Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: awgkc6xtwpiAoub7Z/cu7xNUN07s8OtLaj0LVZLbypE=
Subject key identifier: AF:80:E1:2C:04:D2:A3:5F:A6:02:CF:46:BE:F4:FA:AD:9A:1D:82:77
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 0198451A87EA47C4415BD16723A3CE0033B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 12DB
Signing time: Sat 26 Jul 2025 05:00:23 +0000
Manifest this update: Sat 26 Jul 2025 05:00:23 +0000
Manifest next update: Sun 27 Jul 2025 05:00:23 +0000
Files and hashes: 1: JsF7FSwQaPNv5Ht3PNC4VICZzd4.roa (hash: fSvD3kvN3V7LC//WVhYwoHgh3jtQgyM95Ezj/Ar5cRU=)
2: mt-PyfiXYcQcKgR1e8Hsx5c4PoM.roa (hash: LeF0Pn1F55UIMk8YIasYk9VsWh941JF4CLigZGdvfv8=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: Z9jVZ3PTLdta9cgJkvtU4amHRS7E5CtdCaFhDGpMPtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:87:ea:47:c4:41:5b:d1:67:23:a3:ce:00:33:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Jul 26 05:00:23 2025 GMT
Not After : Jul 27 05:00:23 2025 GMT
Subject: CN=af80e12c04d2a35fa602cf46bef4faad9a1d8277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:de:5e:c5:60:46:dc:73:24:3b:a9:38:e3:
03:95:ac:3b:54:14:1f:4e:59:a0:30:58:16:52:0d:
1f:aa:8c:b0:9e:3e:7a:7f:a8:dc:f1:a8:4c:a3:99:
67:35:09:34:6a:11:f4:28:3a:db:4c:9f:d0:9b:8f:
e3:9a:b7:55:75:7f:78:54:6a:62:c0:6f:f5:37:b9:
76:16:06:19:04:c0:f7:7e:72:9f:49:5e:d3:7b:4f:
21:56:29:59:96:6f:1d:ed:02:e6:b4:9f:a9:32:3f:
8a:fb:69:85:58:b7:ac:71:f8:96:66:79:5d:ca:ac:
5a:a7:dd:62:7a:ef:9a:1c:2c:cd:4a:17:3c:d6:22:
d9:bf:f6:b0:ac:eb:ec:ad:3c:0e:e0:9a:b8:2a:a1:
75:0c:ec:5d:49:b7:c7:49:2c:9d:6c:ff:ba:0e:6c:
c7:1b:c6:fe:16:98:f4:f3:f7:6c:08:13:a2:66:a5:
d1:73:06:05:f0:68:a9:76:e2:30:07:f0:91:12:91:
ac:2b:db:cb:76:d2:2c:4b:85:49:da:b7:2b:57:5a:
bf:e6:f0:50:87:30:5e:02:f2:b2:f6:db:ce:bb:b7:
60:5d:54:79:84:5d:db:1c:aa:9d:3b:3e:f9:e1:bd:
9b:6d:dd:f2:d8:86:4e:dc:ab:6c:26:90:86:38:fa:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:80:E1:2C:04:D2:A3:5F:A6:02:CF:46:BE:F4:FA:AD:9A:1D:82:77
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d4:51:48:03:75:3a:62:f0:82:0f:78:91:d2:8d:b2:7c:f5:
d7:05:42:db:92:29:53:8f:b0:a1:5f:6e:72:40:db:99:13:e5:
ce:90:d4:54:af:52:bd:a7:a0:f1:de:81:35:85:47:ac:d9:b1:
7c:01:64:60:39:03:f4:8e:05:ee:fa:80:ee:ec:63:11:a9:12:
96:b8:56:74:f3:7c:22:12:1c:64:e8:f6:9c:f3:9b:35:10:01:
a4:95:33:35:fc:65:ea:5c:0d:05:27:e8:dc:fe:eb:70:72:a0:
1b:35:af:01:00:ee:77:dc:9d:58:cc:e8:08:d2:3e:09:03:b4:
5a:e0:8d:ca:41:45:07:c9:3b:38:94:5d:39:b9:c5:0d:84:cf:
2d:e8:08:d0:78:46:73:fe:d7:e8:0f:c3:24:bd:9f:d1:8b:e4:
47:d1:0b:09:bf:b0:5d:a6:a8:bc:b7:d6:a5:76:09:bf:25:40:
a6:d3:16:32:42:fd:21:b4:b6:48:59:59:2d:f8:3f:1a:48:93:
7f:2b:c1:78:a4:18:d1:79:db:28:15:7a:33:ed:54:c4:60:ad:
64:81:1c:1e:da:26:c1:d4:db:1a:cb:6f:96:d7:4c:90:02:1e:
6c:7e:77:ce:69:f5:ef:4f:12:62:c7:1b:ba:c0:b5:c1:6e:df:
83:12:bc:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGofqR8RBW9FnI6POADOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYzU1ZmIyNGFkNTU2ZTA0MjAyNjUxZjZkNWE4YjI3ZDVi
ZWRmOTcwHhcNMjUwNzI2MDUwMDIzWhcNMjUwNzI3MDUwMDIzWjAzMTEwLwYDVQQD
EyhhZjgwZTEyYzA0ZDJhMzVmYTYwMmNmNDZiZWY0ZmFhZDlhMWQ4Mjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSveXsVgRtxzJDupOOMDlaw7VBQf
TlmgMFgWUg0fqoywnj56f6jc8ahMo5lnNQk0ahH0KDrbTJ/Qm4/jmrdVdX94VGpi
wG/1N7l2FgYZBMD3fnKfSV7Te08hVilZlm8d7QLmtJ+pMj+K+2mFWLescfiWZnld
yqxap91ieu+aHCzNShc81iLZv/awrOvsrTwO4Jq4KqF1DOxdSbfHSSydbP+6DmzH
G8b+Fpj08/dsCBOiZqXRcwYF8GipduIwB/CREpGsK9vLdtIsS4VJ2rcrV1q/5vBQ
hzBeAvKy9tvOu7dgXVR5hF3bHKqdOz754b2bbd3y2IZO3KtsJpCGOPrzvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+A4SwE0qNfpgLPRr70+q2aHYJ3MB8GA1UdIwQY
MBaAFLvFX7JK1VbgQgJlH21aiyfVvt+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80NjkyMmYtNWNiNi00ZDk4LWI0ZmMt
OTNiZDVlNDA4ZjkxLzEvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80NjkyMmYtNWNiNi00ZDk4LWI0ZmMtOTNiZDVlNDA4Zjkx
LzEvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9RRSAN1
OmLwgg94kdKNsnz11wVC25IpU4+woV9uckDbmRPlzpDUVK9Svaeg8d6BNYVHrNmx
fAFkYDkD9I4F7vqA7uxjEakSlrhWdPN8IhIcZOj2nPObNRABpJUzNfxl6lwNBSfo
3P7rcHKgGzWvAQDud9ydWMzoCNI+CQO0WuCNykFFB8k7OJRdObnFDYTPLegI0HhG
c/7X6A/DJL2f0YvkR9ELCb+wXaaovLfWpXYJvyVAptMWMkL9IbS2SFlZLfg/GkiT
fyvBeKQY0XnbKBV6M+1UxGCtZIEcHtomwdTbGstvltdMkAIebH53zmn1708SYscb
usC1wW7fgxK8LA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:24:56 2025 by rpki-client