Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
File: iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json)
Hash identifier: WAFT8OoUsqLE2qoZ6mbWxGDb9dWt8rMJhMGydUNHF20=
Subject key identifier: 9A:AC:E1:00:5C:F1:5D:0F:9E:A7:C8:C5:7E:9D:A9:35:96:2E:92:FC
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 0199228CB641B0920CE43B5D78CFA65858E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
Manifest number: 1392
Signing time: Sun 07 Sep 2025 05:01:11 +0000
Manifest this update: Sun 07 Sep 2025 05:01:11 +0000
Manifest next update: Mon 08 Sep 2025 05:01:11 +0000
Files and hashes: 1: OIDmEPbDXYESb6L8W110fitW4aA.roa (hash: AIH3VvHzWUC8AtgPyCBt/ld6YdiGtY4TDL+tLd/3C+w=)
2: OuQJP3rTcu0if4kJ5A5ZWqxKYpo.roa (hash: UN46ctiu4ND9IXGCd4EhP/dQ+ESw5QeLedCQ9yxaLnU=)
3: WV7QPmFglb32ubsYCfgK2rSXhGk.roa (hash: 7jclXGuRVqisqCezIaon+r4NXFS6nrK/O3nscYXGo0k=)
4: WYkwsfl1LrYxcZc4hOn_dwqrnKU.roa (hash: OFI3Jc8HI7chg6jym9Pd2h5sq7FHfkNT1WJbvujMSAY=)
5: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: +oseG3Zq1oDKHwoa8hot8GWdgWkZwddrmfvNJzOiR0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b6:41:b0:92:0c:e4:3b:5d:78:cf:a6:58:58:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Sep 7 05:01:11 2025 GMT
Not After : Sep 8 05:01:11 2025 GMT
Subject: CN=9aace1005cf15d0f9ea7c8c57e9da935962e92fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:48:ad:22:14:ac:07:55:d1:8d:eb:71:42:
62:8f:c2:fe:4f:0d:ed:15:6d:1c:24:32:0f:95:4c:
65:7d:04:1d:79:a4:58:4d:d9:15:66:a0:7d:c1:43:
de:e3:92:14:6e:3e:43:d8:b5:21:03:de:ac:f3:31:
e3:b3:e1:fa:4d:01:b6:62:57:2b:8b:e4:f5:c2:14:
63:41:c1:f6:21:3f:82:ab:2f:59:41:40:b5:c9:d4:
e4:05:10:37:17:ba:e0:60:be:7e:03:18:20:95:16:
4b:e0:6d:9a:65:62:b4:45:3e:0c:27:d6:94:aa:f4:
49:9d:eb:d1:de:be:e9:70:cb:ff:8b:1e:39:99:a8:
79:ea:46:87:0e:f9:1d:38:79:58:f3:86:47:0c:7e:
06:62:e1:6f:12:70:60:12:29:65:8a:b1:ed:a6:de:
bd:13:44:35:a7:b8:09:c3:cb:75:fc:cc:66:1f:b4:
24:fc:a2:77:14:ed:10:36:10:6b:c5:fd:59:8a:0b:
9a:16:7b:ae:5c:f9:59:cc:a0:54:ee:6b:80:ca:51:
ec:40:4b:10:9a:47:0a:d8:bf:79:36:50:a6:94:89:
b0:cb:ea:3a:33:22:32:43:84:41:f7:43:60:01:c9:
2f:59:c9:1f:44:14:bd:71:fb:d3:18:3a:5e:2c:34:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AC:E1:00:5C:F1:5D:0F:9E:A7:C8:C5:7E:9D:A9:35:96:2E:92:FC
