Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: xLsERSREByLWKN2OXikfcm+Oq5oD4yic0Amt3Ux31MU=
Subject key identifier: EC:B7:6B:03:60:EC:89:EE:49:01:13:36:B3:DC:01:17:51:6B:87:BA
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 019847E466F8796EDCAF3139AE8BC3280E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 0AA5
Signing time: Sat 26 Jul 2025 18:00:07 +0000
Manifest this update: Sat 26 Jul 2025 18:00:07 +0000
Manifest next update: Sun 27 Jul 2025 18:00:07 +0000
Files and hashes: 1: EmdE4lFlfaABPtiZtlnbFIKNWhE.roa (hash: xZDQuK6O09neLie5Q456W4oztNFuHLsLoArEyWHRJSU=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: gqaIV9Kwl3WKoP7m0NpoAz6sDlbLCUWyPEsgJxNxh/E=)
3: lCpE9-_9vA0HzQAwKrWQ7gX2Gi8.roa (hash: YkwTTveNH0IQGCLC0ZIMEDB0zjPdx3yFhcYm5gkoPpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:66:f8:79:6e:dc:af:31:39:ae:8b:c3:28:0e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Jul 26 18:00:07 2025 GMT
Not After : Jul 27 18:00:07 2025 GMT
Subject: CN=ecb76b0360ec89ee49011336b3dc0117516b87ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:32:d9:68:36:41:69:e3:81:fa:f6:9a:14:
0f:63:32:99:e2:35:3f:7c:81:63:46:f2:18:af:48:
ca:58:6f:00:8a:37:f5:bd:7e:e5:fa:de:95:4c:f6:
55:52:74:df:c3:7c:11:f2:98:91:a9:d9:6d:c5:00:
8c:01:0e:63:69:30:59:06:40:d9:e1:a3:cc:86:14:
ec:f4:f9:db:68:27:6c:6f:7b:7a:41:7e:4f:58:6f:
f0:80:79:81:c5:07:79:ca:88:eb:cd:d3:ea:f2:a7:
de:ce:1b:21:b6:66:04:25:7b:fc:d6:41:d2:7d:48:
0b:46:3b:f3:af:eb:ba:c0:4a:fb:9b:d9:4d:45:40:
bb:d6:4f:1a:bd:25:a2:19:d1:e9:34:46:9b:ec:eb:
5f:2c:bd:dd:cd:03:97:53:87:37:f6:81:55:f2:cb:
09:7f:35:85:74:4d:2f:4c:19:02:45:8a:4f:98:34:
28:ca:28:ee:cc:84:c4:71:57:07:5d:b8:2d:d9:6b:
54:fc:dd:fe:58:57:85:c7:59:31:49:76:8f:41:c0:
75:44:42:58:0f:59:4b:68:77:66:37:4a:f0:4e:02:
bc:1e:3c:b5:72:d5:fb:39:7b:9d:69:eb:63:e1:7d:
9f:73:b0:30:95:36:8c:c6:8b:29:15:78:b0:88:37:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B7:6B:03:60:EC:89:EE:49:01:13:36:B3:DC:01:17:51:6B:87:BA
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:94:db:98:2a:7e:c2:39:e4:57:02:e1:77:f2:70:fe:74:44:
e6:66:53:b6:73:2c:3b:bf:f8:30:6b:12:5d:b9:80:48:17:4f:
ca:b7:d2:74:79:89:55:35:c2:33:6c:ac:a3:d3:37:b7:bb:ff:
5e:ba:d0:3d:6b:36:b6:d0:41:5d:e5:47:f0:bb:bf:0d:51:31:
2c:64:07:43:d1:d9:90:aa:f4:eb:01:2c:1d:2b:42:d1:7a:06:
f8:e9:bb:a0:d0:9d:70:68:df:7f:ed:86:7a:aa:33:de:ca:27:
f6:e1:dd:a0:77:c4:9e:cf:9c:c5:0a:c8:d6:cb:20:cc:79:84:
c8:a2:f9:40:b2:5c:42:35:60:fa:74:13:c9:b6:a4:54:6b:7b:
dc:26:73:66:bc:0c:4d:89:f3:a0:e6:4b:c9:43:8f:b5:13:bf:
ff:2b:ca:a7:4f:22:d9:df:e6:c8:1c:02:ad:74:de:34:e5:72:
10:54:e1:bc:c4:12:c5:25:9b:c1:d7:bf:79:7e:9b:93:59:9b:
88:0c:47:c9:2f:b2:b6:67:95:64:c1:1c:da:13:78:1e:7e:38:
ef:29:f7:97:5d:d0:f9:2d:96:fd:03:22:03:53:bd:92:67:b7:
f3:11:dd:dd:93:94:05:c6:04:d3:1d:5c:44:8c:e7:80:cf:41:
b5:0c:75:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5Gb4eW7crzE5rovDKA4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYjdkYzAzNzg5ZjU4NjIxYjI1ZThkZDBkOTI1ZGM5MWI0
YTVhYTIwHhcNMjUwNzI2MTgwMDA3WhcNMjUwNzI3MTgwMDA3WjAzMTEwLwYDVQQD
EyhlY2I3NmIwMzYwZWM4OWVlNDkwMTEzMzZiM2RjMDExNzUxNmI4N2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzgy2Wg2QWnjgfr2mhQPYzKZ4jU/
fIFjRvIYr0jKWG8Aijf1vX7l+t6VTPZVUnTfw3wR8piRqdltxQCMAQ5jaTBZBkDZ
4aPMhhTs9PnbaCdsb3t6QX5PWG/wgHmBxQd5yojrzdPq8qfezhshtmYEJXv81kHS
fUgLRjvzr+u6wEr7m9lNRUC71k8avSWiGdHpNEab7OtfLL3dzQOXU4c39oFV8ssJ
fzWFdE0vTBkCRYpPmDQoyijuzITEcVcHXbgt2WtU/N3+WFeFx1kxSXaPQcB1REJY
D1lLaHdmN0rwTgK8Hjy1ctX7OXudaetj4X2fc7AwlTaMxospFXiwiDcilQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOy3awNg7InuSQETNrPcARdRa4e6MB8GA1UdIwQY
MBaAFEq33AN4n1hiGyXo3Q2SXckbSlqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YTU5ZGItNWFkOC00ZjNmLTk3YzIt
ZjM4YmNiZDkzMzkwLzEvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84YTU5ZGItNWFkOC00ZjNmLTk3YzItZjM4YmNiZDkzMzkw
LzEvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5TbmCp+
wjnkVwLhd/Jw/nRE5mZTtnMsO7/4MGsSXbmASBdPyrfSdHmJVTXCM2yso9M3t7v/
XrrQPWs2ttBBXeVH8Lu/DVExLGQHQ9HZkKr06wEsHStC0XoG+Om7oNCdcGjff+2G
eqoz3son9uHdoHfEns+cxQrI1ssgzHmEyKL5QLJcQjVg+nQTybakVGt73CZzZrwM
TYnzoOZLyUOPtRO//yvKp08i2d/myBwCrXTeNOVyEFThvMQSxSWbwde/eX6bk1mb
iAxHyS+ytmeVZMEc2hN4Hn447yn3l13Q+S2W/QMiA1O9kme38xHd3ZOUBcYE0x1c
RIzngM9BtQx19w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:46:32 2025 by rpki-client