Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
File: IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft (raw, json)
Hash identifier: fj7G9hv+Vr7q+XUDgRstthv7SM9O2O0EqkYDD26H2Qo=
Subject key identifier: 74:FD:FF:26:70:B0:BF:8B:B5:4F:69:27:BD:F6:12:D9:09:E6:74:49
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Certificate issuer: /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial: 0198D6981A7FC4CDB5563B9C0D167B27A2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:29 +0000
Manifest this update: Sat 23 Aug 2025 11:02:29 +0000
Manifest next update: Sun 24 Aug 2025 11:02:29 +0000
Files and hashes: 1: IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl (hash: ZMJ02rHJbyVvUe3owHE2hTtxfsqw3LlhXfTwBoFpXAo=)
2: J46kuUmF_sgE0zFOUz0hgWBo52M.roa (hash: jPrLPvaHVRm/LYCKQXvlkQimqCpYkjCK3g37WDkRjQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:1a:7f:c4:cd:b5:56:3b:9c:0d:16:7b:27:a2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Validity
Not Before: Aug 23 11:02:29 2025 GMT
Not After : Aug 24 11:02:29 2025 GMT
Subject: CN=74fdff2670b0bf8bb54f6927bdf612d909e67449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:9c:54:37:c0:70:37:33:5d:ea:9b:76:5e:
d9:14:a8:84:71:b0:02:ad:92:2c:f8:aa:80:ad:ec:
11:fe:b3:08:49:8a:50:01:cc:aa:ec:ca:3a:1c:1c:
1d:68:2c:06:be:cf:f6:69:3b:2e:ea:0a:39:02:6c:
38:74:7d:e9:e7:f1:30:ab:83:15:4f:e1:86:9c:29:
c5:46:db:a3:66:b9:3e:0a:8a:09:a1:d2:e8:fb:b8:
1f:85:db:09:ba:f2:be:2b:22:7d:11:2c:c6:9b:cf:
c7:9e:10:a4:cf:95:b4:22:a4:6a:e4:5c:72:64:b2:
09:e3:15:e2:16:87:e2:3e:83:cc:7a:4a:b5:f7:5e:
48:93:4c:ad:cf:8b:48:bd:3e:93:e1:d6:35:62:a9:
91:65:ec:c9:55:8b:91:e3:6e:56:a8:8a:cb:63:4a:
3c:18:4d:f0:9e:20:34:4a:24:55:2c:f2:ba:06:82:
7e:b5:77:29:8a:06:98:86:d3:18:3a:bb:22:7b:53:
4f:6a:82:8c:be:15:e1:f6:97:8e:e6:45:33:a1:10:
06:26:36:9a:b8:8b:a1:21:dc:ec:7d:5c:d8:b7:80:
8d:ab:0d:e5:26:f9:d2:84:91:70:43:fc:5c:a6:00:
50:80:da:7d:5b:4e:ea:b3:f8:b8:d2:9a:14:73:de:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FD:FF:26:70:B0:BF:8B:B5:4F:69:27:BD:F6:12:D9:09:E6:74:49
X509v3 Authority Key Identifier:
keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:98:9b:c4:dc:64:85:8e:52:04:37:fa:b9:b2:d3:35:85:bd:
92:48:37:d4:38:a8:dd:9b:7f:c3:16:71:70:c8:b7:64:b4:d0:
bb:9e:60:8d:e2:59:58:53:aa:4c:89:f5:33:02:f1:05:44:2c:
02:1e:fc:53:c0:2a:d9:ed:f7:03:49:58:d1:ec:a6:3e:c1:10:
9b:76:0a:56:d0:8f:bf:af:c1:b6:59:cd:f8:ee:c2:80:b8:42:
af:4c:46:ff:87:94:37:87:c6:21:58:29:d8:b8:28:93:b4:ad:
3f:93:9a:d3:71:39:93:a6:54:6b:cb:53:49:ed:e8:6e:67:c7:
26:b7:a5:32:f3:41:a7:e0:04:71:ef:7c:1b:57:fd:92:32:98:
ff:a4:7c:cb:89:56:aa:4e:c1:a0:03:6a:f7:95:4a:c8:ca:41:
cb:7a:0e:6e:c9:cb:2c:4f:c1:91:d8:ab:81:a7:ac:f2:51:23:
b9:8c:9a:a1:00:e1:43:92:56:5d:09:b4:36:50:a1:11:77:95:
c8:d3:33:f2:33:ac:34:2f:17:f8:a2:4c:31:a9:45:c4:93:3b:
6f:08:71:3e:ad:2c:21:1b:cc:1d:5d:3d:42:bd:1c:c1:ee:dd:
1c:58:28:ed:81:07:92:e0:34:a8:bb:31:fc:c9:8f:14:a4:f8:
6f:32:e4:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmBp/xM21VjucDRZ7J6LSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMzFiYzdmNzFiYjBkMWE4NTY2ZmQ0NjA0MjE0NTA3YzBk
NDcxMWIwHhcNMjUwODIzMTEwMjI5WhcNMjUwODI0MTEwMjI5WjAzMTEwLwYDVQQD
Eyg3NGZkZmYyNjcwYjBiZjhiYjU0ZjY5MjdiZGY2MTJkOTA5ZTY3NDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG6cVDfAcDczXeqbdl7ZFKiEcbAC
rZIs+KqArewR/rMISYpQAcyq7Mo6HBwdaCwGvs/2aTsu6go5Amw4dH3p5/Ewq4MV
T+GGnCnFRtujZrk+CooJodLo+7gfhdsJuvK+KyJ9ESzGm8/HnhCkz5W0IqRq5Fxy
ZLIJ4xXiFofiPoPMekq1915Ik0ytz4tIvT6T4dY1YqmRZezJVYuR425WqIrLY0o8
GE3wniA0SiRVLPK6BoJ+tXcpigaYhtMYOrsie1NPaoKMvhXh9peO5kUzoRAGJjaa
uIuhIdzsfVzYt4CNqw3lJvnShJFwQ/xcpgBQgNp9W07qs/i40poUc95wnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHT9/yZwsL+LtU9pJ732EtkJ5nRJMB8GA1UdIwQY
MBaAFCAxvH9xuw0ahWb9RgQhRQfA1HEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSURHOGYzRzdEUnFGWnYxR0JDRkZCOERVY1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNDE1MTktNDZmYy00NGRhLWE5YWYt
ZTNmNGJiY2JiYmQ3LzEvSURHOGYzRzdEUnFGWnYxR0JDRkZCOERVY1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iNDE1MTktNDZmYy00NGRhLWE5YWYtZTNmNGJiY2JiYmQ3
LzEvSURHOGYzRzdEUnFGWnYxR0JDRkZCOERVY1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpibxNxk
hY5SBDf6ubLTNYW9kkg31Dio3Zt/wxZxcMi3ZLTQu55gjeJZWFOqTIn1MwLxBUQs
Ah78U8Aq2e33A0lY0eymPsEQm3YKVtCPv6/BtlnN+O7CgLhCr0xG/4eUN4fGIVgp
2Lgok7StP5Oa03E5k6ZUa8tTSe3obmfHJrelMvNBp+AEce98G1f9kjKY/6R8y4lW
qk7BoANq95VKyMpBy3oObsnLLE/Bkdirgaes8lEjuYyaoQDhQ5JWXQm0NlChEXeV
yNMz8jOsNC8X+KJMMalFxJM7bwhxPq0sIRvMHV09Qr0cwe7dHFgo7YEHkuA0qLsx
/MmPFKT4bzLkiw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:31 2025 by rpki-client