Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: HaFMaLbxYWPCvgXFIHkH4TXHx+/GZreb14WjOIi4qK0=
Subject key identifier: B3:C8:81:45:4A:A5:51:70:83:7F:2E:0C:A4:BC:EE:6D:62:A8:6E:A3
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 01992255B7E4399029FCCD74C29ECC29056D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 1657
Signing time: Sun 07 Sep 2025 04:01:06 +0000
Manifest this update: Sun 07 Sep 2025 04:01:06 +0000
Manifest next update: Mon 08 Sep 2025 04:01:06 +0000
Files and hashes: 1: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (hash: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: 7zCynBav211B1leBTkaRWUSSApA5Gw+d2BqTRg0USvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:b7:e4:39:90:29:fc:cd:74:c2:9e:cc:29:05:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Sep 7 04:01:06 2025 GMT
Not After : Sep 8 04:01:06 2025 GMT
Subject: CN=b3c881454aa55170837f2e0ca4bcee6d62a86ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:1f:31:81:06:3b:56:22:ed:44:0c:38:49:
8b:88:85:31:ca:fe:b1:cc:04:56:44:6d:a0:e5:85:
55:cc:b9:dd:75:cc:e5:21:20:34:b5:22:d6:7f:8b:
6b:87:4a:cb:6a:aa:0e:c8:81:f4:ff:55:79:05:99:
50:4a:00:68:75:6f:35:d9:87:05:48:ed:4d:20:a6:
e6:94:1a:e4:ad:6b:38:3c:6d:f4:99:34:24:03:c7:
2b:20:eb:9d:a3:9d:c9:f7:6c:59:44:54:7e:df:5e:
ff:ea:24:1b:2b:17:8f:dc:43:75:43:03:cf:4b:b3:
88:b9:49:4c:29:85:41:c1:77:d9:ba:f5:97:06:67:
de:55:37:65:b7:00:ca:31:0a:46:e3:5e:f2:b3:df:
df:a4:2d:8d:15:50:92:4d:6f:71:9f:67:d4:26:4e:
cb:92:61:63:f9:96:c3:2d:b1:f1:bb:0b:ff:1f:d1:
e9:63:18:a8:d2:e9:f0:ec:57:3b:39:ae:2a:41:ef:
e5:4e:40:5d:ab:de:92:f7:f1:95:5f:d4:d5:8f:32:
a4:b0:df:2f:9e:7f:cb:1f:e9:1e:00:e7:54:88:b8:
fc:11:cc:b1:b3:15:85:51:84:1d:95:94:14:ec:51:
2e:6f:f9:92:a4:d9:e6:b5:18:c1:d7:05:71:78:0e:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C8:81:45:4A:A5:51:70:83:7F:2E:0C:A4:BC:EE:6D:62:A8:6E:A3
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cc:6b:c0:94:26:89:e8:bd:2f:16:ce:7b:2f:0d:67:ef:4b:
35:e2:13:18:e9:93:ec:34:88:a4:86:85:08:0c:64:c6:8a:8c:
62:e6:4a:e1:e4:d6:07:ea:6b:61:0a:c8:1e:23:4a:6c:0c:36:
d8:bd:ff:ad:0b:e1:30:60:97:7f:69:42:c9:03:a0:c0:ec:e9:
85:c8:72:f0:64:a4:cb:0d:04:76:1d:29:41:62:61:8c:79:ef:
53:18:47:f1:08:b4:f2:47:bd:96:a1:09:b7:dc:ab:27:f3:7b:
0d:bd:21:a1:2c:e3:b6:c4:47:56:31:fe:cd:28:d1:b4:95:42:
7f:60:20:71:a2:34:e8:44:54:76:c4:d7:7a:c6:c7:95:82:50:
23:34:67:7d:af:26:e0:17:e2:a4:a1:87:79:84:9b:93:75:8a:
70:49:fa:25:dd:b8:ef:b4:76:11:59:b5:cd:4a:f3:b9:ab:3d:
a2:c8:5e:dc:33:29:ce:39:4f:f5:6c:1b:19:89:21:46:6e:9d:
99:51:f9:f2:61:f2:2c:6d:3e:ab:46:72:29:e1:6a:0c:1e:d4:
93:8f:4c:c2:93:18:3c:74:2b:6c:c7:68:d7:85:24:4b:f8:8e:
cc:1a:63:48:03:5d:71:06:51:0b:fb:c1:70:24:3c:7b:9b:0b:
62:8a:10:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVbfkOZAp/M10wp7MKQVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNDA3ZGVhNDk5ZDczZDdlYmQ0ZTY4ODI1MTg4Njg3NTU5
Y2IxZjkwHhcNMjUwOTA3MDQwMTA2WhcNMjUwOTA4MDQwMTA2WjAzMTEwLwYDVQQD
EyhiM2M4ODE0NTRhYTU1MTcwODM3ZjJlMGNhNGJjZWU2ZDYyYTg2ZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdMfMYEGO1Yi7UQMOEmLiIUxyv6x
zARWRG2g5YVVzLnddczlISA0tSLWf4trh0rLaqoOyIH0/1V5BZlQSgBodW812YcF
SO1NIKbmlBrkrWs4PG30mTQkA8crIOudo53J92xZRFR+317/6iQbKxeP3EN1QwPP
S7OIuUlMKYVBwXfZuvWXBmfeVTdltwDKMQpG417ys9/fpC2NFVCSTW9xn2fUJk7L
kmFj+ZbDLbHxuwv/H9HpYxio0unw7Fc7Oa4qQe/lTkBdq96S9/GVX9TVjzKksN8v
nn/LH+keAOdUiLj8EcyxsxWFUYQdlZQU7FEub/mSpNnmtRjB1wVxeA5fowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPIgUVKpVFwg38uDKS87m1iqG6jMB8GA1UdIwQY
MBaAFC9AfepJnXPX69TmiCUYhodVnLH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDct
MTkwMDVjYjk4OTg5LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDctMTkwMDVjYjk4OTg5
LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsxrwJQm
iei9LxbOey8NZ+9LNeITGOmT7DSIpIaFCAxkxoqMYuZK4eTWB+prYQrIHiNKbAw2
2L3/rQvhMGCXf2lCyQOgwOzphchy8GSkyw0Edh0pQWJhjHnvUxhH8Qi08ke9lqEJ
t9yrJ/N7Db0hoSzjtsRHVjH+zSjRtJVCf2AgcaI06ERUdsTXesbHlYJQIzRnfa8m
4BfipKGHeYSbk3WKcEn6Jd2477R2EVm1zUrzuas9oshe3DMpzjlP9WwbGYkhRm6d
mVH58mHyLG0+q0ZyKeFqDB7Uk49MwpMYPHQrbMdo14UkS/iOzBpjSANdcQZRC/vB
cCQ8e5sLYooQeA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:58 2025 by rpki-client