Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
File: V8dqgOwpEqVok1y1e2plDwPf2NI.mft (raw, json)
Hash identifier: HH1pVV2LCtiwoU1ziUWAT7w/wuI+d/x/krM3+UdhEek=
Subject key identifier: A9:0C:47:94:D2:87:F4:C0:B0:51:B2:36:C0:7E:6A:55:51:0C:F8:48
Authority key identifier: 57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
Certificate issuer: /CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Certificate serial: 0198D6987DB6FCC3507291B075DA60DC4226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
Manifest number: 0C76
Signing time: Sat 23 Aug 2025 11:02:54 +0000
Manifest this update: Sat 23 Aug 2025 11:02:54 +0000
Manifest next update: Sun 24 Aug 2025 11:02:54 +0000
Files and hashes: 1: V8dqgOwpEqVok1y1e2plDwPf2NI.crl (hash: 6PTHEKTtWzLh2/nWujiQ1SYrZi0RcHS7EFJREdiW+uc=)
2: c0WcDmEa-I3e6oejtEWp5xBEKhk.roa (hash: gv5nn6HuxLobRhPQtfW9QLB/XRSSApZbiTBp/n9p8eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:7d:b6:fc:c3:50:72:91:b0:75:da:60:dc:42:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c76a80ec2912a568935cb57b6a650f03dfd8d2
Validity
Not Before: Aug 23 11:02:54 2025 GMT
Not After : Aug 24 11:02:54 2025 GMT
Subject: CN=a90c4794d287f4c0b051b236c07e6a55510cf848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1d:4e:39:47:87:c1:c0:e3:40:2b:41:c8:6b:
89:c6:c2:62:33:80:90:89:c7:80:a9:d4:69:40:9a:
d3:10:ce:39:84:0d:12:7a:80:c0:7e:59:78:d6:8d:
4a:1b:ae:58:f3:0f:9a:b7:ad:af:94:4d:42:b9:ed:
f1:66:24:1a:c9:00:b1:20:76:d0:bd:27:e8:74:ed:
2e:cc:76:26:c4:e7:12:e6:ff:40:1d:71:6b:ef:79:
44:cb:19:ce:dc:ae:89:3b:de:ca:cb:d4:84:96:aa:
9a:b0:4e:8c:df:84:87:60:ec:2e:ac:ac:15:f0:68:
68:57:1b:c7:28:bd:80:89:b6:bf:63:5e:2e:3b:3c:
99:85:07:8f:35:f5:51:d7:3b:1d:03:37:30:1d:70:
a4:74:4a:1d:65:f3:33:d2:15:e0:3e:57:b1:94:f3:
3f:34:c5:67:07:6b:14:11:1d:f5:9f:94:01:8f:c8:
99:a1:cc:45:a5:b7:16:7d:e8:2b:be:a2:5b:bd:d4:
c4:e3:b6:c0:bb:56:2d:af:a2:52:df:51:a9:36:f5:
0d:de:6a:f8:b5:64:9a:e6:27:ea:04:34:75:95:b4:
71:40:b7:9b:85:e2:bf:2c:a4:f8:92:52:fb:81:2b:
3a:87:fe:32:b4:60:1f:4d:7d:73:ec:6b:fc:e3:52:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0C:47:94:D2:87:F4:C0:B0:51:B2:36:C0:7E:6A:55:51:0C:F8:48
X509v3 Authority Key Identifier:
keyid:57:C7:6A:80:EC:29:12:A5:68:93:5C:B5:7B:6A:65:0F:03:DF:D8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8dqgOwpEqVok1y1e2plDwPf2NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/40e5f4-d056-44f2-899e-2286b89e7a7e/1/V8dqgOwpEqVok1y1e2plDwPf2NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f9:82:18:0b:b9:c7:fe:ad:79:e5:c9:e8:16:1a:6e:29:58:
