Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
File: RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json)
Hash identifier: /Di3QWD/VhxCbVUDeCaKQ7+jlWt35zWE2QG8iNlhnsw=
Subject key identifier: CF:B1:B7:A9:31:F9:D6:88:F7:BB:BA:62:7D:23:AF:CA:52:84:EE:8C
Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
Certificate issuer: /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Certificate serial: 019922C3A45DE7421FDB54D1656E9B3467F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
Manifest number: 1496
Signing time: Sun 07 Sep 2025 06:01:10 +0000
Manifest this update: Sun 07 Sep 2025 06:01:10 +0000
Manifest next update: Mon 08 Sep 2025 06:01:10 +0000
Files and hashes: 1: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: sGtLDY+qMi1EMXbBVeS4ZeVfziv9med+RciOTRzrsj8=)
2: qkuP3INuoQUlkGzQXsg6hNdv2PE.roa (hash: nbTS8K6lNcxMgwiUyLADYWPREZ9Nv1ZzLCUppLN19Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a4:5d:e7:42:1f:db:54:d1:65:6e:9b:34:67:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Validity
Not Before: Sep 7 06:01:10 2025 GMT
Not After : Sep 8 06:01:10 2025 GMT
Subject: CN=cfb1b7a931f9d688f7bbba627d23afca5284ee8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f8:50:11:7a:da:16:06:e0:94:cf:30:3e:62:
dc:9b:e7:df:9d:ac:c3:81:5f:3a:86:1d:96:3e:77:
4b:e7:1b:f7:84:0e:1e:47:12:54:f6:ed:5d:35:bc:
05:e7:22:83:a2:81:75:97:2b:a0:a5:e2:54:88:d5:
85:33:e7:11:7d:31:39:b7:47:ec:9e:cb:fd:44:71:
ff:39:9b:75:b4:77:f9:4b:cc:ac:ad:b6:42:20:3f:
53:7c:ac:0d:08:54:0a:66:5c:8d:cc:b3:40:70:7b:
34:f2:d6:2e:ac:a7:f1:4f:d2:10:25:bb:07:fb:0e:
e8:ec:43:84:0a:26:e1:24:f3:2c:58:32:78:cc:e2:
6e:95:55:56:7a:64:8c:f5:13:ff:e5:44:80:dc:2d:
ba:ca:eb:fb:3b:d1:ca:42:b2:4f:07:7d:5b:48:07:
21:42:45:d6:7d:f0:55:7e:3d:79:75:e5:2a:76:15:
82:9d:6c:9e:a5:ce:b3:0c:60:bd:bc:73:86:96:9c:
29:fc:2b:16:71:06:7c:c9:35:b1:1a:22:ef:c0:f9:
f4:22:38:ef:9a:74:90:57:51:27:23:b5:5f:b0:51:
6c:f9:a4:69:61:80:ac:3f:ed:b3:7b:aa:bc:f8:7a:
e7:61:ba:c4:82:a6:47:fb:8f:cd:27:6b:c8:3b:c9:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B1:B7:A9:31:F9:D6:88:F7:BB:BA:62:7D:23:AF:CA:52:84:EE:8C
X509v3 Authority Key Identifier:
keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b8:e7:56:77:04:ba:8f:55:3c:2f:93:d1:61:e5:ee:1c:cd:
c9:db:f6:e1:98:c4:31:1f:b7:0f:98:c2:d7:1c:1f:9b:63:71:
3a:6d:cd:3d:85:6b:86:15:c6:b1:d6:c2:57:16:7a:e4:d3:46:
36:04:c2:08:fb:09:c3:e8:88:d6:a1:04:13:64:9b:bd:26:7f:
4a:fa:5a:1d:9d:79:b8:3b:fb:a4:5c:52:ce:63:ab:43:e6:e6:
28:bf:1c:2e:35:7d:4e:50:c5:5b:43:a9:22:1a:cc:0d:c3:b5:
17:3b:53:0d:e6:67:0a:cd:e8:97:ea:41:73:11:2a:c7:e9:35:
75:ef:a8:9a:07:6e:99:f2:2f:7c:39:45:3e:e6:45:1d:ee:dd:
1e:7d:4d:da:59:a5:9d:66:c3:4d:a4:6f:34:ee:02:5f:5d:80:
5d:17:f0:b4:9d:a5:2b:00:e5:a6:9e:6b:59:d6:02:0c:a0:80:
7d:31:df:45:cd:f1:42:9f:ab:28:69:05:ac:0c:de:cd:6c:6a:
64:62:f4:69:f0:ac:34:5b:5c:01:e4:b3:68:25:f6:58:26:cc:
f5:b8:f9:77:7c:0a:21:2d:ef:18:9f:5f:23:39:e3:8a:05:2f:
03:2f:2a:55:b4:99:66:9a:55:c6:18:4b:76:da:91:3e:07:af:
63:98:d5:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw6Rd50If21TRZW6bNGfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MThiODljN2RjZTJiNWVkYzA1NTgxNTE2Y2ZjMTlkN2Ez
MTc0ZTgwHhcNMjUwOTA3MDYwMTEwWhcNMjUwOTA4MDYwMTEwWjAzMTEwLwYDVQQD
EyhjZmIxYjdhOTMxZjlkNjg4ZjdiYmJhNjI3ZDIzYWZjYTUyODRlZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fhQEXraFgbglM8wPmLcm+ffnazD
gV86hh2WPndL5xv3hA4eRxJU9u1dNbwF5yKDooF1lyugpeJUiNWFM+cRfTE5t0fs
nsv9RHH/OZt1tHf5S8ysrbZCID9TfKwNCFQKZlyNzLNAcHs08tYurKfxT9IQJbsH
+w7o7EOECibhJPMsWDJ4zOJulVVWemSM9RP/5USA3C26yuv7O9HKQrJPB31bSAch
QkXWffBVfj15deUqdhWCnWyepc6zDGC9vHOGlpwp/CsWcQZ8yTWxGiLvwPn0Ijjv
mnSQV1EnI7VfsFFs+aRpYYCsP+2ze6q8+HrnYbrEgqZH+4/NJ2vIO8lbPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+xt6kx+daI97u6Yn0jr8pShO6MMB8GA1UdIwQY
MBaAFEUYuJx9zite3AVYFRbPwZ16MXToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jY2Y0NDQtYTIyYy00ZmNkLWJmMWEt
MGY5MzdjY2YwMmUwLzEvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jY2Y0NDQtYTIyYy00ZmNkLWJmMWEtMGY5MzdjY2YwMmUw
LzEvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbjnVncE
uo9VPC+T0WHl7hzNydv24ZjEMR+3D5jC1xwfm2NxOm3NPYVrhhXGsdbCVxZ65NNG
NgTCCPsJw+iI1qEEE2SbvSZ/SvpaHZ15uDv7pFxSzmOrQ+bmKL8cLjV9TlDFW0Op
IhrMDcO1FztTDeZnCs3ol+pBcxEqx+k1de+omgdumfIvfDlFPuZFHe7dHn1N2lml
nWbDTaRvNO4CX12AXRfwtJ2lKwDlpp5rWdYCDKCAfTHfRc3xQp+rKGkFrAzezWxq
ZGL0afCsNFtcAeSzaCX2WCbM9bj5d3wKIS3vGJ9fIznjigUvAy8qVbSZZppVxhhL
dtqRPgevY5jVRw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:42 2025 by rpki-client