Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: H0n6nPWaP0PsDvo3tCMrNtLiWyU+he90lgaAXUmE0Z4=
Subject key identifier: 69:96:D1:05:E1:8A:AB:41:73:77:FE:A5:92:91:F2:70:09:33:CC:0A
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 0199334951DADB0128C461C0CC19B360CBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 124B
Signing time: Wed 10 Sep 2025 11:01:07 +0000
Manifest this update: Wed 10 Sep 2025 11:01:07 +0000
Manifest next update: Thu 11 Sep 2025 11:01:07 +0000
Files and hashes: 1: 6nn-10KbmPgCc6evrpm-TWzQPN8.roa (hash: o4INP15AI01CmXxJKcY1+iiTvm9rSpAtz6YN4QZ0dG0=)
2: ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa (hash: rQ9TfGtesxjebHDlAk08FQJ/mYhxwGmDbJSu6X6Tu58=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: QK9qfweSpADHotoh+6fjWKF0JuB8ihd2Ey6dZoLOy4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:51:da:db:01:28:c4:61:c0:cc:19:b3:60:cb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Sep 10 11:01:07 2025 GMT
Not After : Sep 11 11:01:07 2025 GMT
Subject: CN=6996d105e18aab417377fea59291f2700933cc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:2a:a2:33:e6:44:c9:ce:ff:77:a3:bd:06:
64:2e:86:e4:1e:74:c1:96:7b:2d:cf:a4:15:aa:f4:
e9:cd:20:75:d6:a7:9d:f6:df:40:5a:7b:15:a7:d2:
91:07:0e:65:60:5c:1e:84:8b:b8:c6:29:e1:56:6e:
10:93:6c:55:ff:8d:7d:ff:0f:04:96:3a:07:0f:2c:
ab:1e:b5:ee:58:d7:c4:5d:c1:4c:06:d5:44:7e:3d:
57:2c:99:a4:5e:6e:c3:20:e3:cb:b5:5b:46:08:87:
35:09:48:ba:eb:bd:4d:6a:4f:54:34:37:94:7b:9b:
91:d7:bd:fb:55:12:82:3e:e1:51:62:ef:1f:55:24:
15:04:3a:ba:46:c0:1b:37:a9:dc:1e:57:21:3c:40:
dc:e7:0d:f2:03:79:94:1d:68:7c:05:95:8b:a7:7d:
c1:34:b3:a6:58:42:0a:9b:24:48:a9:5d:26:48:ae:
4a:72:fd:0e:d6:df:f7:72:33:fc:5b:6f:0c:06:b6:
53:a2:c1:d0:f6:85:b3:dc:2a:48:f8:13:10:9c:b8:
7d:ab:78:2b:8f:35:2a:b7:12:dc:b2:8a:a9:5d:75:
26:e8:f6:d1:1a:21:7c:a6:6c:5a:8c:be:49:61:69:
11:29:bd:a4:b4:ae:a6:64:d5:01:f6:e5:85:13:9f:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:96:D1:05:E1:8A:AB:41:73:77:FE:A5:92:91:F2:70:09:33:CC:0A
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:77:36:38:2e:6b:62:b2:06:c8:e1:2b:4c:52:f1:c9:c2:1f:
4b:b5:bb:f4:6e:bd:fb:be:b1:6c:ec:ae:e5:23:2f:b7:7c:af:
ac:46:e7:fe:93:4f:7c:a2:23:83:16:6b:56:3d:82:73:1e:d2:
af:66:f2:05:39:a1:19:6a:58:1a:3b:d1:c1:75:ec:0f:f7:4d:
02:e3:40:2d:10:97:7a:e8:d5:00:11:9b:f8:76:f4:8f:d8:d0:
0f:4a:63:4c:da:9a:c8:fa:9b:e5:64:4c:96:50:e9:2d:b8:be:
67:49:ab:4b:85:ca:50:9d:0c:19:6d:93:3d:9b:09:f1:6b:b3:
e3:87:0a:e1:3c:e9:57:63:50:97:0e:08:ba:ad:c6:d4:bd:5f:
fa:68:fe:2a:e2:5f:ed:c6:7a:ee:87:d9:c6:a8:43:ba:fe:fc:
df:f8:58:9d:a1:80:46:b7:be:c6:14:37:cc:d5:79:e1:68:3a:
3e:05:2f:d7:cf:2e:e1:de:46:aa:60:93:a5:f1:d2:c1:de:ef:
b4:59:28:d8:8d:2e:b4:04:63:b1:bb:7a:0f:81:d3:47:8b:ab:
7c:d7:80:40:84:02:1e:35:95:6b:10:ea:11:3b:7b:f6:86:8d:
b4:86:4f:30:62:a3:61:bf:4a:ad:8f:d1:90:a1:4a:c9:12:fb:
a4:8a:44:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzSVHa2wEoxGHAzBmzYMvGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYzhhOWJiYzJiYzNhNGM4YmI4NzZjY2RkOTVmZDg2NTI1
MGI2ZGIwHhcNMjUwOTEwMTEwMTA3WhcNMjUwOTExMTEwMTA3WjAzMTEwLwYDVQQD
Eyg2OTk2ZDEwNWUxOGFhYjQxNzM3N2ZlYTU5MjkxZjI3MDA5MzNjYzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG0qojPmRMnO/3ejvQZkLobkHnTB
lnstz6QVqvTpzSB11qed9t9AWnsVp9KRBw5lYFwehIu4xinhVm4Qk2xV/419/w8E
ljoHDyyrHrXuWNfEXcFMBtVEfj1XLJmkXm7DIOPLtVtGCIc1CUi6671Nak9UNDeU
e5uR1737VRKCPuFRYu8fVSQVBDq6RsAbN6ncHlchPEDc5w3yA3mUHWh8BZWLp33B
NLOmWEIKmyRIqV0mSK5Kcv0O1t/3cjP8W28MBrZTosHQ9oWz3CpI+BMQnLh9q3gr
jzUqtxLcsoqpXXUm6PbRGiF8pmxajL5JYWkRKb2ktK6mZNUB9uWFE59knwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmW0QXhiqtBc3f+pZKR8nAJM8wKMB8GA1UdIwQY
MBaAFK3IqbvCvDpMi7h2zN2V/YZSULbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84Njc3MmUtNWU2Yi00MDZjLThhOWUt
MTY1NGE4MGRiYzM2LzEvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84Njc3MmUtNWU2Yi00MDZjLThhOWUtMTY1NGE4MGRiYzM2
LzEvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXc2OC5r
YrIGyOErTFLxycIfS7W79G69+76xbOyu5SMvt3yvrEbn/pNPfKIjgxZrVj2Ccx7S
r2byBTmhGWpYGjvRwXXsD/dNAuNALRCXeujVABGb+Hb0j9jQD0pjTNqayPqb5WRM
llDpLbi+Z0mrS4XKUJ0MGW2TPZsJ8Wuz44cK4TzpV2NQlw4Iuq3G1L1f+mj+KuJf
7cZ67ofZxqhDuv783/hYnaGARre+xhQ3zNV54Wg6PgUv188u4d5GqmCTpfHSwd7v
tFko2I0utARjsbt6D4HTR4urfNeAQIQCHjWVaxDqETt79oaNtIZPMGKjYb9KrY/R
kKFKyRL7pIpEIQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:10:02 2025 by rpki-client