Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
File: sPiohfd3bSq5m7TyDoTTBuA5SqM.mft (raw, json)
Hash identifier: mgs6+F5TxQ/kpIoj/HvQKyY86NIPndPp0rfhKMxkam8=
Subject key identifier: 8D:86:FA:F5:F0:EE:AA:49:8C:5A:47:86:74:19:0A:DE:1C:84:3F:B5
Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
Certificate issuer: /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Certificate serial: 01989FDEF3B29F39F2BCD543148841533692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
Manifest number: 13C1
Signing time: Tue 12 Aug 2025 20:00:45 +0000
Manifest this update: Tue 12 Aug 2025 20:00:45 +0000
Manifest next update: Wed 13 Aug 2025 20:00:45 +0000
Files and hashes: 1: SvV3htVhXEPI7wFXdPP_R5R2jOo.roa (hash: ADbpdowWW8HzIQ0XmIe2lqnPixhQxjU2ME36RexdQ8I=)
2: sPiohfd3bSq5m7TyDoTTBuA5SqM.crl (hash: JbIG2BbwJxTV+EX0Jtz/ReQMlFjiVRxLYyAsZuUqCZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:f3:b2:9f:39:f2:bc:d5:43:14:88:41:53:36:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Validity
Not Before: Aug 12 20:00:45 2025 GMT
Not After : Aug 13 20:00:45 2025 GMT
Subject: CN=8d86faf5f0eeaa498c5a478674190ade1c843fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:d8:c9:70:d6:20:86:64:26:fa:c6:c9:0a:
6f:d0:c5:23:52:8a:a8:a4:0b:ec:87:7d:7f:6f:0e:
5e:43:15:ff:e6:60:81:c7:2b:e6:3c:6f:4f:75:ca:
d6:2f:e1:aa:40:7a:79:c5:60:78:7d:79:95:98:fe:
1a:84:37:9e:dd:53:5f:d8:c3:29:f6:ea:09:4c:62:
35:7d:10:de:cd:a0:e0:d3:12:05:35:3f:4e:9e:84:
f1:e1:ad:67:86:79:d5:36:d3:de:09:1d:6c:ee:7c:
33:f5:9d:50:a8:0a:13:6c:d7:2b:9d:e4:ea:69:d8:
6e:16:cc:8c:00:a1:0c:5e:27:f8:e4:2d:6d:dd:1c:
40:f2:15:9e:b0:ee:45:c1:35:64:89:d9:14:46:67:
63:91:8f:30:dc:51:6c:92:92:5f:db:b0:e5:2f:2a:
a9:4c:44:40:fd:ed:56:f5:9c:32:96:6b:fc:9c:1b:
00:41:14:85:a6:5b:6c:78:b7:eb:bb:8e:ca:5d:87:
f0:d6:56:2f:ed:9f:63:c1:ce:ff:b6:09:59:85:a6:
ab:bd:ba:3f:31:33:2d:d0:84:49:dc:5a:a8:64:73:
9d:65:ca:9e:3d:6d:d8:23:59:79:fa:aa:a3:b4:8b:
bb:67:f5:5d:8c:24:b6:de:00:83:42:df:53:76:2f:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:86:FA:F5:F0:EE:AA:49:8C:5A:47:86:74:19:0A:DE:1C:84:3F:B5
X509v3 Authority Key Identifier:
keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e8:0d:42:5e:d3:dc:f0:01:87:31:1b:e9:b8:e6:1e:87:31:
35:3c:09:34:3a:3a:7d:60:ce:d0:bf:cf:27:6b:9d:3e:76:fc:
43:cb:e4:c7:12:ca:61:4c:56:f4:00:b1:66:82:de:c9:55:6f:
