Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: J+db2XPwGKS1iJh5n9UCZGRMK8PO+Z8h0Q4h7Lbqodw=
Subject key identifier: D0:34:15:27:B8:B1:D7:3E:61:29:A9:71:D4:F8:E0:90:6B:D5:03:19
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 01984475E0A0279068F5AFE7E9A2025B385F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 0998
Signing time: Sat 26 Jul 2025 02:00:32 +0000
Manifest this update: Sat 26 Jul 2025 02:00:32 +0000
Manifest next update: Sun 27 Jul 2025 02:00:32 +0000
Files and hashes: 1: 11w9K2dCR0A6XsEVx-Vg9m7G5bM.roa (hash: hj3QFv3Y2FaAu9Oijuk6KKEMBTD9UQTUqjejPr1gs7c=)
2: MR9ZuC-IL_jZ4767dS-IkZgCrJw.roa (hash: Vi7lFCDHTrpEyk68a6k87cSkUHM4wyPXzIO5RtGzU1U=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: 6RViePEdYlbA2avHvi+lbfvT8u6Y4VwgOVvAZrbbpNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:e0:a0:27:90:68:f5:af:e7:e9:a2:02:5b:38:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Jul 26 02:00:32 2025 GMT
Not After : Jul 27 02:00:32 2025 GMT
Subject: CN=d0341527b8b1d73e6129a971d4f8e0906bd50319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:00:4d:26:52:18:a1:bc:d0:72:67:bb:c7:
a9:60:e9:d9:a4:af:21:a4:94:76:80:f4:f0:ed:36:
ce:86:4e:65:e0:64:ef:ff:71:49:1a:0b:a3:ff:b2:
6d:eb:00:61:94:c6:24:79:eb:d5:e9:a5:d9:50:61:
85:c3:45:3a:8e:61:98:df:a0:4d:6e:4e:b6:f3:b2:
8c:27:5d:22:be:0b:58:df:e4:10:5e:bc:38:38:f0:
18:f6:3c:9b:9e:e9:e9:05:96:fa:2f:c6:7c:70:18:
a4:8f:07:2d:f9:0e:47:2c:d0:a8:e7:03:0e:f6:2a:
ed:61:4a:88:99:d4:b9:98:42:70:87:c5:26:23:ef:
50:ab:bb:5d:11:b2:19:99:04:d5:db:77:e9:74:29:
9d:31:4e:34:73:4c:fe:ac:e4:f9:6e:fb:8c:ff:32:
10:d8:6b:73:2f:d8:41:33:b9:fb:7f:95:19:fb:50:
c3:04:33:e7:b0:85:45:c1:2b:67:8b:2c:f1:21:c6:
fe:01:20:e0:1e:73:b2:86:fc:88:02:9e:9e:6f:7c:
16:a3:e8:05:ec:d3:54:ba:48:4d:cb:a3:88:53:b6:
3b:15:f5:ef:82:9a:bf:c9:0f:19:2d:d4:d2:6d:7d:
51:27:3b:be:46:06:50:76:b4:10:87:e8:d4:d5:40:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:34:15:27:B8:B1:D7:3E:61:29:A9:71:D4:F8:E0:90:6B:D5:03:19
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b4:90:92:b9:a6:cc:5a:ce:ed:ea:89:0a:d0:b4:57:93:69:
75:ba:28:87:7a:f0:05:6a:a6:0c:ea:a8:90:c5:2e:2b:ef:06:
bc:c4:74:af:fc:5f:d0:55:6e:c0:e6:e8:a6:05:03:d5:28:0f:
4d:43:57:47:75:69:fc:e9:a0:92:d6:d6:e8:bc:6b:56:9f:91:
99:29:ef:ed:f5:07:e5:0f:82:11:28:b0:8f:40:00:3a:88:dd:
66:ca:d3:96:79:53:0d:39:15:7b:0e:bd:f9:4d:94:df:ac:f4:
47:fb:f8:59:45:43:c4:55:45:fd:31:73:00:ad:64:34:ed:ce:
ae:3a:2b:99:d1:d7:aa:57:e7:aa:3d:1e:50:62:00:90:4a:af:
6a:75:86:97:73:df:b4:df:c9:0e:d1:ca:86:ef:ad:43:a6:3c:
44:fa:0a:41:62:bf:b0:77:9d:94:a3:46:8b:5c:14:21:e8:b7:
6c:27:3a:84:5c:b3:52:99:41:60:8a:9f:89:03:12:e9:0b:ee:
b8:b3:ba:de:b9:53:d4:4c:cd:a1:8f:d3:bc:7b:87:9e:3d:1b:
51:9f:c9:e1:6d:83:39:87:16:13:47:9d:fc:b7:d1:31:51:73:
f7:40:b1:96:e1:c6:93:69:c8:4b:70:51:c4:fb:2f:0a:06:71:
92:14:3c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEdeCgJ5Bo9a/n6aICWzhfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmY0ZWU2MjNkOGZhYjczYzkwMWQwY2JkYzkzYTMyMWU5
Y2NmYjcwHhcNMjUwNzI2MDIwMDMyWhcNMjUwNzI3MDIwMDMyWjAzMTEwLwYDVQQD
EyhkMDM0MTUyN2I4YjFkNzNlNjEyOWE5NzFkNGY4ZTA5MDZiZDUwMzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRUATSZSGKG80HJnu8epYOnZpK8h
pJR2gPTw7TbOhk5l4GTv/3FJGguj/7Jt6wBhlMYkeevV6aXZUGGFw0U6jmGY36BN
bk6287KMJ10ivgtY3+QQXrw4OPAY9jybnunpBZb6L8Z8cBikjwct+Q5HLNCo5wMO
9irtYUqImdS5mEJwh8UmI+9Qq7tdEbIZmQTV23fpdCmdMU40c0z+rOT5bvuM/zIQ
2GtzL9hBM7n7f5UZ+1DDBDPnsIVFwStniyzxIcb+ASDgHnOyhvyIAp6eb3wWo+gF
7NNUukhNy6OIU7Y7FfXvgpq/yQ8ZLdTSbX1RJzu+RgZQdrQQh+jU1UAaFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA0FSe4sdc+YSmpcdT44JBr1QMZMB8GA1UdIwQY
MBaAFIj/TuYj2Pq3PJAdDL3JOjIenM+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lYWYyZTItMTgxNy00MGE4LTliZTgt
MjUwN2RiMzJjMWM0LzEvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lYWYyZTItMTgxNy00MGE4LTliZTgtMjUwN2RiMzJjMWM0
LzEvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7SQkrmm
zFrO7eqJCtC0V5Npdbooh3rwBWqmDOqokMUuK+8GvMR0r/xf0FVuwObopgUD1SgP
TUNXR3Vp/OmgktbW6LxrVp+RmSnv7fUH5Q+CESiwj0AAOojdZsrTlnlTDTkVew69
+U2U36z0R/v4WUVDxFVF/TFzAK1kNO3OrjormdHXqlfnqj0eUGIAkEqvanWGl3Pf
tN/JDtHKhu+tQ6Y8RPoKQWK/sHedlKNGi1wUIei3bCc6hFyzUplBYIqfiQMS6Qvu
uLO63rlT1EzNoY/TvHuHnj0bUZ/J4W2DOYcWE0ed/LfRMVFz90CxluHGk2nIS3BR
xPsvCgZxkhQ8sw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:22:14 2025 by rpki-client