Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
File: B8n9CgjdBL-Yalvahugx34BI8q4.mft (raw, json)
Hash identifier: n4g0B1msrkdI+Ay0dHi06O/eUCjeGx7xXjRtJgi1oJo=
Subject key identifier: 2A:63:FD:82:D6:48:31:47:C9:D4:D1:B6:D1:34:37:5E:7A:78:4F:A4
Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
Certificate issuer: /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Certificate serial: 019854FB6AB8DBF4594A9DD86DD20FB17AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 07:00:19 +0000
Manifest this update: Tue 29 Jul 2025 07:00:19 +0000
Manifest next update: Wed 30 Jul 2025 07:00:19 +0000
Files and hashes: 1: 8s5jlmVuyTPiRv4H9BvQU42g7nw.roa (hash: Ucu3y8/kR6J85jmowJDRLpHtgn2LtVqQioF1Y1wmZq4=)
2: B8n9CgjdBL-Yalvahugx34BI8q4.crl (hash: qiXDS8WV/nekhYGRgd4hwq72f9Xf1oQez+s0NHxiifQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:6a:b8:db:f4:59:4a:9d:d8:6d:d2:0f:b1:7a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Validity
Not Before: Jul 29 07:00:19 2025 GMT
Not After : Jul 30 07:00:19 2025 GMT
Subject: CN=2a63fd82d6483147c9d4d1b6d134375e7a784fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0e:a0:ad:f7:b7:2b:88:c2:08:e3:a6:a9:0c:
ca:25:72:53:f9:52:22:8d:12:95:f4:71:09:42:72:
0f:ef:c3:ce:ed:76:1b:cf:70:4a:f2:6c:78:f8:6c:
77:77:8b:b9:8a:ba:97:7a:38:81:a0:ec:71:50:3f:
e5:af:03:05:d9:09:b9:99:71:af:7c:70:a1:ab:a4:
54:2e:e9:10:73:8a:ca:07:a9:33:fd:50:c9:b5:fa:
6c:fc:5e:1e:7b:fb:38:f3:63:58:b9:38:4c:97:1c:
90:1d:01:3a:8a:36:41:b1:85:7b:72:67:65:1f:61:
02:cb:79:9b:71:c7:90:e4:c2:91:b7:03:6c:4a:6b:
4c:7a:43:5e:07:d9:9f:fd:28:86:81:ce:84:b1:22:
65:71:1f:2d:8b:37:c7:e0:ff:e7:21:a3:0f:8a:dc:
3a:f0:0a:e1:95:d3:0c:e3:16:a1:39:46:97:f6:4d:
29:c6:4e:26:fa:e8:78:cc:a9:d1:ca:a2:83:23:13:
62:78:af:ad:f8:0c:bd:d8:06:60:53:07:65:4b:04:
1a:b4:db:7f:4f:d7:3a:1d:85:8c:93:2b:e3:c2:48:
05:5a:fc:c3:42:f7:af:0c:81:cb:e1:01:d6:4e:8d:
d3:d2:28:55:fd:04:fc:cc:f1:8b:0d:f2:e1:d2:e5:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:63:FD:82:D6:48:31:47:C9:D4:D1:B6:D1:34:37:5E:7A:78:4F:A4
X509v3 Authority Key Identifier:
keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:64:14:ad:a5:18:62:52:57:df:ec:94:d5:0b:5c:6d:c0:54:
fe:fc:01:5e:8e:b4:d6:8d:f1:59:52:8c:a2:e7:2d:b5:4d:d7:
7f:1f:ac:6b:85:a0:e5:60:a9:65:74:d8:62:c7:7f:e4:0a:33:
