Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json)
Hash identifier: v+taaSVatcCW0PCufYQUXomqlyKdAigva8GZnEs3R6U=
Subject key identifier: E2:0D:FA:16:A8:A8:90:98:9C:B0:FE:20:E8:39:27:B8:1E:A4:B4:9F
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial: 019872988F30C9166529115E0C52BF8CF66B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
Manifest number: 09AA
Signing time: Mon 04 Aug 2025 01:00:57 +0000
Manifest this update: Mon 04 Aug 2025 01:00:57 +0000
Manifest next update: Tue 05 Aug 2025 01:00:57 +0000
Files and hashes: 1: 86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa (hash: 3J5NqPkKkcPBxfbwq2fM/SjV37VEXbNMo9GruUt6NNo=)
2: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: 8XVf33TMaXtvQ1TIJPt6F9+oFxhGK5yrbs1Yo3NXWN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:8f:30:c9:16:65:29:11:5e:0c:52:bf:8c:f6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
Validity
Not Before: Aug 4 01:00:57 2025 GMT
Not After : Aug 5 01:00:57 2025 GMT
Subject: CN=e20dfa16a8a890989cb0fe20e83927b81ea4b49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:7d:d2:a3:d6:1d:20:86:7e:25:11:8e:c6:
f4:92:bf:52:39:74:a5:71:be:51:4e:96:1c:2e:bc:
a8:37:c2:16:12:03:a7:fd:3c:0b:95:c9:8a:ff:05:
be:b7:6d:6c:f7:60:0c:ae:86:3b:69:67:2e:b4:e0:
0a:68:bd:22:72:e7:24:71:d5:ac:61:f2:bf:25:22:
0d:89:7e:e0:4f:2b:a1:86:49:e5:b9:85:85:49:63:
99:bf:ee:98:85:00:a0:ff:8c:03:8f:2e:49:d0:b8:
33:6d:a4:f3:e4:34:6c:05:3d:b3:24:0f:65:f8:0d:
fe:4c:bc:3d:f4:a7:06:f7:84:0d:62:1b:2b:3c:47:
e6:7a:0b:cb:7b:f2:18:87:fd:cf:8a:83:db:0b:72:
93:3c:09:49:c6:67:0b:14:19:a0:9f:f6:c9:51:43:
7e:5b:d6:11:2e:7c:3d:c4:56:e0:2f:96:9d:0d:e7:
b9:0b:c2:eb:55:2c:d6:1d:c8:5d:53:04:07:7c:3c:
a1:41:58:df:93:72:9c:cc:ba:89:7d:07:f4:24:c9:
64:a0:26:64:53:7f:46:17:7e:0c:eb:7c:79:5f:58:
6d:a6:14:2b:06:4a:3a:a8:ac:e8:f5:55:26:40:ac:
97:f9:1d:20:44:9f:6b:f9:c9:18:5b:93:73:a7:56:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0D:FA:16:A8:A8:90:98:9C:B0:FE:20:E8:39:27:B8:1E:A4:B4:9F
X509v3 Authority Key Identifier:
keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d2:a3:5d:06:5e:15:dc:6f:ba:e2:f4:d8:f2:73:4a:94:60:
d2:08:63:9d:87:bf:d9:32:1d:60:84:3c:71:45:bf:2e:20:85:
cb:d8:c8:96:10:0a:e9:fd:63:37:4d:27:af:bc:0e:a6:c7:d4:
9c:72:69:99:9e:9c:61:68:55:86:7b:bd:74:12:38:d4:0e:2d:
dd:bf:ec:6c:18:eb:3e:34:22:c0:b2:a7:43:f6:18:57:fb:80:
ea:25:10:79:44:31:7e:c7:d8:2e:41:80:24:6c:42:87:a5:3e:
37:3d:c5:55:7d:a1:90:c3:ba:ee:21:6c:d3:e7:1f:14:5f:ef:
50:bf:31:b2:f3:a6:83:b0:e7:e9:8f:f5:d9:1c:5d:28:9f:18:
8c:7a:7e:87:f7:ee:fe:4a:5c:0b:ad:dd:4c:d7:23:3a:3e:e4:
b4:38:4e:8c:b9:2c:7e:ac:9c:64:1a:9c:15:26:f2:5e:91:9d:
01:67:3e:52:b9:02:af:61:2d:ba:06:99:1b:2a:f8:c4:c0:d5:
8c:48:69:56:dd:39:96:1d:73:0a:7d:9f:74:44:9c:ef:27:e7:
28:4f:97:0a:9b:fc:15:8f:a5:25:23:9f:b9:fb:cf:78:7d:16:
a1:12:f0:e6:a9:fb:b4:0d:ed:4d:33:78:89:64:6a:d6:d5:83:
fc:a0:57:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymI8wyRZlKRFeDFK/jPZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjAzYzZlZmY5ZTc0MjI2MDMwOTNmODNlNjIxMWRhOThj
NzU4MjkwHhcNMjUwODA0MDEwMDU3WhcNMjUwODA1MDEwMDU3WjAzMTEwLwYDVQQD
EyhlMjBkZmExNmE4YTg5MDk4OWNiMGZlMjBlODM5MjdiODFlYTRiNDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraJ90qPWHSCGfiURjsb0kr9SOXSl
cb5RTpYcLryoN8IWEgOn/TwLlcmK/wW+t21s92AMroY7aWcutOAKaL0icuckcdWs
YfK/JSINiX7gTyuhhknluYWFSWOZv+6YhQCg/4wDjy5J0LgzbaTz5DRsBT2zJA9l
+A3+TLw99KcG94QNYhsrPEfmegvLe/IYh/3PioPbC3KTPAlJxmcLFBmgn/bJUUN+
W9YRLnw9xFbgL5adDee5C8LrVSzWHchdUwQHfDyhQVjfk3KczLqJfQf0JMlkoCZk
U39GF34M63x5X1htphQrBko6qKzo9VUmQKyX+R0gRJ9r+ckYW5Nzp1aRmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIN+haoqJCYnLD+IOg5J7gepLSfMB8GA1UdIwQY
MBaAFAogPG7/nnQiYDCT+D5iEdqYx1gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83N2Y0ZGYtYzNiOS00ODU5LThiYjIt
MDg3NzRiNmM2YmIzLzEvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83N2Y0ZGYtYzNiOS00ODU5LThiYjItMDg3NzRiNmM2YmIz
LzEvQ2lBOGJ2LWVkQ0pnTUpQNFBtSVIycGpIV0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdKjXQZe
FdxvuuL02PJzSpRg0ghjnYe/2TIdYIQ8cUW/LiCFy9jIlhAK6f1jN00nr7wOpsfU
nHJpmZ6cYWhVhnu9dBI41A4t3b/sbBjrPjQiwLKnQ/YYV/uA6iUQeUQxfsfYLkGA
JGxCh6U+Nz3FVX2hkMO67iFs0+cfFF/vUL8xsvOmg7Dn6Y/12RxdKJ8YjHp+h/fu
/kpcC63dTNcjOj7ktDhOjLksfqycZBqcFSbyXpGdAWc+UrkCr2EtugaZGyr4xMDV
jEhpVt05lh1zCn2fdESc7yfnKE+XCpv8FY+lJSOfufvPeH0WoRLw5qn7tA3tTTN4
iWRq1tWD/KBXSg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:19 2025 by rpki-client