Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
File: G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json)
Hash identifier: oUBj1ic/7qalq7Fxm7D6FWcU1CHvkVAcvA9mR3z+lAc=
Subject key identifier: 8F:20:6B:C1:9F:D4:5F:24:9D:1E:35:2C:C3:30:04:31:F3:89:4C:D2
Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
Certificate issuer: /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Certificate serial: 01993612A4B48D300E72128DEEE215EF4D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 00:00:15 +0000
Manifest this update: Thu 11 Sep 2025 00:00:15 +0000
Manifest next update: Fri 12 Sep 2025 00:00:15 +0000
Files and hashes: 1: Csk8FW5y7YJBzT_KmLLv1t_20_E.roa (hash: v8gWLbfcXD73mmO4K/7j3PoZmZQLB/oP8z7Xeflu12k=)
2: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: urHbjIm18N0qB9rP6dxbeFqiQ11fotsB7MEshPNvJUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:12:a4:b4:8d:30:0e:72:12:8d:ee:e2:15:ef:4d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Validity
Not Before: Sep 11 00:00:15 2025 GMT
Not After : Sep 12 00:00:15 2025 GMT
Subject: CN=8f206bc19fd45f249d1e352cc3300431f3894cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:9b:f2:21:f0:8b:4e:d0:6f:7d:bc:6a:86:
bb:03:54:6d:c2:df:b0:4a:1f:ee:91:cd:05:a1:4f:
6c:2b:53:9b:95:c3:2f:33:be:a7:37:72:93:5a:09:
d0:75:77:d7:8f:0e:08:69:bf:85:2d:c4:a2:dc:86:
8c:6b:69:d8:e1:79:00:20:34:b9:a6:8b:c7:26:0e:
7a:eb:7e:95:f2:7f:81:56:ce:b2:f0:c6:0a:87:35:
81:a5:8f:df:4b:60:d4:59:66:66:81:d5:55:5c:17:
0d:12:ad:83:00:40:df:cf:4c:17:1e:da:86:e4:9a:
c9:b6:ce:a0:ae:d8:22:23:db:08:07:b0:ee:c1:ff:
07:b0:43:b7:c2:ca:45:27:8a:c8:0c:f1:e3:87:0d:
de:7e:e4:10:9f:f3:dd:c2:1d:07:5a:8d:c4:6a:4c:
b1:a6:04:b4:be:2c:e9:e8:39:99:a1:fa:22:38:ac:
1e:6f:e8:87:fa:88:6f:ae:74:61:09:1d:a9:62:b0:
95:86:9d:19:c0:de:b5:3a:62:c9:9f:7b:93:aa:d6:
c4:7b:d7:88:80:57:7c:e4:ae:e6:cf:36:b8:ae:46:
4c:3f:a4:19:74:c5:d1:e2:b4:a6:67:3a:75:1c:15:
ac:5d:6c:74:bf:86:73:c3:85:de:69:7e:60:f8:d2:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:20:6B:C1:9F:D4:5F:24:9D:1E:35:2C:C3:30:04:31:F3:89:4C:D2
X509v3 Authority Key Identifier:
keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:57:e8:05:b7:6e:77:7d:d7:be:04:c3:2e:68:ea:68:c7:d1:
fc:1e:1c:8e:22:6c:48:75:af:89:7b:0a:be:fb:58:84:23:2d:
0b:76:16:20:6d:9a:0b:05:fc:e4:4f:f4:f7:6a:e3:9b:43:bf:
4d:c9:ab:f8:ba:88:bb:d8:73:59:21:26:5a:b0:8c:03:3c:2e:
22:75:8f:97:9b:87:41:60:f9:2d:7e:b3:f5:49:59:31:78:69:
09:05:a3:64:8a:18:dd:00:09:bd:5f:56:71:8e:67:6b:9a:d7:
9c:3b:46:60:eb:07:b3:50:e4:49:16:3a:8d:e9:85:90:d9:a2:
83:58:d1:2f:a4:7e:99:b8:08:11:96:79:01:da:c2:e4:5e:27:
21:d9:63:83:df:6b:10:70:e1:b9:87:44:c3:99:c4:77:12:6b:
f3:fb:ef:0d:2d:c1:8c:66:79:ef:fa:8d:e1:66:91:c1:3b:dd:
39:ed:ca:8d:44:c0:27:58:a3:c1:35:17:1c:c3:51:9d:dc:59:
64:26:4b:e4:9b:3a:e6:50:e1:95:6a:07:bb:b4:9f:4b:1b:25:
21:9e:52:14:9b:c0:7f:07:51:3b:42:e3:76:1b:78:19:2e:8d:
42:04:c8:db:b7:fa:e6:ae:5e:50:cd:8f:c6:64:68:3d:91:f1:
af:33:f8:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2EqS0jTAOchKN7uIV700LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNzhkYmYzZTg1OTU4MmZkMWVkYTJmMmRjZGU1NDIyMjk1
MTQ2ZjEwHhcNMjUwOTExMDAwMDE1WhcNMjUwOTEyMDAwMDE1WjAzMTEwLwYDVQQD
Eyg4ZjIwNmJjMTlmZDQ1ZjI0OWQxZTM1MmNjMzMwMDQzMWYzODk0Y2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwSb8iHwi07Qb328aoa7A1Rtwt+w
Sh/ukc0FoU9sK1OblcMvM76nN3KTWgnQdXfXjw4Iab+FLcSi3IaMa2nY4XkAIDS5
povHJg56636V8n+BVs6y8MYKhzWBpY/fS2DUWWZmgdVVXBcNEq2DAEDfz0wXHtqG
5JrJts6grtgiI9sIB7Duwf8HsEO3wspFJ4rIDPHjhw3efuQQn/Pdwh0HWo3Eakyx
pgS0vizp6DmZofoiOKweb+iH+ohvrnRhCR2pYrCVhp0ZwN61OmLJn3uTqtbEe9eI
gFd85K7mzza4rkZMP6QZdMXR4rSmZzp1HBWsXWx0v4Zzw4XeaX5g+NLp7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8ga8Gf1F8knR41LMMwBDHziUzSMB8GA1UdIwQY
MBaAFBt42/PoWVgv0e2i8tzeVCIpUUbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85OWI1MzUtYzQyYi00ZTAxLTg3OTMt
NzIyMjk0NzgzZTllLzEvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85OWI1MzUtYzQyYi00ZTAxLTg3OTMtNzIyMjk0NzgzZTll
LzEvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFfoBbdu
d33XvgTDLmjqaMfR/B4cjiJsSHWviXsKvvtYhCMtC3YWIG2aCwX85E/092rjm0O/
Tcmr+LqIu9hzWSEmWrCMAzwuInWPl5uHQWD5LX6z9UlZMXhpCQWjZIoY3QAJvV9W
cY5na5rXnDtGYOsHs1DkSRY6jemFkNmig1jRL6R+mbgIEZZ5AdrC5F4nIdljg99r
EHDhuYdEw5nEdxJr8/vvDS3BjGZ57/qN4WaRwTvdOe3KjUTAJ1ijwTUXHMNRndxZ
ZCZL5Js65lDhlWoHu7SfSxslIZ5SFJvAfwdRO0Ljdht4GS6NQgTI27f65q5eUM2P
xmRoPZHxrzP4YQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 07:54:46 2025 by rpki-client