Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
File: p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json)
Hash identifier: Ft+ZiBRTPSrAcZSOt4azNsOIYQi4Z/ScBkk5hH2GvGI=
Subject key identifier: F8:44:8D:8E:38:83:ED:06:3C:CE:AC:B6:9F:94:34:31:9B:2E:B3:D9
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial: 01984A09C23EEA047989A5235AD51A444EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 04:00:10 +0000
Manifest this update: Sun 27 Jul 2025 04:00:10 +0000
Manifest next update: Mon 28 Jul 2025 04:00:10 +0000
Files and hashes: 1: OgYJc9A280CynujJhuzMa0BI-4Q.roa (hash: MiNQpI1WP7M4DChXTEl99hg+v/DrVYZq8o6Yc8vjTOw=)
2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: dKrTc6D0kbsdJVlUzz4W6KJxjspFG52u0Q/6PhGZ2RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:c2:3e:ea:04:79:89:a5:23:5a:d5:1a:44:4e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Validity
Not Before: Jul 27 04:00:10 2025 GMT
Not After : Jul 28 04:00:10 2025 GMT
Subject: CN=f8448d8e3883ed063cceacb69f9434319b2eb3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:9f:a8:d5:1b:ff:ec:84:2b:ef:e9:b4:0b:
d6:dd:e0:3b:71:81:c5:69:2c:43:9f:b7:f9:2b:dc:
70:c9:9d:e9:11:bf:86:a4:e3:27:a4:81:a8:29:33:
c0:6c:e6:53:70:d3:e3:70:70:ed:93:de:c2:59:58:
ed:e0:2c:c8:d1:ff:49:81:16:75:65:66:95:6c:47:
14:7d:d5:02:06:f9:d1:51:11:40:15:da:4f:db:14:
ef:0b:71:cc:2e:eb:4c:30:da:7e:c8:b4:15:9b:54:
cc:23:80:01:af:29:73:f6:57:ce:83:01:8f:db:95:
9b:d1:28:57:c6:eb:1e:db:ff:de:52:19:9e:61:ae:
50:d9:ac:52:9c:58:2d:f5:49:d0:50:f9:0e:79:17:
0f:3f:e2:8b:e9:40:4d:d5:47:db:67:37:05:15:6b:
6a:f0:1a:7f:6c:3d:e2:08:b5:91:91:90:b1:45:94:
29:c6:12:5e:2a:5f:43:09:69:a3:01:6a:c3:2b:a9:
61:83:7f:8b:a0:9e:e0:26:05:c5:42:31:ba:dc:b1:
94:6d:e0:69:f1:33:0e:28:97:48:3e:62:aa:c5:1a:
5a:6e:21:58:f3:81:fb:74:2f:0a:7a:f2:0e:73:88:
59:45:56:85:35:a5:6d:da:18:59:25:77:22:37:67:
fe:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:44:8D:8E:38:83:ED:06:3C:CE:AC:B6:9F:94:34:31:9B:2E:B3:D9
X509v3 Authority Key Identifier:
keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:50:e8:39:ca:07:fe:da:93:dc:1c:7b:8c:25:32:5c:bd:5f:
9e:0d:99:f6:25:4d:ce:15:a0:2f:22:49:91:6e:f4:be:9d:7c:
93:e0:68:93:57:28:03:dc:85:9a:06:67:0d:36:76:0f:0e:80:
eb:ed:ed:76:de:a3:d6:05:57:49:a2:a4:6a:bd:37:8d:03:4a:
25:52:88:59:c7:cc:5a:3d:6b:c4:b6:32:24:3c:d4:cc:3b:54:
5b:c2:83:01:02:94:d7:ea:26:2a:c1:38:95:66:8c:5a:0e:71:
17:a5:b2:eb:00:c5:e1:85:92:1f:e0:de:bd:1e:8b:1d:3c:ba:
b5:ad:29:24:fb:e7:1d:11:51:36:ff:0c:21:60:55:26:29:a4:
fd:52:1a:23:e0:21:b8:8d:d9:07:1f:76:92:59:b6:19:ac:2e:
52:42:ef:d6:01:5b:aa:cc:20:f0:7b:2d:c9:e8:e0:38:0b:25:
d5:6c:c1:45:e9:63:3a:e4:be:9a:71:cb:ac:e9:e2:ab:07:c0:
64:b8:20:cb:93:eb:5f:51:4d:ef:63:cd:b6:d8:8b:e5:ed:5b:
23:8c:57:6d:f4:b1:bf:a9:2f:d6:62:7a:1f:5b:2f:63:91:af:
a0:16:e9:ff:bd:4d:e6:5a:fd:fd:bd:45:91:ab:23:b8:c2:62:
21:6b:a1:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCcI+6gR5iaUjWtUaRE7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NjhiYmVjNWE5ZTExYmZiZGFlZDg0YWE4ZDNhYWNkYTI5
ODg5ZjkwHhcNMjUwNzI3MDQwMDEwWhcNMjUwNzI4MDQwMDEwWjAzMTEwLwYDVQQD
EyhmODQ0OGQ4ZTM4ODNlZDA2M2NjZWFjYjY5Zjk0MzQzMTliMmViM2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFCfqNUb/+yEK+/ptAvW3eA7cYHF
aSxDn7f5K9xwyZ3pEb+GpOMnpIGoKTPAbOZTcNPjcHDtk97CWVjt4CzI0f9JgRZ1
ZWaVbEcUfdUCBvnRURFAFdpP2xTvC3HMLutMMNp+yLQVm1TMI4ABrylz9lfOgwGP
25Wb0ShXxuse2//eUhmeYa5Q2axSnFgt9UnQUPkOeRcPP+KL6UBN1UfbZzcFFWtq
8Bp/bD3iCLWRkZCxRZQpxhJeKl9DCWmjAWrDK6lhg3+LoJ7gJgXFQjG63LGUbeBp
8TMOKJdIPmKqxRpabiFY84H7dC8KevIOc4hZRVaFNaVt2hhZJXciN2f+iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhEjY44g+0GPM6stp+UNDGbLrPZMB8GA1UdIwQY
MBaAFKdou+xanhG/va7YSqjTqs2imIn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lYWMxZjQtYWNlMS00Y2UxLWExODEt
Y2ZjYWJiMTlmOTg5LzEvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lYWMxZjQtYWNlMS00Y2UxLWExODEtY2ZjYWJiMTlmOTg5
LzEvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAulDoOcoH
/tqT3Bx7jCUyXL1fng2Z9iVNzhWgLyJJkW70vp18k+Bok1coA9yFmgZnDTZ2Dw6A
6+3tdt6j1gVXSaKkar03jQNKJVKIWcfMWj1rxLYyJDzUzDtUW8KDAQKU1+omKsE4
lWaMWg5xF6Wy6wDF4YWSH+DevR6LHTy6ta0pJPvnHRFRNv8MIWBVJimk/VIaI+Ah
uI3ZBx92klm2GawuUkLv1gFbqswg8HstyejgOAsl1WzBReljOuS+mnHLrOniqwfA
ZLggy5PrX1FN72PNttiL5e1bI4xXbfSxv6kv1mJ6H1svY5GvoBbp/71N5lr9/b1F
kasjuMJiIWuhOg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:13:10 2025 by rpki-client