Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
File: I8Aq9PWPETIK8xlpRuH86dBQyQY.mft (raw, json)
Hash identifier: 0fPkVhDPm5VfxhKssPs8MsjrUd4uK+pIph674Pt1vV8=
Subject key identifier: 25:7F:77:59:45:2C:3F:2A:8E:2E:70:03:B7:F7:6A:B6:78:8F:01:FA
Authority key identifier: 23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
Certificate issuer: /CN=23c02af4f58f11320af3196946e1fce9d050c906
Certificate serial: 0198590FCB49001567283FA1F1B2B55407E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
Manifest number: 1606
Signing time: Wed 30 Jul 2025 02:01:03 +0000
Manifest this update: Wed 30 Jul 2025 02:01:03 +0000
Manifest next update: Thu 31 Jul 2025 02:01:03 +0000
Files and hashes: 1: I8Aq9PWPETIK8xlpRuH86dBQyQY.crl (hash: pAanDkvGh0N69aAI+teUcxUHSfZpN/yeqPrZL1W3/rA=)
2: L1nx6g959I4u5e_n7rqsUK0vG74.roa (hash: X8LU286M1DCtu5IfhCO2jJJ+1Cy+WsVLYYIMMfE/G4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:0f:cb:49:00:15:67:28:3f:a1:f1:b2:b5:54:07:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c02af4f58f11320af3196946e1fce9d050c906
Validity
Not Before: Jul 30 02:01:03 2025 GMT
Not After : Jul 31 02:01:03 2025 GMT
Subject: CN=257f7759452c3f2a8e2e7003b7f76ab6788f01fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:6d:db:48:7f:99:18:54:1f:bc:28:c9:ac:
43:c1:4f:2d:03:e6:0a:83:e7:9e:4b:9f:39:9b:4d:
30:dc:63:38:5f:b5:57:2d:5b:02:ca:5e:5b:7d:a3:
c6:cc:87:72:34:eb:df:0d:0e:cf:b4:17:1b:87:91:
88:a9:87:6c:0d:2f:05:f5:95:93:69:4e:62:9a:ba:
74:e0:4c:fb:71:92:20:7c:62:ac:6d:63:95:93:20:
38:e7:b0:e4:9c:45:39:58:28:7c:50:61:23:0b:fb:
cf:36:bb:86:df:be:a5:8a:aa:e1:3e:ee:38:01:63:
85:1f:97:68:50:ab:5e:08:5e:5f:52:82:d6:54:43:
a0:8d:40:82:76:a3:d5:1e:a2:83:1b:fb:27:a9:9b:
a9:83:b0:cf:4e:9a:e0:ca:10:3f:a9:5f:65:a4:2d:
f9:43:e9:78:65:34:de:a3:b1:b1:48:9c:53:f6:87:
2c:bb:39:3d:bd:7e:73:78:0e:0d:a4:4f:9a:6e:f6:
e6:ad:b4:da:4c:f0:93:4f:49:b2:87:45:23:a0:0c:
aa:be:13:32:05:dc:82:34:aa:d0:1e:54:d3:44:87:
3b:38:59:6a:04:48:a9:02:36:5f:b8:f6:39:07:c4:
dd:b9:ad:df:c2:92:5a:f7:66:2d:cb:9f:f4:15:57:
10:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7F:77:59:45:2C:3F:2A:8E:2E:70:03:B7:F7:6A:B6:78:8F:01:FA
X509v3 Authority Key Identifier:
keyid:23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f4:1c:92:0f:ec:00:22:11:6f:10:fd:7d:1b:42:4f:2a:63:
