Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
File: iq94tpd0pVUH3qv4xMlpQunvDSA.mft (raw, json)
Hash identifier: Ox4xymw94/2hHlipF3IF3r/YyINFRhvJ3zyLMIf3Etg=
Subject key identifier: F9:21:A2:E9:DE:5D:13:E8:AF:08:C8:0B:65:80:BF:47:70:5C:CD:E1
Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
Certificate issuer: /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Certificate serial: 01988A6A04C30DE7EB4404CD71457E723F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
Manifest number: 0D1E
Signing time: Fri 08 Aug 2025 16:01:00 +0000
Manifest this update: Fri 08 Aug 2025 16:01:00 +0000
Manifest next update: Sat 09 Aug 2025 16:01:00 +0000
Files and hashes: 1: JQCJu_zj_dBb25hVe1CPLuILo-c.roa (hash: ppq/kkdZOhkWPFmrOFoKNIk30mkp2cJ+7oYbrYYHQUY=)
2: iq94tpd0pVUH3qv4xMlpQunvDSA.crl (hash: 5N5RPWG8w5g6IMKs8TBol5dmneNYjbjacujLcsKDAK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:04:c3:0d:e7:eb:44:04:cd:71:45:7e:72:3f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Validity
Not Before: Aug 8 16:01:00 2025 GMT
Not After : Aug 9 16:01:00 2025 GMT
Subject: CN=f921a2e9de5d13e8af08c80b6580bf47705ccde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:81:0c:fe:0f:dc:49:6d:fd:38:46:c1:a7:
54:77:5c:74:c2:52:99:95:b1:83:69:74:42:7b:2a:
9f:12:dd:40:aa:39:1d:a3:90:d6:60:6e:43:b2:38:
c6:db:86:b8:7e:ab:ef:dc:f7:bd:24:fd:02:45:b4:
34:b9:1b:ea:1d:47:b8:6c:b1:1f:fe:4c:3d:45:1d:
e8:f8:9f:40:07:45:2f:10:a8:da:e0:60:6b:50:91:
d3:29:2a:3d:03:99:37:32:b8:87:5e:72:20:ae:ca:
d8:3e:ba:a6:d8:0e:3f:40:6d:71:67:33:15:e7:e0:
62:00:d7:4b:eb:71:51:7e:f1:b4:47:19:a2:0a:43:
77:6a:d8:fd:51:1d:98:45:a3:7e:c8:0d:b7:aa:f8:
f8:43:fa:12:5d:56:ae:6a:1d:bc:71:80:66:8d:80:
42:3f:b2:56:ff:53:a4:c2:5b:56:cf:a0:c2:cb:2d:
c7:e7:3c:ec:a5:24:85:ac:7f:67:f7:85:ba:eb:01:
8a:51:d6:2e:ab:bc:17:71:95:e7:67:e8:73:40:59:
e5:49:59:8f:d9:29:79:58:a8:78:e8:e5:3c:81:fb:
6d:83:7a:49:5d:dc:f6:47:10:24:40:22:5b:e9:fe:
2b:27:6f:f1:9b:50:e1:47:1e:bc:22:3a:19:ca:f0:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:21:A2:E9:DE:5D:13:E8:AF:08:C8:0B:65:80:BF:47:70:5C:CD:E1
X509v3 Authority Key Identifier:
keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:62:70:22:e6:26:01:45:a0:6c:8d:a9:e6:22:b7:9a:5b:20:
9b:a3:b8:6b:51:1c:de:59:bb:2c:d7:ad:7c:55:2e:c5:61:50:
4b:33:ab:ca:21:54:54:66:13:f4:4c:74:9b:99:41:e2:59:dc:
