Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: xidz+mSk3moipqpp8e6YeMRwz70hVewaRKhcXV3104c=
Subject key identifier: 11:73:76:2D:E6:54:CE:1A:A0:72:74:2A:FA:59:D3:F5:3C:79:BC:9F
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 0198D5159030F9C51B065766003D8BB19203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 140E
Signing time: Sat 23 Aug 2025 04:00:16 +0000
Manifest this update: Sat 23 Aug 2025 04:00:16 +0000
Manifest next update: Sun 24 Aug 2025 04:00:16 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: lVm4ezIgPeGOjwzcXa6Fsbecvtf9aNDKHNPazaL0zHc=)
2: tE13-Z8TEXFI2N_Q3eslEjXwYJ4.roa (hash: 7axnrMAdFOe7EcvPvTZA4mgDnvv0sfD7w1s1AvMo3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:90:30:f9:c5:1b:06:57:66:00:3d:8b:b1:92:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Aug 23 04:00:16 2025 GMT
Not After : Aug 24 04:00:16 2025 GMT
Subject: CN=1173762de654ce1aa072742afa59d3f53c79bc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:ce:73:f2:01:55:ab:21:48:80:cf:65:52:
2e:8e:d6:c1:a2:af:ac:1b:c3:96:a9:af:11:c8:68:
63:cf:6c:59:d5:fe:da:da:9a:30:fa:9e:fa:d8:25:
f5:ca:a6:e3:55:81:04:b8:02:e4:60:ac:ac:f2:d8:
06:43:d1:b2:f1:a3:1d:46:dc:e9:af:54:a2:1d:ef:
83:52:db:88:5a:e2:79:fe:74:ca:58:13:1d:59:57:
5b:44:16:8d:3f:fb:13:46:83:ca:c2:42:eb:8e:87:
c9:d5:10:16:b3:32:5c:e6:89:52:04:42:a9:b9:ca:
20:9c:88:c1:e5:0b:b2:2e:cb:f2:84:24:be:3c:4e:
1f:69:e2:04:60:19:91:28:ef:a7:1f:d0:cb:d7:48:
37:1e:33:ba:a6:08:f6:0c:f0:b8:8f:1e:cb:24:ea:
11:f0:68:8e:a4:c4:eb:1d:42:4a:8d:31:86:58:51:
e3:f7:e0:17:bd:a4:34:6d:e6:0c:7c:c8:98:2d:58:
d5:ba:fb:ab:c1:c5:67:ca:aa:c7:41:55:d1:78:0a:
bb:84:7d:27:b5:59:ff:58:22:37:fb:4f:fa:60:61:
0c:89:80:30:c5:de:0e:cf:6e:f2:21:87:f6:e5:07:
7a:e1:6c:cb:fd:8c:71:15:3e:c4:b5:b0:10:cb:d0:
c8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:73:76:2D:E6:54:CE:1A:A0:72:74:2A:FA:59:D3:F5:3C:79:BC:9F
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ef:89:84:b7:cc:b2:f5:d7:51:68:7b:72:1e:a1:18:95:ea:
8e:96:27:52:b4:fc:40:e1:94:03:aa:50:e2:8c:94:84:be:6b:
e2:c3:e5:b7:19:51:f0:78:5f:4e:dc:db:60:1b:33:ac:2d:27:
7f:b1:a0:94:06:2a:2b:d5:b9:11:4c:42:35:c2:3e:61:e4:77:
27:00:fc:94:64:d0:5f:d8:29:b0:50:ab:b4:0a:55:52:bf:17:
1a:9b:f7:33:3e:aa:31:ee:20:1e:58:d7:45:19:6a:84:3e:33:
dd:b5:2f:c2:d8:58:82:0a:8d:2f:06:ee:05:9e:fa:56:b3:ab:
2c:31:51:64:8b:f5:9e:a4:52:17:05:68:99:99:b8:e3:6d:b8:
98:b4:83:0c:d6:3f:30:c3:08:83:13:4a:28:2e:3b:65:25:73:
a8:ae:87:37:3c:16:00:7f:fa:fe:db:3e:ad:bf:d9:9c:53:fc:
18:4f:32:95:9a:d9:5d:d7:0c:7f:67:8b:09:a9:26:f9:1e:1e:
37:31:24:d5:38:48:8a:6f:ed:78:50:9d:23:82:7b:30:fd:af:
42:3b:62:ca:4e:3a:70:6f:70:e4:fe:55:e3:d7:66:3e:af:72:
09:2f:54:83:b9:aa:82:e5:82:2d:b7:5e:eb:dc:a8:6f:bc:c5:
0c:6e:c0:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFZAw+cUbBldmAD2LsZIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDZjY2Y1ZjhhNWZlNDRmNGJmZDliYTY2YmE1MTI0NmRh
OGIxODQwHhcNMjUwODIzMDQwMDE2WhcNMjUwODI0MDQwMDE2WjAzMTEwLwYDVQQD
EygxMTczNzYyZGU2NTRjZTFhYTA3Mjc0MmFmYTU5ZDNmNTNjNzliYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5bOc/IBVashSIDPZVIujtbBoq+s
G8OWqa8RyGhjz2xZ1f7a2pow+p762CX1yqbjVYEEuALkYKys8tgGQ9Gy8aMdRtzp
r1SiHe+DUtuIWuJ5/nTKWBMdWVdbRBaNP/sTRoPKwkLrjofJ1RAWszJc5olSBEKp
ucognIjB5QuyLsvyhCS+PE4faeIEYBmRKO+nH9DL10g3HjO6pgj2DPC4jx7LJOoR
8GiOpMTrHUJKjTGGWFHj9+AXvaQ0beYMfMiYLVjVuvurwcVnyqrHQVXReAq7hH0n
tVn/WCI3+0/6YGEMiYAwxd4Oz27yIYf25Qd64WzL/YxxFT7EtbAQy9DIVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFzdi3mVM4aoHJ0KvpZ0/U8ebyfMB8GA1UdIwQY
MBaAFNtGzPX4pf5E9L/Zuma6USRtqLGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgt
ZDQyYTgxYjgxZTIzLzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgtZDQyYTgxYjgxZTIz
LzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAO+JhLfM
svXXUWh7ch6hGJXqjpYnUrT8QOGUA6pQ4oyUhL5r4sPltxlR8HhfTtzbYBszrC0n
f7GglAYqK9W5EUxCNcI+YeR3JwD8lGTQX9gpsFCrtApVUr8XGpv3Mz6qMe4gHljX
RRlqhD4z3bUvwthYggqNLwbuBZ76VrOrLDFRZIv1nqRSFwVomZm44224mLSDDNY/
MMMIgxNKKC47ZSVzqK6HNzwWAH/6/ts+rb/ZnFP8GE8ylZrZXdcMf2eLCakm+R4e
NzEk1ThIim/teFCdI4J7MP2vQjtiyk46cG9w5P5V49dmPq9yCS9Ug7mqguWCLbde
69yob7zFDG7AFA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:03 2025 by rpki-client