0:1e:20:8b:42:8a:93:3b:71:b3:
eb:ba:fd:e5:76:8f:5c:d7:c8:df:41:ff:92:01:4e:
6e:94:0b:45:d1:d3:11:96:45:14:02:54:ad:b0:6f:
a0:50:6e:1f:fc:18:d3:b2:2c:1c:cc:cd:11:c5:5e:
c5:91:3d:85:ec:df:81:00:e7:8a:bc:30:46:94:10:
34:6d:0b:e7:fb:ab:80:14:3f:fb:33:c0:ab:c5:86:
5d:29:77:ba:8f:38:01:f0:ac:5d:59:68:df:a5:27:
8f:db:71:8f:15:00:2b:7e:78:65:7e:8e:f6:0f:85:
08:cc:11:90:8e:7e:73:03:c7:80:75:dd:a8:33:40:
ae:00:d7:98:7d:67:c3:15:29:3f:a9:13:bb:f1:4f:
9a:40:c4:20:e8:5d:38:65:a1:83:e8:67:42:79:8a:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:27:34:24:53:42:05:4D:EC:B6:DA:E0:8C:1D:F0:1C:34:89:9F:0E
X509v3 Authority Key Identifier:
keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6d:fa:bf:79:4a:1d:73:75:c3:45:8b:6d:98:8c:58:53:46:
24:fd:8d:d9:19:65:cc:c1:7a:dc:20:50:b2:9e:af:35:b7:14:
e2:8b:86:9f:7d:b4:84:ee:af:57:64:4e:13:aa:ba:07:8b:33:
ea:36:38:bb:e3:66:2f:2a:d5:b8:15:be:f8:f1:6d:eb:09:c7:
4c:c4:d0:b0:c6:cd:c3:03:e6:f0:22:04:57:bb:3d:2b:d9:86:
4e:08:97:76:1f:a0:0e:14:8f:0c:31:14:d4:6d:b3:0c:bb:bd:
bb:7b:1f:9b:bb:b7:71:c3:16:24:bf:23:b9:13:c3:9a:4d:ba:
1e:f2:e3:a7:37:0e:5a:de:96:76:69:c5:51:a3:c4:c5:c9:89:
c4:8f:c7:8b:dc:72:28:db:68:7a:be:59:ba:39:db:7a:4d:98:
2e:d8:01:3c:bf:47:d0:2c:d3:69:7a:b8:71:8c:e8:e9:1d:39:
3d:b1:5e:9c:b6:86:70:b4:46:23:59:cc:8f:a7:c5:92:85:39:
01:08:4f:38:c0:7b:e2:29:78:18:09:89:a8:b1:42:9f:96:d2:
a2:08:1e:72:74:be:4f:a4:47:fe:37:47:91:f7:59:53:da:98:
92:be:7f:93:78:1a:61:72:a2:9e:87:e2:a0:ed:6b:e9:c0:a4:
aa:46:23:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzV8jGzZdoskgPULIj0fEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZmU3YjU2NzIyMjQ1MTE2ZDQyMzRiZTQ4NGEwMmE0OGEx
ZGRlMWYwHhcNMjUwODIzMTIwMDQwWhcNMjUwODI0MTIwMDQwWjAzMTEwLwYDVQQD
EygzNTI3MzQyNDUzNDIwNTRkZWNiNmRhZTA4YzFkZjAxYzM0ODk5ZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0L/HIHVdeP9iSZA5lzCOXv+G/8t
ein7OCm44M0YwOdF+hGPCxpYKd29N/ubmTxYN6DnpjUlPVbfobMSFBRUblYQS7aX
YxomCpwFdRPwbwhkzvRX1NCtXOyyDb/QLcAeIItCipM7cbPruv3ldo9c18jfQf+S
AU5ulAtF0dMRlkUUAlStsG+gUG4f/BjTsiwczM0RxV7FkT2F7N+BAOeKvDBGlBA0
bQvn+6uAFD/7M8CrxYZdKXe6jzgB8KxdWWjfpSeP23GPFQArfnhlfo72D4UIzBGQ
jn5zA8eAdd2oM0CuANeYfWfDFSk/qRO78U+aQMQg6F04ZaGD6GdCeYpJwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUnNCRTQgVN7Lba4Iwd8Bw0iZ8OMB8GA1UdIwQY
MBaAFEb+e1ZyIkURbUI0vkhKAqSKHd4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTct
NGJkMzM5MmQ1NWQxLzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTctNGJkMzM5MmQ1NWQx
LzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcm36v3lK
HXN1w0WLbZiMWFNGJP2N2RllzMF63CBQsp6vNbcU4ouGn320hO6vV2ROE6q6B4sz
6jY4u+NmLyrVuBW++PFt6wnHTMTQsMbNwwPm8CIEV7s9K9mGTgiXdh+gDhSPDDEU
1G2zDLu9u3sfm7u3ccMWJL8juRPDmk26HvLjpzcOWt6WdmnFUaPExcmJxI/Hi9xy
KNtoer5Zujnbek2YLtgBPL9H0CzTaXq4cYzo6R05PbFenLaGcLRGI1nMj6fFkoU5
AQhPOMB74il4GAmJqLFCn5bSoggecnS+T6RH/jdHkfdZU9qYkr5/k3gaYXKinofi
oO1r6cCkqkYjOQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:19:18 2025 by rpki-client