Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
File: iy4NGE_1UzdchHw41N_NzeEhn9M.mft (raw, json)
Hash identifier: 4Qd3B6nskbL4E0V3DFO0oRajV+haVZWg16e5On+Aq4Y=
Subject key identifier: FA:9A:EE:8E:63:E1:62:BD:99:F3:90:64:E2:CC:B2:43:35:A5:66:E6
Authority key identifier: 8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
Certificate issuer: /CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Certificate serial: 0198D4743493D1487552D4E27E9251C9AFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
Manifest number: 1037
Signing time: Sat 23 Aug 2025 01:04:01 +0000
Manifest this update: Sat 23 Aug 2025 01:04:01 +0000
Manifest next update: Sun 24 Aug 2025 01:04:01 +0000
Files and hashes: 1: QhkZtHC-GArPwLlJouzdeKz4vt4.roa (hash: rYjbbMwu5klxqw8Z2ve99sKM+e3vXg5MSUYMGvpUeAw=)
2: ek-bgKo0V51DyYfh9FUoM-CKgO8.roa (hash: aPF/FaJvXVYEUFEnZVNFtJQGYrjiMzQAcdLekCScrys=)
3: iy4NGE_1UzdchHw41N_NzeEhn9M.crl (hash: II8a0AHGMLSJlcUulOV3r2aX3HB/lWU6AJMl8+PUi2Q=)
4: jjb9-8iXZGVpIaiYLG1b0CgDmDQ.roa (hash: aXW8Frrn0CPPaBr+F5uNOjUESeabRZzpMHqeAGAbYRY=)
5: tyr7YT-XlbKvyQI5Aiw1lqcEPZ0.roa (hash: A8rtdyJ9paAEirlby1av+cQ7baYrwbelcvz/vsvt2z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:34:93:d1:48:75:52:d4:e2:7e:92:51:c9:af:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Validity
Not Before: Aug 23 01:04:01 2025 GMT
Not After : Aug 24 01:04:01 2025 GMT
Subject: CN=fa9aee8e63e162bd99f39064e2ccb24335a566e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ef:b2:e2:79:a9:53:ce:8e:0c:72:bd:21:74:
23:ce:42:97:58:52:24:6e:b1:6c:2a:d8:24:a2:05:
1b:c9:b2:67:9c:13:29:57:53:2a:8d:c9:1c:d9:35:
1f:d6:07:e4:8e:6a:69:9c:71:e5:53:13:3d:95:ad:
ea:01:8a:e3:2c:ac:a4:3d:ef:26:1f:05:df:62:b4:
27:c7:a0:bc:01:03:18:fc:ae:b2:d0:68:4e:b2:15:
9a:52:2b:49:32:64:20:44:91:66:75:e1:6f:7c:31:
25:59:36:21:d8:61:2f:6d:43:45:a1:24:c5:e1:8d:
8f:c8:af:28:ab:e7:cc:5e:9e:22:ea:ca:d4:d2:50:
46:43:8a:e2:af:ed:bc:cf:25:20:89:21:ce:cd:82:
ed:81:fb:3f:05:fa:69:6f:00:17:87:fd:15:74:b6:
ac:43:f4:6a:25:ca:74:d0:ed:7b:c4:b5:4b:98:c9:
37:ca:01:ff:d1:3b:96:85:fa:36:b1:0e:72:0f:2a:
92:72:d7:61:a7:50:e3:62:57:dc:b3:00:a0:8a:92:
90:8c:f5:0a:6f:68:c2:9d:18:95:16:f1:e6:30:7c:
ad:5c:fc:06:32:b5:e9:46:82:6e:c9:40:e5:d6:95:
76:3a:1a:fc:94:90:89:0b:68:d6:d4:e4:fe:95:96:
c3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9A:EE:8E:63:E1:62:BD:99:F3:90:64:E2:CC:B2:43:35:A5:66:E6
X509v3 Authority Key Identifier:
keyid:8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:65:62:ad:f4:1e:99:76:e5:84:16:2c:03:98:18:40:27:50:
d2:a2:5f:f3:d0:30:5b:33:93:05:d8:c0:59:ac:7c:7b:4c:08:
cb:be:97:87:00:56:34:00:17:12:66:ee:bd:5a:fa:1c:63:1d:
0d:78:a1:6f:7f:1e:94:ca:de:c6:03:bf:c3:98:96:b3:b0:6f:
14:9d:b8:60:99:02:52:30:c1:a8:4f:99:c7:28:28:ed:ff:8d:
c3:aa:33:28:06:ce:16:16:8a:74:bf:cd:30:16:86:f3:29:86:
2d:39:e4:67:59:28:e9:c0:e1:3c:07:30:08:fa:6e:cf:fe:fe:
4c:63:9a:7f:f6:7e:0c:10:de:23:60:ef:3c:9b:94:26:4e:41:
aa:55:4d:8d:2a:ee:ee:84:50:7e:36:8d:e9:79:c9:10:62:ce:
a2:93:4b:44:65:ca:31:6e:66:56:83:ac:50:40:9d:18:c9:d9:
eb:2d:4d:81:f8:2b:93:90:f1:3c:7d:fd:2f:25:fc:55:ee:ac:
59:fd:21:bf:fb:38:63:65:6f:5f:03:f8:58:f2:f4:c4:5a:44:
39:2a:dd:26:19:43:19:eb:97:e0:8c:eb:8b:d2:55:43:0b:99:
1f:54:70:8f:49:f6:c8:41:42:67:21:74:41:1a:2a:e0:c6:ae:
26:68:22:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdDST0Uh1UtTifpJRya+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMmUwZDE4NGZmNTUzMzc1Yzg0N2MzOGQ0ZGZjZGNkZTEy
MTlmZDMwHhcNMjUwODIzMDEwNDAxWhcNMjUwODI0MDEwNDAxWjAzMTEwLwYDVQQD
EyhmYTlhZWU4ZTYzZTE2MmJkOTlmMzkwNjRlMmNjYjI0MzM1YTU2NmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4++y4nmpU86ODHK9IXQjzkKXWFIk
brFsKtgkogUbybJnnBMpV1Mqjckc2TUf1gfkjmppnHHlUxM9la3qAYrjLKykPe8m
HwXfYrQnx6C8AQMY/K6y0GhOshWaUitJMmQgRJFmdeFvfDElWTYh2GEvbUNFoSTF
4Y2PyK8oq+fMXp4i6srU0lBGQ4rir+28zyUgiSHOzYLtgfs/BfppbwAXh/0VdLas
Q/RqJcp00O17xLVLmMk3ygH/0TuWhfo2sQ5yDyqSctdhp1DjYlfcswCgipKQjPUK
b2jCnRiVFvHmMHytXPwGMrXpRoJuyUDl1pV2Ohr8lJCJC2jW1OT+lZbDRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqa7o5j4WK9mfOQZOLMskM1pWbmMB8GA1UdIwQY
MBaAFIsuDRhP9VM3XIR8ONTfzc3hIZ/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXk0TkdFXzFVemRjaEh3NDFOX056ZUVobjlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wZmNkOGUtMTAzNC00YTc1LWEwNzAt
Njk5ZjNjZDg1MGZhLzEvaXk0TkdFXzFVemRjaEh3NDFOX056ZUVobjlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8wZmNkOGUtMTAzNC00YTc1LWEwNzAtNjk5ZjNjZDg1MGZh
LzEvaXk0TkdFXzFVemRjaEh3NDFOX056ZUVobjlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWVirfQe
mXblhBYsA5gYQCdQ0qJf89AwWzOTBdjAWax8e0wIy76XhwBWNAAXEmbuvVr6HGMd
DXihb38elMrexgO/w5iWs7BvFJ24YJkCUjDBqE+Zxygo7f+Nw6ozKAbOFhaKdL/N
MBaG8ymGLTnkZ1ko6cDhPAcwCPpuz/7+TGOaf/Z+DBDeI2DvPJuUJk5BqlVNjSru
7oRQfjaN6XnJEGLOopNLRGXKMW5mVoOsUECdGMnZ6y1Ngfgrk5DxPH39LyX8Ve6s
Wf0hv/s4Y2VvXwP4WPL0xFpEOSrdJhlDGeuX4Izri9JVQwuZH1Rwj0n2yEFCZyF0
QRoq4MauJmgiCA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:16 2025 by rpki-client