92:2e:11:67:82:19:eb:3d:16:3b:49:4c:43:0c:b7:0d:a2:47:
1a:b7:64:0a:f1:c6:ee:d2:88:c0:86:ca:4f:1e:65:ea:61:66:
b4:dc:b4:1d:e2:c7:fc:fd:01:c6:3d:12:1e:d1:01:f9:77:a8:
19:5d:fd:5d:ab:9b:c7:07:5b:ad:9a:89:0a:3f:47:b5:97:95:
64:92:d1:30:14:f6:9c:d9:cb:2c:32:db:22:b1:53:cc:21:fa:
c3:7d:a0:d4:2f:c0:40:67:8d:f1:67:d6:be:6f:c9:2d:fc:8d:
20:f3:f0:21:21:fc:83:25:2a:b7:12:11:42:00:12:7d:c9:9e:
6f:cf:a4:c0:7e:59:63:25:6f:e3:30:21:22:19:0a:02:0b:54:
85:2e:97:17:4a:da:cb:88:b3:19:cd:49:32:94:2b:bb:b6:06:
8f:56:d5:38:fd:c6:51:59:fc:50:7c:7c:82:87:35:ee:02:e7:
1b:dc:82:be:d4:4e:f7:f2:50:82:db:94:b2:01:68:d1:b1:1c:
d9:ad:d0:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKagTDDefrRATNcUV+cj+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYWY3OGI2OTc3NGE1NTUwN2RlYWJmOGM0Yzk2OTQyZTll
ZjBkMjAwHhcNMjUwODA4MTYwMTAwWhcNMjUwODA5MTYwMTAwWjAzMTEwLwYDVQQD
EyhmOTIxYTJlOWRlNWQxM2U4YWYwOGM4MGI2NTgwYmY0NzcwNWNjZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukeBDP4P3Elt/ThGwadUd1x0wlKZ
lbGDaXRCeyqfEt1Aqjkdo5DWYG5DsjjG24a4fqvv3Pe9JP0CRbQ0uRvqHUe4bLEf
/kw9RR3o+J9AB0UvEKja4GBrUJHTKSo9A5k3MriHXnIgrsrYPrqm2A4/QG1xZzMV
5+BiANdL63FRfvG0RxmiCkN3atj9UR2YRaN+yA23qvj4Q/oSXVauah28cYBmjYBC
P7JW/1OkwltWz6DCyy3H5zzspSSFrH9n94W66wGKUdYuq7wXcZXnZ+hzQFnlSVmP
2Sl5WKh46OU8gfttg3pJXdz2RxAkQCJb6f4rJ2/xm1DhRx68IjoZyvAafQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkhouneXRPorwjIC2WAv0dwXM3hMB8GA1UdIwQY
MBaAFIqveLaXdKVVB96r+MTJaULp7w0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXE5NHRwZDBwVlVIM3F2NHhNbHBRdW52RFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83OTczOTAtODFkNC00YzVkLWFiNzEt
NzA4ODU2OGM1MWMwLzEvaXE5NHRwZDBwVlVIM3F2NHhNbHBRdW52RFNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS83OTczOTAtODFkNC00YzVkLWFiNzEtNzA4ODU2OGM1MWMw
LzEvaXE5NHRwZDBwVlVIM3F2NHhNbHBRdW52RFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2JwIuYm
AUWgbI2p5iK3mlsgm6O4a1Ec3lm7LNetfFUuxWFQSzOryiFUVGYT9Ex0m5lB4lnc
ki4RZ4IZ6z0WO0lMQwy3DaJHGrdkCvHG7tKIwIbKTx5l6mFmtNy0HeLH/P0Bxj0S
HtEB+XeoGV39XaubxwdbrZqJCj9HtZeVZJLRMBT2nNnLLDLbIrFTzCH6w32g1C/A
QGeN8WfWvm/JLfyNIPPwISH8gyUqtxIRQgASfcmeb8+kwH5ZYyVv4zAhIhkKAgtU
hS6XF0ray4izGc1JMpQru7YGj1bVOP3GUVn8UHx8goc17gLnG9yCvtRO9/JQgtuU
sgFo0bEc2a3Q5w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:20 2025 by rpki-client