Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
File: EdnXl1uM2pIypCR8yd6abf28YGk.mft (raw, json)
Hash identifier: Omtsjz6ZE5FpAiAYr/x4bqzYgGYX0P04xmbBSpnA+C4=
Subject key identifier: DA:39:58:86:6F:FF:6F:73:F6:27:E2:05:0E:5D:2D:07:19:DB:09:9B
Authority key identifier: 11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
Certificate issuer: /CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Certificate serial: 01984A40EBA43503A6501837F03C33F193C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 05:00:25 +0000
Manifest this update: Sun 27 Jul 2025 05:00:25 +0000
Manifest next update: Mon 28 Jul 2025 05:00:25 +0000
Files and hashes: 1: DsnYhz3l-UjW4BEfkskBQyPqFHg.roa (hash: Ca24yg0KQW8MlNf8yUGGudiupYhIqA/czyOnT3n44ic=)
2: EdnXl1uM2pIypCR8yd6abf28YGk.crl (hash: QOhzwHHShnmSlSjDXcmd4bZJiUuHb3dr843jEdHEWNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:eb:a4:35:03:a6:50:18:37:f0:3c:33:f1:93:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Validity
Not Before: Jul 27 05:00:25 2025 GMT
Not After : Jul 28 05:00:25 2025 GMT
Subject: CN=da3958866fff6f73f627e2050e5d2d0719db099b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:f9:bd:73:e3:39:7a:e8:96:4e:0f:1e:f6:
e5:31:6d:5d:35:3f:4c:22:de:c5:20:e5:86:2a:d8:
a0:99:44:24:63:b1:02:22:cd:7e:5b:7d:21:4b:47:
5e:97:16:7c:f2:91:77:df:01:5f:fc:e1:5e:b4:08:
7b:b6:30:25:ac:93:32:18:2e:e5:7d:73:2d:65:ac:
48:5c:ec:cb:92:d0:f6:44:8a:18:c6:41:aa:74:a8:
96:dd:cc:2e:a1:43:1d:80:e4:25:92:e5:2c:66:31:
85:4b:aa:07:fa:8a:27:c3:7e:5a:a4:6b:7e:ef:38:
cf:30:bf:8a:f6:e1:30:15:7a:f1:fe:f0:21:ff:30:
69:6e:92:ef:2e:23:53:10:21:88:88:cd:41:4d:08:
b8:e3:2d:17:0d:51:31:ac:8e:76:a3:12:7d:7d:a9:
01:d0:2f:2c:8d:6a:6c:61:e0:34:ea:c9:29:dc:1d:
1a:29:70:2e:6a:c4:5f:a7:0a:58:61:4c:c1:b9:74:
dd:a0:04:1c:82:97:18:c9:4f:0f:53:05:19:20:b9:
51:eb:07:32:ec:b9:11:cf:e9:2b:8a:4f:d3:82:87:
94:15:2e:f2:3a:29:20:fb:a0:c1:d0:4a:8e:b1:1f:
cd:39:e5:23:ed:b0:4b:b7:22:8d:5e:48:82:89:23:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:39:58:86:6F:FF:6F:73:F6:27:E2:05:0E:5D:2D:07:19:DB:09:9B
X509v3 Authority Key Identifier:
keyid:11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f7:2c:63:e8:04:b1:7d:4c:ab:9b:3a:5c:60:9e:85:c0:e9:
2b:94:77:dd:d4:41:b5:61:29:7f:46:be:fe:c4:db:9e:fc:62:
bc:f8:c7:4c:76:e1:12:04:fa:ce:9c:2e:59:b8:9e:65:1e:43:
