Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
File: F8ID4_NlkjqEPTIgMXocaM903g8.mft (raw, json)
Hash identifier: kYrUkJ2ZyOuh8EbbySpAMJ9xaufvoZLljrEKBAljyfU=
Subject key identifier: 1E:99:3C:22:15:C8:91:3D:1F:A1:67:7D:B7:CA:AA:3D:3B:B0:EE:1D
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 01987E667E5B9393C79D0862DBF79651CCDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 08:01:42 +0000
Manifest this update: Wed 06 Aug 2025 08:01:42 +0000
Manifest next update: Thu 07 Aug 2025 08:01:42 +0000
Files and hashes: 1: 4yNv1AmPL0eETqaVsG5JTwwRl3A.roa (hash: eTktrEnbGg3fLOei98QUmpv9AxL2dhvENDzZ4cYi6lk=)
2: AbDDieAjiM47QPI38uwxhNFokMk.roa (hash: KjxwOHLyj1c1EEBagKLxM0Nr+10mBGuGj4d5BS85kno=)
3: F8ID4_NlkjqEPTIgMXocaM903g8.crl (hash: 9F/p5xVR2mAo2qWqY6yVVS9ASEjE8/rWAxCJENMnS4A=)
4: H5y3Q_dV-Hzo-AC0frra9lLxNUY.roa (hash: dJMeL3gMhdqpU5vNKVA+0HKM1TGv6/U20F1ajMJbf5s=)
5: W66fAxMpRHUTy0LH4NsEkImgDCE.roa (hash: AD4DNdRniTHPJR9jh88wIKBDDr7wVfxEb8cYqqVIi8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:7e:5b:93:93:c7:9d:08:62:db:f7:96:51:cc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Aug 6 08:01:42 2025 GMT
Not After : Aug 7 08:01:42 2025 GMT
Subject: CN=1e993c2215c8913d1fa1677db7caaa3d3bb0ee1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:d2:18:f2:a1:23:1c:bf:bd:5b:0c:30:61:
33:e6:2b:ec:ec:18:14:5b:dd:7d:5f:ae:df:3b:b5:
6d:d9:b7:13:f0:0a:7e:2a:6d:81:93:b3:29:c2:bd:
e3:a2:ff:89:5e:23:3a:a2:a0:88:a7:5a:b4:17:bf:
20:3c:81:ff:df:7c:10:32:0a:e5:4d:7a:e5:f2:6f:
9d:9c:48:4c:87:e5:89:5f:a4:90:04:81:b6:7e:28:
7b:10:db:5c:e3:dd:e8:68:ca:72:b5:9b:e6:9a:09:
2d:1b:ff:21:24:40:6d:df:64:f2:8c:d3:54:cd:fb:
40:cb:3f:99:03:71:fe:c0:aa:d5:55:1e:12:92:88:
79:45:27:3e:64:8b:e7:e2:38:1e:fc:28:d9:36:e1:
10:b1:0a:a1:fa:d4:02:85:c3:44:9f:20:fb:51:68:
17:5d:63:3e:96:aa:4d:84:f6:db:32:46:79:95:e3:
a7:cb:1c:c5:24:ff:21:38:35:ce:14:f7:06:aa:ea:
6c:a7:08:c6:17:fc:f7:70:d4:86:61:43:6d:b4:8b:
98:08:6e:a1:16:10:97:9f:17:45:a9:a6:c2:dc:55:
f8:b2:86:ab:1a:11:66:3e:24:d9:50:09:16:bc:4f:
27:2b:5a:ef:2e:72:2e:f1:35:66:6f:2c:77:57:16:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:99:3C:22:15:C8:91:3D:1F:A1:67:7D:B7:CA:AA:3D:3B:B0:EE:1D
