Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
File: IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft (raw, json)
Hash identifier: 1rZqx+PvtC49R3yF/1FUSFpPVI65cncOuwG6JPSy59A=
Subject key identifier: AB:C7:A9:C5:F8:36:71:41:5C:2D:ED:AD:C9:EF:81:5C:85:17:4F:66
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Certificate issuer: /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial: 01987418EC0D3AAD46D2BBE7A41123AC710D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 08:00:46 +0000
Manifest this update: Mon 04 Aug 2025 08:00:46 +0000
Manifest next update: Tue 05 Aug 2025 08:00:46 +0000
Files and hashes: 1: IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl (hash: GxcWcA/13uhM246MsPboGGDAXx4uzQ23MRtI0pMs6GY=)
2: J46kuUmF_sgE0zFOUz0hgWBo52M.roa (hash: jPrLPvaHVRm/LYCKQXvlkQimqCpYkjCK3g37WDkRjQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:ec:0d:3a:ad:46:d2:bb:e7:a4:11:23:ac:71:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Validity
Not Before: Aug 4 08:00:46 2025 GMT
Not After : Aug 5 08:00:46 2025 GMT
Subject: CN=abc7a9c5f83671415c2dedadc9ef815c85174f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:57:cb:ab:cc:d9:38:20:8e:ef:72:6e:dd:
cf:27:66:ac:60:65:f3:30:1e:b1:82:9c:9d:fc:cb:
6a:34:d6:8c:ee:d0:6f:dc:71:54:3f:d2:ea:3c:5c:
4f:e0:58:0c:68:86:cf:94:13:f4:16:85:69:b2:96:
64:db:34:40:31:c9:94:67:a2:d1:48:f8:fd:31:dd:
75:22:8e:67:69:a1:c8:2f:63:66:06:6d:e6:4c:13:
40:d2:a5:06:78:76:9f:34:65:9c:14:5d:90:29:57:
48:cc:34:51:f7:f2:3f:6f:91:be:bc:ef:6c:8d:60:
b3:e9:52:6b:2a:12:97:d7:eb:ad:48:23:3b:30:c6:
51:8a:2b:da:a7:51:25:b8:cc:db:c4:57:d1:40:e2:
da:fd:f8:5b:c3:f4:fd:13:f2:98:c5:7c:38:6d:58:
ef:6a:fb:18:dc:65:28:15:e6:00:a9:c0:c8:68:8d:
6b:81:87:11:64:f6:83:26:36:71:04:e7:91:32:1f:
72:91:55:74:a8:00:14:c8:4b:03:5d:c9:e0:09:82:
40:41:02:d3:94:a4:76:f1:f8:4e:07:eb:c1:67:98:
89:ea:c8:6b:c5:05:7d:2c:0f:cf:f0:d9:c1:8b:ea:
9c:82:bf:19:22:7a:18:23:f7:95:38:00:a1:43:83:
89:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C7:A9:C5:F8:36:71:41:5C:2D:ED:AD:C9:EF:81:5C:85:17:4F:66
X509v3 Authority Key Identifier:
keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:17:7b:c8:ab:7e:93:a0:e5:57:47:dd:81:4b:46:a2:2f:0f:
88:e0:fb:1d:bf:9a:51:bf:a7:7b:5a:49:b3:c0:a8:24:e2:f0:
04:ca:18:b0:ae:16:c9:16:20:a4:01:26:ed:35:92:7f:79:9d:
3b:18:6e:4e:b5:7b:0c:67:0e:a5:0b:ce:96:8d:5f:94:af:13:
05:57:a4:96:3f:ad:39:d3:0b:99:fe:e3:f3:4d:19:b6:7b:9a:
fc:e2:c5:fa:04:51:6a:73:a4:22:74:f0:d8:38:25:38:8e:a4:
39:ee:4e:d0:4c:03:89:b6:38:9e:16:ce:84:85:73:41:30:5f:
c9:fd:99:ca:d9:a5:31:a7:1f:df:cf:d6:ac:dd:04:ba:1b:06:
e9:58:c5:22:fd:9d:17:70:e3:9e:ea:4c:ca:e5:6a:eb:c4:18:
12:9a:28:6b:a8:9c:81:44:c3:cb:46:36:12:de:20:e5:0f:73:
43:64:0f:3f:dd:5e:5d:d1:33:3f:24:ee:f1:4b:53:b5:47:f0:
aa:26:b8:55:67:cc:98:cc:bb:b3:27:e4:87:4b:d3:21:93:a2:
5c:cd:c3:0d:1c:e9:3c:83:cd:cf:ef:96:82:d2:ab:7e:db:7f:
66:a7:b6:1c:bb:86:ec:f5:ae:f2:81:34:5b:74:90:de:f7:e4:
4e:83:4f:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GOwNOq1G0rvnpBEjrHENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMzFiYzdmNzFiYjBkMWE4NTY2ZmQ0NjA0MjE0NTA3YzBk
NDcxMWIwHhcNMjUwODA0MDgwMDQ2WhcNMjUwODA1MDgwMDQ2WjAzMTEwLwYDVQQD
EyhhYmM3YTljNWY4MzY3MTQxNWMyZGVkYWRjOWVmODE1Yzg1MTc0ZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus1Xy6vM2Tggju9ybt3PJ2asYGXz
MB6xgpyd/MtqNNaM7tBv3HFUP9LqPFxP4FgMaIbPlBP0FoVpspZk2zRAMcmUZ6LR
SPj9Md11Io5naaHIL2NmBm3mTBNA0qUGeHafNGWcFF2QKVdIzDRR9/I/b5G+vO9s
jWCz6VJrKhKX1+utSCM7MMZRiivap1EluMzbxFfRQOLa/fhbw/T9E/KYxXw4bVjv
avsY3GUoFeYAqcDIaI1rgYcRZPaDJjZxBOeRMh9ykVV0qAAUyEsDXcngCYJAQQLT
lKR28fhOB+vBZ5iJ6shrxQV9LA/P8NnBi+qcgr8ZInoYI/eVOAChQ4OJ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvHqcX4NnFBXC3trcnvgVyFF09mMB8GA1UdIwQY
MBaAFCAxvH9xuw0ahWb9RgQhRQfA1HEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSURHOGYzRzdEUnFGWnYxR0JDRkZCOERVY1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNDE1MTktNDZmYy00NGRhLWE5YWYt
ZTNmNGJiY2JiYmQ3LzEvSURHOGYzRzdEUnFGWnYxR0JDRkZCOERVY1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iNDE1MTktNDZmYy00NGRhLWE5YWYtZTNmNGJiY2JiYmQ3
LzEvSURHOGYzRzdEUnFGWnYxR0JDRkZCOERVY1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBd7yKt+
k6DlV0fdgUtGoi8PiOD7Hb+aUb+ne1pJs8CoJOLwBMoYsK4WyRYgpAEm7TWSf3md
OxhuTrV7DGcOpQvOlo1flK8TBVeklj+tOdMLmf7j800Ztnua/OLF+gRRanOkInTw
2DglOI6kOe5O0EwDibY4nhbOhIVzQTBfyf2ZytmlMacf38/WrN0EuhsG6VjFIv2d
F3DjnupMyuVq68QYEpooa6icgUTDy0Y2Et4g5Q9zQ2QPP91eXdEzPyTu8UtTtUfw
qia4VWfMmMy7syfkh0vTIZOiXM3DDRzpPIPNz++WgtKrftt/Zqe2HLuG7PWu8oE0
W3SQ3vfkToNPGQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:28 2025 by rpki-client