Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier: kvORTHD11vidRC3xa7rRium3qP5MGl0vEhcWCEDZM/E=
Subject key identifier: 77:A9:C1:14:AC:B7:9D:35:AD:84:87:18:76:8A:81:3E:23:9A:39:2B
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 019922FAB184474074797CD3EA39D8CC14F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 07:01:18 +0000
Manifest this update: Sun 07 Sep 2025 07:01:18 +0000
Manifest next update: Mon 08 Sep 2025 07:01:18 +0000
Files and hashes: 1: UvkgBounMtuI2EY4VakFPmSVVf8.roa (hash: B8b+cAv47Fq4zMohD+Ikbfg+w/maMgI605v1qgGvxbU=)
2: aMP60-6kIcycfPRX1mrnGq3rKu4.roa (hash: 3JfLcJd1nqn3CbGO/VzxfaF4cayveMgFQoD5eZc253E=)
3: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: WOsIlTPnzQZMGlr2AhCUabMnYcxXRjIHIaF+/yYoY1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:b1:84:47:40:74:79:7c:d3:ea:39:d8:cc:14:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Sep 7 07:01:18 2025 GMT
Not After : Sep 8 07:01:18 2025 GMT
Subject: CN=77a9c114acb79d35ad848718768a813e239a392b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:8c:6d:cd:26:d9:3a:25:7b:db:0e:0b:66:
fa:28:0e:12:f5:b0:ae:3a:64:dc:5f:96:06:c3:a3:
eb:16:0c:bf:24:1d:e6:a4:28:52:0e:13:11:7d:4b:
27:80:eb:42:7e:54:e6:e9:5f:63:ba:97:72:ae:56:
4f:9c:9e:ff:3c:d5:70:70:87:13:1a:d7:50:7e:61:
58:f0:2e:ce:36:c8:d0:a8:27:f8:51:79:6c:3a:dc:
7f:1b:05:9c:b2:22:82:9b:2a:01:14:f9:70:92:4c:
b0:cb:e5:0f:3d:67:c1:18:78:68:9e:76:36:e6:e8:
fb:ac:4f:a9:8a:0a:2e:d4:8c:5e:db:71:81:21:d7:
4d:ff:6e:2c:f4:26:89:88:41:f7:1b:f6:fd:de:a5:
f9:7e:2f:e4:b7:22:dc:eb:f2:ac:33:1c:a3:9e:16:
6e:1b:19:6f:00:a7:51:e9:10:67:12:85:db:29:84:
cf:b6:8e:98:9c:64:8b:2c:6f:fa:44:5d:e1:6e:07:
01:40:ff:8b:7d:1a:22:dd:bb:e9:5f:80:9b:2f:4b:
08:4b:20:ca:d0:9f:16:b5:f4:cb:31:4d:0e:ac:32:
03:b7:28:5b:9f:db:71:99:37:f3:76:2e:a2:93:0f:
b3:36:a5:dd:eb:3d:c4:40:ce:a1:6a:02:f8:97:79:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A9:C1:14:AC:B7:9D:35:AD:84:87:18:76:8A:81:3E:23:9A:39:2B
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:73:16:fa:ed:66:50:48:6a:49:90:ff:9e:d2:84:45:56:c0:
84:65:2e:cc:42:1b:3d:09:36:ce:66:d9:7f:b5:b5:7f:54:30:
cf:9a:b7:e4:d4:bf:68:ab:7b:05:8b:35:c1:d8:ba:f5:dd:e8:
41:96:94:11:1b:32:b3:a5:44:49:c7:9c:56:98:da:3b:35:71:
2d:d4:49:52:29:90:fb:0e:58:20:46:a0:17:80:11:01:02:61:
a8:5a:26:d0:c6:e3:bb:cc:e5:22:13:40:ef:ae:b8:0a:aa:47:
9f:a9:c6:f4:b2:10:9e:11:86:55:8d:88:4b:73:15:70:0b:6e:
d0:ad:31:ff:92:90:13:ec:63:11:ba:e7:51:1a:f7:0e:c4:2e:
b1:14:ed:e8:ac:ee:0c:7d:37:3c:22:1d:40:a6:8e:8e:dc:79:
ea:09:ef:b6:e4:a3:1a:81:db:e9:6d:1b:f3:95:5c:12:f9:d0:
70:fe:55:0b:ca:35:68:d9:ee:9c:00:c8:d2:3d:14:32:0f:e8:
de:2f:4a:e9:3b:04:0e:fd:c7:15:60:72:52:b1:9f:36:a9:5c:
10:a9:96:a2:cf:3f:dc:66:41:e1:39:56:91:9d:21:0c:e5:48:
8b:9a:04:6b:4b:6f:d4:1d:07:d6:b9:1d:0e:e2:c8:98:6a:92:
79:da:af:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+rGER0B0eXzT6jnYzBT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2FmYzZlZmU2Mjk5MGEyNjkzMmY0MGUxNTBiMjdlZWQ1
MzljNGIwHhcNMjUwOTA3MDcwMTE4WhcNMjUwOTA4MDcwMTE4WjAzMTEwLwYDVQQD
Eyg3N2E5YzExNGFjYjc5ZDM1YWQ4NDg3MTg3NjhhODEzZTIzOWEzOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bmMbc0m2Tole9sOC2b6KA4S9bCu
OmTcX5YGw6PrFgy/JB3mpChSDhMRfUsngOtCflTm6V9jupdyrlZPnJ7/PNVwcIcT
GtdQfmFY8C7ONsjQqCf4UXlsOtx/GwWcsiKCmyoBFPlwkkywy+UPPWfBGHhonnY2
5uj7rE+pigou1Ixe23GBIddN/24s9CaJiEH3G/b93qX5fi/ktyLc6/KsMxyjnhZu
GxlvAKdR6RBnEoXbKYTPto6YnGSLLG/6RF3hbgcBQP+LfRoi3bvpX4CbL0sISyDK
0J8WtfTLMU0OrDIDtyhbn9txmTfzdi6ikw+zNqXd6z3EQM6hagL4l3kEuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHepwRSst501rYSHGHaKgT4jmjkrMB8GA1UdIwQY
MBaAFIk6/G7+YpkKJpMvQOFQsn7tU5xLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUt
NWE1MjMzZGMwY2UwLzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUtNWE1MjMzZGMwY2Uw
LzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvnMW+u1m
UEhqSZD/ntKERVbAhGUuzEIbPQk2zmbZf7W1f1Qwz5q35NS/aKt7BYs1wdi69d3o
QZaUERsys6VEScecVpjaOzVxLdRJUimQ+w5YIEagF4ARAQJhqFom0Mbju8zlIhNA
7664CqpHn6nG9LIQnhGGVY2IS3MVcAtu0K0x/5KQE+xjEbrnURr3DsQusRTt6Kzu
DH03PCIdQKaOjtx56gnvtuSjGoHb6W0b85VcEvnQcP5VC8o1aNnunADI0j0UMg/o
3i9K6TsEDv3HFWByUrGfNqlcEKmWos8/3GZB4TlWkZ0hDOVIi5oEa0tv1B0H1rkd
DuLImGqSedqvhg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:00:41 2025 by rpki-client