65:cd:1d:da:2c:7f:da:78:f2:84:02:a0:d6:60:4d:af:ca:0f:
78:a9:21:2f:93:96:f6:f5:b6:79:f4:12:3c:be:ec:7e:80:a3:
54:9a:71:04:c1:bf:fc:cb:55:74:ef:bc:f9:44:94:fc:55:a7:
75:a5:c8:a1:82:ac:be:e9:1f:7e:6e:fb:ea:7e:d6:d9:51:17:
9d:d2:6d:25:7f:7a:e7:1a:b5:7e:90:1d:6b:04:4e:ec:96:9d:
07:6d:55:cb:33:16:16:f4:6a:a6:3f:77:25:87:04:21:bd:01:
49:54:53:3a:38:d2:4a:d3:19:66:b9:2f:bb:ba:93:76:9f:1f:
46:55:f3:cc:7f:1e:ea:48:fc:ad:75:2c:ca:ef:ab:5e:4c:f5:
2b:7a:67:82:61:fb:51:cf:60:56:32:cd:c0:25:75:02:a4:cc:
3d:75:ec:3d:13:c0:52:d5:62:5d:c3:ff:68:a8:5d:d9:10:45:
f8:13:8c:45:0f:07:0e:c5:35:2f:69:61:d9:8d:0e:0f:06:a3:
f5:95:c3:a8:9f:a8:08:c7:cf:2a:e4:62:a2:90:c1:71:e6:9f:
cf:43:5c:a7:26:26:f8:5e:09:4f:b2:f7:36:6b:17:76:c1:00:
94:77:f8:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmH22/MNQcpGwddpg3EImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3Yzc2YTgwZWMyOTEyYTU2ODkzNWNiNTdiNmE2NTBmMDNk
ZmQ4ZDIwHhcNMjUwODIzMTEwMjU0WhcNMjUwODI0MTEwMjU0WjAzMTEwLwYDVQQD
EyhhOTBjNDc5NGQyODdmNGMwYjA1MWIyMzZjMDdlNmE1NTUxMGNmODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R1OOUeHwcDjQCtByGuJxsJiM4CQ
iceAqdRpQJrTEM45hA0SeoDAfll41o1KG65Y8w+at62vlE1Cue3xZiQayQCxIHbQ
vSfodO0uzHYmxOcS5v9AHXFr73lEyxnO3K6JO97Ky9SElqqasE6M34SHYOwurKwV
8GhoVxvHKL2Aiba/Y14uOzyZhQePNfVR1zsdAzcwHXCkdEodZfMz0hXgPlexlPM/
NMVnB2sUER31n5QBj8iZocxFpbcWfegrvqJbvdTE47bAu1Ytr6JS31GpNvUN3mr4
tWSa5ifqBDR1lbRxQLebheK/LKT4klL7gSs6h/4ytGAfTX1z7Gv841LlJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkMR5TSh/TAsFGyNsB+alVRDPhIMB8GA1UdIwQY
MBaAFFfHaoDsKRKlaJNctXtqZQ8D39jSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhkcWdPd3BFcVZvazF5MWUycGxEd1BmMk5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80MGU1ZjQtZDA1Ni00NGYyLTg5OWUt
MjI4NmI4OWU3YTdlLzEvVjhkcWdPd3BFcVZvazF5MWUycGxEd1BmMk5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS80MGU1ZjQtZDA1Ni00NGYyLTg5OWUtMjI4NmI4OWU3YTdl
LzEvVjhkcWdPd3BFcVZvazF5MWUycGxEd1BmMk5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPmCGAu5
x/6teeXJ6BYabilYZc0d2ix/2njyhAKg1mBNr8oPeKkhL5OW9vW2efQSPL7sfoCj
VJpxBMG//MtVdO+8+USU/FWndaXIoYKsvukffm776n7W2VEXndJtJX965xq1fpAd
awRO7JadB21VyzMWFvRqpj93JYcEIb0BSVRTOjjSStMZZrkvu7qTdp8fRlXzzH8e
6kj8rXUsyu+rXkz1K3pngmH7Uc9gVjLNwCV1AqTMPXXsPRPAUtViXcP/aKhd2RBF
+BOMRQ8HDsU1L2lh2Y0ODwaj9ZXDqJ+oCMfPKuRiopDBceafz0NcpyYm+F4JT7L3
NmsXdsEAlHf4rA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:47 2025 by rpki-client