Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
File: Rv57VnIiRRFtQjS-SEoCpIod3h8.mft (raw, json)
Hash identifier: oaQO/vtMPh1IZ3pQctZoDHrCMhlXQkGk76wM6rRMSww=
Subject key identifier: 30:A2:0C:FB:C2:4B:B2:82:A3:33:43:FD:44:6F:C8:99:63:8E:CC:67
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Certificate issuer: /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial: 0198537AE9FB01E1EF9BE7221EDFADB65DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
Manifest number: 0F89
Signing time: Tue 29 Jul 2025 00:00:20 +0000
Manifest this update: Tue 29 Jul 2025 00:00:20 +0000
Manifest next update: Wed 30 Jul 2025 00:00:20 +0000
Files and hashes: 1: IhchjAlH7wZG7kzQTy4JNv3HhP8.roa (hash: MX+poTln1XfrF458aN+rzETZ5ejTHBJDcPW84QX3+eg=)
2: Rv57VnIiRRFtQjS-SEoCpIod3h8.crl (hash: H8Ba0AbH18FJ9KxlAZV7DeS5i8qDORe4s3O7P6J/Ofo=)
3: m7K3o6zKpvccw8S7oHzkq7OVkd4.roa (hash: GgfDl73eI/b08tNz06PPsn6okyEEe2tBCJUd3Gjwvrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:e9:fb:01:e1:ef:9b:e7:22:1e:df:ad:b6:5d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
Validity
Not Before: Jul 29 00:00:20 2025 GMT
Not After : Jul 30 00:00:20 2025 GMT
Subject: CN=30a20cfbc24bb282a33343fd446fc899638ecc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:05:78:6a:15:ce:a6:b9:6f:ac:58:57:f5:
76:16:12:bf:9c:fc:4d:fd:af:9c:58:3f:f2:a4:fb:
4e:10:9f:09:92:be:60:20:4b:74:9a:64:f7:08:9f:
d9:22:4a:3c:0c:36:18:f9:fb:01:7f:62:3a:2d:1d:
d8:2a:57:24:cc:0f:06:93:3a:eb:de:61:98:04:8e:
9b:ea:14:94:16:98:fd:3b:78:75:f4:73:40:5f:52:
ca:ad:06:f7:d4:d2:8a:24:66:23:7e:45:46:bb:3d:
af:11:45:16:0a:a1:ad:1a:27:12:40:33:f7:87:a7:
81:e7:51:9b:10:1b:3f:5e:d9:63:a8:bd:a1:ad:4a:
95:dc:59:3c:98:3c:f7:a5:70:76:de:df:28:66:e2:
4e:b9:74:51:cd:57:1e:53:7d:e4:2a:22:43:3a:7b:
76:de:71:c2:3a:89:a9:dc:82:04:c9:c6:b1:88:4d:
df:8c:db:3f:9f:c2:11:62:e9:0c:7f:f3:5c:b9:59:
75:71:18:6b:8f:61:40:e8:23:e2:8c:0f:c7:39:c4:
9b:a4:89:c3:98:93:c2:ca:f6:52:5d:6c:31:59:d0:
f0:50:0f:61:67:6b:99:cd:7a:ad:b6:36:d4:4d:ae:
33:a2:44:69:40:f8:28:8a:fa:60:a3:5e:c7:7f:3e:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A2:0C:FB:C2:4B:B2:82:A3:33:43:FD:44:6F:C8:99:63:8E:CC:67
X509v3 Authority Key Identifier:
keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:41:d5:ec:f8:21:dc:23:8f:14:d0:9f:7b:e7:0f:d0:4d:48:
9c:43:a0:20:e7:97:01:35:2c:7b:e4:28:bb:c6:88:99:4c:43:
8a:02:5d:06:ec:b7:45:10:f3:d5:de:3e:fc:57:ab:46:cb:a9:
f1:9e:cb:65:75:44:83:13:ba:81:43:93:b5:fc:c4:b2:6b:1a:
75:fd:ae:15:a8:84:08:e6:d7:7e:83:b4:ff:33:35:3c:cb:a5:
4c:e5:54:ef:01:61:5f:c0:21:77:77:23:05:87:98:dd:15:00:
b2:94:4a:d7:24:7d:10:9f:da:76:df:c7:18:75:81:61:50:d5:
fe:8f:62:e3:fe:aa:a3:de:bf:28:1f:be:36:20:c1:dc:42:88:
fc:2d:1e:3b:b9:15:58:97:fb:ed:88:e6:b0:ee:74:6f:cf:06:
ab:ea:da:c5:0a:16:fc:27:1b:48:67:d9:2a:ae:b8:c8:fd:f7:
78:ac:c9:32:39:a5:ec:a4:28:a9:b2:4c:57:d2:16:44:0e:dd:
dc:c3:fb:c7:9c:25:42:14:e8:0e:77:8c:e7:90:5f:44:a1:48:
ca:25:f0:7a:5d:12:1c:73:8f:a8:71:0f:62:ca:ac:ca:8f:51:
65:53:43:3a:c6:87:97:8a:2e:9c:4a:4a:93:ed:15:6b:e0:35:
18:8b:ae:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTeun7AeHvm+ciHt+ttl39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZmU3YjU2NzIyMjQ1MTE2ZDQyMzRiZTQ4NGEwMmE0OGEx
ZGRlMWYwHhcNMjUwNzI5MDAwMDIwWhcNMjUwNzMwMDAwMDIwWjAzMTEwLwYDVQQD
EygzMGEyMGNmYmMyNGJiMjgyYTMzMzQzZmQ0NDZmYzg5OTYzOGVjYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEUFeGoVzqa5b6xYV/V2FhK/nPxN
/a+cWD/ypPtOEJ8Jkr5gIEt0mmT3CJ/ZIko8DDYY+fsBf2I6LR3YKlckzA8Gkzrr
3mGYBI6b6hSUFpj9O3h19HNAX1LKrQb31NKKJGYjfkVGuz2vEUUWCqGtGicSQDP3
h6eB51GbEBs/XtljqL2hrUqV3Fk8mDz3pXB23t8oZuJOuXRRzVceU33kKiJDOnt2
3nHCOomp3IIEycaxiE3fjNs/n8IRYukMf/NcuVl1cRhrj2FA6CPijA/HOcSbpInD
mJPCyvZSXWwxWdDwUA9hZ2uZzXqttjbUTa4zokRpQPgoivpgo17Hfz6VjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCiDPvCS7KCozND/URvyJljjsxnMB8GA1UdIwQY
MBaAFEb+e1ZyIkURbUI0vkhKAqSKHd4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTct
NGJkMzM5MmQ1NWQxLzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTctNGJkMzM5MmQ1NWQx
LzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUHV7Pgh
3COPFNCfe+cP0E1InEOgIOeXATUse+Qou8aImUxDigJdBuy3RRDz1d4+/FerRsup
8Z7LZXVEgxO6gUOTtfzEsmsadf2uFaiECObXfoO0/zM1PMulTOVU7wFhX8Ahd3cj
BYeY3RUAspRK1yR9EJ/adt/HGHWBYVDV/o9i4/6qo96/KB++NiDB3EKI/C0eO7kV
WJf77YjmsO50b88Gq+raxQoW/CcbSGfZKq64yP33eKzJMjml7KQoqbJMV9IWRA7d
3MP7x5wlQhToDneM55BfRKFIyiXwel0SHHOPqHEPYsqsyo9RZVNDOsaHl4ounEpK
k+0Va+A1GIuu/A==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:11:58 2025 by rpki-client