Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
File: R1Ng86GS3KodPRlNtkwCVMN0vUY.mft (raw, json)
Hash identifier: QP7jI4iNODKjBDrEex0s2BBSQsMnh2oNvMaahIBa3Tc=
Subject key identifier: 64:A9:B1:BF:B7:97:99:D1:31:F4:BA:0C:2E:69:C4:74:3D:D7:44:3A
Authority key identifier: 47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
Certificate issuer: /CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Certificate serial: 019921B11C87A711D18F6B29D1F00692BDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
Manifest number: 41
Signing time: Sun 07 Sep 2025 01:01:19 +0000
Manifest this update: Sun 07 Sep 2025 01:01:19 +0000
Manifest next update: Mon 08 Sep 2025 01:01:19 +0000
Files and hashes: 1: LkJWDbjbslz0nNAtvCL992PnNAo.roa (hash: RL1MW6ZhRKLWTzPdhCcY/dLPWGU6pPW/YpPEx5flQPg=)
2: R1Ng86GS3KodPRlNtkwCVMN0vUY.crl (hash: ZLhu8udiMxzybKEx3axzLcG0U8lCsD8yj7oLRveHja4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:1c:87:a7:11:d1:8f:6b:29:d1:f0:06:92:bd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Validity
Not Before: Sep 7 01:01:19 2025 GMT
Not After : Sep 8 01:01:19 2025 GMT
Subject: CN=64a9b1bfb79799d131f4ba0c2e69c4743dd7443a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b5:69:8f:f6:21:a0:75:a2:20:fa:35:b4:cc:
56:8a:0b:8f:ab:f5:3a:2c:a5:11:e1:1f:4f:75:84:
36:36:8f:6a:53:45:87:8c:a9:e8:d0:6d:30:84:67:
4b:b6:7e:07:2f:79:41:18:a4:c2:c9:b4:6a:33:94:
b7:3e:9a:5f:b2:31:92:57:13:e0:a8:c0:e7:e7:88:
aa:f9:c4:d2:14:0f:68:9c:9e:95:64:8d:3f:29:20:
d8:9b:eb:44:99:b0:bf:cc:d6:df:15:fc:f2:2f:c9:
0f:65:df:cc:d5:62:e5:b8:65:e5:41:19:b3:91:3a:
0a:7d:03:97:4d:69:46:c9:3e:3c:26:a1:42:58:69:
43:ee:11:80:fe:75:d0:08:af:ca:0b:72:83:ec:b4:
16:2c:44:8e:54:c2:df:3c:52:a2:8f:3a:ed:21:64:
50:59:9b:90:65:6e:79:81:6a:a1:8a:d4:a3:62:3b:
7f:33:36:d4:bc:c4:a6:cb:ed:62:4c:d3:d4:5f:b5:
7c:20:99:09:65:21:8b:c2:25:40:84:e8:1d:da:d3:
86:82:d6:1c:d2:d3:e2:74:fd:1b:62:ea:49:b5:16:
40:e9:f0:7b:6c:13:4e:ed:2d:00:1d:9c:75:0e:11:
a0:2c:29:65:29:5b:70:31:7f:9f:ec:bf:e1:7a:bb:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A9:B1:BF:B7:97:99:D1:31:F4:BA:0C:2E:69:C4:74:3D:D7:44:3A
X509v3 Authority Key Identifier:
keyid:47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5d:f0:09:d6:54:bb:c4:87:e5:46:72:51:61:f7:17:6b:d9:
25:74:92:98:a4:0f:cd:77:2f:af:9c:70:39:e9:d4:37:40:e2:
