Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: wQd/BRUqWTCB1dUWxLQvBytAjHw05IdMJiOz70VKsow=
Subject key identifier: E5:F3:39:AB:D3:0C:E1:C0:6A:32:B2:6E:48:90:60:4B:5F:06:74:AD
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 0198838C4228747237EB9D403B0EE84CE6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 08:01:03 +0000
Manifest this update: Thu 07 Aug 2025 08:01:03 +0000
Manifest next update: Fri 08 Aug 2025 08:01:03 +0000
Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: fxu03jo0WJHuXfXn9tB4DGR3rWgU/ye23R/QJd9VAmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:42:28:74:72:37:eb:9d:40:3b:0e:e8:4c:e6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Aug 7 08:01:03 2025 GMT
Not After : Aug 8 08:01:03 2025 GMT
Subject: CN=e5f339abd30ce1c06a32b26e4890604b5f0674ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6b:e7:0c:cd:2a:4a:63:13:06:1b:70:3f:dd:
8f:5e:45:36:b6:0c:ca:70:fe:9f:cf:75:ac:3c:3e:
d0:e8:88:90:e0:0a:db:08:10:95:c1:54:39:a5:56:
e4:5f:8f:79:02:04:2e:10:a2:39:34:f9:72:0c:1a:
3c:da:b3:93:ab:ba:1b:e6:dd:9e:c2:c3:dc:9d:e0:
d3:72:af:02:19:b0:b2:34:16:75:e2:2e:dd:ec:1e:
d6:86:08:31:c0:fc:3a:47:69:a9:a8:be:06:62:42:
c4:21:87:08:58:02:c1:11:ef:27:bf:df:92:33:6f:
07:dc:86:b5:6b:a2:8f:30:28:64:95:63:55:c7:49:
d6:a1:17:55:48:63:f1:df:2b:ff:8e:5b:58:2f:13:
14:75:43:23:50:85:76:9a:c9:8e:ee:19:d1:c2:14:
cb:63:71:b3:a5:ad:93:0c:5b:d7:43:91:58:e0:f1:
3d:fa:1a:41:35:20:82:be:39:f9:0e:47:0f:f1:5c:
98:a9:1f:53:a1:61:20:4f:f1:dd:df:64:64:96:c9:
dc:e2:27:2f:5e:e9:bf:67:e2:de:4c:c5:2f:3f:ab:
b9:91:51:a9:6e:c7:64:56:a4:84:ec:81:88:89:04:
0d:2e:39:c3:50:c4:84:21:7c:b7:39:8f:9e:cc:33:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F3:39:AB:D3:0C:E1:C0:6A:32:B2:6E:48:90:60:4B:5F:06:74:AD
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:17:83:58:ed:82:21:73:0e:29:aa:d1:bb:2b:59:16:5c:ac:
e7:2e:98:b4:84:4f:aa:48:5f:00:c7:d5:59:7a:fd:dc:41:c9:
94:c5:ee:a0:e3:d5:8b:b8:ea:4d:dc:25:7e:cd:b2:bb:e9:55:
df:3f:86:d7:aa:c6:9b:2b:de:90:48:70:ac:f9:92:05:b3:32:
fa:a9:b6:36:d5:2a:80:b8:29:8a:0a:8a:4b:ef:83:35:87:ca:
80:81:e0:5c:d2:76:3f:c7:35:e4:bb:5c:2f:23:4e:9e:17:3c:
45:29:9f:ce:a1:ee:5c:14:d8:19:b6:e6:ac:37:4f:df:e9:11:
e9:a4:ce:2e:8c:b0:8e:38:44:e2:89:50:96:f6:5e:71:d4:f8:
0d:7c:8c:d1:2d:0b:4e:68:c5:3f:85:44:d8:73:92:3a:21:fb:
24:f5:75:93:30:b5:36:b6:34:ee:28:cb:18:03:5b:d1:c2:12:
94:d6:f3:f9:db:37:4a:d9:78:7c:54:eb:22:a8:47:3e:79:3c:
a6:51:b3:ab:d5:03:5e:97:8e:76:72:f0:40:d3:48:20:fa:a5:
6b:d6:39:57:5f:30:a2:c8:8d:c3:56:8f:b6:74:e1:d8:f7:fe:
e6:6b:a2:82:cd:c5:5c:b0:1a:e7:65:fa:6a:b2:9b:d2:4d:b1:
2c:a4:df:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDjEIodHI3651AOw7oTObvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOGE2OWVjYjc4N2NjZTk4OTJkYzY1NDgwNDYzZmIwODhi
NjEzZGYwHhcNMjUwODA3MDgwMTAzWhcNMjUwODA4MDgwMTAzWjAzMTEwLwYDVQQD
EyhlNWYzMzlhYmQzMGNlMWMwNmEzMmIyNmU0ODkwNjA0YjVmMDY3NGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmvnDM0qSmMTBhtwP92PXkU2tgzK
cP6fz3WsPD7Q6IiQ4ArbCBCVwVQ5pVbkX495AgQuEKI5NPlyDBo82rOTq7ob5t2e
wsPcneDTcq8CGbCyNBZ14i7d7B7WhggxwPw6R2mpqL4GYkLEIYcIWALBEe8nv9+S
M28H3Ia1a6KPMChklWNVx0nWoRdVSGPx3yv/jltYLxMUdUMjUIV2msmO7hnRwhTL
Y3Gzpa2TDFvXQ5FY4PE9+hpBNSCCvjn5DkcP8VyYqR9ToWEgT/Hd32Rklsnc4icv
Xum/Z+LeTMUvP6u5kVGpbsdkVqSE7IGIiQQNLjnDUMSEIXy3OY+ezDPNGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXzOavTDOHAajKybkiQYEtfBnStMB8GA1UdIwQY
MBaAFKyKaey3h8zpiS3GVIBGP7CIthPfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYt
NGNjNDBmZmQ3OTZkLzEvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYtNGNjNDBmZmQ3OTZk
LzEvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaheDWO2C
IXMOKarRuytZFlys5y6YtIRPqkhfAMfVWXr93EHJlMXuoOPVi7jqTdwlfs2yu+lV
3z+G16rGmyvekEhwrPmSBbMy+qm2NtUqgLgpigqKS++DNYfKgIHgXNJ2P8c15Ltc
LyNOnhc8RSmfzqHuXBTYGbbmrDdP3+kR6aTOLoywjjhE4olQlvZecdT4DXyM0S0L
TmjFP4VE2HOSOiH7JPV1kzC1NrY07ijLGANb0cISlNbz+ds3Stl4fFTrIqhHPnk8
plGzq9UDXpeOdnLwQNNIIPqla9Y5V18wosiNw1aPtnTh2Pf+5muigs3FXLAa52X6
arKb0k2xLKTfww==
-----END CERTIFICATE-----
Generated at Thu Aug 7 13:01:10 2025 by rpki-client