Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier: GvrJv1Ft132ApZqSz61EXQ230DeeJuDsKoNIC0Y5qQo=
Subject key identifier: B8:51:3C:45:3D:67:02:10:40:2D:99:EB:FF:C0:96:43:17:63:E1:9F
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 019829DAE44AD2CF94996D839B264216AC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number: 3A
Signing time: Sun 20 Jul 2025 22:01:07 +0000
Manifest this update: Sun 20 Jul 2025 22:01:07 +0000
Manifest next update: Mon 21 Jul 2025 22:01:07 +0000
Files and hashes: 1: YkbGKc-LGqIQZMDerpDN8XDOTbw.roa (hash: RY+DUa9ZajYzyfuzC6xFjBj7ICr29ESsVlrxpHdgeWw=)
2: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: jiZ+xioZjLZ8OwNiKHNdUDFzD1m1kLR4o0CMawGqQiA=)
3: zGrKv0NNYS_xjhh1uLNHNu5c_wY.roa (hash: OEzd69K7Il75QSQW6UQvA0dRBfsE2azJdJL9XybJ68I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:da:e4:4a:d2:cf:94:99:6d:83:9b:26:42:16:ac:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Jul 20 22:01:07 2025 GMT
Not After : Jul 21 22:01:07 2025 GMT
Subject: CN=b8513c453d670210402d99ebffc096431763e19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8f:e8:c6:d6:28:95:59:79:ab:62:1f:30:56:
dd:cd:79:46:c8:3a:d3:db:4e:c9:73:0b:10:33:62:
04:ec:73:68:ad:fa:be:63:49:05:ca:85:57:8c:4e:
e1:c7:4c:32:09:a0:23:bf:ff:e5:04:6b:ad:fd:c4:
1b:5d:a7:dd:43:83:a3:90:58:8e:4e:58:19:ca:ad:
c2:d3:4b:1b:96:d9:22:b9:67:f7:61:9a:8f:e1:80:
6b:19:8c:dc:41:c5:24:dc:bc:ba:72:80:7b:85:dd:
81:f6:de:f6:24:7e:00:2b:9a:ed:db:16:7f:9e:2a:
7b:e0:3f:a0:d9:1b:ef:dc:25:62:41:3e:55:5e:17:
ce:9d:cb:8e:57:24:7b:92:fe:04:81:b5:38:49:ff:
38:b6:53:b5:41:a3:a9:95:ac:67:24:ca:c3:f3:75:
6b:3e:85:ed:2a:5f:7b:36:ce:71:9f:5a:6a:51:95:
53:77:04:81:2f:94:b1:c7:af:dc:d1:38:03:3c:1a:
90:60:61:55:72:f8:77:6b:fe:82:6c:44:84:f6:27:
4b:88:6e:69:e9:bc:f9:00:99:78:67:4f:c3:40:34:
ef:85:b0:42:af:d8:d5:4f:16:66:9e:1c:27:dd:14:
47:cd:af:0f:fa:83:cf:31:91:19:1a:b6:67:fc:bc:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:51:3C:45:3D:67:02:10:40:2D:99:EB:FF:C0:96:43:17:63:E1:9F
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:35:a3:60:61:51:2b:4e:1a:0d:96:72:50:a0:2d:31:71:46:
fb:4b:68:c3:64:3c:c9:23:06:cd:93:2d:54:e4:e8:2c:a3:04:
71:67:57:6e:59:77:ec:de:0b:a2:fe:c9:e0:dc:f9:3c:86:2c:
f3:a5:3d:91:7c:56:a8:2a:21:71:b4:d4:fe:df:8f:e3:ce:51:
20:7a:52:c4:a5:d0:28:6a:aa:66:f7:a0:6a:a8:02:cd:e9:cb:
2c:0e:a0:7b:c8:07:b0:1e:a0:ed:c1:52:c6:ec:53:a9:01:f5:
41:fe:5b:ff:54:41:88:09:29:33:1d:cc:50:e1:32:e2:37:0b:
98:fa:db:61:db:ed:37:2c:f8:e1:ea:9e:1f:48:76:64:e8:cc:
2f:55:87:94:3e:9d:2c:ed:6c:13:27:19:fc:6f:2d:39:dc:1e:
ad:92:f0:a2:1a:64:f0:09:5a:8e:d6:63:3b:f6:2a:03:37:ea:
a7:ab:fc:13:7f:22:38:91:29:0f:2a:45:f6:b0:7c:af:b3:d0:
88:7b:e6:5a:85:d6:99:46:d2:a9:24:6b:37:57:3a:5b:70:21:
20:f0:af:6a:93:d0:9e:14:fc:90:5a:ff:f5:41:44:48:86:b9:
69:49:d2:de:21:20:2e:c5:33:fd:6d:5a:7d:8c:6e:a4:e7:d4:
bc:88:92:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgp2uRK0s+UmW2DmyZCFqxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4M2Y3MjYwNjUwMDI2Yjk3M2ExOGE3ZjNlOTk1OGQzMjFl
Y2UxZGIwHhcNMjUwNzIwMjIwMTA3WhcNMjUwNzIxMjIwMTA3WjAzMTEwLwYDVQQD
EyhiODUxM2M0NTNkNjcwMjEwNDAyZDk5ZWJmZmMwOTY0MzE3NjNlMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Y/oxtYolVl5q2IfMFbdzXlGyDrT
207JcwsQM2IE7HNorfq+Y0kFyoVXjE7hx0wyCaAjv//lBGut/cQbXafdQ4OjkFiO
TlgZyq3C00sbltkiuWf3YZqP4YBrGYzcQcUk3Ly6coB7hd2B9t72JH4AK5rt2xZ/
nip74D+g2Rvv3CViQT5VXhfOncuOVyR7kv4EgbU4Sf84tlO1QaOplaxnJMrD83Vr
PoXtKl97Ns5xn1pqUZVTdwSBL5Sxx6/c0TgDPBqQYGFVcvh3a/6CbESE9idLiG5p
6bz5AJl4Z0/DQDTvhbBCr9jVTxZmnhwn3RRHza8P+oPPMZEZGrZn/LxM4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhRPEU9ZwIQQC2Z6//AlkMXY+GfMB8GA1UdIwQY
MBaAFIg/cmBlACa5c6GKfz6ZWNMh7OHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xMWQ0ZTctZTk3OC00MDM3LWFiMDkt
YzA5ZmYxNmZjMzRiLzEvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xMWQ0ZTctZTk3OC00MDM3LWFiMDktYzA5ZmYxNmZjMzRi
LzEvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDWjYGFR
K04aDZZyUKAtMXFG+0tow2Q8ySMGzZMtVOToLKMEcWdXbll37N4Lov7J4Nz5PIYs
86U9kXxWqCohcbTU/t+P485RIHpSxKXQKGqqZvegaqgCzenLLA6ge8gHsB6g7cFS
xuxTqQH1Qf5b/1RBiAkpMx3MUOEy4jcLmPrbYdvtNyz44eqeH0h2ZOjML1WHlD6d
LO1sEycZ/G8tOdwerZLwohpk8AlajtZjO/YqAzfqp6v8E38iOJEpDypF9rB8r7PQ
iHvmWoXWmUbSqSRrN1c6W3AhIPCvapPQnhT8kFr/9UFESIa5aUnS3iEgLsUz/W1a
fYxupOfUvIiSQA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 23:55:28 2025 by rpki-client