Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
File: rwL7VrRZx6IaebaLThGKuHb8lqU.mft (raw, json)
Hash identifier: OTBMUcG7tJKFj51uL/Q3WZJ1xJlmI9mWCJQVttL83Jc=
Subject key identifier: 03:04:3F:38:4F:2D:06:5A:D1:F2:05:1C:59:85:B0:93:B7:15:22:EB
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial: 0197D1AAC04981873487A88ACCB3A070F046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
Manifest number: 0DBE
Signing time: Thu 03 Jul 2025 19:01:57 +0000
Manifest this update: Thu 03 Jul 2025 19:01:57 +0000
Manifest next update: Fri 04 Jul 2025 19:01:57 +0000
Files and hashes: 1: KVHIamZJVn2A53v0da8_IQ5hmAc.roa (hash: MHiTghXPbp0Yn7XA7tDf2bHlQcgsEoD122bH+wIZHLg=)
2: rwL7VrRZx6IaebaLThGKuHb8lqU.crl (hash: 1M1lD+VBlVdajEl2xhdvMPLb974PSwAMBR4VZ0Tha7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 19:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:aa:c0:49:81:87:34:87:a8:8a:cc:b3:a0:70:f0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Validity
Not Before: Jul 3 19:01:57 2025 GMT
Not After : Jul 4 19:01:57 2025 GMT
Subject: CN=03043f384f2d065ad1f2051c5985b093b71522eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:b3:57:d7:7e:ed:8d:b9:37:bd:13:08:40:
6a:8a:94:0d:0d:10:ed:b0:4f:a9:dd:4b:33:9e:06:
ee:45:fb:50:b9:06:87:19:74:25:45:ad:ac:3f:d1:
e0:6c:2f:1b:9c:9c:90:4c:32:53:b9:c0:92:4d:fb:
d5:38:06:f7:c0:62:e0:4c:02:49:5f:f4:97:b3:a6:
9c:7e:a2:03:62:33:00:ee:c4:01:ef:05:1a:d9:20:
d8:b2:02:99:20:b2:e2:c3:ad:56:d0:ba:cd:4f:85:
cf:ee:73:fd:0a:c8:40:db:fc:09:52:ea:b0:85:63:
2d:7b:cf:1f:91:88:a2:a5:59:3e:d6:38:74:1f:c9:
44:21:0a:a2:cd:fc:85:e2:22:54:ba:41:46:18:11:
b8:d7:f8:05:ef:eb:b8:ac:e5:ef:37:36:dc:ad:5f:
8a:2f:19:05:e5:3d:ad:ec:0f:37:0f:03:4a:2e:c2:
bc:bb:d7:3a:8a:09:06:c4:00:c0:38:b5:29:ab:5c:
16:d9:42:6f:1c:66:8c:2a:2c:46:89:50:b3:95:2f:
0d:99:bd:dc:32:cc:d7:53:70:bb:af:25:2b:5b:c9:
2f:70:7b:0f:fd:77:b8:e4:f8:39:4f:55:2e:20:f6:
66:8c:c2:cc:7e:6f:d7:23:02:70:a2:0c:d6:a8:d3:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:04:3F:38:4F:2D:06:5A:D1:F2:05:1C:59:85:B0:93:B7:15:22:EB
X509v3 Authority Key Identifier:
keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a8:4d:af:72:14:b4:fa:09:f9:c5:61:f2:74:b5:9a:fb:f9:
6c:e2:97:9a:3a:e4:db:76:72:de:40:56:c7:6c:60:68:04:ae:
f2:54:4c:fb:4d:34:22:a3:6f:6d:c2:aa:b0:d5:eb:67:24:ee:
