Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
File: IjCHszf3R2yNYwSusIzuBX9L9pE.mft (raw, json)
Hash identifier: JkteRwWC5kQr0hOoIaTa3qWbvNcbdlXezqD8diIwlS4=
Subject key identifier: 3D:F9:22:F0:3D:28:03:D0:C6:3C:AF:3B:49:4A:05:73:1A:2F:BE:ED
Authority key identifier: 22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
Certificate issuer: /CN=223087b337f7476c8d6304aeb08cee057f4bf691
Certificate serial: 0198D54E1C22AE8CCEDEBB00A3051B587778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
Manifest number: FF
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: Da7F_pVCBMO9Pya93Jt3tHR6Oco.roa (hash: UlhnFczuqpWrkcvlwjEVQtMKK1bvCGUHj/RuLRvxfcM=)
2: IjCHszf3R2yNYwSusIzuBX9L9pE.crl (hash: PDpM1PBon0XvlJRj+0Tgyh3rg48NgcNMHlEs0j3ZpK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1c:22:ae:8c:ce:de:bb:00:a3:05:1b:58:77:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=223087b337f7476c8d6304aeb08cee057f4bf691
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=3df922f03d2803d0c63caf3b494a05731a2fbeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:e6:02:71:12:a6:a8:9d:09:0b:6e:f8:8f:
39:ac:00:23:75:c3:83:03:5d:c0:e3:0f:af:7b:02:
94:95:94:48:4a:0a:65:a2:e2:e3:a2:cb:81:2d:16:
9e:12:a5:7e:db:54:91:23:61:b5:5b:8d:b8:f9:71:
83:62:75:52:25:39:5e:78:e3:e9:04:3f:8f:b8:ef:
8d:4b:69:31:96:d4:7a:58:07:83:3b:c6:e8:10:5e:
ed:b7:87:a4:d2:59:41:d0:d1:7a:9d:ef:c0:9c:10:
18:31:29:c1:3c:9a:01:65:32:1a:db:48:b2:bc:6c:
3a:25:f4:28:14:f7:b5:3e:46:5a:db:6b:4e:e1:82:
fd:59:4e:3f:65:16:ba:2a:44:0a:cd:54:da:2d:79:
96:0a:33:7a:9e:e0:84:37:54:e7:fe:20:8d:0b:c8:
9b:46:72:d7:1e:a5:e9:22:9a:f3:3f:ef:d0:d8:76:
20:8a:4f:50:16:3b:ff:29:41:3c:53:90:53:af:57:
b3:08:15:4b:cc:ab:2f:97:43:4d:34:64:1b:dc:55:
e9:a5:cf:6b:04:05:64:80:96:1f:ed:47:bb:6c:54:
3e:9a:d9:fd:b8:1f:93:d9:ed:2a:fd:3a:6c:4e:6c:
0d:e7:99:e0:18:d8:64:15:0a:5b:73:8f:42:53:42:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F9:22:F0:3D:28:03:D0:C6:3C:AF:3B:49:4A:05:73:1A:2F:BE:ED
X509v3 Authority Key Identifier:
keyid:22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ae:0c:ae:be:59:5e:98:c8:15:65:95:35:ed:ba:45:fe:6d:
40:a2:f3:8a:0c:56:3b:59:d8:64:5b:1e:97:42:db:fa:8d:12:
cb:4b:22:4f:9f:82:b6:74:98:ce:fb:30:47:be:fe:4e:17:d3:
02:95:34:e9:e5:18:4c:d4:82:21:7b:31:4a:08:84:1e:3a:83:
c0:ee:6e:b3:34:5c:c0:96:15:ee:4d:8c:9c:49:f4:99:cf:d8:
b0:82:5a:33:7f:e9:28:30:50:6d:1f:69:40:9b:52:3d:2a:8e:
b3:de:06:8f:99:56:93:80:02:19:87:07:c7:73:17:a8:98:75:
22:5a:10:4e:fd:f6:25:3a:f2:ba:37:32:92:10:e6:f5:bc:47:
b2:d6:f5:0a:0e:e3:ef:30:f8:f2:b0:a0:a5:00:2b:71:08:1e:
12:f2:37:81:df:16:c6:0b:5f:dd:33:ff:ac:c1:26:8e:17:24:
a1:d9:a8:bb:21:43:f9:ec:a8:9b:d9:13:c1:7f:78:52:9c:60:
4e:5a:b2:69:dc:a2:ba:66:e3:e5:c1:d9:9b:31:f1:fc:38:eb:
36:e0:bd:73:41:02:54:41:12:2d:43:77:6c:28:6a:5a:ea:13:
50:25:00:11:cd:74:30:34:d3:bd:33:bb:2e:b2:f1:78:34:a7:
92:9c:59:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVThwirozO3rsAowUbWHd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzA4N2IzMzdmNzQ3NmM4ZDYzMDRhZWIwOGNlZTA1N2Y0
YmY2OTEwHhcNMjUwODIzMDUwMjAyWhcNMjUwODI0MDUwMjAyWjAzMTEwLwYDVQQD
EygzZGY5MjJmMDNkMjgwM2QwYzYzY2FmM2I0OTRhMDU3MzFhMmZiZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCXmAnESpqidCQtu+I85rAAjdcOD
A13A4w+vewKUlZRISgplouLjosuBLRaeEqV+21SRI2G1W424+XGDYnVSJTleeOPp
BD+PuO+NS2kxltR6WAeDO8boEF7tt4ek0llB0NF6ne/AnBAYMSnBPJoBZTIa20iy
vGw6JfQoFPe1PkZa22tO4YL9WU4/ZRa6KkQKzVTaLXmWCjN6nuCEN1Tn/iCNC8ib
RnLXHqXpIprzP+/Q2HYgik9QFjv/KUE8U5BTr1ezCBVLzKsvl0NNNGQb3FXppc9r
BAVkgJYf7Ue7bFQ+mtn9uB+T2e0q/TpsTmwN55ngGNhkFQpbc49CU0L53QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD35IvA9KAPQxjyvO0lKBXMaL77tMB8GA1UdIwQY
MBaAFCIwh7M390dsjWMErrCM7gV/S/aRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYzk0ZmEtMDUxZS00OGQ1LWFjZDMt
YzUxMjUxNDJhZTU4LzEvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iYzk0ZmEtMDUxZS00OGQ1LWFjZDMtYzUxMjUxNDJhZTU4
LzEvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHK4Mrr5Z
XpjIFWWVNe26Rf5tQKLzigxWO1nYZFsel0Lb+o0Sy0siT5+CtnSYzvswR77+ThfT
ApU06eUYTNSCIXsxSgiEHjqDwO5uszRcwJYV7k2MnEn0mc/YsIJaM3/pKDBQbR9p
QJtSPSqOs94Gj5lWk4ACGYcHx3MXqJh1IloQTv32JTryujcykhDm9bxHstb1Cg7j
7zD48rCgpQArcQgeEvI3gd8Wxgtf3TP/rMEmjhckodmouyFD+eyom9kTwX94Upxg
Tlqyadyiumbj5cHZmzHx/DjrNuC9c0ECVEESLUN3bChqWuoTUCUAEc10MDTTvTO7
LrLxeDSnkpxZPQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:46 2025 by rpki-client