Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier: iBSbtNrmCkmpZi6Zu9Zyor86bvC8H55Ze8W3bNqtn3g=
Subject key identifier: BD:57:51:DD:C0:4B:D4:F0:90:31:0C:2C:64:CC:CC:42:2B:2C:67:DA
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial: 0199228C4AE3605EBB023F41C9FE6F91CCC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number: 0989
Signing time: Sun 07 Sep 2025 05:00:43 +0000
Manifest this update: Sun 07 Sep 2025 05:00:43 +0000
Manifest next update: Mon 08 Sep 2025 05:00:43 +0000
Files and hashes: 1: J2gFJxTXec_tCl5fYmT5ueu90dA.roa (hash: eqh0jr48WZnOgc9VcsakSv2fxPv1f923UQBSwi0u554=)
2: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: 7HDMjRF89KwSEz9hc4I5gK0Mf3y2lWeCFL45HH/GXKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:4a:e3:60:5e:bb:02:3f:41:c9:fe:6f:91:cc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Validity
Not Before: Sep 7 05:00:43 2025 GMT
Not After : Sep 8 05:00:43 2025 GMT
Subject: CN=bd5751ddc04bd4f090310c2c64cccc422b2c67da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:52:f1:3f:fb:91:ba:ce:12:92:08:55:45:
6d:9c:6e:80:9c:29:47:fd:74:97:5e:61:bc:6a:4f:
75:0d:3c:c3:df:1c:31:32:04:19:cd:53:60:34:7c:
9c:bc:28:31:52:b7:61:55:48:0f:3b:32:46:f0:72:
de:1d:72:97:b4:9f:e8:be:2d:dd:c0:3a:66:2f:03:
2a:40:e5:92:ba:3d:fa:8b:16:75:62:9e:88:09:03:
49:8c:4d:84:22:5e:36:a3:fb:65:89:09:12:0f:31:
72:a2:df:0c:07:0b:b2:6b:a5:04:0f:a4:b4:fa:4d:
bc:50:37:07:86:49:ea:f6:d7:8f:17:3f:69:6c:45:
f6:4f:e3:2e:34:5f:fe:a6:e1:8f:58:53:75:8f:bc:
ad:8f:75:eb:a1:9e:32:74:88:ae:37:e8:5e:51:02:
38:8f:de:2b:69:28:3c:20:c9:a3:62:76:8f:6e:68:
9c:db:8f:a7:46:7f:06:8e:10:ad:8d:49:96:0d:20:
90:60:93:3f:34:5a:1b:7f:b0:b5:1c:33:b3:53:4f:
54:25:3a:d0:78:60:e8:4f:e3:3c:db:2f:05:58:31:
3a:96:7e:57:c3:1d:7d:92:3a:cf:b8:d3:2b:b8:fc:
5d:ce:1f:3a:1d:bc:a1:a7:76:32:d2:ae:dd:39:0c:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:57:51:DD:C0:4B:D4:F0:90:31:0C:2C:64:CC:CC:42:2B:2C:67:DA
X509v3 Authority Key Identifier:
keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7a:b5:b0:b6:37:a2:2c:56:37:0f:dc:f6:a5:c9:78:df:ce:
4d:24:0c:06:f0:da:f7:5f:47:46:0e:5f:cc:8b:67:7e:78:31:
af:53:f9:f8:fa:42:1b:01:9e:f8:4a:12:70:1d:da:93:5c:db:
4d:24:18:e3:0b:c9:13:18:78:9a:81:81:87:94:07:87:4f:66:
18:fa:cd:b7:69:cb:36:9b:0b:47:f2:2c:20:58:28:00:76:66:
c0:97:7f:62:73:65:f0:76:af:84:32:71:25:db:be:30:f1:5b:
eb:7a:69:73:43:78:98:58:c8:cb:4d:69:1f:7e:cc:e4:3a:73:
3b:03:74:b2:38:a3:75:34:3e:48:a1:ed:1f:e2:0b:e0:61:95:
f2:af:b2:29:16:7f:5d:6d:a2:7a:3a:2d:9d:f4:33:2d:2f:1c:
26:4b:e5:51:78:18:db:fc:bb:64:da:47:f0:9e:5c:1c:58:19:
ac:62:0c:69:5c:63:0e:9b:c2:86:c1:86:a5:a4:2a:cf:ab:5d:
bf:ec:e0:7c:0c:13:6c:69:33:c7:db:36:81:60:80:ef:ab:5c:
6c:e8:64:f5:20:6f:71:1f:b6:33:e7:7f:95:7c:4a:dc:b9:77:
ad:d1:58:03:a7:04:04:e9:22:08:54:2d:9b:a1:c4:77:4c:a9:
13:3e:e0:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijErjYF67Aj9Byf5vkczGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZTRiOTNmZWI3MWRkZTI4MjNiNzBjN2RiYjc5ZTBmOTli
NTZjMWIwHhcNMjUwOTA3MDUwMDQzWhcNMjUwOTA4MDUwMDQzWjAzMTEwLwYDVQQD
EyhiZDU3NTFkZGMwNGJkNGYwOTAzMTBjMmM2NGNjY2M0MjJiMmM2N2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvchS8T/7kbrOEpIIVUVtnG6AnClH
/XSXXmG8ak91DTzD3xwxMgQZzVNgNHycvCgxUrdhVUgPOzJG8HLeHXKXtJ/ovi3d
wDpmLwMqQOWSuj36ixZ1Yp6ICQNJjE2EIl42o/tliQkSDzFyot8MBwuya6UED6S0
+k28UDcHhknq9tePFz9pbEX2T+MuNF/+puGPWFN1j7ytj3XroZ4ydIiuN+heUQI4
j94raSg8IMmjYnaPbmic24+nRn8GjhCtjUmWDSCQYJM/NFobf7C1HDOzU09UJTrQ
eGDoT+M82y8FWDE6ln5Xwx19kjrPuNMruPxdzh86Hbyhp3Yy0q7dOQw5wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1XUd3AS9TwkDEMLGTMzEIrLGfaMB8GA1UdIwQY
MBaAFIrkuT/rcd3igjtwx9u3ng+ZtWwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDct
MjljNTE3NjkwMmM2LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDctMjljNTE3NjkwMmM2
LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHq1sLY3
oixWNw/c9qXJeN/OTSQMBvDa919HRg5fzItnfngxr1P5+PpCGwGe+EoScB3ak1zb
TSQY4wvJExh4moGBh5QHh09mGPrNt2nLNpsLR/IsIFgoAHZmwJd/YnNl8HavhDJx
Jdu+MPFb63ppc0N4mFjIy01pH37M5DpzOwN0sjijdTQ+SKHtH+IL4GGV8q+yKRZ/
XW2iejotnfQzLS8cJkvlUXgY2/y7ZNpH8J5cHFgZrGIMaVxjDpvChsGGpaQqz6td
v+zgfAwTbGkzx9s2gWCA76tcbOhk9SBvcR+2M+d/lXxK3Ll3rdFYA6cEBOkiCFQt
m6HEd0ypEz7gzA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:57 2025 by rpki-client