fa:aa:59:af:c1:65:e2:ea:e9:d9:53:9c:d1:12:14:da:90:8a:
e7:90:ea:58:ca:61:6c:8b:b5:6e:f0:16:ed:37:fb:e5:2a:9b:
00:8a:02:67:cc:62:0a:8f:58:ac:4b:e4:8f:ce:d3:12:68:df:
47:27:ce:80:4f:4b:fb:87:36:85:de:b9:ea:0f:a2:3b:b1:b0:
93:7f:24:3b:5b:02:d2:e9:91:bd:9a:9c:c4:5a:ff:4a:7d:15:
41:15:5d:b9:67:b7:88:0b:1d:d8:41:38:e4:92:52:60:49:ee:
5e:39:a0:bc:e6:04:92:3d:ee:88:e7:9a:fa:d0:84:6c:8d:7f:
85:9f:8f:b0:88:d3:f6:e9:f8:3b:8d:9e:29:16:81:f6:69:33:
2c:eb:69:fd:93:a8:15:af:83:cf:36:73:9d:6d:de:ed:a6:9a:
09:37:92:da:b7:d1:54:78:33:f6:7b:e4:f1:3c:31:a5:6e:04:
83:f4:c8:ca:e9:79:cb:aa:19:96:ee:a4:cb:24:db:c0:f0:41:
e7:d6:b4:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfRqsBJgYc0h6iKzLOgcPBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDJmYjU2YjQ1OWM3YTIxYTc5YjY4YjRlMTE4YWI4NzZm
Yzk2YTUwHhcNMjUwNzAzMTkwMTU3WhcNMjUwNzA0MTkwMTU3WjAzMTEwLwYDVQQD
EygwMzA0M2YzODRmMmQwNjVhZDFmMjA1MWM1OTg1YjA5M2I3MTUyMmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAezV9d+7Y25N70TCEBqipQNDRDt
sE+p3UszngbuRftQuQaHGXQlRa2sP9HgbC8bnJyQTDJTucCSTfvVOAb3wGLgTAJJ
X/SXs6acfqIDYjMA7sQB7wUa2SDYsgKZILLiw61W0LrNT4XP7nP9CshA2/wJUuqw
hWMte88fkYiipVk+1jh0H8lEIQqizfyF4iJUukFGGBG41/gF7+u4rOXvNzbcrV+K
LxkF5T2t7A83DwNKLsK8u9c6igkGxADAOLUpq1wW2UJvHGaMKixGiVCzlS8Nmb3c
MszXU3C7ryUrW8kvcHsP/Xe45Pg5T1UuIPZmjMLMfm/XIwJwogzWqNPrAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMEPzhPLQZa0fIFHFmFsJO3FSLrMB8GA1UdIwQY
MBaAFK8C+1a0WceiGnm2i04Rirh2/JalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndMN1ZyUlp4NklhZWJhTFRoR0t1SGI4bHFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zM2ZiOTAtMTg5Yi00ZTMxLWI5MmEt
MGMxOGQ4NTk3MzI4LzEvcndMN1ZyUlp4NklhZWJhTFRoR0t1SGI4bHFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zM2ZiOTAtMTg5Yi00ZTMxLWI5MmEtMGMxOGQ4NTk3MzI4
LzEvcndMN1ZyUlp4NklhZWJhTFRoR0t1SGI4bHFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqhNr3IU
tPoJ+cVh8nS1mvv5bOKXmjrk23Zy3kBWx2xgaASu8lRM+000IqNvbcKqsNXrZyTu
+qpZr8Fl4urp2VOc0RIU2pCK55DqWMphbIu1bvAW7Tf75SqbAIoCZ8xiCo9YrEvk
j87TEmjfRyfOgE9L+4c2hd656g+iO7Gwk38kO1sC0umRvZqcxFr/Sn0VQRVduWe3
iAsd2EE45JJSYEnuXjmgvOYEkj3uiOea+tCEbI1/hZ+PsIjT9un4O42eKRaB9mkz
LOtp/ZOoFa+DzzZznW3e7aaaCTeS2rfRVHgz9nvk8TwxpW4Eg/TIyul5y6oZlu6k
yyTbwPBB59a0EA==
-----END CERTIFICATE-----
Generated at Fri Jul 4 04:05:11 2025 by rpki-client