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c6:e1:9a:34:2a:30:6f:51:bc:26:d3:dd:8a:49:6d:d0:ba:
5b:bd:af:19:34:41:02:1a:7b:a9:10:e1:4a:b9:c9:78:44:74:
09:d4:0e:c4:11:c3:ac:bb:74:ee:a0:61:c4:cf:b9:03:57:b7:
24:df:24:4c:94:5a:ee:38:41:13:b1:47:7b:d7:b8:84:5c:dd:
52:a2:91:39:ef:1e:e0:5d:2f:a0:b8:67:54:34:59:b6:b6:8b:
97:b9:3b:87:ef:7f:44:65:5a:2f:09:9d:a9:b2:eb:88:7c:e3:
8e:1d:12:53:d3:b8:cc:e1:07:06:f5:32:c6:e4:4f:5b:04:73:
3e:34:bf:67:3a:fc:9d:cf:c4:5d:85:f4:9c:e9:68:2b:38:2a:
f2:3f:f0:6b:51:dc:49:d4:78:b5:6e:a4:a6:f6:02:79:38:47:
73:4c:6d:57:89:0d:ab:ef:b9:d6:45:d3:be:a0:b1:4e:a9:39:
54:0b:e3:e2:15:dd:ca:c3:09:df:1c:09:03:5a:cc:60:08:b2:
7c:40:33:5d:a9:01:4d:18:c5:bd:bd:76:24:9d:31:3f:b6:fb:
1e:42:d1:1c:29:00:0e:96:1d:20:5f:f4:67:80:50:83:26:31:
a2:19:b0:35:d8:cf:f7:d6:de:ff:e1:3c:7e:01:98:d3:ea:f4:
7a:f4:e5:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijLZBsJIM5DtdeM+mWFjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MjFhMzlhZWQ5ZGE0ZWUzYWI2NjM5ZDI0NDUwOGZhMWU4
ZDIwZjYwHhcNMjUwOTA3MDUwMTExWhcNMjUwOTA4MDUwMTExWjAzMTEwLwYDVQQD
Eyg5YWFjZTEwMDVjZjE1ZDBmOWVhN2M4YzU3ZTlkYTkzNTk2MmU5MmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBZIrSIUrAdV0Y3rcUJij8L+Tw3t
FW0cJDIPlUxlfQQdeaRYTdkVZqB9wUPe45IUbj5D2LUhA96s8zHjs+H6TQG2Ylcr
i+T1whRjQcH2IT+Cqy9ZQUC1ydTkBRA3F7rgYL5+AxgglRZL4G2aZWK0RT4MJ9aU
qvRJnevR3r7pcMv/ix45mah56kaHDvkdOHlY84ZHDH4GYuFvEnBgEillirHtpt69
E0Q1p7gJw8t1/MxmH7Qk/KJ3FO0QNhBrxf1ZiguaFnuuXPlZzKBU7muAylHsQEsQ
mkcK2L95NlCmlImwy+o6MyIyQ4RB90NgAckvWckfRBS9cfvTGDpeLDQt/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqs4QBc8V0PnqfIxX6dqTWWLpL8MB8GA1UdIwQY
MBaAFIgho5rtnaTuOrZjnSRFCPoejSD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAt
ZjYwZDZmNzE4MmExLzEvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAtZjYwZDZmNzE4MmEx
LzEvaUNHam11MmRwTzQ2dG1PZEpFVUktaDZOSVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsbhmjQq
MG9RvCbT3YpJbdC6W72vGTRBAhp7qRDhSrnJeER0CdQOxBHDrLt07qBhxM+5A1e3
JN8kTJRa7jhBE7FHe9e4hFzdUqKROe8e4F0voLhnVDRZtraLl7k7h+9/RGVaLwmd
qbLriHzjjh0SU9O4zOEHBvUyxuRPWwRzPjS/Zzr8nc/EXYX0nOloKzgq8j/wa1Hc
SdR4tW6kpvYCeThHc0xtV4kNq++51kXTvqCxTqk5VAvj4hXdysMJ3xwJA1rMYAiy
fEAzXakBTRjFvb12JJ0xP7b7HkLRHCkADpYdIF/0Z4BQgyYxohmwNdjP99be/+E8
fgGY0+r0evTlkg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:08 2025 by rpki-client