Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier: sVclHe5H5fFTNZ59JQqqbSDoMJpr9TZ5hd5FN2yD634=
Subject key identifier: 18:2E:1A:34:27:54:58:67:18:7C:97:87:BB:60:BA:6C:8D:52:5D:3E
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 0198530EB27851F6B5BEECF01CBE1AC6F3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number: 0EDE
Signing time: Mon 28 Jul 2025 22:02:08 +0000
Manifest this update: Mon 28 Jul 2025 22:02:08 +0000
Manifest next update: Tue 29 Jul 2025 22:02:08 +0000
Files and hashes: 1: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (hash: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=)
2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: 9lNwkNtTKq6IDFc9+9qQxpLoNv7pCRimyIvtAEKGR80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:b2:78:51:f6:b5:be:ec:f0:1c:be:1a:c6:f3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Jul 28 22:02:08 2025 GMT
Not After : Jul 29 22:02:08 2025 GMT
Subject: CN=182e1a3427545867187c9787bb60ba6c8d525d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dd:bd:e6:b3:41:14:43:44:e0:e6:4b:33:5b:
ab:e3:13:4e:fd:29:89:97:9c:c8:d8:90:66:4f:d7:
54:83:22:c7:f4:a1:0f:b2:a6:2f:7f:06:bd:88:9f:
61:7f:11:69:87:eb:3e:88:81:95:16:cd:5f:01:64:
94:51:63:25:38:82:f3:30:b0:ee:d8:4d:8a:a9:42:
b5:7a:67:14:36:4f:7c:69:8f:55:e9:4d:49:24:7f:
48:cf:8b:75:6d:df:b3:a7:6f:a0:3c:d2:05:6e:37:
28:7e:5b:ac:81:a2:4c:b7:3c:e2:09:f8:8d:f8:4e:
85:2a:a3:b6:43:80:23:8f:57:43:ee:17:9d:03:78:
9f:2d:0b:e7:d2:f9:f1:86:35:f6:01:72:58:c5:31:
eb:ac:40:53:c1:f4:99:78:81:f5:67:47:33:78:b5:
54:4a:dc:eb:d0:c8:f9:1d:f4:6f:9c:f6:fd:39:b3:
5a:54:c7:84:1b:e3:65:ec:80:0b:08:ac:f9:3f:cf:
75:78:3d:75:99:0a:7a:35:56:2c:df:6a:7b:1e:2b:
57:f3:5d:dc:7f:4f:65:07:59:65:99:fd:3d:6a:29:
ed:6a:72:f9:2b:13:25:47:8d:75:23:38:be:00:1e:
b7:af:26:53:00:fd:87:ee:e9:6b:3c:62:87:03:43:
2e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2E:1A:34:27:54:58:67:18:7C:97:87:BB:60:BA:6C:8D:52:5D:3E
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c1:b3:14:dd:b8:8d:d6:f9:df:85:43:dc:4f:53:04:00:b0:
06:3c:66:37:cc:f3:c8:aa:62:4a:01:71:4c:ef:07:bf:36:19:
8c:e0:4a:62:05:7d:fa:21:7f:29:bf:bc:e8:47:15:f9:6f:b1:
f7:8b:d7:1b:3b:c8:3a:73:3f:e7:90:ae:61:19:01:23:e8:4d:
22:31:7e:2e:9f:ae:44:1a:16:da:4b:71:73:55:2e:52:a3:c9:
6f:72:10:d8:2f:4c:d7:3a:fb:73:0c:e9:99:5b:cc:55:5f:65:
18:ca:fa:dc:56:dc:c6:35:8c:0c:e3:35:fe:be:3f:08:b4:54:
9f:f4:84:6c:9a:48:a3:14:be:2e:f9:d0:07:2a:24:ba:d6:81:
37:cd:34:db:50:db:34:4d:7d:42:e8:5a:c2:bf:bf:42:6b:94:
19:4f:44:bf:36:f6:50:bb:98:29:16:c7:08:af:c4:80:04:ac:
ae:64:a0:fa:e9:9c:42:f4:0a:24:ec:12:99:0b:83:d9:a6:43:
8b:0a:56:2b:97:ae:62:42:22:a4:79:23:9b:90:a1:ba:05:55:
8e:9f:82:1a:d8:89:47:2c:56:14:e2:12:2d:1a:93:de:b6:d2:
6e:f5:8f:f6:ce:c2:9f:00:92:c9:2d:4e:8b:5c:47:af:33:7a:
74:10:1b:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDrJ4Ufa1vuzwHL4axvPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZGJmNDU2MDEwYTliZDE0OTQxY2EyYzkxY2E1MzNlN2Vm
NTE3OGEwHhcNMjUwNzI4MjIwMjA4WhcNMjUwNzI5MjIwMjA4WjAzMTEwLwYDVQQD
EygxODJlMWEzNDI3NTQ1ODY3MTg3Yzk3ODdiYjYwYmE2YzhkNTI1ZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d295rNBFENE4OZLM1ur4xNO/SmJ
l5zI2JBmT9dUgyLH9KEPsqYvfwa9iJ9hfxFph+s+iIGVFs1fAWSUUWMlOILzMLDu
2E2KqUK1emcUNk98aY9V6U1JJH9Iz4t1bd+zp2+gPNIFbjcoflusgaJMtzziCfiN
+E6FKqO2Q4Ajj1dD7hedA3ifLQvn0vnxhjX2AXJYxTHrrEBTwfSZeIH1Z0czeLVU
Stzr0Mj5HfRvnPb9ObNaVMeEG+Nl7IALCKz5P891eD11mQp6NVYs32p7HitX813c
f09lB1llmf09aintanL5KxMlR411Izi+AB63ryZTAP2H7ulrPGKHA0MuyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBguGjQnVFhnGHyXh7tgumyNUl0+MB8GA1UdIwQY
MBaAFK/b9FYBCpvRSUHKLJHKUz5+9ReKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQt
M2NkZGYxNzUxZjU5LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQtM2NkZGYxNzUxZjU5
LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8GzFN24
jdb534VD3E9TBACwBjxmN8zzyKpiSgFxTO8HvzYZjOBKYgV9+iF/Kb+86EcV+W+x
94vXGzvIOnM/55CuYRkBI+hNIjF+Lp+uRBoW2ktxc1UuUqPJb3IQ2C9M1zr7cwzp
mVvMVV9lGMr63FbcxjWMDOM1/r4/CLRUn/SEbJpIoxS+LvnQByokutaBN80021Db
NE19Quhawr+/QmuUGU9Evzb2ULuYKRbHCK/EgASsrmSg+umcQvQKJOwSmQuD2aZD
iwpWK5euYkIipHkjm5ChugVVjp+CGtiJRyxWFOISLRqT3rbSbvWP9s7CnwCSyS1O
i1xHrzN6dBAbDQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:06 2025 by rpki-client