Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: wLJYAyCttnFGVdGd3VVRVN/rwXD4DrfykF1ghcRIS6w=
Subject key identifier: 5D:71:BB:86:C9:C4:BF:C0:6D:FF:7B:FD:50:CA:4E:70:9F:8A:E9:FB
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 0198499C132586C5F9D3235DA2BE9ADDD241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 12E8
Signing time: Sun 27 Jul 2025 02:00:21 +0000
Manifest this update: Sun 27 Jul 2025 02:00:21 +0000
Manifest next update: Mon 28 Jul 2025 02:00:21 +0000
Files and hashes: 1: MXjGchA1tthe9hBaCTy34XWuIys.roa (hash: m9xSPEOr8P6pGopF9XMr9mPGzbIw3wWqJY/1QxjlC64=)
2: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: 1LmR6ldJTkEw3NUzbI+3cq9KDNH27Z5zLBz8ZcAOpcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:13:25:86:c5:f9:d3:23:5d:a2:be:9a:dd:d2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Jul 27 02:00:21 2025 GMT
Not After : Jul 28 02:00:21 2025 GMT
Subject: CN=5d71bb86c9c4bfc06dff7bfd50ca4e709f8ae9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:1d:38:d7:19:9d:54:4b:e9:3a:1c:a8:66:
e4:72:0a:a3:b6:60:f0:fb:d3:46:a5:6b:a7:ab:1e:
cd:4f:cb:b5:c5:4b:ee:42:1d:96:4e:f2:00:a6:4a:
cd:42:b9:b4:40:21:bf:ea:28:0b:fc:96:fd:5b:1a:
78:5a:f7:4e:e3:44:38:8d:6f:b2:16:b4:04:ec:97:
26:6e:a1:40:95:d2:3b:c8:71:2e:29:62:5c:d1:73:
e3:1c:e1:32:b3:fa:08:a3:1d:48:a2:5a:dc:49:cd:
0b:37:d0:b6:85:34:47:d9:70:49:68:61:61:70:8b:
05:d2:4a:0e:a7:6d:a5:b0:de:e4:20:20:c1:92:4b:
2b:95:2a:20:53:cf:0d:bd:fd:74:f0:85:ac:12:47:
95:61:95:04:11:12:78:cd:35:1a:5b:3a:0d:b7:61:
6f:e1:ca:d9:92:93:f9:ac:97:d4:c1:01:fc:f9:00:
a3:09:ba:d0:7e:c9:33:98:81:6e:3d:5a:50:58:97:
14:e4:6f:c3:e8:9f:46:f4:48:1b:9b:ad:9e:74:53:
30:13:a6:fb:33:16:f3:7d:f7:df:3d:be:9d:c3:4a:
eb:a8:22:99:0f:97:3a:0e:28:8d:26:09:9d:6e:78:
26:4f:fd:36:ef:38:6c:8d:23:42:02:9f:28:59:34:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:71:BB:86:C9:C4:BF:C0:6D:FF:7B:FD:50:CA:4E:70:9F:8A:E9:FB
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:36:55:e7:b8:55:c0:e9:93:4e:12:e0:a6:e2:05:93:7a:ee:
31:48:81:36:88:96:d1:07:70:78:86:eb:ef:3a:fb:3f:f1:0b:
bf:79:7f:f1:81:4e:ae:2f:27:a4:2b:bb:d1:f9:1e:9b:e6:7c:
be:fc:ad:95:30:97:ed:0e:18:7e:cc:a5:fb:2d:b1:9c:24:ef:
f2:55:86:b9:be:2f:69:cb:42:87:b0:7c:81:29:09:ad:04:5c:
1b:66:ef:c0:e4:28:8b:9b:c8:a1:b0:aa:f6:a8:1c:16:9a:1f:
98:a4:23:4f:a9:93:9a:32:e8:7c:e6:9a:0d:8d:bc:dc:15:0f:
94:c1:21:76:f2:64:fe:9d:44:51:26:28:41:4c:f8:ff:ea:53:
18:50:43:b3:d9:18:e6:54:10:07:99:b2:65:81:5d:9f:97:73:
1d:fb:5f:1c:8a:79:60:99:15:49:a0:41:37:67:db:c0:c3:8a:
1f:11:4d:55:99:db:df:34:de:e7:0e:37:86:52:2f:80:85:bd:
14:8f:85:58:9e:29:4a:32:e8:3a:85:d5:58:68:55:06:c7:b7:
a5:2b:d1:be:aa:e1:6e:b2:91:e6:10:2b:4a:f4:bb:ad:c4:6e:
08:0d:95:c6:db:88:58:6d:a9:b9:ec:61:36:93:86:f9:49:e8:
01:f5:31:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnBMlhsX50yNdor6a3dJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzE0OTg1Y2I1NDRjNmQyM2QxOWJiNDNhYzkzNzExYWZl
OTFmMTgwHhcNMjUwNzI3MDIwMDIxWhcNMjUwNzI4MDIwMDIxWjAzMTEwLwYDVQQD
Eyg1ZDcxYmI4NmM5YzRiZmMwNmRmZjdiZmQ1MGNhNGU3MDlmOGFlOWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbYdONcZnVRL6TocqGbkcgqjtmDw
+9NGpWunqx7NT8u1xUvuQh2WTvIApkrNQrm0QCG/6igL/Jb9Wxp4WvdO40Q4jW+y
FrQE7JcmbqFAldI7yHEuKWJc0XPjHOEys/oIox1IolrcSc0LN9C2hTRH2XBJaGFh
cIsF0koOp22lsN7kICDBkksrlSogU88Nvf108IWsEkeVYZUEERJ4zTUaWzoNt2Fv
4crZkpP5rJfUwQH8+QCjCbrQfskzmIFuPVpQWJcU5G/D6J9G9Egbm62edFMwE6b7
MxbzffffPb6dw0rrqCKZD5c6DiiNJgmdbngmT/027zhsjSNCAp8oWTRMZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1xu4bJxL/Abf97/VDKTnCfiun7MB8GA1UdIwQY
MBaAFIrBSYXLVExtI9GbtDrJNxGv6R8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS81ODZmNzctNmYzMi00Yjk2LTk4Mzgt
YTU4OTQ2OTNhZjEwLzEvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS81ODZmNzctNmYzMi00Yjk2LTk4MzgtYTU4OTQ2OTNhZjEw
LzEvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzZV57hV
wOmTThLgpuIFk3ruMUiBNoiW0QdweIbr7zr7P/ELv3l/8YFOri8npCu70fkem+Z8
vvytlTCX7Q4Yfsyl+y2xnCTv8lWGub4vactCh7B8gSkJrQRcG2bvwOQoi5vIobCq
9qgcFpofmKQjT6mTmjLofOaaDY283BUPlMEhdvJk/p1EUSYoQUz4/+pTGFBDs9kY
5lQQB5myZYFdn5dzHftfHIp5YJkVSaBBN2fbwMOKHxFNVZnb3zTe5w43hlIvgIW9
FI+FWJ4pSjLoOoXVWGhVBse3pSvRvqrhbrKR5hArSvS7rcRuCA2VxtuIWG2puexh
NpOG+UnoAfUxQw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:35:57 2025 by rpki-client