Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: Bz4Lh21TBn68bPyq5CZnvWfY8QSOuwy+j7nJOwVH9a0=
Subject key identifier: 2A:B1:5B:A8:C2:13:1D:07:15:6D:9F:4B:84:39:E3:8A:7B:D2:D0:8B
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 01988DA194F460150DD5BAB41A92F855539A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 0363
Signing time: Sat 09 Aug 2025 07:00:33 +0000
Manifest this update: Sat 09 Aug 2025 07:00:33 +0000
Manifest next update: Sun 10 Aug 2025 07:00:33 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: g53xB/k7KlAXFqgJltAmbIIqSn/4JyCmfsQMdL8W5mA=)
2: Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa (hash: WkS34pHH/XzAUtEopuzXUXT2LtpQyPdLz2PYfITDjLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:94:f4:60:15:0d:d5:ba:b4:1a:92:f8:55:53:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Aug 9 07:00:33 2025 GMT
Not After : Aug 10 07:00:33 2025 GMT
Subject: CN=2ab15ba8c2131d07156d9f4b8439e38a7bd2d08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:9b:bd:8b:97:40:a2:50:9d:bf:81:58:30:
e4:f8:b9:91:d2:6b:ee:cc:61:fd:20:45:8a:44:ae:
62:63:ec:8b:a9:dd:7e:83:09:ea:dd:f9:2d:21:ed:
b3:59:b1:41:81:06:50:0c:84:b8:e9:dd:a9:9f:45:
bb:df:29:08:ab:28:63:aa:56:aa:97:e2:a7:3b:7b:
5f:79:89:1f:2d:78:38:41:80:ae:d1:a5:ac:6d:a5:
d1:18:c4:a3:ea:7b:48:a4:59:9f:75:24:84:a9:0e:
67:e7:b2:cf:73:0f:8c:4a:4f:31:a3:f4:e9:10:cb:
b5:c2:92:7a:5e:01:9e:f1:d7:96:aa:c3:3f:58:b1:
cc:7b:21:0a:b9:8c:fd:c0:2c:72:c7:05:d0:26:24:
51:1c:bf:0f:9e:c1:80:0b:72:bb:23:63:6b:af:b7:
4a:26:3e:e8:cb:2e:0d:3f:ab:e3:20:69:23:c0:34:
44:89:d5:f2:0c:bb:77:b5:d9:a6:ea:be:0f:f9:08:
61:c7:8f:8f:28:55:89:0e:15:03:77:3c:ee:7c:ac:
dc:e5:95:17:26:52:ab:4f:11:df:0c:5d:74:0a:87:
18:b5:6e:ab:13:cd:8b:30:21:1e:96:8f:08:7c:95:
0d:ad:19:c6:80:c5:99:66:50:58:d1:e6:c0:db:c4:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B1:5B:A8:C2:13:1D:07:15:6D:9F:4B:84:39:E3:8A:7B:D2:D0:8B
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:53:96:cf:ad:ed:d3:42:00:8d:cf:7a:b1:cd:f3:55:87:f4:
1c:8b:e3:fb:53:d5:93:60:20:36:97:22:89:94:7e:04:9b:f7:
98:90:13:fe:e8:eb:6b:ff:f5:4e:c8:4a:2d:96:e2:10:77:a7:
cd:b9:16:67:9e:c4:18:dc:03:9b:58:c7:21:41:b5:08:eb:77:
8b:85:5f:9a:3b:e2:48:a2:f1:64:8a:64:b8:01:8b:09:a6:1a:
61:25:4a:c5:fc:4d:b7:cc:be:09:29:53:de:ad:5d:4b:40:10:
a0:56:b6:e4:07:0f:a1:c9:c3:09:8c:92:6b:da:02:45:bd:84:
8e:8f:e2:38:1b:a4:cd:56:2d:ea:1a:2c:24:80:d3:19:c6:20:
54:66:1c:1d:72:b1:eb:dd:6d:9f:f1:17:38:5e:d5:e4:0f:35:
a3:3f:11:2a:71:ec:e5:e7:a0:e7:c5:84:61:bd:14:a9:e9:67:
98:44:6d:00:bb:1d:2c:ad:e3:ef:07:e3:3f:66:05:4a:0b:4b:
60:f1:51:9a:41:4d:4a:eb:d1:50:fd:16:f4:d2:32:a9:42:8c:
aa:ca:5c:f8:59:22:f9:12:6a:ec:98:8a:05:68:f2:d1:f6:37:
92:5a:99:0a:da:c5:c2:a4:94:35:52:d1:5b:05:c9:ab:2f:a5:
70:0e:a9:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNoZT0YBUN1bq0GpL4VVOaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNTQ0ZTkyM2Q4ODNiYWNlNGFhM2Y3ZWY3MDA3MmFmZTM1
MTFmMjgwHhcNMjUwODA5MDcwMDMzWhcNMjUwODEwMDcwMDMzWjAzMTEwLwYDVQQD
EygyYWIxNWJhOGMyMTMxZDA3MTU2ZDlmNGI4NDM5ZTM4YTdiZDJkMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAGbvYuXQKJQnb+BWDDk+LmR0mvu
zGH9IEWKRK5iY+yLqd1+gwnq3fktIe2zWbFBgQZQDIS46d2pn0W73ykIqyhjqlaq
l+KnO3tfeYkfLXg4QYCu0aWsbaXRGMSj6ntIpFmfdSSEqQ5n57LPcw+MSk8xo/Tp
EMu1wpJ6XgGe8deWqsM/WLHMeyEKuYz9wCxyxwXQJiRRHL8PnsGAC3K7I2Nrr7dK
Jj7oyy4NP6vjIGkjwDREidXyDLt3tdmm6r4P+Qhhx4+PKFWJDhUDdzzufKzc5ZUX
JlKrTxHfDF10CocYtW6rE82LMCEelo8IfJUNrRnGgMWZZlBY0ebA28RjvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqxW6jCEx0HFW2fS4Q544p70tCLMB8GA1UdIwQY
MBaAFPNUTpI9iDus5Ko/fvcAcq/jUR8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84NmQxYWEtNjQ3NS00MDEzLTg2ZWEt
MzhjNzU2YWE0YjUwLzEvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84NmQxYWEtNjQ3NS00MDEzLTg2ZWEtMzhjNzU2YWE0YjUw
LzEvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxlOWz63t
00IAjc96sc3zVYf0HIvj+1PVk2AgNpciiZR+BJv3mJAT/ujra//1TshKLZbiEHen
zbkWZ57EGNwDm1jHIUG1COt3i4VfmjviSKLxZIpkuAGLCaYaYSVKxfxNt8y+CSlT
3q1dS0AQoFa25AcPocnDCYySa9oCRb2Ejo/iOBukzVYt6hosJIDTGcYgVGYcHXKx
691tn/EXOF7V5A81oz8RKnHs5eeg58WEYb0UqelnmERtALsdLK3j7wfjP2YFSgtL
YPFRmkFNSuvRUP0W9NIyqUKMqspc+Fki+RJq7JiKBWjy0fY3klqZCtrFwqSUNVLR
WwXJqy+lcA6pSg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:27 2025 by rpki-client