Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
File: iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft (raw, json)
Hash identifier: A/AP8g/BThCM524e8rf2l+L7fwW9Yb63nWJZ8wzl9wM=
Subject key identifier: A3:3E:65:77:02:A5:6A:32:18:A6:B2:A9:85:CA:2F:02:E9:D5:1C:AF
Authority key identifier: 88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
Certificate issuer: /CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Certificate serial: 019874500E1EA5F769E48429D2D11FC7FBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
Manifest number: 04BF
Signing time: Mon 04 Aug 2025 09:01:00 +0000
Manifest this update: Mon 04 Aug 2025 09:01:00 +0000
Manifest next update: Tue 05 Aug 2025 09:01:00 +0000
Files and hashes: 1: XBo1pVVrARNWOJzVGLIS7aXEyvs.roa (hash: LHmi+bbPW6X6RSAyxvQlIttnolx/pGqPJGLDRqAXVIU=)
2: iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl (hash: Nh55Qlktx5FZ3x/E1Nb/iCImCwXNWPxMdnlImqSn298=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:0e:1e:a5:f7:69:e4:84:29:d2:d1:1f:c7:fb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Validity
Not Before: Aug 4 09:01:00 2025 GMT
Not After : Aug 5 09:01:00 2025 GMT
Subject: CN=a33e657702a56a3218a6b2a985ca2f02e9d51caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:a0:bc:2d:35:c1:70:23:02:07:1d:4d:a3:
44:8a:e9:e4:e4:d3:b7:c9:02:2a:5a:13:79:0e:89:
72:83:7b:0b:50:d9:54:b5:51:fd:7d:0b:33:10:76:
05:20:d2:b2:e7:fc:32:7f:40:2d:e8:44:6c:d2:da:
ea:e7:3b:94:4f:65:02:33:d5:4c:34:46:7d:bb:b9:
f9:a2:c7:3e:12:30:41:b5:c3:a5:93:43:99:56:74:
da:78:e3:d1:e3:59:3b:35:2f:ac:98:1f:96:1c:7d:
c0:a3:ee:45:d1:39:18:c2:cc:00:b5:8b:b4:c3:bd:
bf:cc:ad:87:b6:e0:28:24:bc:f7:79:dd:03:d5:3e:
a6:e9:b1:20:27:8e:63:53:ff:96:7a:ed:ff:68:c1:
c2:d1:3c:54:89:2d:21:ac:ad:e1:0d:69:37:66:78:
bb:4a:9d:4a:85:be:a6:d7:8b:a3:2a:43:52:e8:41:
d3:c0:95:9c:e9:56:5b:7a:f1:22:24:a7:5e:b3:ad:
53:8c:f4:cb:20:f2:23:18:07:51:4e:31:73:39:bc:
e6:c1:6b:9d:06:2f:24:c6:c5:b8:27:f4:1a:37:f6:
41:28:da:e2:17:4c:68:22:f9:08:cc:fa:e3:ca:7f:
65:6f:22:2f:0c:35:e9:91:c5:18:7f:93:cd:c9:7b:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3E:65:77:02:A5:6A:32:18:A6:B2:A9:85:CA:2F:02:E9:D5:1C:AF
X509v3 Authority Key Identifier:
keyid:88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:51:f9:36:54:62:eb:a9:ed:07:88:ac:da:be:07:82:24:cf:
66:e8:2a:11:49:12:3e:de:e5:70:19:49:43:bd:07:53:df:76:
