Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier: beWjMgJlg+rZkiopyZAHhHABmUYbqLSGKfWLwrBMNoU=
Subject key identifier: FE:D2:BD:BE:41:11:A6:B4:6E:D2:E1:D6:7B:CB:88:7A:71:4F:37:62
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial: 0198D7E0F897D44A7A35E0EB0B903E6EFE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number: 0DEA
Signing time: Sat 23 Aug 2025 17:01:41 +0000
Manifest this update: Sat 23 Aug 2025 17:01:41 +0000
Manifest next update: Sun 24 Aug 2025 17:01:41 +0000
Files and hashes: 1: 1H3wr9EMEu_9kf6Zl38WrkoAkBU.roa (hash: FprWo0wu1rkhWTeCTL4oYKvIo6iA1oIZ1p0P+xAQYGs=)
2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: Ege5Kt1KYQkMVqZW8RSVqGtA82fx2ZuOZlILvRrAVW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e0:f8:97:d4:4a:7a:35:e0:eb:0b:90:3e:6e:fe:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
Validity
Not Before: Aug 23 17:01:41 2025 GMT
Not After : Aug 24 17:01:41 2025 GMT
Subject: CN=fed2bdbe4111a6b46ed2e1d67bcb887a714f3762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:11:32:69:8a:74:c6:e3:a9:2f:75:48:93:
cb:33:df:09:cb:35:a4:7e:95:68:e6:11:93:cc:9b:
62:bd:66:56:00:cb:27:30:83:80:2d:1e:38:63:5c:
05:44:2b:19:97:d3:24:c5:2b:ab:cf:58:45:07:da:
9c:c7:15:b8:10:24:64:87:02:a4:e1:e6:ab:5e:78:
9c:69:11:26:35:97:1f:36:c2:f6:83:ab:fe:cb:97:
a6:c0:1f:ab:d8:c6:e5:ca:be:9c:f8:c3:54:ef:f8:
c2:d4:2d:85:ae:7d:57:47:5d:cd:d8:fe:8f:0f:b3:
32:3c:c3:c2:e5:b7:c6:a9:74:ff:b3:3b:fc:98:d7:
87:0a:66:74:8f:d4:0a:f8:4b:6c:dd:fe:df:27:da:
3c:5b:4c:bb:90:a9:4b:66:eb:ec:88:b3:22:80:21:
2b:db:b2:90:4e:71:bb:46:68:99:04:a0:10:bf:92:
e1:7d:ff:a5:a6:f5:69:25:e4:d4:f6:fa:cc:d0:b2:
a9:03:f3:7a:ef:cd:a5:7d:22:c9:9c:6a:fe:e1:7d:
f5:51:06:64:0e:97:c1:cf:8e:d8:aa:e1:82:e8:dd:
8d:9d:f1:87:df:03:0e:64:d8:ce:62:94:42:7d:8a:
be:4b:41:dc:0f:ca:3a:fd:03:4d:c2:eb:a0:81:15:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D2:BD:BE:41:11:A6:B4:6E:D2:E1:D6:7B:CB:88:7A:71:4F:37:62
X509v3 Authority Key Identifier:
keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5f:44:5a:eb:6d:74:7c:c2:b1:47:fc:92:ba:2f:e0:56:52:
0e:dc:10:74:91:51:78:e6:9f:85:04:51:7c:41:94:93:83:a7:
fd:bb:10:71:08:d0:df:a5:3f:d5:84:13:33:8e:75:61:6f:82:
ff:81:9f:f7:5d:d7:63:06:e4:50:1e:36:5e:76:a1:3a:c4:53:
97:dc:ec:e1:98:7e:05:63:fd:c7:4d:00:3a:9a:c6:a4:4c:d9:
cd:d2:a2:fc:e1:61:a1:db:ae:d0:ae:da:30:2d:21:c6:61:02:
a9:2d:e2:26:91:4a:72:9c:4b:5f:9d:4e:78:11:9e:0f:2e:4b:
c0:43:96:95:ed:ec:d6:74:00:08:8f:0b:ac:6b:6c:34:2c:b3:
83:23:ca:27:3b:77:40:2a:28:72:41:e5:40:c8:c3:c0:3d:ab:
a1:83:23:29:a0:75:37:d8:fd:06:39:ea:b2:0e:d2:b6:59:aa:
c2:20:b5:8b:30:51:12:1d:af:69:98:61:94:e7:fe:9c:5b:b0:
0b:07:02:8a:b3:3d:f6:81:b9:9f:b1:00:12:e4:b0:b8:ad:e6:
7c:26:8d:61:c0:a4:ad:7f:da:29:30:ae:4a:a1:82:0d:61:ef:
a0:9c:2f:7f:90:15:f7:e2:d2:1b:11:30:42:3a:4b:15:3c:0b:
f1:2d:58:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4PiX1Ep6NeDrC5A+bv5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGFhMTYwYTZlODg2YzEwM2RhZGJlNDRiMjNjMjc3NzYw
NTczOTEwHhcNMjUwODIzMTcwMTQxWhcNMjUwODI0MTcwMTQxWjAzMTEwLwYDVQQD
EyhmZWQyYmRiZTQxMTFhNmI0NmVkMmUxZDY3YmNiODg3YTcxNGYzNzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIMRMmmKdMbjqS91SJPLM98JyzWk
fpVo5hGTzJtivWZWAMsnMIOALR44Y1wFRCsZl9MkxSurz1hFB9qcxxW4ECRkhwKk
4earXnicaREmNZcfNsL2g6v+y5emwB+r2Mblyr6c+MNU7/jC1C2Frn1XR13N2P6P
D7MyPMPC5bfGqXT/szv8mNeHCmZ0j9QK+Ets3f7fJ9o8W0y7kKlLZuvsiLMigCEr
27KQTnG7RmiZBKAQv5Lhff+lpvVpJeTU9vrM0LKpA/N6782lfSLJnGr+4X31UQZk
DpfBz47YquGC6N2NnfGH3wMOZNjOYpRCfYq+S0HcD8o6/QNNwuuggRXkiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7Svb5BEaa0btLh1nvLiHpxTzdiMB8GA1UdIwQY
MBaAFCMKoWCm6IbBA9rb5Esjwnd2BXORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTkt
YTlhZWI0ODVkNTkyLzEvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTktYTlhZWI0ODVkNTky
LzEvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgF9EWutt
dHzCsUf8krov4FZSDtwQdJFReOafhQRRfEGUk4On/bsQcQjQ36U/1YQTM451YW+C
/4Gf913XYwbkUB42XnahOsRTl9zs4Zh+BWP9x00AOprGpEzZzdKi/OFhoduu0K7a
MC0hxmECqS3iJpFKcpxLX51OeBGeDy5LwEOWle3s1nQACI8LrGtsNCyzgyPKJzt3
QCoockHlQMjDwD2roYMjKaB1N9j9Bjnqsg7StlmqwiC1izBREh2vaZhhlOf+nFuw
CwcCirM99oG5n7EAEuSwuK3mfCaNYcCkrX/aKTCuSqGCDWHvoJwvf5AV9+LSGxEw
QjpLFTwL8S1Yig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:10:27 2025 by rpki-client