Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: +/DI0G89uUoEikee62uNSEx6G7eO5FZRnqNVFe18iYc=
Subject key identifier: 7C:DF:61:D2:6A:3F:C2:47:35:A5:AA:80:28:95:17:F2:43:BA:C8:BD
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 01992D481854C290719C78888A45F36D1BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 0408
Signing time: Tue 09 Sep 2025 07:02:03 +0000
Manifest this update: Tue 09 Sep 2025 07:02:03 +0000
Manifest next update: Wed 10 Sep 2025 07:02:03 +0000
Files and hashes: 1: RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa (hash: N00rEgshheQJFJlnzMgkGFoydAhTWl79InbpFappf/8=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: CdIO9dTVs/kvTk/k7SGBgCs015XPteBqhqv2Fesg1+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:48:18:54:c2:90:71:9c:78:88:8a:45:f3:6d:1b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Sep 9 07:02:03 2025 GMT
Not After : Sep 10 07:02:03 2025 GMT
Subject: CN=7cdf61d26a3fc24735a5aa80289517f243bac8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:66:10:c4:d6:9b:bf:f6:b2:9c:84:f8:d0:
67:76:9c:5e:f3:0f:ac:89:71:36:de:ef:87:42:c2:
c1:7c:2f:40:53:57:b1:41:fd:ff:61:7a:d3:d5:79:
6e:1b:4f:c1:2b:bd:08:fd:6a:87:3e:d2:eb:08:3f:
00:22:c9:be:b0:b6:7c:c5:a0:7b:da:99:1b:dd:53:
00:0c:8f:8e:8c:24:d7:b0:af:35:e1:27:16:19:89:
cc:81:08:e1:8c:e7:da:e2:c8:3d:da:71:ac:7a:47:
50:ae:1e:68:c3:dc:5f:31:b7:66:1e:5c:dd:bd:d3:
56:7b:e9:12:69:05:65:62:af:ed:c1:fa:78:17:7c:
55:f2:a2:2a:ad:46:d6:3d:e9:99:19:09:d6:54:e7:
5c:d4:e6:ca:e6:82:56:df:89:45:ab:14:a5:83:cf:
74:6b:de:f4:1d:d5:f4:eb:46:93:6b:3c:cc:33:6e:
cf:44:69:d1:d6:c7:c8:bc:e3:02:9f:68:aa:c3:b4:
8d:1b:35:e6:c1:69:17:8b:d4:b7:6f:88:17:42:bf:
a4:f4:d4:e1:e6:27:29:b7:47:b9:62:a3:97:35:c5:
a7:e3:b5:ef:af:a1:c6:82:ab:3d:d3:e0:cc:45:8c:
75:90:80:44:04:bf:e9:96:ae:7f:fc:1a:3a:25:03:
6b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:61:D2:6A:3F:C2:47:35:A5:AA:80:28:95:17:F2:43:BA:C8:BD
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:71:d3:f0:8a:d2:d0:94:5b:f7:fe:73:6c:47:bd:f1:23:1c:
53:30:d1:96:2a:d2:4a:63:4d:83:50:a3:14:66:f1:0b:db:3a:
c0:bb:60:3d:2c:4d:ab:39:3c:84:5b:83:2b:0c:7e:78:f1:92:
3f:e9:c1:87:03:1e:ac:f8:0d:5e:29:3c:66:ba:d6:04:44:9e:
15:bd:ae:bf:d5:50:02:80:68:70:56:14:d5:20:a4:06:2b:da:
19:64:b4:5f:9f:77:1f:19:53:b4:f7:37:2f:96:ba:3e:be:95:
71:8f:5f:28:79:4f:00:ce:6e:ad:16:b4:35:23:6a:13:d1:d9:
b0:22:6b:d3:f2:59:4f:9b:56:db:18:19:b8:f2:47:13:b0:b1:
cc:9e:3d:61:8d:56:7d:dd:9e:11:56:dc:2a:bb:bc:38:d0:95:
d1:4c:13:a8:32:e7:2d:8d:65:53:5d:3d:e6:e1:c5:9b:ff:e3:
53:88:1c:11:65:11:6c:ca:2a:c0:3f:c0:be:da:dd:95:cf:1d:
2a:a3:19:47:ae:ff:8d:f2:3e:93:76:44:d2:41:35:a7:ae:0b:
6e:eb:d6:bf:3a:f0:f2:67:05:5c:e9:3e:62:f3:8d:f8:22:bb:
ea:d6:54:79:00:48:a0:41:48:88:03:ab:b5:65:55:1a:46:6b:
56:55:9a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZktSBhUwpBxnHiIikXzbRuoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2JkZjJmNWI5NjEyMzJlNThkYjI4OWI0OGE5ZmUyNDVm
YTlkNmMwHhcNMjUwOTA5MDcwMjAzWhcNMjUwOTEwMDcwMjAzWjAzMTEwLwYDVQQD
Eyg3Y2RmNjFkMjZhM2ZjMjQ3MzVhNWFhODAyODk1MTdmMjQzYmFjOGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNZmEMTWm7/2spyE+NBndpxe8w+s
iXE23u+HQsLBfC9AU1exQf3/YXrT1XluG0/BK70I/WqHPtLrCD8AIsm+sLZ8xaB7
2pkb3VMADI+OjCTXsK814ScWGYnMgQjhjOfa4sg92nGsekdQrh5ow9xfMbdmHlzd
vdNWe+kSaQVlYq/twfp4F3xV8qIqrUbWPemZGQnWVOdc1ObK5oJW34lFqxSlg890
a970HdX060aTazzMM27PRGnR1sfIvOMCn2iqw7SNGzXmwWkXi9S3b4gXQr+k9NTh
5icpt0e5YqOXNcWn47Xvr6HGgqs90+DMRYx1kIBEBL/plq5//Bo6JQNr/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzfYdJqP8JHNaWqgCiVF/JDusi9MB8GA1UdIwQY
MBaAFIp73y9blhIy5Y2yibSKn+JF+p1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAt
Njc2ODViNGRjOGI5LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAtNjc2ODViNGRjOGI5
LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3HT8IrS
0JRb9/5zbEe98SMcUzDRlirSSmNNg1CjFGbxC9s6wLtgPSxNqzk8hFuDKwx+ePGS
P+nBhwMerPgNXik8ZrrWBESeFb2uv9VQAoBocFYU1SCkBivaGWS0X593HxlTtPc3
L5a6Pr6VcY9fKHlPAM5urRa0NSNqE9HZsCJr0/JZT5tW2xgZuPJHE7CxzJ49YY1W
fd2eEVbcKru8ONCV0UwTqDLnLY1lU1095uHFm//jU4gcEWURbMoqwD/Avtrdlc8d
KqMZR67/jfI+k3ZE0kE1p64LbuvWvzrw8mcFXOk+YvON+CK76tZUeQBIoEFIiAOr
tWVVGkZrVlWaDg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 12:33:49 2025 by rpki-client