Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
File: idaknSMAf7sSRxkvu3vZgus3M18.mft (raw, json)
Hash identifier: WOiG0vjqzpYQI2Rcp5BzfOVbVuPgFZcWlD9wvTwLEzE=
Subject key identifier: A8:CD:12:C6:42:89:33:DE:6D:68:4E:F8:7F:0D:EC:A8:7F:4E:DA:99
Authority key identifier: 89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
Certificate issuer: /CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Certificate serial: 0198D5F18E2BBEC688EB517A9B094FCA209D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
Manifest number: 014F
Signing time: Sat 23 Aug 2025 08:00:34 +0000
Manifest this update: Sat 23 Aug 2025 08:00:34 +0000
Manifest next update: Sun 24 Aug 2025 08:00:34 +0000
Files and hashes: 1: h5XDYzeHNRC78pQldSdBc3wtmlU.roa (hash: y/jCUDtK6aEdyycsVox6EyAhTQt3+YacMPTfw4ggZeM=)
2: idaknSMAf7sSRxkvu3vZgus3M18.crl (hash: 7eVztnBLCK8k1rajXpcYbPz2A3upvci8crryy+JCsnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8e:2b:be:c6:88:eb:51:7a:9b:09:4f:ca:20:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Validity
Not Before: Aug 23 08:00:34 2025 GMT
Not After : Aug 24 08:00:34 2025 GMT
Subject: CN=a8cd12c6428933de6d684ef87f0deca87f4eda99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2a:1c:2d:5a:3a:71:4e:2e:cb:a5:b4:15:1b:
0c:cc:62:92:25:c7:55:c1:c4:84:33:78:cb:91:f2:
b9:3f:12:9d:74:48:91:34:5c:8c:7d:d5:97:d9:b8:
f0:98:ed:ff:4f:08:a0:aa:84:23:e1:72:be:45:bd:
e1:29:96:71:bd:cc:b9:e3:12:8b:46:e2:a0:24:e4:
e9:82:c3:23:e2:43:aa:89:82:7d:8b:09:7a:50:77:
fb:0f:e9:fc:7b:02:09:21:fa:8f:f9:56:88:a8:17:
26:3b:4f:4f:3e:08:76:20:bc:12:3e:3b:ba:18:45:
fc:86:b5:13:36:86:4b:ac:e7:a5:22:0c:52:e6:58:
1b:7c:a8:81:53:cc:7b:d0:c0:59:18:86:3b:17:90:
4c:b8:ff:eb:d1:ba:c1:92:94:3e:58:cf:87:47:83:
ff:50:d6:ba:1f:ce:23:8f:31:0c:89:24:36:b4:88:
06:46:ac:77:b6:3e:0f:4c:38:81:74:e9:d4:44:46:
17:1a:23:82:d9:ce:be:d0:12:c2:86:80:97:53:61:
20:25:20:92:e4:cf:27:1b:61:ce:57:ad:f6:9e:bb:
0a:7c:87:75:f8:60:be:d5:76:55:e3:7a:31:66:30:
9c:b3:2a:9d:80:f1:8b:84:7a:05:ec:ea:c6:2b:10:
a8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CD:12:C6:42:89:33:DE:6D:68:4E:F8:7F:0D:EC:A8:7F:4E:DA:99
X509v3 Authority Key Identifier:
keyid:89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:37:a9:c5:ee:77:d3:90:9d:71:2b:42:73:1d:26:fc:d3:51:
b9:99:49:de:bf:3c:f5:c7:c7:18:17:3d:e9:06:b1:df:ec:fc:
