Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: Ws6zB1JFoSACnVwAtSxmAu3iVIy5FYWLD4rSbA4C+aI=
Subject key identifier: B4:CA:E3:4D:B9:96:D4:D6:85:53:29:40:5A:0E:27:6E:DB:B9:EC:5C
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 01992C6B11C3F80604685BF6945AD98D1E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 1677
Signing time: Tue 09 Sep 2025 03:00:38 +0000
Manifest this update: Tue 09 Sep 2025 03:00:38 +0000
Manifest next update: Wed 10 Sep 2025 03:00:38 +0000
Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=)
2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: 4gHU1E+7jNHmLNEjfpFUISWinpkeWRlGOB9SRUxbglg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:11:c3:f8:06:04:68:5b:f6:94:5a:d9:8d:1e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Sep 9 03:00:38 2025 GMT
Not After : Sep 10 03:00:38 2025 GMT
Subject: CN=b4cae34db996d4d6855329405a0e276edbb9ec5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:98:23:93:e9:d4:52:77:a9:e8:d8:b9:1c:2e:
f3:84:a4:8a:25:f8:c1:9d:99:74:ff:50:23:1b:2b:
ae:5d:b3:9a:59:8f:2b:85:ab:89:12:4e:81:3a:9c:
b4:a3:1f:cd:1a:b6:48:9a:2e:a3:28:92:d3:40:e4:
a0:52:76:99:96:49:98:f7:e3:56:61:5a:3e:d6:41:
0e:1f:e0:b8:a3:a8:1f:f1:9a:b0:d2:78:b4:ca:4c:
28:1e:c3:1e:b7:03:01:87:7c:a8:d6:d5:5f:fa:14:
f7:52:67:c3:b3:5a:08:da:ea:c3:08:f9:a6:88:a1:
39:8d:b1:cc:3d:f6:8b:3f:bd:4c:8c:88:1e:f7:91:
bb:96:d2:03:f4:0f:23:6b:82:9f:18:f0:22:35:31:
e6:2f:b1:a7:5b:0e:e8:aa:0a:49:55:57:40:78:c5:
b7:56:bb:f0:65:0b:e9:2e:0f:b1:4e:f7:ef:3e:a3:
f5:7c:ff:a9:23:85:39:be:90:db:a4:06:88:c9:48:
e0:91:95:83:5a:1b:90:d7:0f:bb:28:64:2f:f7:2b:
76:d1:0f:39:24:34:76:c4:41:22:c6:9b:d8:cd:92:
1b:33:a4:84:0b:52:b9:92:db:47:42:8f:19:34:b1:
db:94:f7:78:f6:e7:d9:f8:fa:39:4e:af:1e:37:e0:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CA:E3:4D:B9:96:D4:D6:85:53:29:40:5A:0E:27:6E:DB:B9:EC:5C
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:53:be:c1:1b:fd:9d:4f:10:c7:05:50:b5:40:f8:dc:2d:3c:
8b:e4:f2:c2:74:6a:26:38:11:a8:35:23:d9:49:f8:0b:76:72:
56:59:fc:0b:1e:d7:69:30:15:52:fd:63:bd:2c:61:40:ed:8a:
fa:47:11:37:a4:2d:5c:8e:4d:8c:d8:56:0d:10:af:d5:26:e6:
8b:c6:04:b2:9e:5f:51:44:39:83:f7:54:a5:c1:f8:73:d1:3c:
bd:54:c6:0f:f7:6b:0c:81:f3:f4:59:1f:a0:74:ec:54:55:fe:
7b:32:3d:b9:3b:e1:df:4e:10:6c:d0:ec:1f:60:07:0d:45:30:
9f:ab:ec:d5:b9:df:33:de:71:67:55:5e:75:85:81:0e:d5:54:
06:3c:a2:ca:76:70:70:c6:22:0b:df:57:16:66:e5:96:48:41:
03:5f:53:89:df:cf:7d:09:8d:0f:0f:ce:7e:48:21:1d:42:37:
5d:cf:12:04:f4:ad:94:65:11:40:5f:cb:d3:cd:bb:11:ce:b4:
d0:f4:16:28:5c:27:00:11:d8:c5:c4:4e:68:e5:db:d9:e5:e4:
cd:cd:bc:cf:fc:be:69:c7:cc:10:a4:44:72:4b:00:40:4f:a6:
61:2b:97:31:08:65:b0:1d:06:31:06:47:3a:db:73:8d:b5:40:
4c:14:ec:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZksaxHD+AYEaFv2lFrZjR4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2IwOWFiNTQ1ODUxYzc4OWQyY2FhODk0MmJhMzljZWEx
M2U5M2UwHhcNMjUwOTA5MDMwMDM4WhcNMjUwOTEwMDMwMDM4WjAzMTEwLwYDVQQD
EyhiNGNhZTM0ZGI5OTZkNGQ2ODU1MzI5NDA1YTBlMjc2ZWRiYjllYzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Zgjk+nUUnep6Ni5HC7zhKSKJfjB
nZl0/1AjGyuuXbOaWY8rhauJEk6BOpy0ox/NGrZImi6jKJLTQOSgUnaZlkmY9+NW
YVo+1kEOH+C4o6gf8Zqw0ni0ykwoHsMetwMBh3yo1tVf+hT3UmfDs1oI2urDCPmm
iKE5jbHMPfaLP71MjIge95G7ltID9A8ja4KfGPAiNTHmL7GnWw7oqgpJVVdAeMW3
VrvwZQvpLg+xTvfvPqP1fP+pI4U5vpDbpAaIyUjgkZWDWhuQ1w+7KGQv9yt20Q85
JDR2xEEixpvYzZIbM6SEC1K5kttHQo8ZNLHblPd49ufZ+Po5Tq8eN+DMIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTK4025ltTWhVMpQFoOJ27buexcMB8GA1UdIwQY
MBaAFIp7CatUWFHHidLKqJQro5zqE+k+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMt
NWU3ZGM4MjhkMDVkLzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMtNWU3ZGM4MjhkMDVk
LzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1O+wRv9
nU8QxwVQtUD43C08i+TywnRqJjgRqDUj2Un4C3ZyVln8Cx7XaTAVUv1jvSxhQO2K
+kcRN6QtXI5NjNhWDRCv1Sbmi8YEsp5fUUQ5g/dUpcH4c9E8vVTGD/drDIHz9Fkf
oHTsVFX+ezI9uTvh304QbNDsH2AHDUUwn6vs1bnfM95xZ1VedYWBDtVUBjyiynZw
cMYiC99XFmbllkhBA19Tid/PfQmNDw/OfkghHUI3Xc8SBPStlGURQF/L0827Ec60
0PQWKFwnABHYxcROaOXb2eXkzc28z/y+acfMEKREcksAQE+mYSuXMQhlsB0GMQZH
OttzjbVATBTsDA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:43:38 2025 by rpki-client