Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: 5k0wFusS1H1Vv6pnJILSopBUQVoNXLm8qFaMIcCK7Ss=
Subject key identifier: 08:10:6E:82:A1:4F:F7:41:52:3C:62:C4:E6:31:20:EC:7E:84:0F:E8
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 0198D4A8490351FB8FA5D433A1F97FB41AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 121A
Signing time: Sat 23 Aug 2025 02:00:55 +0000
Manifest this update: Sat 23 Aug 2025 02:00:55 +0000
Manifest next update: Sun 24 Aug 2025 02:00:55 +0000
Files and hashes: 1: 6nn-10KbmPgCc6evrpm-TWzQPN8.roa (hash: o4INP15AI01CmXxJKcY1+iiTvm9rSpAtz6YN4QZ0dG0=)
2: ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa (hash: rQ9TfGtesxjebHDlAk08FQJ/mYhxwGmDbJSu6X6Tu58=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: Rjx39dz0U0z/c9d1qdyFSQFbCHNymZRs36iCynOyMUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:49:03:51:fb:8f:a5:d4:33:a1:f9:7f:b4:1a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Aug 23 02:00:55 2025 GMT
Not After : Aug 24 02:00:55 2025 GMT
Subject: CN=08106e82a14ff741523c62c4e63120ec7e840fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:73:45:18:bb:20:83:df:00:5f:67:8d:b8:
21:2c:b9:b1:64:db:b3:55:2d:33:9e:0c:cd:93:3e:
14:8b:f8:6b:f0:4e:71:c1:3e:7b:52:1f:4a:6f:ba:
a2:f8:48:e3:39:ce:2a:55:c6:94:01:19:04:c6:e3:
a7:51:6f:22:59:1d:35:3d:6c:19:26:b9:22:0a:ea:
86:cb:12:12:e9:9f:fe:4e:df:3b:ba:00:54:1c:36:
a4:bc:ed:2c:24:06:73:36:e1:75:6b:e7:01:86:84:
74:87:2b:82:1d:c1:55:d6:a5:f2:dd:f9:3f:dc:46:
a8:4e:2a:cf:68:8d:99:61:0e:bc:22:aa:3a:8d:ea:
a3:67:fc:98:48:95:b2:f4:c6:7f:03:a3:47:88:c8:
2f:ce:41:3d:53:7e:ca:97:41:5e:5b:3f:d6:5d:78:
84:b5:66:b1:b6:15:88:9c:e7:7c:69:46:da:f2:97:
fd:d1:53:1e:04:ad:e4:13:12:85:f5:3e:4c:12:aa:
91:80:6b:5d:e9:df:05:ab:c5:0c:15:63:0a:7e:b8:
11:0a:d9:71:dc:e5:6c:2e:40:31:b5:91:98:77:8c:
d1:d7:65:e1:36:da:27:61:65:5a:2e:e4:09:00:bd:
8f:1f:bc:79:5e:3c:eb:28:09:ca:ce:80:74:00:48:
77:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:10:6E:82:A1:4F:F7:41:52:3C:62:C4:E6:31:20:EC:7E:84:0F:E8
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ae:3b:d8:91:a4:7c:10:e6:e2:2b:75:38:b7:d2:3f:1b:8a:
d6:53:54:53:a1:45:5d:6b:97:16:64:cb:52:62:2d:9a:8e:ba:
f8:00:89:a6:3d:75:32:ee:e7:16:33:0c:d9:0d:2a:e1:d8:93:
46:7f:01:c9:d0:46:d1:80:07:09:a5:c5:f8:d5:4e:82:20:89:
2c:68:3a:52:a3:50:a6:6d:f5:62:4e:86:a6:e8:cf:ff:e6:bb:
f8:3e:3f:12:27:a3:23:f8:e5:76:0f:3e:bd:b7:c3:12:29:ea:
44:3a:5e:ed:b0:06:f9:60:5a:08:39:6d:80:92:e7:6a:97:99:
9e:f0:6f:ef:38:20:d9:33:f3:24:e7:d7:77:28:3e:a1:55:1a:
68:35:89:26:e3:b8:68:15:d5:6a:0a:b5:ea:47:b6:fb:fb:36:
d7:d0:13:bf:5f:d5:e3:82:2d:06:0f:18:76:ab:06:7b:cf:6f:
7c:a2:db:6f:52:fa:a1:56:4f:dc:f0:05:a3:8b:ad:e1:80:69:
ee:70:c9:bb:da:c2:5e:f7:fc:12:22:f9:62:86:45:cd:c2:5b:
1d:ad:00:fb:b8:a8:d9:cb:e3:d2:60:90:97:f4:55:bc:2e:73:
92:59:4f:2e:02:26:44:80:fa:48:3b:97:6e:d7:ff:5b:ed:8d:
31:bc:ae:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqEkDUfuPpdQzofl/tBrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYzhhOWJiYzJiYzNhNGM4YmI4NzZjY2RkOTVmZDg2NTI1
MGI2ZGIwHhcNMjUwODIzMDIwMDU1WhcNMjUwODI0MDIwMDU1WjAzMTEwLwYDVQQD
EygwODEwNmU4MmExNGZmNzQxNTIzYzYyYzRlNjMxMjBlYzdlODQwZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAlzRRi7IIPfAF9njbghLLmxZNuz
VS0zngzNkz4Ui/hr8E5xwT57Uh9Kb7qi+EjjOc4qVcaUARkExuOnUW8iWR01PWwZ
JrkiCuqGyxIS6Z/+Tt87ugBUHDakvO0sJAZzNuF1a+cBhoR0hyuCHcFV1qXy3fk/
3EaoTirPaI2ZYQ68Iqo6jeqjZ/yYSJWy9MZ/A6NHiMgvzkE9U37Kl0FeWz/WXXiE
tWaxthWInOd8aUba8pf90VMeBK3kExKF9T5MEqqRgGtd6d8Fq8UMFWMKfrgRCtlx
3OVsLkAxtZGYd4zR12XhNtonYWVaLuQJAL2PH7x5XjzrKAnKzoB0AEh3xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgQboKhT/dBUjxixOYxIOx+hA/oMB8GA1UdIwQY
MBaAFK3IqbvCvDpMi7h2zN2V/YZSULbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84Njc3MmUtNWU2Yi00MDZjLThhOWUt
MTY1NGE4MGRiYzM2LzEvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84Njc3MmUtNWU2Yi00MDZjLThhOWUtMTY1NGE4MGRiYzM2
LzEvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhq472JGk
fBDm4it1OLfSPxuK1lNUU6FFXWuXFmTLUmItmo66+ACJpj11Mu7nFjMM2Q0q4diT
Rn8BydBG0YAHCaXF+NVOgiCJLGg6UqNQpm31Yk6GpujP/+a7+D4/EiejI/jldg8+
vbfDEinqRDpe7bAG+WBaCDltgJLnapeZnvBv7zgg2TPzJOfXdyg+oVUaaDWJJuO4
aBXVagq16ke2+/s219ATv1/V44ItBg8YdqsGe89vfKLbb1L6oVZP3PAFo4ut4YBp
7nDJu9rCXvf8EiL5YoZFzcJbHa0A+7io2cvj0mCQl/RVvC5zkllPLgImRID6SDuX
btf/W+2NMbyuyw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:11 2025 by rpki-client