Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: 69k1UzIQqDCiDqGmpvfXfxRY0k8ryKMR+5sruJPZeVY=
Subject key identifier: 1D:9F:16:71:3B:C1:50:11:49:5B:27:A6:C9:7D:94:E0:3A:45:FC:79
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 0198D66005C872A446D9E7A7F62E4D2FF6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 10:01:13 +0000
Manifest this update: Sat 23 Aug 2025 10:01:13 +0000
Manifest next update: Sun 24 Aug 2025 10:01:13 +0000
Files and hashes: 1: 1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa (hash: ChEU1antJRBwFOEOOm1ILlDCVAljbS+GMt59ceUbKBY=)
2: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: ulXUvHmPv0tvWXXeRTQwBpTAGan+nojU+xEW5VojWUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:05:c8:72:a4:46:d9:e7:a7:f6:2e:4d:2f:f6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Aug 23 10:01:13 2025 GMT
Not After : Aug 24 10:01:13 2025 GMT
Subject: CN=1d9f16713bc15011495b27a6c97d94e03a45fc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:88:c6:bd:d5:af:fb:92:f6:ce:a6:ed:6a:
84:b6:2b:73:33:3e:b2:bf:e3:77:e4:8f:5c:b6:3d:
00:f3:17:f2:87:b2:b3:20:f2:db:ab:7a:dc:5e:d4:
28:cf:09:f7:22:cc:68:55:89:24:be:b6:ce:20:dd:
4c:a0:ff:29:25:ff:a3:a7:e5:6d:d6:99:5d:b3:98:
15:b0:aa:73:eb:84:6a:bd:5c:ed:c8:90:64:ec:df:
ce:eb:d8:26:18:e2:a1:29:0d:70:97:7c:86:24:1b:
d0:d8:86:46:a7:aa:fb:bb:3e:01:4f:97:32:26:3a:
b5:e4:8b:25:7d:15:75:27:44:84:ea:0a:b1:d1:54:
7b:36:74:a9:25:18:95:0e:9a:57:f2:5f:93:9d:4f:
96:a4:cf:38:46:73:3d:75:e2:4f:89:a2:a3:7f:76:
c9:a2:7f:1a:55:b6:30:fc:24:1b:80:1d:02:5b:c9:
27:7d:7c:f6:32:c3:ce:5e:21:99:6c:2b:fb:30:0a:
37:b9:ff:61:c4:8f:ff:ac:e0:fc:6b:7c:48:9d:08:
1e:42:72:62:ed:e2:95:cb:f0:91:24:f4:cc:c5:b2:
06:31:04:95:52:8d:bb:c0:b0:f9:65:9b:80:b8:50:
df:24:55:47:2a:46:d1:7a:18:e0:20:28:1a:12:a6:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9F:16:71:3B:C1:50:11:49:5B:27:A6:C9:7D:94:E0:3A:45:FC:79
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:11:9f:bc:93:2c:4c:c3:0b:fd:80:b1:2c:13:5e:03:2e:89:
a6:67:6a:64:4b:f5:bc:5a:0b:f8:4b:32:cd:15:ab:3c:09:e2:
7b:d8:68:34:b9:0b:ef:2e:01:82:f7:d2:c3:4b:0f:f8:9e:03:
03:65:f5:cf:fa:be:30:94:22:f5:8a:ec:7d:fa:32:e7:b6:50:
01:1b:40:ed:5d:a2:cf:9f:aa:cd:9d:4e:17:ea:97:69:4a:15:
98:cd:7f:c4:41:d9:c3:1e:56:7c:ac:19:dc:da:53:f2:b8:8f:
12:d4:e6:dd:de:27:8b:45:fa:2b:4c:76:55:b7:d6:20:67:ed:
d7:49:be:c9:23:5d:5e:e1:68:fb:55:0b:82:fc:7e:b3:b2:e8:
5f:6c:f0:84:7b:05:15:6d:43:b1:ad:20:cd:39:6f:57:15:fb:
60:55:06:8e:a2:b7:0c:a2:30:fc:c8:70:f2:f1:b7:e9:11:3e:
8e:9d:11:99:e7:8f:b8:5e:c1:a3:86:70:20:c0:96:c6:5d:dc:
80:6b:ac:35:50:43:e2:a1:5b:77:88:20:e7:34:04:7e:25:07:
68:b2:40:57:0d:0b:59:dc:62:1c:40:40:d3:3e:88:59:0f:93:
d9:f9:97:b7:86:1d:0b:a4:6f:6a:56:dd:74:f2:6c:24:a1:76:
f4:a3:06:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYAXIcqRG2een9i5NL/bsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMzI1OGFhNmI4M2VjOWZiN2JlOTY2YzYyNmE5MTY2Nzgx
YzdmM2IwHhcNMjUwODIzMTAwMTEzWhcNMjUwODI0MTAwMTEzWjAzMTEwLwYDVQQD
EygxZDlmMTY3MTNiYzE1MDExNDk1YjI3YTZjOTdkOTRlMDNhNDVmYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOWIxr3Vr/uS9s6m7WqEtitzMz6y
v+N35I9ctj0A8xfyh7KzIPLbq3rcXtQozwn3IsxoVYkkvrbOIN1MoP8pJf+jp+Vt
1plds5gVsKpz64RqvVztyJBk7N/O69gmGOKhKQ1wl3yGJBvQ2IZGp6r7uz4BT5cy
Jjq15IslfRV1J0SE6gqx0VR7NnSpJRiVDppX8l+TnU+WpM84RnM9deJPiaKjf3bJ
on8aVbYw/CQbgB0CW8knfXz2MsPOXiGZbCv7MAo3uf9hxI//rOD8a3xInQgeQnJi
7eKVy/CRJPTMxbIGMQSVUo27wLD5ZZuAuFDfJFVHKkbRehjgICgaEqYSUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2fFnE7wVARSVsnpsl9lOA6Rfx5MB8GA1UdIwQY
MBaAFPIyWKprg+yft76WbGJqkWZ4HH87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OGMzYTgtYjk1NC00MWM5LWJkMjMt
NzEyZmNmYTQ0MWU0LzEvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80OGMzYTgtYjk1NC00MWM5LWJkMjMtNzEyZmNmYTQ0MWU0
LzEvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRGfvJMs
TMML/YCxLBNeAy6JpmdqZEv1vFoL+EsyzRWrPAnie9hoNLkL7y4BgvfSw0sP+J4D
A2X1z/q+MJQi9Yrsffoy57ZQARtA7V2iz5+qzZ1OF+qXaUoVmM1/xEHZwx5WfKwZ
3NpT8riPEtTm3d4ni0X6K0x2VbfWIGft10m+ySNdXuFo+1ULgvx+s7LoX2zwhHsF
FW1Dsa0gzTlvVxX7YFUGjqK3DKIw/Mhw8vG36RE+jp0RmeePuF7Bo4ZwIMCWxl3c
gGusNVBD4qFbd4gg5zQEfiUHaLJAVw0LWdxiHEBA0z6IWQ+T2fmXt4YdC6Rvalbd
dPJsJKF29KMGKA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:48 2025 by rpki-client