1c:10:1b:25:7a:25:be:cd:7d:29:c0:e6:1d:62:52:ea:b4:8b:
60:79:cf:34:6c:6f:d0:2a:2f:88:b6:3a:80:50:db:aa:c6:f9:
f8:6b:4a:ba:2a:62:09:f7:60:3a:1d:8e:9f:95:01:68:d6:b2:
3e:40:35:f9:a3:05:0a:7f:ec:a7:1d:cf:21:59:0c:ee:4c:a5:
70:e5:bb:b4:bb:e4:ab:c8:18:14:19:ae:46:56:5e:77:45:50:
0e:8f:24:9b:d0:9b:e4:f9:6d:6d:d3:14:01:14:f7:b4:d5:40:
02:a3:23:b3:fa:2e:3d:5d:fd:a6:ab:25:06:4e:0a:4d:1c:d2:
25:1d:e5:f4:ef:55:54:d5:a8:86:6c:eb:db:c1:0d:8c:19:4e:
ff:96:ce:bb:e0:2b:7a:ed:76:d8:7e:67:fb:63:56:7d:c1:c2:
5b:a2:ed:cd:5b:06:6a:c1:28:91:7a:cb:53:f9:88:40:15:95:
e9:3f:6b:95:e5:9a:61:65:4b:c8:b7:26:9e:a8:99:ab:11:98:
d7:44:85:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhU+2q42/RZSp3YbdIPsXrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzlmZDBhMDhkZDA0YmY5ODZhNWJkYTg2ZTgzMWRmODA0
OGYyYWUwHhcNMjUwNzI5MDcwMDE5WhcNMjUwNzMwMDcwMDE5WjAzMTEwLwYDVQQD
EygyYTYzZmQ4MmQ2NDgzMTQ3YzlkNGQxYjZkMTM0Mzc1ZTdhNzg0ZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w6grfe3K4jCCOOmqQzKJXJT+VIi
jRKV9HEJQnIP78PO7XYbz3BK8mx4+Gx3d4u5irqXejiBoOxxUD/lrwMF2Qm5mXGv
fHChq6RULukQc4rKB6kz/VDJtfps/F4ee/s482NYuThMlxyQHQE6ijZBsYV7cmdl
H2ECy3mbcceQ5MKRtwNsSmtMekNeB9mf/SiGgc6EsSJlcR8tizfH4P/nIaMPitw6
8ArhldMM4xahOUaX9k0pxk4m+uh4zKnRyqKDIxNieK+t+Ay92AZgUwdlSwQatNt/
T9c6HYWMkyvjwkgFWvzDQvevDIHL4QHWTo3T0ihV/QT8zPGLDfLh0uUF+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpj/YLWSDFHydTRttE0N156eE+kMB8GA1UdIwQY
MBaAFAfJ/QoI3QS/mGpb2oboMd+ASPKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhuOUNnamRCTC1ZYWx2YWh1Z3gzNEJJOHE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yMzc2YzUtMTAwOC00YzhlLWEyN2Et
ZGU4YTRmMGFhOTU2LzEvQjhuOUNnamRCTC1ZYWx2YWh1Z3gzNEJJOHE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yMzc2YzUtMTAwOC00YzhlLWEyN2EtZGU4YTRmMGFhOTU2
LzEvQjhuOUNnamRCTC1ZYWx2YWh1Z3gzNEJJOHE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGQUraUY
YlJX3+yU1QtcbcBU/vwBXo601o3xWVKMoucttU3Xfx+sa4Wg5WCpZXTYYsd/5Aoz
HBAbJXolvs19KcDmHWJS6rSLYHnPNGxv0CoviLY6gFDbqsb5+GtKuipiCfdgOh2O
n5UBaNayPkA1+aMFCn/spx3PIVkM7kylcOW7tLvkq8gYFBmuRlZed0VQDo8km9Cb
5PltbdMUART3tNVAAqMjs/ouPV39pqslBk4KTRzSJR3l9O9VVNWohmzr28ENjBlO
/5bOu+Areu122H5n+2NWfcHCW6LtzVsGasEokXrLU/mIQBWV6T9rleWaYWVLyLcm
nqiZqxGY10SF/w==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:44:41 2025 by rpki-client