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b8:7b:c8:2c:1d:82:85:fc:96:79:31:e9:38:46:8b:38:26:
ac:43:25:f0:f2:ed:9e:00:77:c0:9b:22:e6:ec:3d:90:89:24:
7a:90:39:1b:b8:d0:27:9d:b2:0b:7f:46:f8:bf:ee:80:36:16:
3b:8f:c0:b4:59:61:b6:0b:62:86:ec:2a:70:b6:23:ce:60:e0:
a1:06:87:85:32:5b:45:c3:1c:bf:33:7f:1d:b1:2b:69:c9:6e:
1f:31:55:e1:33:a4:74:38:f5:f3:e3:e9:f4:f8:5a:6b:db:ee:
4f:94:b3:ba:d1:15:3b:11:ad:e9:9e:ec:bc:cc:d5:00:9f:49:
42:ab:ed:e7:35:29:03:4c:38:83:8f:3d:14:00:fd:87:b3:3f:
65:5c:fa:92:e0:d6:cf:c5:aa:51:60:36:14:b4:22:36:7b:77:
41:a3:99:08:8c:e4:e5:fc:ca:71:9d:86:23:53:f1:a3:65:6a:
6e:01:14:6c:9b:aa:54:3b:a5:8f:8d:db:bb:12:09:8e:9d:05:
82:eb:e1:5f:34:08:cf:b6:b4:38:59:7a:44:0a:fe:33:ed:d3:
20:57:eb:1c:ae:e1:c7:61:a2:5d:bc:c0:79:11:3e:f6:fe:ff:
67:b6:49:ad:3c:44:85:d6:e2:6d:31:06:ff:ba:16:7b:c4:ea:
5b:b6:e4:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+Zn5bk5PHnQhi2/eWUczaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YzIwM2UzZjM2NTkyM2E4NDNkMzIyMDMxN2ExYzY4Y2Y3
NGRlMGYwHhcNMjUwODA2MDgwMTQyWhcNMjUwODA3MDgwMTQyWjAzMTEwLwYDVQQD
EygxZTk5M2MyMjE1Yzg5MTNkMWZhMTY3N2RiN2NhYWEzZDNiYjBlZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtbSGPKhIxy/vVsMMGEz5ivs7BgU
W919X67fO7Vt2bcT8Ap+Km2Bk7Mpwr3jov+JXiM6oqCIp1q0F78gPIH/33wQMgrl
TXrl8m+dnEhMh+WJX6SQBIG2fih7ENtc493oaMpytZvmmgktG/8hJEBt32TyjNNU
zftAyz+ZA3H+wKrVVR4Skoh5RSc+ZIvn4jge/CjZNuEQsQqh+tQChcNEnyD7UWgX
XWM+lqpNhPbbMkZ5leOnyxzFJP8hODXOFPcGqupspwjGF/z3cNSGYUNttIuYCG6h
FhCXnxdFqabC3FX4soarGhFmPiTZUAkWvE8nK1rvLnIu8TVmbyx3VxZj2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6ZPCIVyJE9H6FnfbfKqj07sO4dMB8GA1UdIwQY
MBaAFBfCA+PzZZI6hD0yIDF6HGjPdN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMt
YWM2N2EzNmU0YWFiLzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMtYWM2N2EzNmU0YWFi
LzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLh7yCwd
goX8lnkx6ThGizgmrEMl8PLtngB3wJsi5uw9kIkkepA5G7jQJ52yC39G+L/ugDYW
O4/AtFlhtgtihuwqcLYjzmDgoQaHhTJbRcMcvzN/HbEracluHzFV4TOkdDj18+Pp
9Phaa9vuT5SzutEVOxGt6Z7svMzVAJ9JQqvt5zUpA0w4g489FAD9h7M/ZVz6kuDW
z8WqUWA2FLQiNnt3QaOZCIzk5fzKcZ2GI1Pxo2VqbgEUbJuqVDulj43buxIJjp0F
guvhXzQIz7a0OFl6RAr+M+3TIFfrHK7hx2GiXbzAeRE+9v7/Z7ZJrTxEhdbibTEG
/7oWe8TqW7bkmQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:12:37 2025 by rpki-client