Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
File: m4FRrhZKW3grED3n98iolIkyrr8.mft (raw, json)
Hash identifier: TQgBdkveIlQpG9p3MLrGxeQe2IHiSENWR6Ku3PCLJrk=
Subject key identifier: 0C:6B:8C:B0:CC:8F:F9:85:55:97:30:73:F7:2A:74:CE:DA:03:86:C2
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 01988BB386335CA8853344578570EEDC0E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 22:00:54 +0000
Manifest this update: Fri 08 Aug 2025 22:00:54 +0000
Manifest next update: Sat 09 Aug 2025 22:00:54 +0000
Files and hashes: 1: PCeyRcCnkd2jcpnfX_81z2NuiQU.roa (hash: qmuti4n5B4J7jLSHkHP5UysCAPRSd8cLYAhdX4sBlkA=)
2: c483fv6CCn7GnQMtAIF35ot4fxg.roa (hash: FWbPpQL/jtT7J1p5u5ozd8W0n2+YVhQ7GpqajXnuKcE=)
3: m4FRrhZKW3grED3n98iolIkyrr8.crl (hash: ppTBQtjFjzBkC3zQIf42OE9BTkmAg65vVddeIc0muMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:86:33:5c:a8:85:33:44:57:85:70:ee:dc:0e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: Aug 8 22:00:54 2025 GMT
Not After : Aug 9 22:00:54 2025 GMT
Subject: CN=0c6b8cb0cc8ff98555973073f72a74ceda0386c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:cb:f1:a0:a6:a9:ac:38:53:a9:a8:fa:dd:
9e:30:85:c4:cb:fb:bc:9c:67:00:0d:35:f0:a3:7a:
10:dc:9c:08:b5:c6:8b:eb:01:b6:46:dd:7b:ff:2a:
67:da:fb:78:40:89:ba:d0:b4:01:9f:18:e7:53:26:
a0:1d:8f:13:42:b6:de:69:d2:07:0f:04:d2:40:50:
80:73:32:0d:af:fa:11:19:e4:19:85:29:ff:21:f9:
3b:93:8d:9f:48:d2:7d:c7:09:da:ff:d5:60:26:3f:
c8:15:96:3e:fe:11:fc:f3:44:54:da:9c:d7:87:1e:
0d:df:cc:25:2c:28:36:4b:53:e3:4c:e6:fd:d5:45:
61:05:f8:23:f3:17:c1:5f:e8:85:3f:10:43:5e:51:
c1:0d:73:c1:79:b8:c4:bb:31:a5:f7:8b:5d:69:22:
c0:2f:7e:53:11:1c:2b:fc:dd:a8:7b:ab:27:92:d1:
c9:ba:0a:d0:73:2f:59:50:00:7c:bb:b2:76:26:b3:
97:ac:87:cb:3c:01:9e:66:2a:b3:08:a5:dd:a3:76:
46:6d:b3:d9:dd:d9:32:b6:11:81:74:aa:15:97:c7:
61:7b:a4:fc:57:24:6f:2e:9b:eb:97:e7:b8:b7:9b:
e2:85:d8:17:4a:88:0c:df:3e:f5:c6:dc:44:a4:ba:
ab:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6B:8C:B0:CC:8F:F9:85:55:97:30:73:F7:2A:74:CE:DA:03:86:C2
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:3c:39:ee:45:b8:be:a7:d7:3f:b2:a5:dc:0b:89:48:76:17:
14:39:17:bc:9f:27:c0:c0:c5:1d:f8:06:c8:79:d5:d8:90:b7:
99:04:d4:75:d6:45:03:88:a9:82:0b:8e:be:04:69:d1:01:11:
9d:83:05:ec:19:77:42:61:45:84:e6:a4:4e:dc:82:25:9b:fd:
21:2b:65:7f:18:76:85:5f:14:fb:fd:b5:0a:75:aa:f0:a7:12:
0d:5f:ec:f0:2a:01:37:7b:89:17:78:31:a8:37:83:66:a2:98:
f0:9b:29:c7:53:18:88:fa:45:0b:2e:fe:fa:0d:27:5d:36:57:
a1:6e:72:ba:3c:2e:86:f3:ac:e1:4a:2c:03:e2:d1:d0:c8:6b:
d4:28:7a:f5:6f:db:27:e6:a0:53:32:d9:02:18:32:ba:b3:1e:
bb:0c:f2:92:15:89:ff:6e:8b:e7:99:91:06:2e:d0:84:f3:46:
4d:e0:5d:63:87:0c:70:9c:cb:b8:2a:e5:41:a5:66:d5:7b:e4:
95:19:76:1d:30:93:b7:d3:76:b9:42:c8:bb:2b:c5:eb:2e:fc:
7f:91:20:04:50:fc:aa:3e:8c:40:58:ac:66:5c:20:78:f3:7f:
80:cf:4d:bd:bd:54:d4:bc:29:a3:ab:6e:56:90:6d:95:ef:61:
9b:04:e2:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs4YzXKiFM0RXhXDu3A5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODE1MWFlMTY0YTViNzgyYjEwM2RlN2Y3YzhhODk0ODkz
MmFlYmYwHhcNMjUwODA4MjIwMDU0WhcNMjUwODA5MjIwMDU0WjAzMTEwLwYDVQQD
EygwYzZiOGNiMGNjOGZmOTg1NTU5NzMwNzNmNzJhNzRjZWRhMDM4NmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq7L8aCmqaw4U6mo+t2eMIXEy/u8
nGcADTXwo3oQ3JwItcaL6wG2Rt17/ypn2vt4QIm60LQBnxjnUyagHY8TQrbeadIH
DwTSQFCAczINr/oRGeQZhSn/Ifk7k42fSNJ9xwna/9VgJj/IFZY+/hH880RU2pzX
hx4N38wlLCg2S1PjTOb91UVhBfgj8xfBX+iFPxBDXlHBDXPBebjEuzGl94tdaSLA
L35TERwr/N2oe6snktHJugrQcy9ZUAB8u7J2JrOXrIfLPAGeZiqzCKXdo3ZGbbPZ
3dkythGBdKoVl8dhe6T8VyRvLpvrl+e4t5vihdgXSogM3z71xtxEpLqrqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxrjLDMj/mFVZcwc/cqdM7aA4bCMB8GA1UdIwQY
MBaAFJuBUa4WSlt4KxA95/fIqJSJMq6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82YjZkMWYtNTQyMS00OGI5LWI3ZWIt
ZGExZmU5ZWJlZThlLzEvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC82YjZkMWYtNTQyMS00OGI5LWI3ZWItZGExZmU5ZWJlZThl
LzEvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzDw57kW4
vqfXP7Kl3AuJSHYXFDkXvJ8nwMDFHfgGyHnV2JC3mQTUddZFA4ipgguOvgRp0QER
nYMF7Bl3QmFFhOakTtyCJZv9IStlfxh2hV8U+/21CnWq8KcSDV/s8CoBN3uJF3gx
qDeDZqKY8Jspx1MYiPpFCy7++g0nXTZXoW5yujwuhvOs4UosA+LR0Mhr1Ch69W/b
J+agUzLZAhgyurMeuwzykhWJ/26L55mRBi7QhPNGTeBdY4cMcJzLuCrlQaVm1Xvk
lRl2HTCTt9N2uULIuyvF6y78f5EgBFD8qj6MQFisZlwgePN/gM9Nvb1U1Lwpo6tu
VpBtle9hmwTiXw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:05:59 2025 by rpki-client