Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier: DhpC7HBqOHIwA+TpHznCCR3SjRTDkVIrdy1uCd3M1Is=
Subject key identifier: E8:65:B3:55:96:2B:6F:BF:05:AF:3F:53:72:D9:ED:FD:E8:9B:69:6D
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 01991688AA756D21D641B9F50EC09FAFC8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number: 0E8A
Signing time: Thu 04 Sep 2025 21:01:19 +0000
Manifest this update: Thu 04 Sep 2025 21:01:19 +0000
Manifest next update: Fri 05 Sep 2025 21:01:19 +0000
Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: rrbGE4T+tYUjMvFT1sedjJYyCSWJVtwCBjfiijgPOt8=)
2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:aa:75:6d:21:d6:41:b9:f5:0e:c0:9f:af:c8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Sep 4 21:01:19 2025 GMT
Not After : Sep 5 21:01:19 2025 GMT
Subject: CN=e865b355962b6fbf05af3f5372d9edfde89b696d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:a5:55:95:3f:bc:79:32:0d:13:2e:62:8f:
ae:8b:76:1c:4f:b8:48:df:21:e5:66:db:f6:eb:64:
2a:8a:2c:ad:7a:1a:56:20:81:00:4a:5a:da:d5:06:
92:2c:e2:02:75:0b:49:32:e5:cf:97:29:6a:bb:57:
d1:7b:61:cf:e4:1f:27:a2:14:c9:3d:02:30:c5:82:
c7:10:f3:07:75:fb:44:98:68:a9:b6:2c:2a:36:5f:
71:14:5f:7d:b3:50:dd:d0:06:c1:57:fb:0b:17:72:
c6:7a:17:de:39:6e:47:90:b1:40:9a:56:7b:34:cd:
80:37:85:10:8b:82:fc:eb:2c:3c:82:e4:b7:63:b0:
c1:c6:3e:cc:05:3e:a1:7b:7d:c6:25:0a:28:a8:5a:
8c:57:03:ea:a3:e5:eb:3d:bf:8d:33:8d:a8:65:7d:
9f:7c:89:b7:9e:eb:ac:68:75:b4:43:99:e1:63:f4:
53:af:ca:03:1b:f5:37:fb:4d:f7:8d:8f:4c:67:9f:
2c:f7:34:8b:55:13:58:1c:bd:80:ef:10:a2:44:ee:
d0:d8:10:39:e9:56:18:62:aa:31:a4:f3:f7:2c:e8:
2f:2b:20:01:a5:d5:3e:bb:7d:72:68:29:37:48:5c:
e8:58:ea:bd:17:3f:6c:a5:89:05:e2:10:07:cf:64:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:65:B3:55:96:2B:6F:BF:05:AF:3F:53:72:D9:ED:FD:E8:9B:69:6D
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d7:1e:3d:3e:4c:35:2f:a8:4a:42:88:89:ce:77:df:f0:e5:
8f:b2:73:ce:13:f7:20:b5:e2:9b:80:2c:d8:2a:62:6a:32:db:
bf:fd:98:51:37:77:13:ab:17:22:11:8a:9c:42:71:ed:1b:d6:
f9:7a:5c:54:c7:8a:84:66:18:e1:da:e8:f9:ba:9e:8d:9e:4a:
28:1c:9c:d6:36:66:c8:a9:d7:18:17:6c:fa:28:d2:b1:bb:4c:
1a:7f:38:72:a0:c0:5a:4b:55:87:b0:aa:93:39:7b:c0:b2:68:
f5:fb:0e:0c:f6:be:52:d1:2d:dd:dd:a9:87:0e:08:32:11:e8:
7e:bb:9f:b4:77:80:fb:4d:0b:a7:9b:32:5c:8d:a9:1c:be:4b:
00:35:8b:94:aa:f3:73:3a:5e:25:7c:50:ef:07:19:0c:5b:95:
85:77:4e:35:88:8d:87:58:f6:4b:e1:c8:e1:63:bd:29:f8:63:
c0:81:b1:63:fb:8d:d9:38:6c:d9:34:97:0a:fd:e1:cd:c4:fa:
e9:ce:80:1a:8c:ad:fd:54:02:f7:fb:cc:02:dd:2f:aa:b1:e6:
48:84:83:68:e7:a0:5b:01:43:b7:e3:09:62:3a:1e:57:2e:80:
2e:aa:8e:66:c2:3d:62:8a:5d:e7:1e:28:b1:f4:a0:b3:dd:bb:
54:30:79:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWiKp1bSHWQbn1DsCfr8ixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MGJjNjdmNTQ5ZWIwNDkyNTc3MjBhMDAwZWIwNWI1NGY1
ZDJiYzAwHhcNMjUwOTA0MjEwMTE5WhcNMjUwOTA1MjEwMTE5WjAzMTEwLwYDVQQD
EyhlODY1YjM1NTk2MmI2ZmJmMDVhZjNmNTM3MmQ5ZWRmZGU4OWI2OTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N+lVZU/vHkyDRMuYo+ui3YcT7hI
3yHlZtv262QqiiytehpWIIEASlra1QaSLOICdQtJMuXPlylqu1fRe2HP5B8nohTJ
PQIwxYLHEPMHdftEmGiptiwqNl9xFF99s1Dd0AbBV/sLF3LGehfeOW5HkLFAmlZ7
NM2AN4UQi4L86yw8guS3Y7DBxj7MBT6he33GJQooqFqMVwPqo+XrPb+NM42oZX2f
fIm3nuusaHW0Q5nhY/RTr8oDG/U3+033jY9MZ58s9zSLVRNYHL2A7xCiRO7Q2BA5
6VYYYqoxpPP3LOgvKyABpdU+u31yaCk3SFzoWOq9Fz9spYkF4hAHz2SE8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhls1WWK2+/Ba8/U3LZ7f3om2ltMB8GA1UdIwQY
MBaAFEULxn9UnrBJJXcgoADrBbVPXSvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYt
MjRhOGQ5YmYzN2JjLzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYtMjRhOGQ5YmYzN2Jj
LzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldcePT5M
NS+oSkKIic533/Dlj7JzzhP3ILXim4As2CpiajLbv/2YUTd3E6sXIhGKnEJx7RvW
+XpcVMeKhGYY4dro+bqejZ5KKByc1jZmyKnXGBds+ijSsbtMGn84cqDAWktVh7Cq
kzl7wLJo9fsODPa+UtEt3d2phw4IMhHofruftHeA+00Lp5syXI2pHL5LADWLlKrz
czpeJXxQ7wcZDFuVhXdONYiNh1j2S+HI4WO9KfhjwIGxY/uN2Ths2TSXCv3hzcT6
6c6AGoyt/VQC9/vMAt0vqrHmSISDaOegWwFDt+MJYjoeVy6ALqqOZsI9Yopd5x4o
sfSgs927VDB5kw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:27:13 2025 by rpki-client