Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File: 0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier: 8VR9AtsaGoKk1GmbFlwxR8BQnjW0gnnMdvN9hCGcn7s=
Subject key identifier: 76:4B:C4:AB:A2:E9:FE:E4:5D:41:EF:9C:C2:15:D7:45:60:29:CA:8E
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial: 01988544921180D1247E269DDCDE53C5CE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 16:02:00 +0000
Manifest this update: Thu 07 Aug 2025 16:02:00 +0000
Manifest next update: Fri 08 Aug 2025 16:02:00 +0000
Files and hashes: 1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: HqWPBAL1FoF3dU4V+5Sj5ypx/z/+GuzBEzJhkTz8/6E=)
2: J_WwZWRwUeRaMtDotR_iY7Q6fWw.roa (hash: jAGifMZyJSQbsPFRP+S78wMNisVnQ/cWhKpvEThjZOI=)
3: K6nmXLryL1T-tWqAokSMk69cu-4.roa (hash: WBKa7aT4uLMRBq7574LflAMd1wdXVfKmsx/BV6lZJyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:92:11:80:d1:24:7e:26:9d:dc:de:53:c5:ce:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Validity
Not Before: Aug 7 16:02:00 2025 GMT
Not After : Aug 8 16:02:00 2025 GMT
Subject: CN=764bc4aba2e9fee45d41ef9cc215d7456029ca8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:03:93:02:a0:ce:6d:10:f7:8a:fc:4b:1f:
3c:23:01:48:f4:bb:0c:77:3f:e4:82:09:8d:d0:5c:
5b:e5:ba:63:d0:5f:0b:a0:03:77:f3:8b:40:bb:ec:
c9:03:55:ae:b6:5d:94:29:6b:ec:32:2f:3d:07:6f:
28:ac:4d:79:03:90:4f:f6:b6:9c:cb:04:04:19:63:
10:e1:e9:c8:b4:cd:30:3f:3e:8c:f8:bc:6d:63:a1:
2a:37:f0:1e:78:f2:78:2f:88:b6:9c:50:73:44:08:
fb:2f:4e:09:88:e9:6e:8f:3e:e5:0c:65:59:0f:f7:
6e:86:ce:ca:64:ad:a6:90:17:4b:0c:74:d5:eb:e9:
11:c3:80:af:08:6e:34:2e:9c:df:79:b2:23:7b:db:
2a:56:3d:c6:68:92:a8:d3:6d:4c:0f:ae:b8:1b:75:
66:7a:a6:4c:bb:66:5e:a6:ee:e1:16:c6:20:f2:ff:
72:67:b6:32:ae:69:5e:f5:2c:c0:7e:a0:12:9a:97:
27:5e:35:6c:63:56:1e:4a:f4:4b:69:e1:4f:5f:ab:
d7:79:bd:ba:eb:40:05:7a:f1:47:8f:2e:d8:9f:fc:
d0:84:6b:a9:aa:e7:cb:07:85:b2:11:e3:05:fb:59:
1d:b7:4c:1b:32:a3:ae:d5:32:b2:43:48:78:a4:03:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4B:C4:AB:A2:E9:FE:E4:5D:41:EF:9C:C2:15:D7:45:60:29:CA:8E
X509v3 Authority Key Identifier:
keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:45:1c:5a:a6:31:c5:84:48:1c:8f:97:60:25:e5:37:cc:68:
48:8e:1e:7b:40:44:30:13:df:63:8a:8e:bb:19:80:40:9d:ba:
c1:45:e1:2a:5e:cd:47:84:09:08:d8:9f:d5:31:20:f9:db:e7:
d6:c2:7f:09:5f:16:2c:7e:58:69:a5:e0:2f:14:9c:9f:84:e6:
9e:42:89:fd:d8:67:33:3c:ff:05:d8:85:2c:f2:dd:bb:1c:cb:
62:fd:bc:a0:b7:cb:cc:9c:b9:17:47:fd:e8:4d:ef:78:bf:4f:
c9:5f:16:71:1c:48:82:fa:6b:1b:96:f5:bf:79:91:ff:12:b5:
4f:27:94:0e:79:e1:66:23:fd:59:bb:e1:44:03:45:78:bc:06:
56:ca:dc:c3:9b:91:78:3b:5e:94:31:75:6a:61:0c:d6:04:8f:
1e:4f:cb:0b:61:98:fd:c6:2a:98:5b:b1:eb:fc:3c:4d:93:b6:
95:2b:ad:31:6a:ef:ea:33:6e:9f:ea:6e:05:00:e1:75:2c:d9:
31:75:18:a8:bf:a1:88:fa:e0:be:d8:6f:6c:02:27:f8:0b:74:
0a:19:60:af:0f:36:fd:3a:3f:db:7f:ed:46:fe:72:11:dc:a5:
f5:37:67:95:71:0a:68:34:3a:61:d7:ed:24:e5:ef:26:64:6f:
71:2a:e9:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFRJIRgNEkfiad3N5Txc6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyM2YwNDdiMDZjOGI3MjcxZWUxMGM5YWY1ZDE0NDNmMDEz
OWMxMjcwHhcNMjUwODA3MTYwMjAwWhcNMjUwODA4MTYwMjAwWjAzMTEwLwYDVQQD
Eyg3NjRiYzRhYmEyZTlmZWU0NWQ0MWVmOWNjMjE1ZDc0NTYwMjljYThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy8DkwKgzm0Q94r8Sx88IwFI9LsM
dz/kggmN0Fxb5bpj0F8LoAN384tAu+zJA1Wutl2UKWvsMi89B28orE15A5BP9rac
ywQEGWMQ4enItM0wPz6M+LxtY6EqN/AeePJ4L4i2nFBzRAj7L04JiOlujz7lDGVZ
D/duhs7KZK2mkBdLDHTV6+kRw4CvCG40LpzfebIje9sqVj3GaJKo021MD664G3Vm
eqZMu2Zepu7hFsYg8v9yZ7Yyrmle9SzAfqASmpcnXjVsY1YeSvRLaeFPX6vXeb26
60AFevFHjy7Yn/zQhGupqufLB4WyEeMF+1kdt0wbMqOu1TKyQ0h4pAMSWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZLxKui6f7kXUHvnMIV10VgKcqOMB8GA1UdIwQY
MBaAFNI/BHsGyLcnHuEMmvXRRD8BOcEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MThmMTEtZDhmOS00N2EwLTk2MDAt
NWIwMGZiZjRhNTI5LzEvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81MThmMTEtZDhmOS00N2EwLTk2MDAtNWIwMGZiZjRhNTI5
LzEvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUUcWqYx
xYRIHI+XYCXlN8xoSI4ee0BEMBPfY4qOuxmAQJ26wUXhKl7NR4QJCNif1TEg+dvn
1sJ/CV8WLH5YaaXgLxScn4TmnkKJ/dhnMzz/BdiFLPLduxzLYv28oLfLzJy5F0f9
6E3veL9PyV8WcRxIgvprG5b1v3mR/xK1TyeUDnnhZiP9WbvhRANFeLwGVsrcw5uR
eDtelDF1amEM1gSPHk/LC2GY/cYqmFux6/w8TZO2lSutMWrv6jNun+puBQDhdSzZ
MXUYqL+hiPrgvthvbAIn+At0Chlgrw82/To/23/tRv5yEdyl9TdnlXEKaDQ6Ydft
JOXvJmRvcSrpIw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:12:28 2025 by rpki-client