Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier: ujqmtw40C8nfqRw/W3v1JqL1Z4bZPIYfyivOmG3OJ8o=
Subject key identifier: CF:09:DF:0C:AB:0E:8B:64:B1:CC:CE:33:14:EB:31:02:0D:95:9E:92
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial: 019896A60DB17F4CF7A89882DCAC595A704F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number: 0B23
Signing time: Mon 11 Aug 2025 01:02:01 +0000
Manifest this update: Mon 11 Aug 2025 01:02:01 +0000
Manifest next update: Tue 12 Aug 2025 01:02:01 +0000
Files and hashes: 1: VgjHvOxBU8eTA_iP_fNUCn81xQg.roa (hash: JJu0mzqFx7iO9SO/UVIC5Bf9dy6p0refWuwflirPpkA=)
2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: Kx05N0lYZ+vvsnX4eHFYVnd5q4pqE60a5bMUbgKiBE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:0d:b1:7f:4c:f7:a8:98:82:dc:ac:59:5a:70:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Validity
Not Before: Aug 11 01:02:01 2025 GMT
Not After : Aug 12 01:02:01 2025 GMT
Subject: CN=cf09df0cab0e8b64b1ccce3314eb31020d959e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:13:80:f2:67:ea:47:9e:10:1d:9a:03:af:
d3:95:03:aa:04:f3:fb:91:df:4c:d5:6c:11:1b:ff:
75:fe:0e:71:8e:9d:aa:46:5b:25:06:4d:e9:15:56:
7c:75:bb:55:92:ca:68:fd:07:89:a1:e8:7c:b6:2f:
f5:93:7a:21:1d:db:a5:ff:eb:bb:5b:09:78:b7:4b:
d5:a7:23:19:63:20:66:63:b9:99:10:cc:68:9b:66:
8c:35:6f:85:99:5a:7c:aa:cd:5a:9b:9e:62:13:52:
ae:b5:85:0f:ce:a0:a7:83:20:6b:f7:55:56:c3:93:
14:dd:95:56:56:09:74:ce:bc:90:8e:3d:7c:ca:bf:
96:5f:96:7c:db:6c:9b:4b:49:67:20:89:aa:37:12:
d7:a1:da:44:6b:1f:72:38:d3:99:cb:a8:d7:97:67:
35:3b:06:87:ee:6d:d8:a4:ca:51:8c:2e:48:41:2d:
1b:ee:8a:82:89:5d:1a:5e:91:da:9d:34:cf:02:94:
d9:f3:bd:20:c9:c4:82:47:02:bb:a1:99:c5:ed:80:
fc:cb:ce:08:75:35:85:46:98:f8:5f:66:8d:ab:55:
33:bb:17:18:f6:a1:41:82:8a:68:62:68:ba:c8:70:
c5:a5:98:7b:d0:62:5e:5f:83:44:d7:5e:c5:17:b2:
1b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:09:DF:0C:AB:0E:8B:64:B1:CC:CE:33:14:EB:31:02:0D:95:9E:92
X509v3 Authority Key Identifier:
keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:77:da:c6:72:20:23:fb:df:bb:05:2e:b8:0a:8d:eb:6e:9f:
bc:07:17:e7:83:e3:63:7f:9c:58:d0:67:d4:04:80:56:ea:68:
0b:b0:f0:68:1d:7d:e1:59:98:8e:d7:91:fc:0d:1c:82:65:3a:
bc:fa:5e:59:22:8c:d5:cf:eb:8d:0a:e7:8e:51:d1:20:c1:61:
bf:35:95:bd:db:41:fe:dc:b8:2a:a1:dc:9d:03:70:e3:79:a8:
ab:17:a6:8d:6f:ed:ce:30:aa:40:9e:e3:1b:7d:5a:e5:7c:71:
0b:86:b3:91:ed:90:44:92:15:20:70:92:c5:fa:fa:7a:35:bb:
d0:bd:ab:c5:7b:60:a7:1c:a5:61:c1:c9:1e:c4:25:3e:1e:75:
6a:4d:0c:cf:14:44:79:6d:39:73:ef:9e:e2:84:b7:31:74:18:
44:65:81:46:e8:3c:d9:05:7e:43:36:91:1e:e7:79:a0:95:e7:
28:55:df:ec:97:ae:de:da:f8:49:56:d8:55:9a:36:1d:b1:2e:
44:b2:41:16:b4:20:55:f8:22:47:58:d3:d6:54:6b:de:a6:02:
0e:3d:c1:5b:cb:25:f4:73:89:13:b8:d2:a9:8c:2b:8c:a6:8a:
41:3a:47:ed:06:d7:20:fe:32:73:0a:38:c0:90:3b:36:29:ba:
53:2d:88:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpg2xf0z3qJiC3KxZWnBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzZjYTg2NTE5YjU2ZDRkMTg3M2FmNmUyNTdkZTdlOTdm
M2M4YWMwHhcNMjUwODExMDEwMjAxWhcNMjUwODEyMDEwMjAxWjAzMTEwLwYDVQQD
EyhjZjA5ZGYwY2FiMGU4YjY0YjFjY2NlMzMxNGViMzEwMjBkOTU5ZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskMTgPJn6keeEB2aA6/TlQOqBPP7
kd9M1WwRG/91/g5xjp2qRlslBk3pFVZ8dbtVkspo/QeJoeh8ti/1k3ohHdul/+u7
Wwl4t0vVpyMZYyBmY7mZEMxom2aMNW+FmVp8qs1am55iE1KutYUPzqCngyBr91VW
w5MU3ZVWVgl0zryQjj18yr+WX5Z822ybS0lnIImqNxLXodpEax9yONOZy6jXl2c1
OwaH7m3YpMpRjC5IQS0b7oqCiV0aXpHanTTPApTZ870gycSCRwK7oZnF7YD8y84I
dTWFRpj4X2aNq1UzuxcY9qFBgopoYmi6yHDFpZh70GJeX4NE117FF7IbwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8J3wyrDotksczOMxTrMQINlZ6SMB8GA1UdIwQY
MBaAFIPGyoZRm1bU0Yc69uJX3n6X88isMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85OTgyOTYtOTQ2NC00ZmIyLTk4ZTYt
Y2E4YWY0ZjUzNTZjLzEvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85OTgyOTYtOTQ2NC00ZmIyLTk4ZTYtY2E4YWY0ZjUzNTZj
LzEvZzhiS2hsR2JWdFRSaHpyMjRsZmVmcGZ6eUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHfaxnIg
I/vfuwUuuAqN626fvAcX54PjY3+cWNBn1ASAVupoC7DwaB194VmYjteR/A0cgmU6
vPpeWSKM1c/rjQrnjlHRIMFhvzWVvdtB/ty4KqHcnQNw43moqxemjW/tzjCqQJ7j
G31a5XxxC4azke2QRJIVIHCSxfr6ejW70L2rxXtgpxylYcHJHsQlPh51ak0MzxRE
eW05c++e4oS3MXQYRGWBRug82QV+QzaRHud5oJXnKFXf7Jeu3tr4SVbYVZo2HbEu
RLJBFrQgVfgiR1jT1lRr3qYCDj3BW8sl9HOJE7jSqYwrjKaKQTpH7QbXIP4ycwo4
wJA7Nim6Uy2Icw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:57:03 2025 by rpki-client