Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
File: preJsy4W6d0vcFExGdx36mH_Hgk.mft (raw, json)
Hash identifier: h2u9YFOgVyPEoDS/9GB3r7WSEI+5PX7laVMLx/m+f8g=
Subject key identifier: 3B:CA:4F:B1:91:D1:23:B5:66:07:A1:AD:03:53:39:5E:AE:97:F8:DD
Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
Certificate issuer: /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Certificate serial: 01992DEC53C318FFA8ECC5593A52C42C25B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
Manifest number: 14FE
Signing time: Tue 09 Sep 2025 10:01:26 +0000
Manifest this update: Tue 09 Sep 2025 10:01:26 +0000
Manifest next update: Wed 10 Sep 2025 10:01:26 +0000
Files and hashes: 1: 6R635Ptd67sQbUozDAHL15KwAZ8.roa (hash: FeJLdgD5f1a4PRbLvL4XZUcT1XCVqYv8DaI7m1HKYu4=)
2: BGlv0Nq1aORhjho_eomErpdENqs.roa (hash: tJlt0s+DB+Wx1B02lbAuTeaAFj/Rwy4EK+7+WopLHuY=)
3: EcvOEckBpGv8WcgKGLbyF5bYsw8.roa (hash: iM/JhqVxaPI3RLw6TbcIGYCT5pzlMW9q0BUKqfAvA2s=)
4: PHALUzcgKSrWpp9PLu5bWuqYals.roa (hash: ipz2KfdlfbDQbWsB2hP2+lgmuhx6HeNDSZnM+uKEXUI=)
5: k94_YS0wqPGUh9Li10sS34dlvmM.roa (hash: BUjj7NfQhPbheGokvO6j0wOKq8xKD5UoEM8obUQTSDg=)
6: preJsy4W6d0vcFExGdx36mH_Hgk.crl (hash: D96Y6Q98XR0y0SBoa40J9tXg0UBFyonWUVkdhx+s7KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:ec:53:c3:18:ff:a8:ec:c5:59:3a:52:c4:2c:25:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Validity
Not Before: Sep 9 10:01:26 2025 GMT
Not After : Sep 10 10:01:26 2025 GMT
Subject: CN=3bca4fb191d123b56607a1ad0353395eae97f8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f2:19:72:6e:cb:96:0f:80:a2:40:6c:90:ff:
d1:cd:c6:a8:25:fb:1d:b3:3f:df:45:b9:e7:32:2d:
87:e4:db:ce:28:e3:70:6e:84:8f:01:64:40:4c:29:
00:d2:46:09:ac:07:34:49:9f:7a:42:9a:1e:18:fa:
88:f6:1e:a9:04:03:b9:e8:30:11:a6:b4:10:cd:76:
33:26:4c:b1:ca:e5:31:34:78:13:8b:6b:9c:8a:68:
bf:7e:d3:7b:57:67:78:04:5b:34:83:85:4b:fd:f9:
9b:af:71:cc:12:b7:7f:1b:eb:25:d6:dc:95:ba:c9:
f1:ab:16:53:c5:bf:8f:4f:b0:a1:47:d3:a7:e4:1e:
aa:40:f7:dd:46:1c:08:cc:d8:0b:65:32:2c:05:be:
f1:83:31:7d:8b:e0:ef:7f:50:27:73:6e:0f:12:84:
a9:e6:d1:1f:11:df:ed:43:b3:41:a8:93:4b:44:58:
45:ed:e2:86:88:4a:ef:54:eb:52:cf:bf:b6:64:68:
4b:c1:43:38:e9:2a:ff:81:f6:51:7a:cb:0e:95:b9:
6e:9d:c6:45:d3:6c:6a:17:a8:b4:88:cd:66:b6:56:
7d:9b:98:80:a6:12:49:f5:f3:0d:20:60:62:bd:cc:
f8:88:c6:c7:38:ed:7d:f4:97:2a:62:78:b2:30:10:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CA:4F:B1:91:D1:23:B5:66:07:A1:AD:03:53:39:5E:AE:97:F8:DD