f6:20:1a:37:ae:1d:5f:7c:ba:85:f2:12:26:61:e9:ba:a3:f7:
5f:e8:29:0a:95:e3:25:8b:f9:db:42:ed:16:2b:d1:ae:49:6b:
ff:8a:c6:82:d6:2d:fd:28:ed:ce:d9:21:a7:98:f4:c1:13:b0:
61:ac:03:02:14:23:ba:30:f5:2d:6e:e0:01:88:2d:cb:be:81:
91:58:80:e4:12:27:25:f4:c6:51:4b:35:f5:85:19:a2:08:65:
48:8c:39:60:c5:9a:67:11:00:ef:f0:35:80:88:b2:b5:6c:1a:
48:f7:20:4c:9d:59:ec:e7:10:a1:42:cc:b5:0d:a5:0a:5d:47:
e9:a3:a3:84:b1:22:24:f1:08:ab:50:87:ce:11:e3:bb:01:2d:
1f:52:4d:5e:79:82:56:28:58:98:76:f6:1a:92:d8:a3:f6:00:
1c:05:24:41:af:a1:b5:36:fc:7f:26:a0:5c:54:5c:26:65:0d:
39:c2:7e:d2:3b:73:8d:ad:95:86:e8:7f:c5:41:20:74:8b:60:
ea:ea:10:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZif3vOynznyvNVDFIhBUzaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZjhhODg1Zjc3NzZkMmFiOTliYjRmMjBlODRkMzA2ZTAz
OTRhYTMwHhcNMjUwODEyMjAwMDQ1WhcNMjUwODEzMjAwMDQ1WjAzMTEwLwYDVQQD
Eyg4ZDg2ZmFmNWYwZWVhYTQ5OGM1YTQ3ODY3NDE5MGFkZTFjODQzZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8vYyXDWIIZkJvrGyQpv0MUjUoqo
pAvsh31/bw5eQxX/5mCBxyvmPG9PdcrWL+GqQHp5xWB4fXmVmP4ahDee3VNf2MMp
9uoJTGI1fRDezaDg0xIFNT9OnoTx4a1nhnnVNtPeCR1s7nwz9Z1QqAoTbNcrneTq
adhuFsyMAKEMXif45C1t3RxA8hWesO5FwTVkidkURmdjkY8w3FFskpJf27DlLyqp
TERA/e1W9Zwylmv8nBsAQRSFpltseLfru47KXYfw1lYv7Z9jwc7/tglZhaarvbo/
MTMt0IRJ3FqoZHOdZcqePW3YI1l5+qqjtIu7Z/VdjCS23gCDQt9Tdi8VIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2G+vXw7qpJjFpHhnQZCt4chD+1MB8GA1UdIwQY
MBaAFLD4qIX3d20quZu08g6E0wbgOUqjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1Bpb2hmZDNiU3E1bTdUeURvVFRCdUE1U3FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iMTI4MmYtNzFjNS00N2U3LWFlYTEt
NGQwNTQ5OGFhOTdkLzEvc1Bpb2hmZDNiU3E1bTdUeURvVFRCdUE1U3FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iMTI4MmYtNzFjNS00N2U3LWFlYTEtNGQwNTQ5OGFhOTdk
LzEvc1Bpb2hmZDNiU3E1bTdUeURvVFRCdUE1U3FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+gNQl7T
3PABhzEb6bjmHocxNTwJNDo6fWDO0L/PJ2udPnb8Q8vkxxLKYUxW9ACxZoLeyVVv
9iAaN64dX3y6hfISJmHpuqP3X+gpCpXjJYv520LtFivRrklr/4rGgtYt/Sjtztkh
p5j0wROwYawDAhQjujD1LW7gAYgty76BkViA5BInJfTGUUs19YUZoghlSIw5YMWa
ZxEA7/A1gIiytWwaSPcgTJ1Z7OcQoULMtQ2lCl1H6aOjhLEiJPEIq1CHzhHjuwEt
H1JNXnmCVihYmHb2GpLYo/YAHAUkQa+htTb8fyagXFRcJmUNOcJ+0jtzja2Vhuh/
xUEgdItg6uoQ9w==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:18 2025 by rpki-client