Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
File: IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft (raw, json)
Hash identifier: jEDOu31tAxg6hB79MF5cjwJDbg8Y9HtGgLhcP8jfO5o=
Subject key identifier: BE:EE:8F:D9:5C:34:34:FE:C4:F5:BB:45:B9:DA:29:BE:90:8F:58:A0
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 0198526807136C367E6339E14E14630B2B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
Manifest number: 14DF
Signing time: Mon 28 Jul 2025 19:00:05 +0000
Manifest this update: Mon 28 Jul 2025 19:00:05 +0000
Manifest next update: Tue 29 Jul 2025 19:00:05 +0000
Files and hashes: 1: A3E0-Bx-SkOraAi3ILNLwbtK2q8.roa (hash: oflLVWiMQR/h5//frwNh8Zh/ixGNkdyJmqiH96c6izM=)
2: IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl (hash: nq6C509Gc2xTtt/qze2/bnrElSOJWFjyVi9y4dQ0vEc=)
3: ZtZZEAiMokBjnJ6RL0fW_WRtUvg.roa (hash: HYmFAXxKVnFTMBP2WvTIUya5uxGXpwouKqV1Y54fjKg=)
4: tScHRMsv3pa-j9k0lmRr4JzNGL4.roa (hash: NDtPBe4Cb63irl43TeReFMTPmiPbWt6CuEvLh3TZdCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:07:13:6c:36:7e:63:39:e1:4e:14:63:0b:2b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Jul 28 19:00:05 2025 GMT
Not After : Jul 29 19:00:05 2025 GMT
Subject: CN=beee8fd95c3434fec4f5bb45b9da29be908f58a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:cb:fb:b3:3b:50:74:33:d6:f8:3c:91:ef:
49:5c:20:ef:27:77:27:99:32:55:ee:73:e7:8c:61:
63:e7:0b:83:b3:9b:53:d3:93:ec:b9:60:ef:e7:64:
75:20:09:62:d5:5a:f4:f2:df:71:60:94:70:a5:aa:
53:21:6e:e5:c3:8f:a6:af:99:7e:54:12:a0:a9:b3:
7d:26:3c:81:65:7d:c2:da:a1:70:3b:e4:7f:51:0c:
ff:fc:f4:52:b5:a9:b5:4e:40:be:7d:0f:3d:56:86:
12:d4:09:16:40:06:a3:36:5f:be:b8:44:6a:16:43:
2e:cc:8f:5b:2e:b6:73:d8:4c:b5:9f:10:c6:53:6d:
b6:fd:86:76:32:2f:0a:d9:16:6e:36:4b:7d:c1:53:
13:df:df:78:75:d8:99:2a:99:7b:b3:0a:dd:1b:ac:
c4:2d:c2:cc:8c:df:fd:1e:2d:28:41:9d:cb:5e:d0:
74:47:a1:4c:34:7d:c1:b7:9d:20:64:84:49:5f:6f:
11:73:9e:48:65:2a:4e:6d:3a:90:49:82:25:47:b2:
64:3a:62:53:77:06:fa:50:be:97:8b:8b:11:f4:d4:
e8:a4:08:6e:a6:06:eb:73:5d:ec:5d:70:52:28:2f:
40:cc:f7:1b:e9:d4:61:d8:3c:2d:aa:1c:9c:b7:9a:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EE:8F:D9:5C:34:34:FE:C4:F5:BB:45:B9:DA:29:BE:90:8F:58:A0
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d9:40:71:f5:2a:c9:61:ec:8b:da:92:02:ed:da:b7:47:fe:
65:3d:3e:6d:79:cf:0e:01:4c:30:2e:b2:4b:9d:7a:e5:51:f3:
2b:ec:05:7c:b3:42:e4:dc:a2:8e:9f:77:67:c7:b4:c3:02:a0:
08:ef:15:f9:bc:35:69:aa:78:d4:b2:6e:c0:83:0e:1c:fc:4d:
f1:b5:af:31:1f:3b:40:d5:60:78:bc:a6:43:e1:7b:9e:da:e6:
e9:97:cb:cb:2e:5e:56:0b:ed:85:8b:02:c5:dd:23:f6:01:27:
eb:13:54:55:2e:61:9c:6c:66:5c:a4:78:e3:c7:dd:0d:f9:60:
57:31:46:a2:12:e0:ca:97:f5:9e:89:63:5f:ee:c9:ff:e3:83:
e0:a2:02:af:c7:3e:82:6c:c7:3c:f9:20:62:70:78:3e:e2:ca:
6f:d5:21:4a:ef:a1:74:41:da:d9:a8:6d:37:89:36:b7:1f:56:
ff:9a:e6:21:b6:61:92:f3:0d:e1:dc:b9:2b:de:89:b6:d1:dd:
39:86:1d:de:c1:df:bc:1f:f2:50:ed:20:f7:9c:53:67:9b:55:
6d:1d:78:d0:a4:f7:0c:5e:be:15:2b:65:46:76:77:cf:c5:a2:
ee:f0:51:93:85:b7:c0:c6:2a:bf:8d:ba:ef:3f:90:8a:15:d4:
c9:9c:0e:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSaAcTbDZ+YznhThRjCytDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMzc1MTJlNTM1NWU4MTVhY2YwNjQ2MDNmOGFlM2Y1NTI4
YTVlM2IwHhcNMjUwNzI4MTkwMDA1WhcNMjUwNzI5MTkwMDA1WjAzMTEwLwYDVQQD
EyhiZWVlOGZkOTVjMzQzNGZlYzRmNWJiNDViOWRhMjliZTkwOGY1OGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkDL+7M7UHQz1vg8ke9JXCDvJ3cn
mTJV7nPnjGFj5wuDs5tT05PsuWDv52R1IAli1Vr08t9xYJRwpapTIW7lw4+mr5l+
VBKgqbN9JjyBZX3C2qFwO+R/UQz//PRStam1TkC+fQ89VoYS1AkWQAajNl++uERq
FkMuzI9bLrZz2Ey1nxDGU222/YZ2Mi8K2RZuNkt9wVMT3994ddiZKpl7swrdG6zE
LcLMjN/9Hi0oQZ3LXtB0R6FMNH3Bt50gZIRJX28Rc55IZSpObTqQSYIlR7JkOmJT
dwb6UL6Xi4sR9NTopAhupgbrc13sXXBSKC9AzPcb6dRh2Dwtqhyct5r+KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7uj9lcNDT+xPW7RbnaKb6Qj1igMB8GA1UdIwQY
MBaAFCA3US5TVegVrPBkYD+K4/VSil47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEt
YzJiYTI0NjUzZjdiLzEvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEtYzJiYTI0NjUzZjdi
LzEvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9lAcfUq
yWHsi9qSAu3at0f+ZT0+bXnPDgFMMC6yS5165VHzK+wFfLNC5Nyijp93Z8e0wwKg
CO8V+bw1aap41LJuwIMOHPxN8bWvMR87QNVgeLymQ+F7ntrm6ZfLyy5eVgvthYsC
xd0j9gEn6xNUVS5hnGxmXKR448fdDflgVzFGohLgypf1noljX+7J/+OD4KICr8c+
gmzHPPkgYnB4PuLKb9UhSu+hdEHa2ahtN4k2tx9W/5rmIbZhkvMN4dy5K96JttHd
OYYd3sHfvB/yUO0g95xTZ5tVbR140KT3DF6+FStlRnZ3z8Wi7vBRk4W3wMYqv426
7z+QihXUyZwOOg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:00:43 2025 by rpki-client