ff:b7:b0:12:0b:f0:d7:97:9d:37:89:19:04:36:02:1c:a6:be:
ce:97:55:06:fc:a7:fa:df:81:df:bf:3a:a3:33:47:da:9b:26:
a4:2d:ef:d0:af:82:cf:91:7b:f9:25:19:44:eb:b6:69:24:c9:
f1:e2:6b:c0:a8:06:1e:98:16:11:4b:76:1d:ff:98:c7:1c:69:
44:29:4b:93:d2:61:62:b2:18:a3:08:00:53:f3:13:96:7b:08:
ae:be:b9:4f:9a:94:a2:f5:ab:de:57:9e:4e:e5:f2:59:63:4e:
b7:33:0b:ca:e9:6d:b9:82:b3:84:90:56:ab:e3:7b:cb:b7:0e:
f4:41:31:88:4e:57:c1:31:23:c7:1a:a5:9a:88:f5:e9:58:4c:
a5:1c:80:6b:91:1b:a8:6d:10:90:7f:a3:dc:89:9e:8c:12:2a:
c8:17:78:a8:e7:d0:9a:67:f9:31:8a:c5:4b:b6:03:3f:39:7c:
67:d8:4b:96:9f:14:af:df:51:81:80:44:97:b3:5e:9d:fe:b8:
f6:2a:fb:02:31:21:4f:fa:18:e0:fa:18:9b:3e:ce:ed:dc:93:
2d:45:ee:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsRyHpxHRj2sp0fAGkr3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NTM2MGYzYTE5MmRjYWExZDNkMTk0ZGI2NGMwMjU0YzM3
NGJkNDYwHhcNMjUwOTA3MDEwMTE5WhcNMjUwOTA4MDEwMTE5WjAzMTEwLwYDVQQD
Eyg2NGE5YjFiZmI3OTc5OWQxMzFmNGJhMGMyZTY5YzQ3NDNkZDc0NDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LVpj/YhoHWiIPo1tMxWiguPq/U6
LKUR4R9PdYQ2No9qU0WHjKno0G0whGdLtn4HL3lBGKTCybRqM5S3PppfsjGSVxPg
qMDn54iq+cTSFA9onJ6VZI0/KSDYm+tEmbC/zNbfFfzyL8kPZd/M1WLluGXlQRmz
kToKfQOXTWlGyT48JqFCWGlD7hGA/nXQCK/KC3KD7LQWLESOVMLfPFKijzrtIWRQ
WZuQZW55gWqhitSjYjt/MzbUvMSmy+1iTNPUX7V8IJkJZSGLwiVAhOgd2tOGgtYc
0tPidP0bYupJtRZA6fB7bBNO7S0AHZx1DhGgLCllKVtwMX+f7L/hertnlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSpsb+3l5nRMfS6DC5pxHQ910Q6MB8GA1UdIwQY
MBaAFEdTYPOhktyqHT0ZTbZMAlTDdL1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjFOZzg2R1MzS29kUFJsTnRrd0NWTU4wdlVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC82MjQ0OTctNTA5MS00MDJiLTkxMjkt
YjAzYmE0YWIwYzU0LzEvUjFOZzg2R1MzS29kUFJsTnRrd0NWTU4wdlVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC82MjQ0OTctNTA5MS00MDJiLTkxMjktYjAzYmE0YWIwYzU0
LzEvUjFOZzg2R1MzS29kUFJsTnRrd0NWTU4wdlVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnV3wCdZU
u8SH5UZyUWH3F2vZJXSSmKQPzXcvr5xwOenUN0Di/7ewEgvw15edN4kZBDYCHKa+
zpdVBvyn+t+B3786ozNH2psmpC3v0K+Cz5F7+SUZROu2aSTJ8eJrwKgGHpgWEUt2
Hf+YxxxpRClLk9JhYrIYowgAU/MTlnsIrr65T5qUovWr3leeTuXyWWNOtzMLyult
uYKzhJBWq+N7y7cO9EExiE5XwTEjxxqlmoj16VhMpRyAa5EbqG0QkH+j3ImejBIq
yBd4qOfQmmf5MYrFS7YDPzl8Z9hLlp8Ur99RgYBEl7Nenf649ir7AjEhT/oY4PoY
mz7O7dyTLUXu2A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:04 2025 by rpki-client