1f:d4:2e:49:06:61:13:8f:59:5a:57:ba:67:0a:76:b0:31:69:
58:3a:0e:b4:c7:3c:10:1c:f4:b0:b8:e1:b4:f5:08:46:89:bb:
ae:29:0f:18:1f:95:5b:9f:0b:ba:62:e7:a0:1a:8a:1f:aa:e9:
37:d7:47:e2:9c:61:53:56:6f:dd:b7:0b:ff:ae:83:f1:83:12:
64:ce:16:e6:9e:bb:c2:a6:f0:bd:37:99:c2:3d:7e:ef:31:3f:
55:d9:af:60:bf:c8:ad:93:52:3d:08:f7:56:9c:e4:20:24:76:
b5:a2:54:90:71:d3:ed:d9:45:d7:0c:1f:c7:f2:e8:2d:db:89:
ae:43:93:0a:44:25:b5:5e:2f:31:42:f1:02:61:b1:47:7a:c9:
07:26:0f:e2:4a:58:c9:94:e8:5c:b6:d4:ee:6e:bc:1f:a1:82:
01:ff:17:e4:3e:22:96:e0:bf:89:3c:f9:aa:64:69:77:3b:48:
72:01:fe:4f:2f:13:b8:2c:d0:40:b8:f2:7e:b8:db:0e:99:23:
1f:5b:2c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQOukNQOmUBg38Dwz8ZPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZDlkNzk3NWI4Y2RhOTIzMmE0MjQ3Y2M5ZGU5YTZkZmRi
YzYwNjkwHhcNMjUwNzI3MDUwMDI1WhcNMjUwNzI4MDUwMDI1WjAzMTEwLwYDVQQD
EyhkYTM5NTg4NjZmZmY2ZjczZjYyN2UyMDUwZTVkMmQwNzE5ZGIwOTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytj5vXPjOXrolk4PHvblMW1dNT9M
It7FIOWGKtigmUQkY7ECIs1+W30hS0delxZ88pF33wFf/OFetAh7tjAlrJMyGC7l
fXMtZaxIXOzLktD2RIoYxkGqdKiW3cwuoUMdgOQlkuUsZjGFS6oH+oonw35apGt+
7zjPML+K9uEwFXrx/vAh/zBpbpLvLiNTECGIiM1BTQi44y0XDVExrI52oxJ9fakB
0C8sjWpsYeA06skp3B0aKXAuasRfpwpYYUzBuXTdoAQcgpcYyU8PUwUZILlR6wcy
7LkRz+krik/TgoeUFS7yOikg+6DB0EqOsR/NOeUj7bBLtyKNXkiCiSP0dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo5WIZv/29z9ifiBQ5dLQcZ2wmbMB8GA1UdIwQY
MBaAFBHZ15dbjNqSMqQkfMnemm39vGBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWRuWGwxdU0ycEl5cENSOHlkNmFiZjI4WUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMDY2OGItNmVjMi00ZGI0LWE5NTct
YWY3MzgyMzk1ZTAwLzEvRWRuWGwxdU0ycEl5cENSOHlkNmFiZjI4WUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iMDY2OGItNmVjMi00ZGI0LWE5NTctYWY3MzgyMzk1ZTAw
LzEvRWRuWGwxdU0ycEl5cENSOHlkNmFiZjI4WUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfcsY+gE
sX1Mq5s6XGCehcDpK5R33dRBtWEpf0a+/sTbnvxivPjHTHbhEgT6zpwuWbieZR5D
H9QuSQZhE49ZWle6Zwp2sDFpWDoOtMc8EBz0sLjhtPUIRom7rikPGB+VW58LumLn
oBqKH6rpN9dH4pxhU1Zv3bcL/66D8YMSZM4W5p67wqbwvTeZwj1+7zE/VdmvYL/I
rZNSPQj3VpzkICR2taJUkHHT7dlF1wwfx/LoLduJrkOTCkQltV4vMULxAmGxR3rJ
ByYP4kpYyZToXLbU7m68H6GCAf8X5D4iluC/iTz5qmRpdztIcgH+Ty8TuCzQQLjy
frjbDpkjH1ssFw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:26:58 2025 by rpki-client