Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: SxegXOv+C6FL6Ol4ofCsCpXuNcdlRc8cY5Q/Og22+7o=
Subject key identifier: 32:2A:79:A0:4F:1B:F1:0E:DB:6C:3B:A0:A7:81:71:C7:BD:8E:70:70
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 01977CE7FA87E1FAEAA4C2C93E06D0BA3D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 08C1
Signing time: Tue 17 Jun 2025 08:01:06 +0000
Manifest this update: Tue 17 Jun 2025 08:01:06 +0000
Manifest next update: Wed 18 Jun 2025 08:01:06 +0000
Files and hashes: 1: HdoRWbIURzhfnaDDK7ySYFVN2ik.roa (hash: HVbpXptfvhv4ApWMw5QWNQjQp3Pw35JC0KFrZynPEas=)
2: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: 01EOr/aGHIt4XzC/TdpCrFAr/6dv7I4P0ZKoE/J1SA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:e7:fa:87:e1:fa:ea:a4:c2:c9:3e:06:d0:ba:3d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Jun 17 08:01:06 2025 GMT
Not After : Jun 18 08:01:06 2025 GMT
Subject: CN=322a79a04f1bf10edb6c3ba0a78171c7bd8e7070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:3d:64:3b:2b:75:34:ab:82:76:ca:0d:f0:
b1:81:9a:bc:34:20:0c:41:52:1f:0d:05:e2:bb:2c:
1a:f3:8d:2d:df:66:ee:d5:d9:c0:5c:f2:9f:f4:f3:
fb:70:58:7d:0e:28:69:45:44:95:30:55:c6:99:39:
ea:d2:77:d3:c7:99:09:79:84:86:1e:42:c2:80:67:
11:4b:83:0f:bf:6e:89:75:75:62:a0:f5:25:ca:db:
46:4b:cb:75:24:68:85:55:93:0e:32:09:35:88:63:
e8:b6:82:3c:81:14:a7:bc:d7:ec:5c:92:79:1f:a6:
64:11:f6:de:e8:3f:17:dc:78:b9:18:d7:89:c8:50:
38:be:ee:36:65:a3:d8:a4:b7:39:03:a8:6d:8e:86:
7e:2e:1f:db:b7:c0:7d:49:54:35:46:ba:e0:6c:3e:
36:bd:35:c7:a4:b1:88:6b:34:02:c6:ca:8f:94:0d:
aa:31:ae:b4:0a:4b:87:3c:cc:6b:ce:e9:fd:65:ea:
42:5b:cf:9b:6d:14:8d:17:1b:62:14:87:92:a2:44:
d5:e7:d6:ab:2f:86:5c:b7:f1:76:cf:49:58:0f:d2:
17:6e:f9:49:f0:bd:9c:d1:8a:8a:f8:9a:cd:69:00:
a8:de:df:6c:d2:85:63:de:75:55:66:27:33:67:cb:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2A:79:A0:4F:1B:F1:0E:DB:6C:3B:A0:A7:81:71:C7:BD:8E:70:70
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:24:cb:37:17:93:74:8f:3d:ee:51:c9:9c:eb:28:9c:cf:ff:
99:83:b2:c1:9d:53:f2:72:8f:8b:7b:6c:da:1f:ff:41:0c:6b:
bc:52:af:56:9c:a8:b0:d4:18:7f:31:7a:2c:24:b1:38:02:f5:
ed:24:06:9b:af:2f:70:cf:96:d5:fb:ba:00:f9:3b:0f:06:6b:
9e:ee:25:b5:6c:49:e7:fe:74:c9:f1:5e:46:4e:b4:8e:da:40:
bb:54:05:ef:95:f7:25:09:25:ad:cb:67:59:ab:ef:5a:e3:8e:
86:cb:9e:be:9f:23:b3:c7:de:45:09:13:06:aa:eb:65:d1:ad:
a1:6c:bd:ad:8d:2d:6b:ab:9b:3f:4f:4c:f0:09:28:4b:84:ab:
36:ab:2c:46:87:2e:7a:46:62:75:15:44:9a:2d:b0:c5:ef:06:
3c:48:aa:96:48:4a:df:97:e6:e1:53:51:a4:43:5b:76:f9:f9:
b7:fb:33:78:f3:30:79:40:50:c0:19:6c:96:10:e3:28:7f:7e:
b6:bf:52:b7:c4:00:89:8b:62:12:4d:21:ae:e2:a0:0f:72:4b:
cb:50:07:a3:d6:f1:1f:3b:28:91:7e:c0:84:88:3e:87:63:93:
aa:b4:77:27:ba:91:7e:bc:d7:0a:4f:3a:01:e0:2b:2d:4e:6d:
3c:09:48:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd85/qH4frqpMLJPgbQuj0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx
YTkyMzMwHhcNMjUwNjE3MDgwMTA2WhcNMjUwNjE4MDgwMTA2WjAzMTEwLwYDVQQD
EygzMjJhNzlhMDRmMWJmMTBlZGI2YzNiYTBhNzgxNzFjN2JkOGU3MDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkw9ZDsrdTSrgnbKDfCxgZq8NCAM
QVIfDQXiuywa840t32bu1dnAXPKf9PP7cFh9DihpRUSVMFXGmTnq0nfTx5kJeYSG
HkLCgGcRS4MPv26JdXVioPUlyttGS8t1JGiFVZMOMgk1iGPotoI8gRSnvNfsXJJ5
H6ZkEfbe6D8X3Hi5GNeJyFA4vu42ZaPYpLc5A6htjoZ+Lh/bt8B9SVQ1RrrgbD42
vTXHpLGIazQCxsqPlA2qMa60CkuHPMxrzun9ZepCW8+bbRSNFxtiFIeSokTV59ar
L4Zct/F2z0lYD9IXbvlJ8L2c0YqK+JrNaQCo3t9s0oVj3nVVZiczZ8s9uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIqeaBPG/EO22w7oKeBcce9jnBwMB8GA1UdIwQY
MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt
NWFkZmUzMGZmZGE1LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1
LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSTLNxeT
dI897lHJnOsonM//mYOywZ1T8nKPi3ts2h//QQxrvFKvVpyosNQYfzF6LCSxOAL1
7SQGm68vcM+W1fu6APk7DwZrnu4ltWxJ5/50yfFeRk60jtpAu1QF75X3JQklrctn
WavvWuOOhsuevp8js8feRQkTBqrrZdGtoWy9rY0ta6ubP09M8AkoS4SrNqssRocu
ekZidRVEmi2wxe8GPEiqlkhK35fm4VNRpENbdvn5t/szePMweUBQwBlslhDjKH9+
tr9St8QAiYtiEk0hruKgD3JLy1AHo9bxHzsokX7AhIg+h2OTqrR3J7qRfrzXCk86
AeArLU5tPAlIKA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 10:04:15 2025 by rpki-client