X509v3 Authority Key Identifier:
keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5e:72:8d:82:57:f4:9c:68:36:7a:7c:cb:76:12:79:0e:f7:
67:d9:08:89:cd:1a:ec:ab:50:26:29:6a:f3:a8:36:16:3a:27:
f7:fe:b6:d5:61:7b:35:3b:69:6d:e1:e4:bd:8f:92:92:13:c5:
6b:c6:af:86:75:64:70:49:85:5d:4b:5d:7a:c2:06:1a:35:63:
fa:a3:43:d2:70:b0:3a:34:86:78:e3:ed:86:c9:ba:69:7d:56:
f5:86:d5:0a:04:f6:33:93:7a:5d:31:86:81:a3:be:ef:9d:16:
bf:ba:3c:7d:49:8c:a4:f7:3a:a2:2d:70:77:55:5b:7b:84:a0:
5f:7c:f8:74:25:2c:f1:08:b2:de:99:a0:c7:4b:47:8d:e6:27:
48:f4:07:bc:ba:78:fb:81:56:01:06:97:ab:82:28:00:f1:35:
6a:f5:70:80:6d:e7:05:1c:4b:9c:1d:fa:15:30:84:be:97:ba:
f8:4e:94:79:0c:6d:da:ec:23:9a:db:03:37:b9:2e:2b:a4:ce:
1b:3a:05:14:99:bf:18:ff:34:4e:38:ee:ce:e9:e0:88:9c:74:
4e:87:ad:15:86:11:43:9b:dd:30:61:d7:c5:11:72:29:9b:c3:
e1:4a:4c:e4:ab:7a:a8:de:3a:e3:24:20:70:6b:f9:eb:36:68:
06:a8:86:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkt7FPDGP+o7MVZOlLELCWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Yjc4OWIzMmUxNmU5ZGQyZjcwNTEzMTE5ZGM3N2VhNjFm
ZjFlMDkwHhcNMjUwOTA5MTAwMTI2WhcNMjUwOTEwMTAwMTI2WjAzMTEwLwYDVQQD
EygzYmNhNGZiMTkxZDEyM2I1NjYwN2ExYWQwMzUzMzk1ZWFlOTdmOGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PIZcm7Llg+AokBskP/RzcaoJfsd
sz/fRbnnMi2H5NvOKONwboSPAWRATCkA0kYJrAc0SZ96QpoeGPqI9h6pBAO56DAR
prQQzXYzJkyxyuUxNHgTi2ucimi/ftN7V2d4BFs0g4VL/fmbr3HMErd/G+sl1tyV
usnxqxZTxb+PT7ChR9On5B6qQPfdRhwIzNgLZTIsBb7xgzF9i+Dvf1Anc24PEoSp
5tEfEd/tQ7NBqJNLRFhF7eKGiErvVOtSz7+2ZGhLwUM46Sr/gfZRessOlbluncZF
02xqF6i0iM1mtlZ9m5iAphJJ9fMNIGBivcz4iMbHOO199JcqYniyMBBn0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvKT7GR0SO1ZgehrQNTOV6ul/jdMB8GA1UdIwQY
MBaAFKa3ibMuFundL3BRMRncd+ph/x4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEt
MDZjOTI5NmYwOGEyLzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEtMDZjOTI5NmYwOGEy
LzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD15yjYJX
9JxoNnp8y3YSeQ73Z9kIic0a7KtQJilq86g2Fjon9/621WF7NTtpbeHkvY+SkhPF
a8avhnVkcEmFXUtdesIGGjVj+qND0nCwOjSGeOPthsm6aX1W9YbVCgT2M5N6XTGG
gaO+750Wv7o8fUmMpPc6oi1wd1Vbe4SgX3z4dCUs8Qiy3pmgx0tHjeYnSPQHvLp4
+4FWAQaXq4IoAPE1avVwgG3nBRxLnB36FTCEvpe6+E6UeQxt2uwjmtsDN7kuK6TO
GzoFFJm/GP80TjjuzungiJx0ToetFYYRQ5vdMGHXxRFyKZvD4UpM5Kt6qN464yQg
cGv56zZoBqiG2g==
-----END CERTIFICATE-----
Generated at Tue Sep 9 16:31:56 2025 by rpki-client