Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File: mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier: IiVtdGqn3Uq/NCji1I8cdifGZszCDjWJDXx8cDpaiUg=
Subject key identifier: 87:A4:CF:06:07:54:01:07:B5:A4:C5:03:A3:12:2F:70:89:0F:78:B8
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer: /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial: 01988C587607DB92D0407E4CFE21980BD83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number: 8C
Signing time: Sat 09 Aug 2025 01:01:04 +0000
Manifest this update: Sat 09 Aug 2025 01:01:04 +0000
Manifest next update: Sun 10 Aug 2025 01:01:04 +0000
Files and hashes: 1: bwcXy3FYmHBMxUWqGbTAjvoGjVE.roa (hash: i13BZ7NJZZP7VgcQkDsp+e+5aBIM+z4sday3aP/ehUI=)
2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: q+Q89Cr8hh4Dnco0Vse/QfNqsTbn7Mpxmkg23wALrvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:76:07:db:92:d0:40:7e:4c:fe:21:98:0b:d8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Validity
Not Before: Aug 9 01:01:04 2025 GMT
Not After : Aug 10 01:01:04 2025 GMT
Subject: CN=87a4cf0607540107b5a4c503a3122f70890f78b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:91:28:c9:49:de:1e:95:e6:64:c3:61:db:
ab:03:9a:4c:5a:dd:71:95:0c:f6:45:54:fa:f4:c0:
2f:83:8b:bb:fc:22:49:3f:a9:ac:9d:36:5f:c6:52:
d9:2b:2f:40:02:14:16:bf:a1:1b:27:8c:97:a3:6d:
21:47:ad:32:29:69:4a:8e:bc:65:44:8c:40:d9:68:
ce:9a:93:3b:eb:9a:41:0b:20:25:83:b3:67:3e:36:
14:4b:67:c6:f1:1a:77:f2:cf:38:87:18:93:ed:09:
47:99:fc:63:89:1c:40:45:6b:e5:11:d4:9d:a5:53:
e1:16:3f:02:f8:71:7f:31:5d:95:d8:02:b3:24:76:
e2:18:62:cc:16:2b:89:23:5a:18:af:62:29:5d:e0:
e9:21:85:bf:46:f4:c6:e4:cc:9b:c1:8a:93:e9:2d:
28:55:d1:86:b6:29:41:d8:90:df:74:29:d3:f5:22:
93:2c:d3:dc:32:a2:c0:f5:b0:30:25:c7:8e:13:fe:
9f:b4:08:ce:6c:6a:28:1d:5b:51:a1:5f:34:0e:1e:
7f:cf:d5:f4:6f:e8:21:77:35:61:d1:30:99:78:47:
fe:fc:1a:1e:f6:99:a9:90:cc:8f:e9:52:39:43:76:
cc:3f:88:8c:9e:58:4f:5a:c4:0f:75:dc:17:5c:f4:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A4:CF:06:07:54:01:07:B5:A4:C5:03:A3:12:2F:70:89:0F:78:B8
X509v3 Authority Key Identifier:
keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9b:7d:18:1b:48:f2:17:8b:14:7e:60:da:de:9f:ba:f4:15:
0f:cc:18:da:85:2f:93:b1:bd:5f:54:b8:5c:a4:b7:44:a3:3c:
2d:e8:99:73:d8:7b:a0:d4:3e:d4:be:4d:b4:9b:b4:78:ae:3f:
54:47:c3:a8:6e:32:4a:43:d6:9a:d8:07:b8:74:42:62:e7:56:
35:c3:0c:99:95:75:5c:3d:a4:1b:0e:f1:c1:0f:fb:1b:67:f9:
52:ed:c1:d8:12:4a:b1:db:a6:3d:55:0c:e5:58:42:7e:96:29:
a9:f5:9d:74:f9:47:45:3b:0c:f2:b2:db:41:83:17:d7:f7:2a:
6f:f8:3e:95:f5:ff:a7:bd:c4:79:25:1e:25:47:f9:3c:a8:04:
11:0b:f8:fe:19:b0:09:16:57:fb:d5:b8:21:f3:e0:42:ea:27:
70:5a:5c:3c:38:bd:e8:e8:23:c0:b1:06:4a:dc:71:11:41:c2:
de:c7:8d:f5:4e:17:41:96:d5:8b:4f:d5:0e:41:2a:38:aa:d1:
5f:f4:37:11:7b:5e:76:a4:3a:3a:5d:cd:96:a8:4a:5d:db:5e:
48:23:ee:d2:d4:31:e4:19:1e:bb:b5:b4:25:d4:8b:00:68:4e:
d3:77:e9:60:71:e1:34:c0:b5:16:60:c3:d9:10:6e:7f:bd:f1:
61:ba:c6:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMWHYH25LQQH5M/iGYC9g6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmM4ZGMyYTdjMWI5ZjMyYmExOTU3ZmY0OTJkYzBiYTRm
MjYwZmYwHhcNMjUwODA5MDEwMTA0WhcNMjUwODEwMDEwMTA0WjAzMTEwLwYDVQQD
Eyg4N2E0Y2YwNjA3NTQwMTA3YjVhNGM1MDNhMzEyMmY3MDg5MGY3OGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY6RKMlJ3h6V5mTDYdurA5pMWt1x
lQz2RVT69MAvg4u7/CJJP6msnTZfxlLZKy9AAhQWv6EbJ4yXo20hR60yKWlKjrxl
RIxA2WjOmpM765pBCyAlg7NnPjYUS2fG8Rp38s84hxiT7QlHmfxjiRxARWvlEdSd
pVPhFj8C+HF/MV2V2AKzJHbiGGLMFiuJI1oYr2IpXeDpIYW/RvTG5MybwYqT6S0o
VdGGtilB2JDfdCnT9SKTLNPcMqLA9bAwJceOE/6ftAjObGooHVtRoV80Dh5/z9X0
b+ghdzVh0TCZeEf+/Boe9pmpkMyP6VI5Q3bMP4iMnlhPWsQPddwXXPRb3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIekzwYHVAEHtaTFA6MSL3CJD3i4MB8GA1UdIwQY
MBaAFJn8jcKnwbnzK6GVf/SS3Auk8mD/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2Ut
ZTRjNjc0MWM4MDJjLzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MjA1YjgtOThjZi00MDQyLWEwY2UtZTRjNjc0MWM4MDJj
LzEvbWZ5TndxZkJ1Zk1yb1pWXzlKTGNDNlR5WVA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZt9GBtI
8heLFH5g2t6fuvQVD8wY2oUvk7G9X1S4XKS3RKM8LeiZc9h7oNQ+1L5NtJu0eK4/
VEfDqG4ySkPWmtgHuHRCYudWNcMMmZV1XD2kGw7xwQ/7G2f5Uu3B2BJKsdumPVUM
5VhCfpYpqfWddPlHRTsM8rLbQYMX1/cqb/g+lfX/p73EeSUeJUf5PKgEEQv4/hmw
CRZX+9W4IfPgQuoncFpcPDi96OgjwLEGStxxEUHC3seN9U4XQZbVi0/VDkEqOKrR
X/Q3EXtedqQ6Ol3NlqhKXdteSCPu0tQx5Bkeu7W0JdSLAGhO03fpYHHhNMC1FmDD
2RBuf73xYbrG4g==
-----END CERTIFICATE-----
Generated at Sat Aug 9 03:01:05 2025 by rpki-client