Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: 3YFRbvK/nBQbBkFDFWfhyYZGe2begMmAcfBF+gX753o=
Subject key identifier: B7:90:D4:38:4A:ED:2B:83:4F:34:28:AC:7A:00:8B:50:D5:84:9C:4B
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 019933B710FF0293BBB9B7057B216DF8732A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 13:00:59 +0000
Manifest this update: Wed 10 Sep 2025 13:00:59 +0000
Manifest next update: Thu 11 Sep 2025 13:00:59 +0000
Files and hashes: 1: dBbI1Z81Mloa7W2OzhoKXchOrRQ.roa (hash: cFMz5yq3xJCpOCH1TXFzmCMMTxw6N/8cLdoB9ZDvza0=)
2: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: 9jPLZ/GmoI98eYm/Bs7NBRp6MP+0lyAGwkhpsm/l+XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:10:ff:02:93:bb:b9:b7:05:7b:21:6d:f8:73:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Sep 10 13:00:59 2025 GMT
Not After : Sep 11 13:00:59 2025 GMT
Subject: CN=b790d4384aed2b834f3428ac7a008b50d5849c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:b2:7f:df:71:18:88:7b:eb:76:48:a9:7c:
e1:3f:cb:39:81:7b:29:89:59:22:32:44:9b:44:ed:
e1:2f:e0:8f:9e:59:d6:b8:90:14:71:33:85:19:cf:
06:83:ff:a5:11:01:16:c8:df:96:2b:61:01:8d:47:
15:37:04:d5:4d:fa:9c:58:c6:43:c8:59:ed:f4:aa:
10:83:61:f9:14:25:5c:bc:d3:a1:08:df:72:db:a9:
3a:93:cb:14:8e:7c:b8:9f:ab:5a:c3:c8:32:0d:cd:
fa:11:f7:6f:9f:57:09:c0:7b:c8:02:93:8a:ff:0a:
25:e6:0f:ca:9f:7b:12:91:49:52:4b:b1:23:bc:80:
f1:1c:bd:cb:ab:c1:08:02:21:6c:c9:41:7d:65:cf:
2a:47:29:69:6c:5d:28:6d:0b:6f:9f:74:15:87:5a:
71:a8:28:55:77:9e:59:c2:3b:c6:11:ba:df:b7:ee:
8f:c6:92:16:a6:1a:87:13:08:a4:f0:42:4f:0c:5c:
ac:eb:1a:cb:19:5f:09:49:d3:d3:64:70:bc:ec:24:
a6:54:2e:c7:e4:18:ea:dc:b2:5a:54:44:7d:9f:5e:
03:9e:cd:c8:a5:37:39:f8:fb:09:a2:66:45:b6:09:
b3:bd:77:73:37:00:15:5c:ba:19:f1:50:47:53:60:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:90:D4:38:4A:ED:2B:83:4F:34:28:AC:7A:00:8B:50:D5:84:9C:4B
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f4:5c:95:68:65:73:55:b5:60:fc:60:16:d3:ed:08:a9:2c:
38:6f:4b:87:58:0f:65:a3:96:c6:c2:96:55:32:bc:b2:c9:c6:
af:34:e1:93:98:86:fd:6f:a5:7d:a0:90:cb:0f:08:d6:b2:ae:
ee:44:d3:be:67:e6:c9:ff:99:86:77:c5:a5:d6:69:d7:38:74:
01:3f:b5:54:39:6c:dd:72:7e:a7:15:b6:c4:7d:a0:bb:f9:83:
76:25:5a:20:dd:ff:5d:90:60:59:1d:b9:57:b3:7b:ba:ef:3a:
84:b6:e4:a0:29:44:75:e5:ab:6a:3a:bd:01:af:4b:d5:f1:9f:
61:c9:f6:0d:1e:d3:8d:24:c6:1e:e4:09:18:c9:23:bd:8d:22:
9d:4b:2c:65:c3:f1:2e:c2:61:91:f0:88:4f:85:09:db:bf:40:
39:44:cb:de:19:26:e3:77:3c:27:22:6f:11:7b:3e:df:fd:65:
e3:e6:b9:a7:9b:3e:d9:bc:0c:3e:76:11:e0:b4:1a:be:d9:8e:
e9:b7:6b:eb:85:d6:42:1c:9d:f9:3a:e4:ae:10:0d:27:f4:97:
d8:10:25:db:d7:57:55:5f:60:ef:4c:a6:04:b1:c7:51:ce:21:
1f:c6:ec:c7:e1:3e:38:e8:28:9a:d8:5c:81:b2:69:ee:a4:aa:
3d:e9:a3:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkztxD/ApO7ubcFeyFt+HMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZTRlNjA3NTk3OGVhOTQ3NmI2NDFjZTAwOGM3ODdhYjI4
ZTVkMTMwHhcNMjUwOTEwMTMwMDU5WhcNMjUwOTExMTMwMDU5WjAzMTEwLwYDVQQD
EyhiNzkwZDQzODRhZWQyYjgzNGYzNDI4YWM3YTAwOGI1MGQ1ODQ5YzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aGyf99xGIh763ZIqXzhP8s5gXsp
iVkiMkSbRO3hL+CPnlnWuJAUcTOFGc8Gg/+lEQEWyN+WK2EBjUcVNwTVTfqcWMZD
yFnt9KoQg2H5FCVcvNOhCN9y26k6k8sUjny4n6taw8gyDc36Efdvn1cJwHvIApOK
/wol5g/Kn3sSkUlSS7EjvIDxHL3Lq8EIAiFsyUF9Zc8qRylpbF0obQtvn3QVh1px
qChVd55ZwjvGEbrft+6PxpIWphqHEwik8EJPDFys6xrLGV8JSdPTZHC87CSmVC7H
5Bjq3LJaVER9n14Dns3IpTc5+PsJomZFtgmzvXdzNwAVXLoZ8VBHU2BcbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeQ1DhK7SuDTzQorHoAi1DVhJxLMB8GA1UdIwQY
MBaAFIHk5gdZeOqUdrZBzgCMeHqyjl0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2VUbUIxbDQ2cFIydGtIT0FJeDRlcktPWFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83OTM3MDktZWU1OC00Zjc2LWIzMDgt
ODYyYjg2YjZlNjQyLzEvZ2VUbUIxbDQ2cFIydGtIT0FJeDRlcktPWFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83OTM3MDktZWU1OC00Zjc2LWIzMDgtODYyYjg2YjZlNjQy
LzEvZ2VUbUIxbDQ2cFIydGtIT0FJeDRlcktPWFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvRclWhl
c1W1YPxgFtPtCKksOG9Lh1gPZaOWxsKWVTK8ssnGrzThk5iG/W+lfaCQyw8I1rKu
7kTTvmfmyf+ZhnfFpdZp1zh0AT+1VDls3XJ+pxW2xH2gu/mDdiVaIN3/XZBgWR25
V7N7uu86hLbkoClEdeWrajq9Aa9L1fGfYcn2DR7TjSTGHuQJGMkjvY0inUssZcPx
LsJhkfCIT4UJ279AOUTL3hkm43c8JyJvEXs+3/1l4+a5p5s+2bwMPnYR4LQavtmO
6bdr64XWQhyd+TrkrhANJ/SX2BAl29dXVV9g70ymBLHHUc4hH8bsx+E+OOgomthc
gbJp7qSqPemj2A==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:04:30 2025 by rpki-client