58:32:52:83:93:33:e4:64:8b:44:83:5b:95:e1:e2:96:06:9d:
a8:28:8b:27:c7:3d:ab:6b:c4:e7:cc:c2:04:7d:c4:d1:6c:c3:
73:3f:4f:4c:36:7b:b4:e4:ed:b0:52:a2:95:b3:0b:5b:f5:ef:
06:e8:c9:da:a0:d6:a2:d6:7b:85:eb:a4:9c:04:50:bc:5f:10:
5b:d1:2b:62:e7:95:fa:76:a4:3f:bd:90:89:f5:7b:1e:0c:2f:
6d:e1:4d:05:d9:f4:e9:5c:7a:c5:48:d4:c4:d1:c1:30:33:8c:
70:6b:93:d0:b2:1f:86:46:48:22:1a:da:0e:3d:c3:75:91:c0:
be:9c:0f:7d:fc:15:6a:78:91:5e:7f:78:c9:d1:22:b3:f9:07:
14:6e:be:ee:38:8c:7f:ae:e1:e3:5b:b6:30:73:70:33:0e:72:
53:40:ea:e1:18:5b:3e:ad:01:52:ae:3d:f1:dc:15:81:b6:cc:
60:46:b1:17:86:02:21:30:58:ad:e7:f7:e0:7b:61:fe:51:51:
34:2b:5e:52:2f:75:e9:b3:5b:18:2e:31:f8:7c:55:4a:54:1f:
2e:fd:58:ea:50:75:0c:f1:5e:49:46:22:20:a2:f1:cb:11:42:
35:c6:51:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhZD8tJABVnKD+h8bK1VAfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYzAyYWY0ZjU4ZjExMzIwYWYzMTk2OTQ2ZTFmY2U5ZDA1
MGM5MDYwHhcNMjUwNzMwMDIwMTAzWhcNMjUwNzMxMDIwMTAzWjAzMTEwLwYDVQQD
EygyNTdmNzc1OTQ1MmMzZjJhOGUyZTcwMDNiN2Y3NmFiNjc4OGYwMWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Utt20h/mRhUH7woyaxDwU8tA+YK
g+eeS585m00w3GM4X7VXLVsCyl5bfaPGzIdyNOvfDQ7PtBcbh5GIqYdsDS8F9ZWT
aU5imrp04Ez7cZIgfGKsbWOVkyA457DknEU5WCh8UGEjC/vPNruG376liqrhPu44
AWOFH5doUKteCF5fUoLWVEOgjUCCdqPVHqKDG/snqZupg7DPTprgyhA/qV9lpC35
Q+l4ZTTeo7GxSJxT9ocsuzk9vX5zeA4NpE+abvbmrbTaTPCTT0myh0UjoAyqvhMy
BdyCNKrQHlTTRIc7OFlqBEipAjZfuPY5B8Tdua3fwpJa92Yty5/0FVcQ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCV/d1lFLD8qji5wA7f3arZ4jwH6MB8GA1UdIwQY
MBaAFCPAKvT1jxEyCvMZaUbh/OnQUMkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84MTA2OGMtYWVkNy00MTI3LTg4ZTQt
NjJjYjhhY2E5NjE4LzEvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy84MTA2OGMtYWVkNy00MTI3LTg4ZTQtNjJjYjhhY2E5NjE4
LzEvSThBcTlQV1BFVElLOHhscFJ1SDg2ZEJReVFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPQckg/s
ACIRbxD9fRtCTypjWDJSg5Mz5GSLRINbleHilgadqCiLJ8c9q2vE58zCBH3E0WzD
cz9PTDZ7tOTtsFKilbMLW/XvBujJ2qDWotZ7heuknARQvF8QW9ErYueV+nakP72Q
ifV7HgwvbeFNBdn06Vx6xUjUxNHBMDOMcGuT0LIfhkZIIhraDj3DdZHAvpwPffwV
aniRXn94ydEis/kHFG6+7jiMf67h41u2MHNwMw5yU0Dq4RhbPq0BUq498dwVgbbM
YEaxF4YCITBYref34Hth/lFRNCteUi916bNbGC4x+HxVSlQfLv1Y6lB1DPFeSUYi
IKLxyxFCNcZRFw==
-----END CERTIFICATE-----
Generated at Wed Jul 30 04:14:19 2025 by rpki-client