Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: 9eUfSk18rnWC0TmWRy0+BbG+CdtRJBQDnDjZfTWZ0k0=
Subject key identifier: 98:FA:ED:B6:0A:B9:00:C8:DB:71:70:2F:FB:F2:32:7F:F9:04:41:09
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 019858D8824F38CB0D0495252D165AC94398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 0AAA
Signing time: Wed 30 Jul 2025 01:00:40 +0000
Manifest this update: Wed 30 Jul 2025 01:00:40 +0000
Manifest next update: Thu 31 Jul 2025 01:00:40 +0000
Files and hashes: 1: DIYIrtOVCh0oZUgoHnsBzDVYRgk.roa (hash: 9ygbw2KxTYEdLBVrIZpBTqLv2Fu0lBk+DuBHrlgf8dM=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: rgYnK2sOf5u3RhuhC7ZUWYfyFQ6tBL0JPTBGJNS1D/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:d8:82:4f:38:cb:0d:04:95:25:2d:16:5a:c9:43:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Jul 30 01:00:40 2025 GMT
Not After : Jul 31 01:00:40 2025 GMT
Subject: CN=98faedb60ab900c8db71702ffbf2327ff9044109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:f1:e7:8a:7d:0b:72:17:6e:fe:83:15:f4:
b7:b2:f5:29:5a:e3:b3:7d:ea:24:04:22:c5:bd:7c:
22:7a:57:d8:1a:10:c2:5e:f7:74:cb:63:fb:30:f6:
90:fc:f6:fb:04:17:bb:88:a8:42:db:32:1d:07:e7:
8c:b2:bd:16:91:d0:20:6a:8c:81:65:0b:30:32:5d:
5d:d8:3c:47:67:48:ad:8b:11:3b:40:95:dd:6f:45:
60:bf:b8:5b:bb:ef:eb:17:42:1c:82:1b:2e:a7:09:
a2:f9:06:a2:6f:1b:02:96:fb:d8:09:13:52:7a:86:
ea:e7:2c:4f:09:ca:5a:35:e5:14:85:eb:9d:59:eb:
7e:d3:c8:5a:60:fe:60:46:54:83:08:4d:15:95:7d:
a7:6d:eb:85:bd:76:8a:9c:49:ac:bc:1a:96:8d:c1:
a9:51:50:9c:7f:12:f9:85:9d:0e:95:8d:34:b4:75:
19:be:90:ea:ca:e3:cc:e6:65:d2:61:77:2f:e5:12:
8e:95:06:a7:7f:82:87:eb:46:be:c4:73:d8:db:3e:
33:a7:bd:d7:cd:68:76:0a:19:1c:e7:f4:ec:25:9e:
d2:98:b1:e6:9e:0b:fc:6c:d2:c5:dc:22:d0:68:56:
d8:ff:6e:40:9e:ad:fa:ea:35:f6:c7:be:f7:d5:fc:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FA:ED:B6:0A:B9:00:C8:DB:71:70:2F:FB:F2:32:7F:F9:04:41:09
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:5d:b1:04:e4:fa:12:15:f2:16:cd:97:42:90:8d:c1:b7:6d:
c6:ea:21:66:fd:ad:c8:0a:b6:5b:9c:14:aa:de:d8:c0:67:88:
8d:22:9c:a0:81:31:d5:80:68:cc:f2:e7:5d:b1:f5:5c:f5:0e:
fb:73:74:7b:3e:bf:4a:0f:08:15:e1:14:77:62:fb:bd:b0:2a:
81:68:8a:27:1c:65:8b:0d:63:f0:9c:73:c6:6d:ed:26:ce:6e:
0b:d5:56:e2:e6:09:a6:1f:04:50:d4:b5:0b:bf:03:5b:38:a0:
9f:22:f7:0a:e4:25:64:35:71:54:69:6a:d7:f7:7c:75:bf:3d:
8d:9b:5b:f6:06:30:be:41:71:da:cf:97:a2:a7:87:f2:74:62:
e3:8a:08:34:97:02:1c:3a:bb:00:6c:e3:d0:16:37:99:fe:e9:
30:e2:3c:09:88:4c:db:b0:9f:33:4f:5b:ef:60:2e:53:17:e1:
57:0c:80:8d:ae:18:a0:ab:f7:17:37:84:a9:70:ca:3b:03:2d:
e6:a8:5e:72:66:80:6c:27:31:c0:29:75:ce:5d:49:2c:33:8f:
71:44:37:a2:c4:52:8b:0b:d3:df:17:4a:38:07:f2:26:3f:1e:
3b:d2:82:09:6e:c6:cf:30:b6:09:f2:04:60:62:7a:a3:d0:81:
d7:7e:89:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhY2IJPOMsNBJUlLRZayUOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOGFlNjNiNzU3ZGExYWY3OTBmMjBmNTljNjM0ODExZWVl
YjFiY2MwHhcNMjUwNzMwMDEwMDQwWhcNMjUwNzMxMDEwMDQwWjAzMTEwLwYDVQQD
Eyg5OGZhZWRiNjBhYjkwMGM4ZGI3MTcwMmZmYmYyMzI3ZmY5MDQ0MTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk/x54p9C3IXbv6DFfS3svUpWuOz
feokBCLFvXwielfYGhDCXvd0y2P7MPaQ/Pb7BBe7iKhC2zIdB+eMsr0WkdAgaoyB
ZQswMl1d2DxHZ0itixE7QJXdb0Vgv7hbu+/rF0Icghsupwmi+QaibxsClvvYCRNS
eobq5yxPCcpaNeUUheudWet+08haYP5gRlSDCE0VlX2nbeuFvXaKnEmsvBqWjcGp
UVCcfxL5hZ0OlY00tHUZvpDqyuPM5mXSYXcv5RKOlQanf4KH60a+xHPY2z4zp73X
zWh2Chkc5/TsJZ7SmLHmngv8bNLF3CLQaFbY/25Anq366jX2x7731fyjUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJj67bYKuQDI23FwL/vyMn/5BEEJMB8GA1UdIwQY
MBaAFLuK5jt1faGveQ8g9ZxjSBHu6xvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRybU8zVjlvYTk1RHlEMW5HTklFZTdyRzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xMmM2NmQtYWM2My00M2ZjLTg4OTQt
YWIwODdmNDNiNTk1LzEvdTRybU8zVjlvYTk1RHlEMW5HTklFZTdyRzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xMmM2NmQtYWM2My00M2ZjLTg4OTQtYWIwODdmNDNiNTk1
LzEvdTRybU8zVjlvYTk1RHlEMW5HTklFZTdyRzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0F2xBOT6
EhXyFs2XQpCNwbdtxuohZv2tyAq2W5wUqt7YwGeIjSKcoIEx1YBozPLnXbH1XPUO
+3N0ez6/Sg8IFeEUd2L7vbAqgWiKJxxliw1j8Jxzxm3tJs5uC9VW4uYJph8EUNS1
C78DWzignyL3CuQlZDVxVGlq1/d8db89jZtb9gYwvkFx2s+XoqeH8nRi44oINJcC
HDq7AGzj0BY3mf7pMOI8CYhM27CfM09b72AuUxfhVwyAja4YoKv3FzeEqXDKOwMt
5qhecmaAbCcxwCl1zl1JLDOPcUQ3osRSiwvT3xdKOAfyJj8eO9KCCW7GzzC2CfIE
YGJ6o9CB136JcA==
-----END CERTIFICATE-----
Generated at Wed Jul 30 02:27:34 2025 by rpki-client