Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
File: RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json)
Hash identifier: y11PCjep/kijhuncFIQbFZjDg+/4bDo3VH80Vfc5vSo=
Subject key identifier: E1:24:DA:85:E1:E7:6E:CD:39:D9:20:3F:A4:10:2C:A1:1B:20:B4:BE
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial: 01984589EC7041F19B2D4147AB2826CC079B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
Manifest number: 0145
Signing time: Sat 26 Jul 2025 07:02:03 +0000
Manifest this update: Sat 26 Jul 2025 07:02:03 +0000
Manifest next update: Sun 27 Jul 2025 07:02:03 +0000
Files and hashes: 1: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (hash: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=)
2: 4lqvUj_aarjM1QCov1WKcZ47cD4.roa (hash: CUeCuFIy+7/m+7Rp9JxCjE4itMo0nF9rOUfz1A83JwI=)
3: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: snoTOmFo/Myz0/g9loUZdRHqDN8bRKr6JKgavCiwyUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:ec:70:41:f1:9b:2d:41:47:ab:28:26:cc:07:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Validity
Not Before: Jul 26 07:02:03 2025 GMT
Not After : Jul 27 07:02:03 2025 GMT
Subject: CN=e124da85e1e76ecd39d9203fa4102ca11b20b4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:6a:2d:e7:da:2d:24:e4:96:1a:b7:e7:45:
2a:ee:9c:7b:ad:11:0a:40:cd:f0:71:ae:b4:ec:2d:
73:01:52:06:c7:69:43:c0:24:31:4c:d5:2a:c3:42:
a7:7a:42:66:9c:a7:4a:d5:ea:f8:c2:28:bc:2a:23:
bf:66:2f:2d:3b:16:21:8c:58:e7:3f:96:8a:e8:c6:
10:fa:87:de:aa:b5:ac:74:b5:87:46:53:0b:fd:68:
dc:0e:ba:c3:39:ba:28:64:7a:5b:9c:72:d0:9f:dd:
bb:aa:c9:c2:bf:0d:83:13:ef:16:26:4c:57:99:21:
66:5d:4f:67:04:87:8a:73:f1:24:27:a0:80:07:68:
68:be:24:5a:16:51:2a:ee:ea:27:19:ed:22:49:47:
33:0a:17:69:57:6c:d7:b2:1a:c7:2b:35:1a:0b:ee:
b3:c5:8f:28:ef:15:56:6d:d4:62:a3:64:ee:08:32:
d3:d6:06:3e:6c:6d:4b:41:ec:1d:96:2d:06:63:89:
31:83:d1:f6:a1:b4:22:19:c4:d7:ff:31:32:b8:6b:
f7:30:03:7a:42:7c:28:b3:98:3d:7d:c1:81:04:24:
a5:0c:83:68:e7:22:ee:df:9c:96:18:66:15:ed:1b:
7a:62:d4:14:80:25:ba:66:da:18:f1:bf:ac:98:b0:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:DA:85:E1:E7:6E:CD:39:D9:20:3F:A4:10:2C:A1:1B:20:B4:BE
X509v3 Authority Key Identifier:
keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:46:24:d4:70:61:a6:61:83:16:3b:8c:cc:f1:bd:cf:53:48:
32:d3:5a:d4:12:78:4e:24:40:e0:46:6d:e8:3e:8e:c4:84:46:
41:3f:cc:55:5a:ea:ac:6a:aa:2b:af:38:67:7e:2a:b0:a9:6b:
11:6f:df:c5:17:aa:18:20:b8:84:88:4f:e6:ab:cc:9e:30:53:
9f:57:61:17:b1:cd:93:b3:f2:6f:ce:70:3f:c8:38:e0:0c:5c:
5d:9c:59:82:b8:fb:f3:34:07:22:14:eb:4b:3b:c0:e8:84:78:
84:7a:66:b6:2f:d7:4b:ca:56:ff:bc:59:0d:47:56:08:2e:bf:
9b:7b:3a:9b:81:5c:19:70:89:d9:e3:93:65:4c:a3:c9:35:bd:
65:81:34:55:42:8f:9b:bf:a4:2d:4c:c3:ee:f1:b5:a7:3d:23:
b7:5c:08:5a:d1:79:5d:60:c5:71:41:1d:0f:9d:77:97:5c:fc:
84:9c:7d:e3:8e:32:2c:21:ab:24:88:f2:a8:cc:77:56:18:76:
c5:80:a8:b2:63:a6:9e:b8:df:f7:e2:50:46:a7:6d:a6:72:ea:
2a:cc:8d:b6:cf:24:63:1b:02:9f:61:44:9c:95:b9:4f:cd:80:
7f:74:62:6f:50:f0:d7:ad:48:69:8d:a4:41:18:ca:13:68:5c:
5c:ae:07:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiexwQfGbLUFHqygmzAebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MDQ4NWY1ZWFjNjc1YTI0MWFiNmUwMmQ4ZTUzZGQyODU1
NmQyZWUwHhcNMjUwNzI2MDcwMjAzWhcNMjUwNzI3MDcwMjAzWjAzMTEwLwYDVQQD
EyhlMTI0ZGE4NWUxZTc2ZWNkMzlkOTIwM2ZhNDEwMmNhMTFiMjBiNGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0BqLefaLSTklhq350Uq7px7rREK
QM3wca607C1zAVIGx2lDwCQxTNUqw0KnekJmnKdK1er4wii8KiO/Zi8tOxYhjFjn
P5aK6MYQ+ofeqrWsdLWHRlML/WjcDrrDObooZHpbnHLQn927qsnCvw2DE+8WJkxX
mSFmXU9nBIeKc/EkJ6CAB2hoviRaFlEq7uonGe0iSUczChdpV2zXshrHKzUaC+6z
xY8o7xVWbdRio2TuCDLT1gY+bG1LQewdli0GY4kxg9H2obQiGcTX/zEyuGv3MAN6
Qnwos5g9fcGBBCSlDINo5yLu35yWGGYV7Rt6YtQUgCW6ZtoY8b+smLCbowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEk2oXh527NOdkgP6QQLKEbILS+MB8GA1UdIwQY
MBaAFEcEhfXqxnWiQatuAtjlPdKFVtLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jNjBkODEtNzE0Mi00YTViLTliNTAt
MDA3N2MyYmRiZjM3LzEvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jNjBkODEtNzE0Mi00YTViLTliNTAtMDA3N2MyYmRiZjM3
LzEvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkYk1HBh
pmGDFjuMzPG9z1NIMtNa1BJ4TiRA4EZt6D6OxIRGQT/MVVrqrGqqK684Z34qsKlr
EW/fxReqGCC4hIhP5qvMnjBTn1dhF7HNk7Pyb85wP8g44AxcXZxZgrj78zQHIhTr
SzvA6IR4hHpmti/XS8pW/7xZDUdWCC6/m3s6m4FcGXCJ2eOTZUyjyTW9ZYE0VUKP
m7+kLUzD7vG1pz0jt1wIWtF5XWDFcUEdD513l1z8hJx9444yLCGrJIjyqMx3Vhh2
xYCosmOmnrjf9+JQRqdtpnLqKsyNts8kYxsCn2FEnJW5T82Af3Rib1Dw161IaY2k
QRjKE2hcXK4HBA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:52:51 2025 by rpki-client