Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
File: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json)
Hash identifier: q5qA8DoZax3evnLkQO6jMcvzVKzPtdK9X2XM4WJS5Ks=
Subject key identifier: 87:DE:B5:B8:32:55:CF:77:F0:40:F3:72:92:4D:13:10:6C:01:9F:C5
Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
Certificate issuer: /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Certificate serial: 0198C75B5412E3699A2122BAFC4F03B82D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
Manifest number: 30
Signing time: Wed 20 Aug 2025 12:01:47 +0000
Manifest this update: Wed 20 Aug 2025 12:01:47 +0000
Manifest next update: Thu 21 Aug 2025 12:01:47 +0000
Files and hashes: 1: EXTeJ0xnJWTRkgHDu_AxpeIu9iA.roa (hash: qrWsqJSnf72iIeO/vT24niegliGNcW4B28Wyc7Pg4x4=)
2: WmXOt_58syUmTkr0foDjL7xiI4Q.roa (hash: +erBuoZ6Ct32kt0eWK4wbg4Fa+dtktRUNZ/SHpJZIGk=)
3: X9W0b9P6Ek_A8a9BpsvnX133VZw.roa (hash: 8NxMp0DgdQySkZvwKlqGylrfX1726nGJj79qXZbDO7M=)
4: xs2uXZDt7cVA7jwMLyODUbD1r5A.roa (hash: CK+GsD3c++kM/6BpDz2kJy3N5LQsGAx/QUYH0SzjPAM=)
5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: U4R9dyNoFrIV+zJfuoRZv/uLwprGrcoRcWHSruvwDYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:5b:54:12:e3:69:9a:21:22:ba:fc:4f:03:b8:2d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Validity
Not Before: Aug 20 12:01:47 2025 GMT
Not After : Aug 21 12:01:47 2025 GMT
Subject: CN=87deb5b83255cf77f040f372924d13106c019fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5c:3d:7e:9d:5f:7c:5d:03:06:16:e7:68:45:
46:f2:41:c4:bd:62:86:0f:9e:41:48:3f:d4:08:f4:
83:ca:10:31:df:b2:9d:4f:b2:f3:96:92:3a:3f:f0:
28:db:72:6a:e2:9f:7b:22:c9:14:56:0a:57:a7:1e:
7e:39:52:f1:c3:9e:0f:66:70:59:ed:0a:70:b2:fd:
11:c5:67:d1:dd:77:63:d4:45:ac:45:40:1f:70:92:
87:5a:3a:44:43:23:45:4a:55:cf:fb:6d:f4:f8:b2:
2d:2b:98:a8:ed:70:5b:be:02:9f:08:d6:71:e2:d4:
1d:c4:4a:a1:2c:99:27:4f:fb:0d:9a:ac:f6:b3:32:
4b:55:0f:da:b8:29:89:0c:f8:03:e6:75:bc:65:45:
a3:f4:1b:1c:be:04:72:5b:e3:56:0f:b4:de:b8:b0:
e0:be:af:10:72:5d:6f:9c:c9:f4:69:81:57:ca:06:
6b:fe:22:5e:ac:d3:91:7e:01:a7:08:14:38:d6:e4:
4e:eb:b3:b6:71:65:3d:dc:1b:be:02:45:29:12:00:
66:6d:47:5c:8d:2e:3c:3b:c3:71:44:8a:45:1f:2e:
5a:ab:95:17:81:c2:5a:79:f9:47:3d:4f:28:05:3a:
62:7d:5e:0c:e3:96:ff:98:ae:60:45:74:7c:10:56:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DE:B5:B8:32:55:CF:77:F0:40:F3:72:92:4D:13:10:6C:01:9F:C5
