Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: kBLJ798VoGi1Id4wgOM+k+zqH2QFanuVnCkWjbCedEU=
Subject key identifier: 01:A0:B0:DE:DF:D6:35:1E:D6:8B:FD:96:18:BA:E7:96:71:E6:2D:40
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 019923D640DB435402D1DD285384B77C27F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 099C
Signing time: Sun 07 Sep 2025 11:01:07 +0000
Manifest this update: Sun 07 Sep 2025 11:01:07 +0000
Manifest next update: Mon 08 Sep 2025 11:01:07 +0000
Files and hashes: 1: HdoRWbIURzhfnaDDK7ySYFVN2ik.roa (hash: HVbpXptfvhv4ApWMw5QWNQjQp3Pw35JC0KFrZynPEas=)
2: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: uH5kyrtxLHRdOFyA6uyN3Wr2Ko310KBJkWbKgJ7FYeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:40:db:43:54:02:d1:dd:28:53:84:b7:7c:27:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Sep 7 11:01:07 2025 GMT
Not After : Sep 8 11:01:07 2025 GMT
Subject: CN=01a0b0dedfd6351ed68bfd9618bae79671e62d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:bd:50:be:fc:e5:c5:66:66:f4:54:11:59:
0f:2c:03:db:57:a1:66:4c:66:70:f6:6f:27:34:67:
34:07:0c:55:5b:69:ce:f3:16:b3:be:85:01:66:d4:
e6:cf:2d:9a:36:2b:01:ad:e5:99:7d:9e:16:89:93:
b7:c5:4f:8b:dc:73:5c:49:ca:b6:e5:35:df:48:a6:
d2:71:24:c5:33:13:e1:4a:bc:0d:0f:3d:6f:bb:5a:
5b:f4:65:3c:cd:59:bc:a2:ca:e1:3b:80:22:2e:0e:
aa:3c:94:7a:2b:0b:d8:27:7b:01:91:2c:ad:8b:8a:
6b:c6:23:d8:ca:08:9b:7b:03:4d:83:7f:16:62:79:
c2:a8:bc:5e:12:61:aa:23:cc:e2:09:22:09:fa:06:
cb:95:02:81:e5:b4:d4:4c:91:7c:54:90:f6:29:a5:
40:55:92:df:44:54:69:2f:8a:e4:94:34:61:06:2e:
0f:87:b2:26:f2:f3:e9:5f:51:3e:dc:24:28:42:9e:
43:2f:41:f0:56:2b:5a:36:89:b0:93:8c:80:d2:76:
ea:44:75:b4:1e:b4:e7:a0:62:1f:28:bb:cb:a9:b3:
46:d6:5b:8c:2b:81:ab:c5:a8:3c:bc:14:f4:46:7f:
28:7c:91:75:a4:7c:e4:17:e7:25:c6:9e:20:e4:90:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A0:B0:DE:DF:D6:35:1E:D6:8B:FD:96:18:BA:E7:96:71:E6:2D:40
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e9:69:77:e8:9f:e1:99:d5:2e:4d:03:42:7f:cb:64:e9:09:
b9:71:d9:b4:d0:42:91:92:4c:bd:db:73:8b:82:89:82:bb:9c:
52:67:d3:b0:ae:40:87:10:f1:4f:39:77:50:9a:0d:1f:dc:9c:
da:43:83:2e:32:50:6c:98:c5:e1:ae:12:a1:e3:c5:19:54:1b:
6c:f5:86:8b:57:75:0e:65:f4:41:8a:e4:ba:57:4d:98:a8:ea:
56:e6:88:49:2e:f7:2e:4c:d0:e0:62:c5:15:4a:7c:29:bf:39:
80:e1:7e:eb:80:ab:d6:63:1d:c9:ad:39:49:d5:7e:23:5f:2a:
cf:03:e9:f2:67:48:a7:e4:15:bf:61:a3:91:54:58:40:8d:6f:
1a:2c:32:f7:e1:9d:33:31:17:dd:b2:29:21:f9:a8:08:83:22:
00:c8:84:6c:5d:b5:1d:5e:31:5f:d0:6a:0a:2b:3a:b2:7a:9a:
8c:47:31:68:a7:77:5d:e6:15:af:80:69:f0:86:28:bf:25:a0:
86:7a:fd:50:96:17:a6:6c:5c:51:d0:93:5e:4a:9a:22:a0:43:
c5:58:96:85:4d:4b:34:20:d9:e6:61:59:ad:51:c7:bf:79:f5:
9e:25:e6:2c:7f:06:32:6f:42:64:1f:ca:81:c6:79:2d:eb:9c:
4b:2d:58:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1kDbQ1QC0d0oU4S3fCfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx
YTkyMzMwHhcNMjUwOTA3MTEwMTA3WhcNMjUwOTA4MTEwMTA3WjAzMTEwLwYDVQQD
EygwMWEwYjBkZWRmZDYzNTFlZDY4YmZkOTYxOGJhZTc5NjcxZTYyZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVG9UL785cVmZvRUEVkPLAPbV6Fm
TGZw9m8nNGc0BwxVW2nO8xazvoUBZtTmzy2aNisBreWZfZ4WiZO3xU+L3HNcScq2
5TXfSKbScSTFMxPhSrwNDz1vu1pb9GU8zVm8osrhO4AiLg6qPJR6KwvYJ3sBkSyt
i4prxiPYygibewNNg38WYnnCqLxeEmGqI8ziCSIJ+gbLlQKB5bTUTJF8VJD2KaVA
VZLfRFRpL4rklDRhBi4Ph7Im8vPpX1E+3CQoQp5DL0HwVitaNomwk4yA0nbqRHW0
HrTnoGIfKLvLqbNG1luMK4Grxag8vBT0Rn8ofJF1pHzkF+clxp4g5JBpEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGgsN7f1jUe1ov9lhi655Zx5i1AMB8GA1UdIwQY
MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt
NWFkZmUzMGZmZGE1LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1
LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFulpd+if
4ZnVLk0DQn/LZOkJuXHZtNBCkZJMvdtzi4KJgrucUmfTsK5AhxDxTzl3UJoNH9yc
2kODLjJQbJjF4a4SoePFGVQbbPWGi1d1DmX0QYrkuldNmKjqVuaISS73LkzQ4GLF
FUp8Kb85gOF+64Cr1mMdya05SdV+I18qzwPp8mdIp+QVv2GjkVRYQI1vGiwy9+Gd
MzEX3bIpIfmoCIMiAMiEbF21HV4xX9BqCis6snqajEcxaKd3XeYVr4Bp8IYovyWg
hnr9UJYXpmxcUdCTXkqaIqBDxViWhU1LNCDZ5mFZrVHHv3n1niXmLH8GMm9CZB/K
gcZ5LeucSy1YJg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:34 2025 by rpki-client