cb:fc:ca:95:9f:16:f8:5b:33:c1:a9:5e:e6:5b:47:8d:e8:c0:
2e:8f:93:d3:49:ef:e0:52:95:e9:fe:b4:37:78:c9:76:45:b3:
66:9b:d2:c7:89:2a:50:39:c4:7c:c4:83:ff:bc:ab:e0:f8:1d:
25:a5:12:12:8a:17:27:5a:aa:fa:ac:6b:69:b1:2e:30:33:78:
e6:ea:90:9a:e8:87:3a:e9:2e:6a:cd:6e:bd:9a:5d:90:91:31:
40:73:6b:b8:57:d7:4d:bc:2c:b5:9a:00:1d:6c:a2:a1:34:fe:
6e:c8:76:ee:fd:b3:2c:04:de:ed:cc:36:bc:d5:f2:92:ee:b0:
d2:25:aa:a2:8f:7d:2f:13:00:f4:a7:0a:03:8a:46:2d:bb:dc:
10:74:7c:d9:42:49:54:70:b6:62:ed:ec:8d:e3:d9:34:0e:e5:
59:bd:94:a3:96:3b:8d:43:5d:08:f5:6b:c4:90:bd:2f:4a:87:
0b:f0:57:15:19:9f:2b:86:3a:5f:89:49:69:06:fb:b6:a5:47:
e2:3e:f5:fc:af:28:5e:e7:78:97:c7:cf:30:bb:92:d9:87:9b:
7e:1d:71:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UA4epfdp5IQp0tEfx/vVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjdiMGRkOWZmY2EyZjg1NzM0YzUzN2NiZWY1Y2NkMTE5
OWU1YmMwHhcNMjUwODA0MDkwMTAwWhcNMjUwODA1MDkwMTAwWjAzMTEwLwYDVQQD
EyhhMzNlNjU3NzAyYTU2YTMyMThhNmIyYTk4NWNhMmYwMmU5ZDUxY2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4KgvC01wXAjAgcdTaNEiunk5NO3
yQIqWhN5Dolyg3sLUNlUtVH9fQszEHYFINKy5/wyf0At6ERs0trq5zuUT2UCM9VM
NEZ9u7n5osc+EjBBtcOlk0OZVnTaeOPR41k7NS+smB+WHH3Ao+5F0TkYwswAtYu0
w72/zK2HtuAoJLz3ed0D1T6m6bEgJ45jU/+Weu3/aMHC0TxUiS0hrK3hDWk3Zni7
Sp1Khb6m14ujKkNS6EHTwJWc6VZbevEiJKdes61TjPTLIPIjGAdRTjFzObzmwWud
Bi8kxsW4J/QaN/ZBKNriF0xoIvkIzPrjyn9lbyIvDDXpkcUYf5PNyXuwkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKM+ZXcCpWoyGKayqYXKLwLp1RyvMB8GA1UdIwQY
MBaAFIj3sN2f/KL4VzTFN8vvXM0RmeW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBldzNaXzhvdmhYTk1VM3ktOWN6UkdaNWJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9kYzhjMDItNGY2ZC00OWY2LTg4MmMt
MTM2OTA1ZTJjN2M1LzEvaVBldzNaXzhvdmhYTk1VM3ktOWN6UkdaNWJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9kYzhjMDItNGY2ZC00OWY2LTg4MmMtMTM2OTA1ZTJjN2M1
LzEvaVBldzNaXzhvdmhYTk1VM3ktOWN6UkdaNWJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFH5NlRi
66ntB4is2r4HgiTPZugqEUkSPt7lcBlJQ70HU992y/zKlZ8W+Fszwale5ltHjejA
Lo+T00nv4FKV6f60N3jJdkWzZpvSx4kqUDnEfMSD/7yr4PgdJaUSEooXJ1qq+qxr
abEuMDN45uqQmuiHOukuas1uvZpdkJExQHNruFfXTbwstZoAHWyioTT+bsh27v2z
LATe7cw2vNXyku6w0iWqoo99LxMA9KcKA4pGLbvcEHR82UJJVHC2Yu3sjePZNA7l
Wb2Uo5Y7jUNdCPVrxJC9L0qHC/BXFRmfK4Y6X4lJaQb7tqVH4j71/K8oXud4l8fP
MLuS2Yebfh1xyA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:41 2025 by rpki-client