
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier: kjB4ykEJIPZ4O0V/Dq4WuR/bzoo6jW+8plEl/nh6PaI=
Subject key identifier: 14:EF:D2:17:8E:2B:F1:9A:80:25:0D:7C:D0:D3:8D:F5:35:A1:87:FD
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 0198903556F85D62FF880A69FECBC9F56626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 19:01:11 +0000
Manifest this update: Sat 09 Aug 2025 19:01:11 +0000
Manifest next update: Sun 10 Aug 2025 19:01:11 +0000
Files and hashes: 1: UvkgBounMtuI2EY4VakFPmSVVf8.roa (hash: B8b+cAv47Fq4zMohD+Ikbfg+w/maMgI605v1qgGvxbU=)
2: aMP60-6kIcycfPRX1mrnGq3rKu4.roa (hash: 3JfLcJd1nqn3CbGO/VzxfaF4cayveMgFQoD5eZc253E=)
3: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: ozAdUb2O7FUdwvUquZl7kJRc9kxqvRwsyrukw0GyHj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:56:f8:5d:62:ff:88:0a:69:fe:cb:c9:f5:66:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Aug 9 19:01:11 2025 GMT
Not After : Aug 10 19:01:11 2025 GMT
Subject: CN=14efd2178e2bf19a80250d7cd0d38df535a187fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:0b:70:c4:af:86:a6:d6:2b:dc:fd:73:a3:
c1:6b:e8:20:c0:7c:29:84:eb:64:23:a0:23:65:4a:
50:b0:f5:a1:dd:fb:c4:45:df:78:5a:09:dc:b2:60:
06:41:37:70:19:04:04:7c:34:60:35:2b:e3:ac:6d:
13:5f:67:2b:1f:84:23:29:34:d5:f6:65:ee:02:13:
a6:a8:6e:66:f5:55:26:a8:2f:09:b3:22:05:94:5a:
f8:e2:6d:99:b1:3a:16:c5:e3:47:d4:f3:40:71:4e:
45:1b:62:f2:58:95:af:6e:3f:13:6c:90:c8:38:59:
b6:14:7f:63:03:71:a2:3a:d7:d8:ab:46:1c:7f:0d:
9c:17:11:87:15:c9:68:23:ed:65:f1:ef:3c:39:a2:
45:c9:91:19:2b:d7:2b:c7:91:f1:ae:44:00:9a:0b:
85:9f:dd:d9:d0:69:c0:4a:55:cc:a4:7f:23:2b:cf:
92:62:a0:d5:ad:7b:8f:c7:36:da:ec:b7:ad:29:a0:
95:98:2f:73:f9:a4:55:a2:7d:b6:48:04:31:9b:09:
a4:4b:e5:96:f5:d0:9a:2c:71:41:11:40:c1:64:7e:
27:ab:d7:66:fe:b6:2f:c7:1c:11:a8:04:38:fc:a7:
15:6f:00:14:e2:fd:da:4f:da:6d:83:8f:c3:cf:5b:
0c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EF:D2:17:8E:2B:F1:9A:80:25:0D:7C:D0:D3:8D:F5:35:A1:87:FD
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7e:ba:3b:ee:9d:10:71:85:14:78:69:fc:26:96:62:ac:70:
aa:a5:0a:32:4d:e8:48:9f:de:df:72:3f:40:f1:d8:ea:bd:fd:
ca:1c:ed:bf:94:7a:a8:ea:01:4e:06:4d:ab:72:e9:da:15:06:
b3:0e:cf:38:89:0a:01:f9:20:8f:59:b7:54:f7:32:b2:26:cc:
c4:4c:54:87:7c:11:bb:a0:da:5d:89:5e:e3:b2:76:b5:f6:a8:
dd:89:83:da:40:e7:64:e5:5e:e4:ff:7d:56:97:ac:7b:42:3f:
17:45:c0:33:4d:4e:88:47:df:a4:1c:9b:c0:09:78:6a:4a:b0:
e1:dc:b7:d6:32:b4:02:38:30:09:9c:c4:db:71:4e:aa:15:75:
20:d2:57:92:93:7b:a4:87:08:22:0e:09:09:e1:ae:7a:27:ec:
63:18:d0:f2:66:ab:f3:b8:d1:fd:79:01:65:e7:0a:38:60:bb:
d4:05:91:31:b6:4a:75:25:17:8a:ad:f5:61:bf:84:11:e9:bf:
8b:85:27:75:70:a7:de:93:a1:cb:b9:20:fc:06:da:ca:43:34:
53:95:f4:f8:ef:ff:33:3a:eb:5f:b5:7f:48:87:2b:45:20:70:
bc:a2:13:e1:70:99:59:f6:6a:23:e8:54:5d:cb:02:a5:57:90:
ff:05:a1:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNVb4XWL/iApp/svJ9WYmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2FmYzZlZmU2Mjk5MGEyNjkzMmY0MGUxNTBiMjdlZWQ1
MzljNGIwHhcNMjUwODA5MTkwMTExWhcNMjUwODEwMTkwMTExWjAzMTEwLwYDVQQD
EygxNGVmZDIxNzhlMmJmMTlhODAyNTBkN2NkMGQzOGRmNTM1YTE4N2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2ELcMSvhqbWK9z9c6PBa+ggwHwp
hOtkI6AjZUpQsPWh3fvERd94WgncsmAGQTdwGQQEfDRgNSvjrG0TX2crH4QjKTTV
9mXuAhOmqG5m9VUmqC8JsyIFlFr44m2ZsToWxeNH1PNAcU5FG2LyWJWvbj8TbJDI
OFm2FH9jA3GiOtfYq0Ycfw2cFxGHFcloI+1l8e88OaJFyZEZK9crx5HxrkQAmguF
n93Z0GnASlXMpH8jK8+SYqDVrXuPxzba7LetKaCVmC9z+aRVon22SAQxmwmkS+WW
9dCaLHFBEUDBZH4nq9dm/rYvxxwRqAQ4/KcVbwAU4v3aT9ptg4/Dz1sMuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTv0heOK/GagCUNfNDTjfU1oYf9MB8GA1UdIwQY
MBaAFIk6/G7+YpkKJpMvQOFQsn7tU5xLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUt
NWE1MjMzZGMwY2UwLzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUtNWE1MjMzZGMwY2Uw
LzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABH66O+6d
EHGFFHhp/CaWYqxwqqUKMk3oSJ/e33I/QPHY6r39yhztv5R6qOoBTgZNq3Lp2hUG
sw7POIkKAfkgj1m3VPcysibMxExUh3wRu6DaXYle47J2tfao3YmD2kDnZOVe5P99
Vpese0I/F0XAM01OiEffpBybwAl4akqw4dy31jK0AjgwCZzE23FOqhV1INJXkpN7
pIcIIg4JCeGueifsYxjQ8mar87jR/XkBZecKOGC71AWRMbZKdSUXiq31Yb+EEem/
i4UndXCn3pOhy7kg/AbaykM0U5X0+O//MzrrX7V/SIcrRSBwvKIT4XCZWfZqI+hU
XcsCpVeQ/wWhiw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:38:26 2025 by rpki-client