16:4f:e5:4a:3b:1d:da:39:aa:ce:87:ae:64:8c:8a:66:32:7e:
84:42:6e:89:bc:30:0e:17:e5:67:ae:ca:5c:e5:37:64:1d:4d:
22:f4:f3:d5:08:7b:2d:e4:36:0e:3e:a1:4b:70:c5:a6:68:73:
42:09:f5:0d:8e:15:6f:e0:a0:58:a8:6d:cd:73:cb:1f:40:1f:
c6:e4:ac:a4:63:b4:d9:4d:51:b3:a0:33:6f:37:3d:8b:05:e0:
cc:f8:d9:2c:07:a1:0b:89:b2:b8:69:3c:9f:d0:be:bf:ef:48:
63:65:4e:21:65:fd:a9:58:1a:1b:30:7e:e2:c6:72:a4:35:5d:
16:c0:e8:2c:3a:0f:07:d4:02:e1:67:5b:8e:70:de:62:75:d3:
d3:26:28:d2:8d:71:e9:a7:59:d1:1b:7a:a6:9e:38:a8:11:25:
5c:44:72:45:29:f4:e4:03:79:59:88:88:56:f6:c3:ad:5e:61:
dc:b9:57:ff:f3:df:f9:0f:ef:08:7b:b5:93:2b:24:f1:51:ab:
da:ab:e4:67:6b:5b:92:b9:cb:ab:5a:a7:69:68:41:04:96:6b:
9d:e5:64:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Y4rvsaI61F6mwlPyiCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZDZhNDlkMjMwMDdmYmIxMjQ3MTkyZmJiN2JkOTgyZWIz
NzMzNWYwHhcNMjUwODIzMDgwMDM0WhcNMjUwODI0MDgwMDM0WjAzMTEwLwYDVQQD
EyhhOGNkMTJjNjQyODkzM2RlNmQ2ODRlZjg3ZjBkZWNhODdmNGVkYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9yocLVo6cU4uy6W0FRsMzGKSJcdV
wcSEM3jLkfK5PxKddEiRNFyMfdWX2bjwmO3/TwigqoQj4XK+Rb3hKZZxvcy54xKL
RuKgJOTpgsMj4kOqiYJ9iwl6UHf7D+n8ewIJIfqP+VaIqBcmO09PPgh2ILwSPju6
GEX8hrUTNoZLrOelIgxS5lgbfKiBU8x70MBZGIY7F5BMuP/r0brBkpQ+WM+HR4P/
UNa6H84jjzEMiSQ2tIgGRqx3tj4PTDiBdOnUREYXGiOC2c6+0BLChoCXU2EgJSCS
5M8nG2HOV632nrsKfId1+GC+1XZV43oxZjCcsyqdgPGLhHoF7OrGKxCo3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjNEsZCiTPebWhO+H8N7Kh/TtqZMB8GA1UdIwQY
MBaAFInWpJ0jAH+7EkcZL7t72YLrNzNfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRha25TTUFmN3NTUnhrdnUzdlpndXMzTTE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xNDA5OWEtZTJkYS00ZjZhLWI1YzQt
NmZkNzUxZGU3MTdhLzEvaWRha25TTUFmN3NTUnhrdnUzdlpndXMzTTE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xNDA5OWEtZTJkYS00ZjZhLWI1YzQtNmZkNzUxZGU3MTdh
LzEvaWRha25TTUFmN3NTUnhrdnUzdlpndXMzTTE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzepxe53
05CdcStCcx0m/NNRuZlJ3r889cfHGBc96Qax3+z8Fk/lSjsd2jmqzoeuZIyKZjJ+
hEJuibwwDhflZ67KXOU3ZB1NIvTz1Qh7LeQ2Dj6hS3DFpmhzQgn1DY4Vb+CgWKht
zXPLH0AfxuSspGO02U1Rs6Azbzc9iwXgzPjZLAehC4myuGk8n9C+v+9IY2VOIWX9
qVgaGzB+4sZypDVdFsDoLDoPB9QC4WdbjnDeYnXT0yYo0o1x6adZ0Rt6pp44qBEl
XERyRSn05AN5WYiIVvbDrV5h3LlX//Pf+Q/vCHu1kysk8VGr2qvkZ2tbkrnLq1qn
aWhBBJZrneVkRQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:35 2025 by rpki-client