Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
File: morKHCZcEygjx4T9qEL3oaBbjLc.mft (raw, json)
Hash identifier: LzrBjVv4xYo6kzlCh2nlEyAHoDJZdYECoIr86lcemOc=
Subject key identifier: 87:D0:56:B2:31:DB:25:F7:3D:03:42:C0:DC:71:20:4C:9C:F4:60:30
Authority key identifier: 9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
Certificate issuer: /CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Certificate serial: 0198C75BA548C68D1E22A93F3C019D21B298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
Manifest number: 02B5
Signing time: Wed 20 Aug 2025 12:02:08 +0000
Manifest this update: Wed 20 Aug 2025 12:02:08 +0000
Manifest next update: Thu 21 Aug 2025 12:02:08 +0000
Files and hashes: 1: PXv4MGw4HfMQV8zuoB-3WTegwaw.roa (hash: GqIG1YKim2qQL71fUd8HU7TowoibLsmIA+NjM1XqDss=)
2: morKHCZcEygjx4T9qEL3oaBbjLc.crl (hash: Or8kD791HYz/PYuLjITzl+X0dWFwjUGCGslpFedi+Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 12:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:5b:a5:48:c6:8d:1e:22:a9:3f:3c:01:9d:21:b2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8aca1c265c132823c784fda842f7a1a05b8cb7
Validity
Not Before: Aug 20 12:02:08 2025 GMT
Not After : Aug 21 12:02:08 2025 GMT
Subject: CN=87d056b231db25f73d0342c0dc71204c9cf46030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:97:79:f4:7b:b3:20:e6:38:48:ad:ad:e0:
d3:8c:30:5d:de:79:d6:48:1b:86:29:5d:b6:40:dd:
66:8d:55:f3:d6:6a:aa:c1:2d:37:87:74:b4:66:8e:
cc:ec:26:cc:a2:ff:ef:94:74:44:ff:f3:e2:f1:e3:
7d:29:60:6f:f0:87:8b:43:45:b6:8d:fd:79:06:e1:
74:c7:12:db:b8:bf:a1:ea:cc:74:81:08:8e:22:af:
b4:41:14:09:2d:8e:03:54:25:02:11:09:c7:98:a5:
2f:fa:78:ac:9f:1a:d9:74:73:50:e6:e0:5c:e2:b1:
9c:ba:b9:10:2c:ee:ed:8e:9c:51:3d:bb:f3:d2:a6:
d0:08:27:a1:27:59:4d:48:33:f8:3b:87:19:73:5d:
e9:fe:64:8c:a3:15:12:45:e8:6d:55:58:c6:57:95:
62:17:38:ee:1d:6c:84:9a:fd:f6:94:cc:55:92:1c:
a2:1a:c8:8f:bd:7c:5d:f9:73:b7:cd:bc:d1:34:95:
1a:5f:84:42:a2:d6:89:b7:d1:e3:09:39:3b:2e:61:
f5:89:c6:a4:9f:0c:c0:69:2c:08:87:9e:0a:2d:a0:
65:83:90:c1:41:41:4c:3a:0a:b7:0f:6e:ba:7f:2a:
e4:75:be:c2:d5:d0:56:61:e4:30:c0:85:7e:0f:a4:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D0:56:B2:31:DB:25:F7:3D:03:42:C0:DC:71:20:4C:9C:F4:60:30
X509v3 Authority Key Identifier:
keyid:9A:8A:CA:1C:26:5C:13:28:23:C7:84:FD:A8:42:F7:A1:A0:5B:8C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/morKHCZcEygjx4T9qEL3oaBbjLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0222d8-8d8a-44c0-a11f-dc0c4f1083c9/1/morKHCZcEygjx4T9qEL3oaBbjLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d3:d1:b4:f6:3a:1d:01:7b:12:18:69:fe:85:32:21:53:61:
