Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: MEsev+QvmR7URVNfKwzmqXEylCkgK7mR7fG7YyQte6c=
Subject key identifier: 0E:48:E8:E9:A7:2C:D9:E7:41:C2:82:47:E4:0E:1C:74:EF:C9:5F:76
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 019923D5C44D3EB14A57ACCC54DFFDD00D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 11:00:35 +0000
Manifest this update: Sun 07 Sep 2025 11:00:35 +0000
Manifest next update: Mon 08 Sep 2025 11:00:35 +0000
Files and hashes: 1: 2OXGBjO85npyAkFnRouh_UBk1Hs.roa (hash: HbPy+YRVvuPyiRQMlka5FfjRj4FCj/zQuaXQr9znzdU=)
2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: DhaOceuByluemOub619ANYX1uEd4UWfnGyVy3pLG3So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:c4:4d:3e:b1:4a:57:ac:cc:54:df:fd:d0:0d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Sep 7 11:00:35 2025 GMT
Not After : Sep 8 11:00:35 2025 GMT
Subject: CN=0e48e8e9a72cd9e741c28247e40e1c74efc95f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:d9:3a:45:a1:c8:e7:ef:f0:1a:aa:8c:e4:
56:fd:3f:44:a9:d8:aa:7e:1b:17:bc:24:44:3f:38:
cc:4c:35:85:fc:e5:41:e6:fd:86:79:4d:d8:f2:29:
ec:c4:38:2d:9e:7a:b3:4d:be:92:b8:2c:3a:9f:c7:
79:c3:ac:18:f3:95:0b:df:2b:14:4c:f2:bf:43:99:
f6:6f:da:6d:56:aa:73:37:c2:d8:b2:92:73:87:68:
43:36:b3:bf:d7:bf:b6:df:52:f7:0d:36:39:34:1a:
6b:ff:85:4e:4c:23:3c:e4:44:bd:8b:47:ab:94:9b:
07:f3:dd:31:b5:55:14:65:b0:53:0a:3c:a2:bc:0b:
26:66:ba:1e:71:ef:62:d2:73:a1:63:62:9d:97:43:
eb:5b:ff:88:1d:d2:8f:6d:60:93:8e:b0:33:73:92:
00:5c:61:43:fd:0b:1c:48:23:12:94:43:9d:bf:42:
55:1c:b8:de:80:dd:c3:07:51:88:9e:dc:d7:89:3b:
d5:9a:7d:03:06:fc:c2:1f:f7:ff:3d:fd:6e:a8:55:
9d:a8:37:87:c5:a7:1b:0d:ac:0e:49:2c:b7:43:0d:
4a:3d:a1:5a:46:95:88:37:d5:bc:f2:f7:58:cf:10:
dc:c9:71:a9:ab:1c:af:91:23:44:62:0e:50:b2:80:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:48:E8:E9:A7:2C:D9:E7:41:C2:82:47:E4:0E:1C:74:EF:C9:5F:76
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:48:94:b3:cc:23:ad:ce:85:31:f8:94:25:45:ad:ac:0b:70:
86:8c:04:10:b2:17:49:18:73:d7:80:53:e4:1d:c1:ab:39:e1:
20:6e:bb:7b:79:0f:5b:fb:54:e7:34:f5:4c:30:8d:6b:d6:47:
c9:2b:28:a5:27:db:68:13:c1:f7:10:d6:76:54:8f:5a:94:ee:
76:a0:d9:eb:26:a4:1b:19:58:2b:6f:5b:6a:49:22:9f:31:8e:
2b:94:ea:5b:82:be:8c:81:dc:cb:e3:cc:86:74:eb:23:fc:2b:
6a:77:ef:14:18:63:5d:c0:7b:e9:a4:46:20:28:50:27:1c:9b:
b4:d8:4c:e4:13:94:70:b4:48:6e:15:fa:f3:5c:db:7c:ae:b0:
f4:dc:6c:ca:d9:b8:96:11:95:b2:c6:ec:2e:69:2e:9e:2a:f8:
7a:5f:e4:63:12:ef:06:0f:d4:3b:39:a2:f6:dd:0a:ce:cc:ff:
ac:ad:14:45:57:5f:aa:e2:12:26:a2:f3:cc:50:26:ad:4f:05:
74:c4:1e:a4:34:bd:c6:fc:72:1a:0c:87:7e:ab:e8:7a:34:55:
b7:06:63:86:b5:09:8f:24:e7:75:2b:3b:6b:b1:3b:87:b9:92:
81:cb:b0:8f:46:d7:40:41:19:ad:50:93:e7:8c:9a:92:51:1e:
69:04:c7:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1cRNPrFKV6zMVN/90A2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2YyODI4MjFkYTU3NWY2ODkxNzY0N2NmM2UxODk4Zjlk
MGE2MmEwHhcNMjUwOTA3MTEwMDM1WhcNMjUwOTA4MTEwMDM1WjAzMTEwLwYDVQQD
EygwZTQ4ZThlOWE3MmNkOWU3NDFjMjgyNDdlNDBlMWM3NGVmYzk1Zjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynTZOkWhyOfv8BqqjORW/T9Eqdiq
fhsXvCREPzjMTDWF/OVB5v2GeU3Y8insxDgtnnqzTb6SuCw6n8d5w6wY85UL3ysU
TPK/Q5n2b9ptVqpzN8LYspJzh2hDNrO/17+231L3DTY5NBpr/4VOTCM85ES9i0er
lJsH890xtVUUZbBTCjyivAsmZroece9i0nOhY2Kdl0PrW/+IHdKPbWCTjrAzc5IA
XGFD/QscSCMSlEOdv0JVHLjegN3DB1GIntzXiTvVmn0DBvzCH/f/Pf1uqFWdqDeH
xacbDawOSSy3Qw1KPaFaRpWIN9W88vdYzxDcyXGpqxyvkSNEYg5QsoDA4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5I6OmnLNnnQcKCR+QOHHTvyV92MB8GA1UdIwQY
MBaAFP7PKCgh2ldfaJF2R88+GJj50KYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yODg2MjgtMjAzOS00MDg1LWEwMDYt
MDYwY2Q5YzkyZjI2LzEvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yODg2MjgtMjAzOS00MDg1LWEwMDYtMDYwY2Q5YzkyZjI2
LzEvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEiUs8wj
rc6FMfiUJUWtrAtwhowEELIXSRhz14BT5B3BqznhIG67e3kPW/tU5zT1TDCNa9ZH
ySsopSfbaBPB9xDWdlSPWpTudqDZ6yakGxlYK29bakkinzGOK5TqW4K+jIHcy+PM
hnTrI/wranfvFBhjXcB76aRGIChQJxybtNhM5BOUcLRIbhX681zbfK6w9Nxsytm4
lhGVssbsLmkunir4el/kYxLvBg/UOzmi9t0Kzsz/rK0URVdfquISJqLzzFAmrU8F
dMQepDS9xvxyGgyHfqvoejRVtwZjhrUJjyTndSs7a7E7h7mSgcuwj0bXQEEZrVCT
54yaklEeaQTHHQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:52 2025 by rpki-client