Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
File: ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json)
Hash identifier: zXXxlig3QUrFxiePrIQXlgRezW2UTR9nPTw5ldV75uo=
Subject key identifier: F6:33:5E:E7:53:5F:80:51:83:47:44:C6:26:13:35:0E:FB:01:54:1F
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial: 019873E24642EB3AB7248AE49D51750D3F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
Manifest number: 040D
Signing time: Mon 04 Aug 2025 07:01:05 +0000
Manifest this update: Mon 04 Aug 2025 07:01:05 +0000
Manifest next update: Tue 05 Aug 2025 07:01:05 +0000
Files and hashes: 1: 4mtjo1wkfTbCTW9KNexHpaJfxb4.roa (hash: NNFjMP/4ryf3yqLdY/nlmC6UZkGbjTY7ealoIUdpyCw=)
2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: vPuIaYjXN04Zs2HLUJi6NRtJXW2t90J6pTJ7KTraZi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:46:42:eb:3a:b7:24:8a:e4:9d:51:75:0d:3f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Validity
Not Before: Aug 4 07:01:05 2025 GMT
Not After : Aug 5 07:01:05 2025 GMT
Subject: CN=f6335ee7535f8051834744c62613350efb01541f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:50:22:97:27:1c:cf:46:c4:46:4a:02:c9:
bb:16:db:36:83:64:7b:29:e4:e4:7f:03:6a:91:70:
90:1d:8c:6d:c8:72:f1:e5:f0:6f:2a:ab:e2:20:ba:
a7:5a:5f:f7:55:63:98:dd:d0:46:a1:41:cb:c0:e0:
27:a8:51:48:3f:26:b2:4c:6a:6a:42:1d:ce:76:d3:
ca:cc:ac:84:93:0f:8a:d7:bf:1f:25:d6:aa:77:e1:
2f:ad:3a:3a:64:1d:8a:16:37:6c:f8:11:33:dd:8b:
d7:5e:6c:50:49:7f:6d:2d:dc:0d:5b:3e:db:db:9b:
7f:e7:8a:e7:5a:f6:60:cf:85:bb:7f:1a:64:7a:41:
0c:6e:4c:bc:47:aa:7c:1c:95:84:f2:ec:4c:bb:7b:
99:9c:53:d3:c2:8f:46:c4:48:6e:f5:45:b8:bf:a2:
f9:a6:84:50:7e:03:a3:8f:da:cd:97:6a:a4:f4:cf:
62:8a:59:9d:8c:2f:74:39:f0:f7:30:dc:b9:53:4e:
00:04:dc:0f:bd:08:f8:45:5b:86:e1:cf:ee:79:4b:
08:5b:06:21:a8:bd:1d:22:a7:06:3c:e7:09:8c:f9:
5f:27:35:66:18:b5:83:5e:1c:18:23:c6:b7:40:24:
ac:8d:aa:9c:74:d5:fe:04:46:cc:c0:8b:de:d4:4c:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:33:5E:E7:53:5F:80:51:83:47:44:C6:26:13:35:0E:FB:01:54:1F
X509v3 Authority Key Identifier:
keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e1:fa:c5:ac:98:f1:85:26:02:b6:6a:b4:61:6c:49:88:7d:
9e:0b:4f:64:51:ef:b4:4c:00:8f:fd:e2:cf:21:67:8f:33:58:
d3:3f:95:7a:1c:01:2b:a7:f3:15:4c:e0:89:8c:24:31:17:e4:
13:53:0c:fd:f6:13:da:0c:7f:79:86:09:e2:a3:14:48:0f:81:
b3:22:e4:33:1b:69:bc:4b:52:d2:d8:d4:26:a0:a6:57:73:05:
4b:45:dc:4c:d5:2e:ef:61:1d:02:3f:26:a0:7f:2e:fd:2b:3b:
1f:2a:22:f0:ea:ae:1c:41:41:8b:60:05:17:ab:a9:98:8e:32:
28:57:21:27:aa:c0:52:9f:9f:c0:b6:de:ee:6f:7f:85:67:7f:
3f:67:d4:10:24:d6:2f:da:c7:27:11:1f:1a:5b:c9:48:f5:c1:
1a:ed:df:9c:6c:7e:83:c3:fa:3d:da:48:0f:62:bf:2f:16:96:
22:0a:04:ab:ed:39:2e:d4:f8:7e:35:3a:91:97:51:a8:ef:9b:
be:c0:b2:82:48:91:df:ac:55:6e:82:1d:76:97:c3:c3:22:87:
c3:f6:7b:70:d0:19:97:3f:04:1b:98:f3:70:7b:d4:d7:8a:c8:
b1:c5:c3:37:89:70:7d:bc:a4:04:8e:6b:1d:88:0e:9c:cd:a0:
36:d9:75:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4kZC6zq3JIrknVF1DT9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhM2YyN2M5M2VmYjdiYmMwYjBhZmU4ZWNjMjRmNzAzOWQy
NzUxMDgwHhcNMjUwODA0MDcwMTA1WhcNMjUwODA1MDcwMTA1WjAzMTEwLwYDVQQD
EyhmNjMzNWVlNzUzNWY4MDUxODM0NzQ0YzYyNjEzMzUwZWZiMDE1NDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhdQIpcnHM9GxEZKAsm7Fts2g2R7
KeTkfwNqkXCQHYxtyHLx5fBvKqviILqnWl/3VWOY3dBGoUHLwOAnqFFIPyayTGpq
Qh3OdtPKzKyEkw+K178fJdaqd+EvrTo6ZB2KFjds+BEz3YvXXmxQSX9tLdwNWz7b
25t/54rnWvZgz4W7fxpkekEMbky8R6p8HJWE8uxMu3uZnFPTwo9GxEhu9UW4v6L5
poRQfgOjj9rNl2qk9M9iilmdjC90OfD3MNy5U04ABNwPvQj4RVuG4c/ueUsIWwYh
qL0dIqcGPOcJjPlfJzVmGLWDXhwYI8a3QCSsjaqcdNX+BEbMwIve1EzPdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYzXudTX4BRg0dExiYTNQ77AVQfMB8GA1UdIwQY
MBaAFIo/J8k++3u8Cwr+jswk9wOdJ1EIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWo4bnlUNzdlN3dMQ3Y2T3pDVDNBNTBuVVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yYzlhMjQtODU2MC00MzA3LWFjYzct
ZWJmODM0ZmU5YTE1LzEvaWo4bnlUNzdlN3dMQ3Y2T3pDVDNBNTBuVVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yYzlhMjQtODU2MC00MzA3LWFjYzctZWJmODM0ZmU5YTE1
LzEvaWo4bnlUNzdlN3dMQ3Y2T3pDVDNBNTBuVVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+H6xayY
8YUmArZqtGFsSYh9ngtPZFHvtEwAj/3izyFnjzNY0z+VehwBK6fzFUzgiYwkMRfk
E1MM/fYT2gx/eYYJ4qMUSA+BsyLkMxtpvEtS0tjUJqCmV3MFS0XcTNUu72EdAj8m
oH8u/Ss7Hyoi8OquHEFBi2AFF6upmI4yKFchJ6rAUp+fwLbe7m9/hWd/P2fUECTW
L9rHJxEfGlvJSPXBGu3fnGx+g8P6PdpID2K/LxaWIgoEq+05LtT4fjU6kZdRqO+b
vsCygkiR36xVboIddpfDwyKHw/Z7cNAZlz8EG5jzcHvU14rIscXDN4lwfbykBI5r
HYgOnM2gNtl1uw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:34 2025 by rpki-client