49:d0:d4:af:b2:f2:8b:05:4d:31:66:e6:03:e1:5b:07:f9:4a:
a4:94:23:ce:82:31:33:c9:19:2e:9d:52:7a:7a:e8:6e:18:68:
a2:b1:4c:ad:cb:63:f2:eb:c9:82:05:fe:e7:4b:8e:b3:48:c8:
1b:85:fd:eb:c4:e7:5f:25:41:8b:33:af:9b:bd:42:95:59:91:
6f:11:cc:fa:5b:64:56:bd:e7:03:86:02:6c:68:c7:90:af:27:
76:fd:b5:35:05:cd:bb:cd:a4:02:3d:cf:ba:84:14:b9:3a:64:
42:10:1c:77:0c:a2:ca:01:b8:f4:75:13:e0:e6:6b:7f:e5:f0:
4e:db:6b:b1:f6:7e:02:74:56:65:8a:f4:62:cd:d7:46:e4:60:
5a:90:31:a3:57:58:4c:6a:0f:7c:95:cd:0a:fa:ce:b1:4b:19:
5f:55:17:ea:5f:a6:21:aa:4d:d2:2e:d4:f5:fa:61:4c:ce:ef:
a9:fa:46:23:20:22:97:be:12:16:61:a6:8d:f2:09:2d:fb:19:
f6:6c:2e:65:08:51:b0:04:31:4b:4a:93:ed:5e:4c:f1:46:41:
89:6e:ad:14:86:04:c4:dc:65:1f:12:d2:27:8c:8e:53:ac:3b:
e5:33:63:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjHW6VIxo0eIqk/PAGdIbKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOGFjYTFjMjY1YzEzMjgyM2M3ODRmZGE4NDJmN2ExYTA1
YjhjYjcwHhcNMjUwODIwMTIwMjA4WhcNMjUwODIxMTIwMjA4WjAzMTEwLwYDVQQD
Eyg4N2QwNTZiMjMxZGIyNWY3M2QwMzQyYzBkYzcxMjA0YzljZjQ2MDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx6XefR7syDmOEitreDTjDBd3nnW
SBuGKV22QN1mjVXz1mqqwS03h3S0Zo7M7CbMov/vlHRE//Pi8eN9KWBv8IeLQ0W2
jf15BuF0xxLbuL+h6sx0gQiOIq+0QRQJLY4DVCUCEQnHmKUv+nisnxrZdHNQ5uBc
4rGcurkQLO7tjpxRPbvz0qbQCCehJ1lNSDP4O4cZc13p/mSMoxUSRehtVVjGV5Vi
FzjuHWyEmv32lMxVkhyiGsiPvXxd+XO3zbzRNJUaX4RCotaJt9HjCTk7LmH1icak
nwzAaSwIh54KLaBlg5DBQUFMOgq3D266fyrkdb7C1dBWYeQwwIV+D6SiWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfQVrIx2yX3PQNCwNxxIEyc9GAwMB8GA1UdIwQY
MBaAFJqKyhwmXBMoI8eE/ahC96GgW4y3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wMjIyZDgtOGQ4YS00NGMwLWExMWYt
ZGMwYzRmMTA4M2M5LzEvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wMjIyZDgtOGQ4YS00NGMwLWExMWYtZGMwYzRmMTA4M2M5
LzEvbW9yS0hDWmNFeWdqeDRUOXFFTDNvYUJiakxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtPRtPY6
HQF7Ehhp/oUyIVNhSdDUr7LyiwVNMWbmA+FbB/lKpJQjzoIxM8kZLp1Senrobhho
orFMrctj8uvJggX+50uOs0jIG4X968TnXyVBizOvm71ClVmRbxHM+ltkVr3nA4YC
bGjHkK8ndv21NQXNu82kAj3PuoQUuTpkQhAcdwyiygG49HUT4OZrf+XwTttrsfZ+
AnRWZYr0Ys3XRuRgWpAxo1dYTGoPfJXNCvrOsUsZX1UX6l+mIapN0i7U9fphTM7v
qfpGIyAil74SFmGmjfIJLfsZ9mwuZQhRsAQxS0qT7V5M8UZBiW6tFIYExNxlHxLS
J4yOU6w75TNj0Q==
-----END CERTIFICATE-----
Generated at Wed Aug 20 19:54:56 2025 by rpki-client