Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
File: RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json)
Hash identifier: ehCci5tyNhKG3/Hr6FoikR3luzakg87IRZ4vQ1dh4vs=
Subject key identifier: 67:93:17:25:54:10:1D:1C:F5:FF:DE:B1:B9:92:D5:15:18:4D:49:02
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial: 019931239482E2290514BA4858109256B5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
Manifest number: 01BF
Signing time: Wed 10 Sep 2025 01:00:39 +0000
Manifest this update: Wed 10 Sep 2025 01:00:39 +0000
Manifest next update: Thu 11 Sep 2025 01:00:39 +0000
Files and hashes: 1: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (hash: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=)
2: 4lqvUj_aarjM1QCov1WKcZ47cD4.roa (hash: CUeCuFIy+7/m+7Rp9JxCjE4itMo0nF9rOUfz1A83JwI=)
3: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: ztg93okK5L8Cg2vRwlNBypPxFkZXUuAARhxeN6sNhys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:94:82:e2:29:05:14:ba:48:58:10:92:56:b5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Validity
Not Before: Sep 10 01:00:39 2025 GMT
Not After : Sep 11 01:00:39 2025 GMT
Subject: CN=6793172554101d1cf5ffdeb1b992d515184d4902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:88:c3:3c:e0:70:76:f4:ff:c2:a9:d0:84:
cd:72:15:88:c4:3b:b0:11:4b:a0:50:14:d7:c8:47:
ff:dc:66:d3:b9:f6:a4:58:82:47:02:36:78:85:7c:
97:b9:00:21:a9:fe:4d:70:2d:25:eb:6d:e7:23:d9:
b4:83:6c:a2:49:1c:2c:21:cf:a1:09:00:4e:7d:62:
58:b4:f8:a9:5b:d6:60:e5:46:77:31:e2:4e:94:6e:
b2:97:51:9a:f4:43:6d:31:86:10:13:7f:70:32:54:
dc:fd:60:d7:83:a3:0b:8e:8b:d4:22:88:69:2d:e2:
38:af:f0:00:83:4b:ab:e5:cb:b3:1b:12:47:90:2c:
af:53:f5:12:31:4a:48:4a:6f:f0:78:08:98:c6:97:
a4:b1:35:80:79:a0:a0:91:3a:3a:04:57:09:3d:19:
56:4d:40:fe:16:47:e1:7e:fb:c9:6c:4c:0e:dc:12:
9d:f1:50:cb:f7:4a:72:22:a4:e3:d0:a7:67:f9:ed:
5f:8b:38:32:ab:4a:37:16:a3:71:a2:8d:a8:73:02:
c4:d7:56:87:1a:a5:43:3a:30:72:34:a3:20:9e:04:
3b:14:b5:ca:6b:96:18:6a:1c:bd:a3:4a:cb:30:81:
64:b1:6e:09:f3:57:ca:31:61:ec:68:a3:7f:0b:73:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:93:17:25:54:10:1D:1C:F5:FF:DE:B1:B9:92:D5:15:18:4D:49:02
X509v3 Authority Key Identifier:
keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:93:3f:52:ff:27:a3:43:ec:32:54:86:90:d9:6b:f9:e9:df:
40:1d:d8:f7:28:ac:42:7e:bb:d9:2a:2a:fd:d1:a2:51:81:70:
4d:59:d9:42:bd:1b:14:a5:4b:a5:4d:5a:27:92:d8:11:04:9c:
ca:aa:2a:f6:55:3b:58:c0:c8:aa:e3:07:90:02:9e:b1:8e:2e:
e7:da:99:55:d2:68:9f:fe:84:ef:02:bc:2d:49:d4:64:cf:2c:
d8:18:87:31:12:b0:44:5b:a1:3c:ac:32:69:67:f2:f3:09:d7:
e0:d7:b7:cc:b7:fc:02:ed:4d:f4:ce:6b:10:ff:c0:85:79:bb:
d0:fa:dd:af:17:ee:37:96:9e:5c:59:0e:fd:7f:b0:86:4f:f9:
45:3b:f4:1d:56:64:39:bd:45:07:95:9e:40:9d:03:f3:6a:e2:
6b:b8:73:93:b6:3c:e2:0c:ab:d7:e7:49:f9:11:7b:68:0c:99:
52:9e:2f:5d:a7:62:a9:e5:a6:2e:04:c6:b5:0a:b2:23:48:0b:
70:90:df:86:5e:ca:1b:c9:b8:b2:6c:1f:b5:d6:5e:05:19:1d:
66:ee:ba:4c:45:80:e9:54:f5:94:1a:8d:03:dc:6c:6e:23:c0:
ff:cc:b8:9e:ef:b4:c8:bc:1e:20:97:f8:2d:e5:e9:82:6e:ca:
be:da:56:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxI5SC4ikFFLpIWBCSVrXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MDQ4NWY1ZWFjNjc1YTI0MWFiNmUwMmQ4ZTUzZGQyODU1
NmQyZWUwHhcNMjUwOTEwMDEwMDM5WhcNMjUwOTExMDEwMDM5WjAzMTEwLwYDVQQD
Eyg2NzkzMTcyNTU0MTAxZDFjZjVmZmRlYjFiOTkyZDUxNTE4NGQ0OTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1eIwzzgcHb0/8Kp0ITNchWIxDuw
EUugUBTXyEf/3GbTufakWIJHAjZ4hXyXuQAhqf5NcC0l623nI9m0g2yiSRwsIc+h
CQBOfWJYtPipW9Zg5UZ3MeJOlG6yl1Ga9ENtMYYQE39wMlTc/WDXg6MLjovUIohp
LeI4r/AAg0ur5cuzGxJHkCyvU/USMUpISm/weAiYxpeksTWAeaCgkTo6BFcJPRlW
TUD+FkfhfvvJbEwO3BKd8VDL90pyIqTj0Kdn+e1fizgyq0o3FqNxoo2ocwLE11aH
GqVDOjByNKMgngQ7FLXKa5YYahy9o0rLMIFksW4J81fKMWHsaKN/C3MbswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeTFyVUEB0c9f/esbmS1RUYTUkCMB8GA1UdIwQY
MBaAFEcEhfXqxnWiQatuAtjlPdKFVtLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jNjBkODEtNzE0Mi00YTViLTliNTAt
MDA3N2MyYmRiZjM3LzEvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jNjBkODEtNzE0Mi00YTViLTliNTAtMDA3N2MyYmRiZjM3
LzEvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyZM/Uv8n
o0PsMlSGkNlr+enfQB3Y9yisQn672Soq/dGiUYFwTVnZQr0bFKVLpU1aJ5LYEQSc
yqoq9lU7WMDIquMHkAKesY4u59qZVdJon/6E7wK8LUnUZM8s2BiHMRKwRFuhPKwy
aWfy8wnX4Ne3zLf8Au1N9M5rEP/AhXm70PrdrxfuN5aeXFkO/X+whk/5RTv0HVZk
Ob1FB5WeQJ0D82ria7hzk7Y84gyr1+dJ+RF7aAyZUp4vXadiqeWmLgTGtQqyI0gL
cJDfhl7KG8m4smwftdZeBRkdZu66TEWA6VT1lBqNA9xsbiPA/8y4nu+0yLweIJf4
LeXpgm7KvtpW7g==
-----END CERTIFICATE-----
Generated at Wed Sep 10 04:17:59 2025 by rpki-client