Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: w9Gl6vA6tntEX4Ac5nwpgLpRyPKp0zrIGxs0jljNzwk=
Subject key identifier: 7C:20:D9:51:C7:B3:5F:5B:15:37:3C:9D:31:78:4F:AB:52:54:97:3A
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 019A1CBF31E9AAD3D356955FDFA1A4054F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 0484
Signing time: Sat 25 Oct 2025 19:01:23 +0000
Manifest this update: Sat 25 Oct 2025 19:01:23 +0000
Manifest next update: Sun 26 Oct 2025 19:01:23 +0000
Files and hashes: 1: RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa (hash: N00rEgshheQJFJlnzMgkGFoydAhTWl79InbpFappf/8=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: erXqrx3YqRjHdXviyqriqsBzbU8DfpXIUzEpeRIXTbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:31:e9:aa:d3:d3:56:95:5f:df:a1:a4:05:4f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Oct 25 19:01:23 2025 GMT
Not After : Oct 26 19:01:23 2025 GMT
Subject: CN=7c20d951c7b35f5b15373c9d31784fab5254973a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:a8:7c:14:b8:5b:3e:51:c4:52:33:31:80:
8e:cc:b8:20:9c:1f:1c:00:70:cd:0e:4c:ac:95:b1:
17:f8:9c:c2:49:aa:54:80:3f:80:36:57:64:86:44:
37:ff:4c:8c:a3:e0:df:dd:11:df:a5:b8:8e:56:8b:
e9:c8:bc:03:84:99:b3:6b:fb:71:5d:f2:aa:a7:84:
f3:55:65:c1:88:d2:88:dc:4b:23:c6:3c:b6:0a:64:
79:8a:7d:f4:20:c9:cf:b5:3c:3b:8c:d8:39:30:af:
fc:eb:02:52:e7:2c:8b:bc:a1:9f:d0:08:13:ed:a7:
4f:bb:4d:72:f7:34:67:b2:92:55:ba:09:76:4d:ea:
01:0c:46:80:26:92:29:33:16:91:b1:cb:92:10:dc:
42:a3:19:6b:cf:de:20:36:82:79:c5:22:ef:91:d4:
e9:fb:33:0e:73:ed:bc:e9:12:bf:a6:ca:54:c6:de:
5c:d7:5c:de:7b:53:49:ef:77:3d:ee:e6:bc:90:e2:
e4:42:d0:b0:81:16:52:3c:4f:ac:2a:1e:be:8f:62:
9e:56:cf:4f:7f:db:3e:0c:65:23:83:12:ec:c0:62:
de:1f:22:33:de:56:d3:95:47:01:a3:2d:5a:05:36:
b7:84:5d:4f:07:32:0d:ad:2f:87:f2:94:a0:e4:27:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:20:D9:51:C7:B3:5F:5B:15:37:3C:9D:31:78:4F:AB:52:54:97:3A
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:72:4a:49:1a:a9:2e:f3:25:34:98:40:ec:ec:27:fa:69:0c:
e1:7a:4b:e8:25:a2:20:2b:ce:83:1c:81:e8:5d:3b:61:ee:da:
77:c4:02:ca:15:6c:55:c3:6b:e3:31:d3:0d:c7:ef:a4:33:38:
ad:d5:b7:ff:96:e7:2c:a9:d8:67:f1:c8:ee:6e:c8:41:60:db:
8b:1c:3c:7c:5f:9e:e9:f1:c4:dd:a7:60:d3:46:fb:10:60:1c:
f7:6b:25:30:ae:27:43:17:fb:91:54:96:14:8d:82:e1:74:b2:
90:5b:9a:c9:7a:25:be:49:8c:a2:9c:8e:3c:b8:35:d0:8f:5e:
2f:0d:9d:a2:7a:0e:e7:a6:91:2a:bd:e0:fe:e6:59:3c:be:6c:
4f:d2:93:e2:0f:66:1e:e4:cc:ca:8f:66:e3:7d:41:57:e4:dd:
95:75:9f:f6:07:b4:d4:55:b8:b4:a0:28:27:ed:d0:e3:16:e5:
8f:5a:bd:4d:b2:27:99:b6:fb:7b:c9:8b:94:ea:db:d5:c8:85:
89:12:d2:27:82:8f:d7:2d:df:62:cc:b6:d2:b9:ec:f2:19:7e:
84:4f:13:4a:c7:ad:24:34:73:d7:2d:98:a3:16:53:a9:66:05:
90:5d:73:15:34:1a:8a:33:8d:96:08:0c:2e:a7:a2:5e:6c:3b:
df:21:1f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:32:33 2025 by rpki-client