Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: J8Rnq2ahU771SKeBl74MTlnfhWIlmYv+xSg2kZTUIuM=
Subject key identifier: 04:E8:B6:3F:47:EA:84:71:D7:E1:5A:F0:7A:CF:E5:F3:4D:E2:3E:32
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 01987B9B963755E9ED638524B72480533E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 19:00:50 +0000
Manifest this update: Tue 05 Aug 2025 19:00:50 +0000
Manifest next update: Wed 06 Aug 2025 19:00:50 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: O+Q/Hy1bdLhfD681UXu/XG4ZN/Am1sCoIY0OFoZYQpM=)
2: vckMl2OKOufIYLA6xJgut9gT3f0.roa (hash: onDVG2ZFT5wXt5G5Co8mfB4Yy/QhekuAbPP/p4mZSXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:96:37:55:e9:ed:63:85:24:b7:24:80:53:3e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Aug 5 19:00:50 2025 GMT
Not After : Aug 6 19:00:50 2025 GMT
Subject: CN=04e8b63f47ea8471d7e15af07acfe5f34de23e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:91:86:4e:8c:67:26:00:e9:c5:ce:1a:07:
86:f8:ee:0c:24:00:d2:17:60:70:3a:d4:79:92:70:
d0:75:98:d9:38:8a:9c:f4:30:cb:1b:2d:28:b8:5d:
4b:32:52:83:50:7e:bd:82:8d:06:3b:a7:1e:0a:70:
2e:57:07:c6:4d:83:53:dd:5e:a0:1e:48:a3:41:37:
2c:77:7a:31:92:83:11:a3:8f:4c:15:f2:2d:1b:27:
f1:65:4c:45:a0:e3:f3:68:db:21:87:96:59:ac:09:
45:02:1a:1c:dc:a7:d5:41:88:05:f4:1b:a8:95:45:
d1:de:eb:da:a2:f9:b3:fb:63:90:23:f1:7e:28:12:
25:bb:80:42:a3:74:b4:3d:28:6f:0d:3a:d5:85:b6:
17:9f:43:a4:81:a3:bb:fd:3f:8c:cc:5a:33:ff:27:
22:22:1f:d6:49:fa:6d:3f:66:93:8e:29:a9:2c:8b:
df:23:af:27:d9:f2:24:73:dc:e3:20:35:1d:91:13:
f1:e4:31:35:18:27:d5:0e:c0:fb:d7:07:db:98:02:
14:97:41:52:4c:25:97:7b:37:2e:ab:96:79:88:f3:
49:72:cd:56:c8:99:cc:d1:83:01:a5:58:f0:0f:5c:
b2:1d:15:91:39:52:ff:12:12:fe:6b:8e:2c:93:cb:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E8:B6:3F:47:EA:84:71:D7:E1:5A:F0:7A:CF:E5:F3:4D:E2:3E:32
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d5:a6:b7:20:d6:a7:db:03:59:fd:c9:ab:ac:cb:eb:43:16:
75:5b:35:36:3d:ea:01:87:99:91:1e:bc:c4:a3:4d:80:dc:1a:
24:2a:e0:6c:23:07:c8:26:64:ec:73:ee:a3:25:0a:f4:15:f3:
e4:74:a7:b2:46:79:79:34:18:34:11:64:e0:42:57:15:a2:8f:
bb:ad:86:c4:b0:e3:e1:bd:3f:aa:d2:57:33:87:01:58:72:7e:
9f:b5:01:2c:8f:c2:1d:6f:03:88:f0:01:79:ba:44:ab:1d:b3:
d6:cd:e4:ff:6e:2b:86:c6:fd:bc:03:f9:e0:4c:4f:f7:0c:9a:
17:a0:a7:28:57:74:61:f6:41:a6:33:9e:4a:db:39:1d:19:49:
59:1c:b4:9c:33:21:4a:ef:31:4f:5f:68:30:c0:30:65:20:89:
99:96:54:61:71:30:a4:a4:a3:94:2a:68:8c:6d:b2:2a:93:3b:
00:e4:d2:b3:74:25:6f:17:66:04:7e:05:c5:f8:8d:a0:b6:af:
b2:c1:24:72:e0:62:26:0d:6d:f2:bb:2c:20:c7:51:20:c5:ba:
41:31:99:8a:bf:14:a0:f8:fa:4c:0a:f1:45:75:f1:f7:46:de:
2b:22:1a:eb:d5:ab:ed:aa:3c:dd:85:13:66:b6:a3:91:e7:9d:
5d:90:41:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7m5Y3VentY4UktySAUz6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZDM4ZmI0ZDNiOWEyYzdjOGZmZjU5NzcxOGM5MDViOWUy
Zjg0Y2QwHhcNMjUwODA1MTkwMDUwWhcNMjUwODA2MTkwMDUwWjAzMTEwLwYDVQQD
EygwNGU4YjYzZjQ3ZWE4NDcxZDdlMTVhZjA3YWNmZTVmMzRkZTIzZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JCRhk6MZyYA6cXOGgeG+O4MJADS
F2BwOtR5knDQdZjZOIqc9DDLGy0ouF1LMlKDUH69go0GO6ceCnAuVwfGTYNT3V6g
HkijQTcsd3oxkoMRo49MFfItGyfxZUxFoOPzaNshh5ZZrAlFAhoc3KfVQYgF9Buo
lUXR3uvaovmz+2OQI/F+KBIlu4BCo3S0PShvDTrVhbYXn0OkgaO7/T+MzFoz/yci
Ih/WSfptP2aTjimpLIvfI68n2fIkc9zjIDUdkRPx5DE1GCfVDsD71wfbmAIUl0FS
TCWXezcuq5Z5iPNJcs1WyJnM0YMBpVjwD1yyHRWROVL/EhL+a44sk8vDzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATotj9H6oRx1+Fa8HrP5fNN4j4yMB8GA1UdIwQY
MBaAFI/Tj7TTuaLHyP/1l3GMkFueL4TNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZWFmOWQtNWIyOC00ZGY0LWI2N2Qt
NmE3ZmE4MjI5NmM5LzEvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iZWFmOWQtNWIyOC00ZGY0LWI2N2QtNmE3ZmE4MjI5NmM5
LzEvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNWmtyDW
p9sDWf3Jq6zL60MWdVs1Nj3qAYeZkR68xKNNgNwaJCrgbCMHyCZk7HPuoyUK9BXz
5HSnskZ5eTQYNBFk4EJXFaKPu62GxLDj4b0/qtJXM4cBWHJ+n7UBLI/CHW8DiPAB
ebpEqx2z1s3k/24rhsb9vAP54ExP9wyaF6CnKFd0YfZBpjOeSts5HRlJWRy0nDMh
Su8xT19oMMAwZSCJmZZUYXEwpKSjlCpojG2yKpM7AOTSs3QlbxdmBH4FxfiNoLav
ssEkcuBiJg1t8rssIMdRIMW6QTGZir8UoPj6TArxRXXx90beKyIa69Wr7ao83YUT
ZrajkeedXZBB3A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:28 2025 by rpki-client