X509v3 Authority Key Identifier:
keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:04:24:65:b8:9e:aa:97:e3:e3:91:d9:e4:63:50:27:32:c8:
09:72:61:6f:5c:4d:8e:da:48:dc:7b:5e:50:e1:b1:80:25:c0:
f5:9e:d6:a1:23:91:e6:62:8b:76:87:09:e5:85:2d:22:59:6d:
37:f5:73:91:53:70:6b:0b:57:1d:93:8f:6d:2e:95:47:bf:fb:
87:02:dc:28:74:7b:d5:b8:f0:be:e7:f8:fd:5c:fa:f7:51:4c:
a5:3e:d6:04:38:49:c0:ef:72:79:ca:82:36:6d:a3:22:b2:61:
09:5b:c0:0c:28:ba:bd:95:02:27:4e:69:8d:37:ef:eb:e7:6c:
31:fa:a9:f7:01:89:ff:2a:43:4b:ad:d0:dd:ae:0f:a0:3f:94:
45:6c:c9:fe:4c:ed:69:fa:65:f0:70:8e:0d:58:55:10:f3:79:
54:2d:1d:9a:31:73:58:8e:73:17:3b:81:d3:b4:36:6d:2f:8f:
1d:4f:83:d2:5d:24:1c:30:3c:5c:c0:63:77:0c:0b:84:1f:87:
43:4b:14:52:fc:d8:71:62:39:62:04:9f:bb:f5:62:ce:05:35:
c4:a4:a9:b3:b0:83:ed:b2:bd:0a:e7:1e:0d:a9:71:4c:46:dd:
88:b7:71:81:28:b4:44:dc:3c:db:ff:4a:52:3e:c5:13:52:36:
ca:82:06:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjHW1QS42maISK6/E8DuC1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYzgzYzM5MmM1NDIxYzU5NWNkNWZiNzk0MjhlODI3NWJk
YjU5NGMwHhcNMjUwODIwMTIwMTQ3WhcNMjUwODIxMTIwMTQ3WjAzMTEwLwYDVQQD
Eyg4N2RlYjViODMyNTVjZjc3ZjA0MGYzNzI5MjRkMTMxMDZjMDE5ZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51w9fp1ffF0DBhbnaEVG8kHEvWKG
D55BSD/UCPSDyhAx37KdT7LzlpI6P/Ao23Jq4p97IskUVgpXpx5+OVLxw54PZnBZ
7Qpwsv0RxWfR3Xdj1EWsRUAfcJKHWjpEQyNFSlXP+230+LItK5io7XBbvgKfCNZx
4tQdxEqhLJknT/sNmqz2szJLVQ/auCmJDPgD5nW8ZUWj9BscvgRyW+NWD7TeuLDg
vq8Qcl1vnMn0aYFXygZr/iJerNORfgGnCBQ41uRO67O2cWU93Bu+AkUpEgBmbUdc
jS48O8NxRIpFHy5aq5UXgcJaeflHPU8oBTpifV4M45b/mK5gRXR8EFbVywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfetbgyVc938EDzcpJNExBsAZ/FMB8GA1UdIwQY
MBaAFMvIPDksVCHFlc1ft5Qo6Cdb21lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAt
OWFkMzNhZTY1M2FkLzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAtOWFkMzNhZTY1M2Fk
LzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAQkZbie
qpfj45HZ5GNQJzLICXJhb1xNjtpI3HteUOGxgCXA9Z7WoSOR5mKLdocJ5YUtIllt
N/VzkVNwawtXHZOPbS6VR7/7hwLcKHR71bjwvuf4/Vz691FMpT7WBDhJwO9yecqC
Nm2jIrJhCVvADCi6vZUCJ05pjTfv6+dsMfqp9wGJ/ypDS63Q3a4PoD+URWzJ/kzt
afpl8HCODVhVEPN5VC0dmjFzWI5zFzuB07Q2bS+PHU+D0l0kHDA8XMBjdwwLhB+H
Q0sUUvzYcWI5YgSfu/VizgU1xKSps7CD7bK9CuceDalxTEbdiLdxgSi0RNw82/9K
Uj7FE1I2yoIGiQ==
-----END CERTIFICATE-----
Generated at Wed Aug 20 15:27:03 2025 by rpki-client