Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
File: B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json)
Hash identifier: k/Q3YWOvHS2gfX7YdRg1zz7u6KZU5fIVACAJZJRA9eg=
Subject key identifier: C0:E6:F2:95:AA:74:75:E1:5A:35:22:18:F0:F6:8F:6A:57:F5:17:C4
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial: 0198D5BBF8390D5263840C6A11CB91421D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
Manifest number: 0984
Signing time: Sat 23 Aug 2025 07:02:02 +0000
Manifest this update: Sat 23 Aug 2025 07:02:02 +0000
Manifest next update: Sun 24 Aug 2025 07:02:02 +0000
Files and hashes: 1: 8XyUaz5PxPLue0CrUchlRmHnqJs.roa (hash: KMSpxL6wtJUNFCJFnfAUFjLMRmLQ4Dcv8f1856Q+IkY=)
2: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: Jnyq+i5P5h9m/h+mKUxV0JYUfbTZ/zmPwoqFqjLeZiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f8:39:0d:52:63:84:0c:6a:11:cb:91:42:1d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Validity
Not Before: Aug 23 07:02:02 2025 GMT
Not After : Aug 24 07:02:02 2025 GMT
Subject: CN=c0e6f295aa7475e15a352218f0f68f6a57f517c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:8c:24:8e:35:dd:fa:c9:5a:c4:99:2b:6b:
62:1f:dc:b8:a5:f8:50:54:c5:77:ba:15:68:7a:61:
ec:9a:3c:b2:be:25:b6:1f:29:df:f3:85:cc:22:3e:
dd:9e:d1:c4:43:3f:0f:6e:4e:2b:55:ca:90:07:29:
62:78:ee:ad:91:52:41:47:1a:c8:38:f2:88:cd:88:
31:7a:82:dd:4b:12:77:0f:b3:45:40:66:c6:b9:61:
94:30:59:3e:36:dd:a4:45:11:d1:6c:77:dc:0b:da:
31:e6:74:3d:3a:c5:56:65:de:ca:b2:8c:94:b6:4b:
21:07:e3:ec:8d:b0:9a:82:40:8e:20:cc:ee:6e:f5:
08:5a:72:1a:66:39:f6:0c:fe:70:be:73:fd:cc:e4:
ff:42:05:1c:9d:a9:0b:99:47:4f:f1:cc:a7:3d:af:
fd:58:ec:9c:cb:67:09:1b:50:8a:72:d5:00:2a:8d:
2f:00:8e:7e:23:32:a6:2a:82:4c:4d:57:fc:c6:bf:
ea:44:73:8f:e9:47:fc:c4:f7:f7:62:b3:24:59:2c:
f0:ba:d4:98:70:dc:ec:d5:05:63:42:ba:d0:3b:1d:
16:96:96:11:fb:36:ce:ea:16:63:c4:9f:3d:e3:71:
43:23:ef:c1:50:dd:29:d3:3f:df:b8:78:61:ff:ae:
99:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E6:F2:95:AA:74:75:E1:5A:35:22:18:F0:F6:8F:6A:57:F5:17:C4
X509v3 Authority Key Identifier:
keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:51:fa:1e:0c:1c:b3:46:a3:02:c9:4c:63:95:3e:85:72:7f:
67:fb:30:6c:e4:ca:1b:f1:0c:10:fd:8d:00:21:17:61:f6:8d:
1b:79:86:57:ff:b9:ef:33:54:d3:19:c4:eb:14:fa:88:a8:8a:
90:21:06:1c:17:b2:78:6b:bb:e8:ea:f4:b7:48:1c:ab:9f:8e:
a0:0f:6a:a7:14:85:70:a6:0b:60:c5:a2:74:04:61:da:cd:ef:
bc:37:fa:41:cc:48:cd:c7:a4:6d:81:89:16:2e:db:be:89:fe:
e5:e9:cf:c8:b7:06:74:8a:fa:f8:ad:4f:3f:b7:ca:37:99:57:
9e:a4:06:a1:44:10:a2:ab:db:e7:4a:e2:c0:70:c3:52:c7:fe:
ab:44:34:52:e9:2a:41:93:e8:23:a9:92:44:e4:74:3b:40:09:
77:dd:37:78:6d:35:76:51:19:d2:63:17:38:1e:d9:90:24:52:
40:f2:cf:36:30:72:34:ee:e5:95:19:b7:3a:0c:98:1e:a3:18:
b6:f9:1d:3c:62:80:12:f9:ac:40:27:68:25:66:ff:77:59:73:
cd:8a:4a:e4:1c:17:38:ed:f8:0c:90:38:a0:ab:ea:e6:c5:68:
c3:4e:3c:f8:ac:7c:8e:ed:8b:1f:5c:0d:a6:57:26:29:3e:b8:
13:da:12:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu/g5DVJjhAxqEcuRQh0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZGIyM2E1ZTI1NTBmZjk3NGNhNWY0MTkxN2FjODY3ZDUw
ZTM1ZTkwHhcNMjUwODIzMDcwMjAyWhcNMjUwODI0MDcwMjAyWjAzMTEwLwYDVQQD
EyhjMGU2ZjI5NWFhNzQ3NWUxNWEzNTIyMThmMGY2OGY2YTU3ZjUxN2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDaMJI413frJWsSZK2tiH9y4pfhQ
VMV3uhVoemHsmjyyviW2Hynf84XMIj7dntHEQz8Pbk4rVcqQBylieO6tkVJBRxrI
OPKIzYgxeoLdSxJ3D7NFQGbGuWGUMFk+Nt2kRRHRbHfcC9ox5nQ9OsVWZd7KsoyU
tkshB+PsjbCagkCOIMzubvUIWnIaZjn2DP5wvnP9zOT/QgUcnakLmUdP8cynPa/9
WOycy2cJG1CKctUAKo0vAI5+IzKmKoJMTVf8xr/qRHOP6Uf8xPf3YrMkWSzwutSY
cNzs1QVjQrrQOx0WlpYR+zbO6hZjxJ8943FDI+/BUN0p0z/fuHhh/66ZfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDm8pWqdHXhWjUiGPD2j2pX9RfEMB8GA1UdIwQY
MBaAFAfbI6XiVQ/5dMpfQZF6yGfVDjXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wMzA1Y2QtMGQ3MS00MjBhLWJlMzgt
NWNjZDVlOWNlMDA0LzEvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8wMzA1Y2QtMGQ3MS00MjBhLWJlMzgtNWNjZDVlOWNlMDA0
LzEvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFH6Hgwc
s0ajAslMY5U+hXJ/Z/swbOTKG/EMEP2NACEXYfaNG3mGV/+57zNU0xnE6xT6iKiK
kCEGHBeyeGu76Or0t0gcq5+OoA9qpxSFcKYLYMWidARh2s3vvDf6QcxIzcekbYGJ
Fi7bvon+5enPyLcGdIr6+K1PP7fKN5lXnqQGoUQQoqvb50riwHDDUsf+q0Q0Uukq
QZPoI6mSROR0O0AJd903eG01dlEZ0mMXOB7ZkCRSQPLPNjByNO7llRm3OgyYHqMY
tvkdPGKAEvmsQCdoJWb/d1lzzYpK5BwXOO34DJA4oKvq5sVow048+Kx8ju2LH1wN
plcmKT64E9oSxA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:06 2025 by rpki-client