Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: BXKhyK9SmEp54ohUH7r1YlV2CKekKsE59fav/v2ASvQ=
Subject key identifier: 8F:9A:92:30:08:91:C4:67:29:25:3A:DE:59:F5:F2:CB:55:FF:9B:B9
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 0198D583B75C921F5E723CEC1AAFFD3B8073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 1039
Signing time: Sat 23 Aug 2025 06:00:35 +0000
Manifest this update: Sat 23 Aug 2025 06:00:35 +0000
Manifest next update: Sun 24 Aug 2025 06:00:35 +0000
Files and hashes: 1: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (hash: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=)
2: FDaJnwtdKIaCGJVg6QNctNX3wpA.roa (hash: nG1/6+0MejULa30YNNdRkzBTjiM/zpm9raBFToCey7o=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: qDn2hhYLwk8GQxE4NalLHhbOjQa5X5CIqlvwG6NRI5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b7:5c:92:1f:5e:72:3c:ec:1a:af:fd:3b:80:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Aug 23 06:00:35 2025 GMT
Not After : Aug 24 06:00:35 2025 GMT
Subject: CN=8f9a92300891c46729253ade59f5f2cb55ff9bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:09:de:db:d0:6b:be:a4:37:ba:b6:2d:61:
48:ea:7f:d0:1b:9b:5b:e4:52:78:1a:5b:91:f7:47:
e9:94:41:18:d3:99:c5:ad:d0:6e:cb:cd:b5:db:1b:
18:35:12:ce:e7:dc:59:f3:ca:2d:33:9c:3b:66:64:
bb:33:57:47:3e:c8:7c:7b:0d:a1:88:22:b1:ab:3e:
44:81:1a:87:a4:a9:cb:db:8e:bf:2f:0c:fe:da:78:
79:fb:10:85:0b:24:db:5e:c3:94:04:de:1b:da:38:
39:e1:c7:39:8e:4c:6d:f2:71:d2:59:41:80:7e:6b:
dd:66:8d:90:72:40:79:fd:0d:d5:4f:92:07:97:99:
fd:3c:14:57:d6:ed:fd:11:db:c7:a0:1a:8d:10:ab:
9b:fd:f9:25:7a:88:61:e2:aa:63:21:55:09:4b:27:
ab:94:79:a5:8c:b7:3e:29:13:fe:ce:52:6c:21:bd:
f0:e1:92:ed:da:e4:fc:a6:45:00:1c:94:4f:ef:99:
83:b5:a3:e4:f3:92:16:03:be:a3:7e:be:b7:fc:e8:
4a:9e:4e:e5:e0:a1:e7:82:b7:bd:72:ae:40:7a:5d:
39:4e:fc:7d:17:cc:c9:17:e8:0e:3a:88:45:df:60:
98:c3:59:cb:c8:eb:fb:bb:00:b1:52:d0:3d:8c:b3:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9A:92:30:08:91:C4:67:29:25:3A:DE:59:F5:F2:CB:55:FF:9B:B9
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7f:39:79:8a:16:08:08:2b:40:9c:ab:92:bc:25:1d:83:47:
25:58:88:f4:e7:b1:9d:aa:e0:7b:48:2a:2b:92:08:66:8e:03:
cf:fe:04:f9:76:16:da:af:77:f6:bc:75:3f:45:86:f1:aa:85:
6b:4d:50:bd:47:e3:06:4a:20:13:df:69:8b:80:7e:fe:fb:61:
2d:cf:44:bf:67:24:0b:2c:09:22:eb:89:20:37:a6:b2:28:6b:
3d:78:91:96:97:82:2d:57:b3:91:ef:b8:d1:ef:c7:49:86:25:
76:05:7d:84:0e:0a:a2:63:75:70:1b:ff:96:7c:15:54:53:a0:
8e:81:3c:91:f6:f1:a2:18:a6:0b:8a:75:65:c6:d8:9e:b2:06:
2f:f9:5f:bd:c1:6f:99:ff:10:4d:f2:60:f6:c5:60:c5:f7:ac:
2b:95:c5:ce:d3:f0:44:f7:88:d1:c7:25:95:89:ed:ad:f1:a8:
fe:cf:7c:f4:1d:da:30:c4:e0:4c:4c:bd:88:ce:a6:2a:c5:37:
b4:bf:c6:0a:3f:ae:45:ad:ba:39:27:36:1e:f3:62:5a:b7:9c:
64:fe:f6:0b:fe:4d:4f:4c:89:af:d0:b7:30:a2:65:4d:aa:6e:
ed:94:2a:3c:5d:e7:a8:79:74:d2:c0:6c:64:27:3e:2a:c6:da:
6c:2f:33:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg7dckh9ecjzsGq/9O4BzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ODc3ODJlM2Y3MGM1Y2QyN2IzMmY1Mjc0ZDBlNWJjNjJl
OTVjYWYwHhcNMjUwODIzMDYwMDM1WhcNMjUwODI0MDYwMDM1WjAzMTEwLwYDVQQD
Eyg4ZjlhOTIzMDA4OTFjNDY3MjkyNTNhZGU1OWY1ZjJjYjU1ZmY5YmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSAJ3tvQa76kN7q2LWFI6n/QG5tb
5FJ4GluR90fplEEY05nFrdBuy8212xsYNRLO59xZ88otM5w7ZmS7M1dHPsh8ew2h
iCKxqz5EgRqHpKnL246/Lwz+2nh5+xCFCyTbXsOUBN4b2jg54cc5jkxt8nHSWUGA
fmvdZo2QckB5/Q3VT5IHl5n9PBRX1u39EdvHoBqNEKub/fkleohh4qpjIVUJSyer
lHmljLc+KRP+zlJsIb3w4ZLt2uT8pkUAHJRP75mDtaPk85IWA76jfr63/OhKnk7l
4KHngre9cq5Ael05Tvx9F8zJF+gOOohF32CYw1nLyOv7uwCxUtA9jLOPTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+akjAIkcRnKSU63ln18stV/5u5MB8GA1UdIwQY
MBaAFKSHeC4/cMXNJ7MvUnTQ5bxi6VyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzIt
MjM4YzZkOGE0YzE3LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzItMjM4YzZkOGE0YzE3
LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJH85eYoW
CAgrQJyrkrwlHYNHJViI9Oexnarge0gqK5IIZo4Dz/4E+XYW2q939rx1P0WG8aqF
a01QvUfjBkogE99pi4B+/vthLc9Ev2ckCywJIuuJIDemsihrPXiRlpeCLVezke+4
0e/HSYYldgV9hA4KomN1cBv/lnwVVFOgjoE8kfbxohimC4p1ZcbYnrIGL/lfvcFv
mf8QTfJg9sVgxfesK5XFztPwRPeI0ccllYntrfGo/s989B3aMMTgTEy9iM6mKsU3
tL/GCj+uRa26OSc2HvNiWrecZP72C/5NT0yJr9C3MKJlTapu7ZQqPF3nqHl00sBs
ZCc+KsbabC8zBQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:53 2025 by rpki-client