Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File: _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier: J1h3SqnNcC88Sd7HPWPiQVZGhY5rxjA+LnBeptqmlLE=
Subject key identifier: C2:DC:37:28:74:05:33:41:30:E2:B8:05:45:F5:B7:86:AC:F7:84:69
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 0198D5835ED9A425C1D83924625364FE5C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number: 0C8D
Signing time: Sat 23 Aug 2025 06:00:13 +0000
Manifest this update: Sat 23 Aug 2025 06:00:13 +0000
Manifest next update: Sun 24 Aug 2025 06:00:13 +0000
Files and hashes: 1: EryZGhKHOKFejsNYtsHoCrBOwlI.roa (hash: XPrcWsidSTpQokDPJh6WTZK3lvnDmP0xxlT9T9iBNGQ=)
2: Q8FRv-AW6LCPe-NhY9NXN5LnC4o.roa (hash: N2JyPxT8+m5HQDRPSXJdJM2oBFZFnSgrTMkI9DghAaA=)
3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: Hn39qxrYoHRFw4shD8TPZKYn8zCW9fTB6aYxgmATgxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5e:d9:a4:25:c1:d8:39:24:62:53:64:fe:5c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Aug 23 06:00:13 2025 GMT
Not After : Aug 24 06:00:13 2025 GMT
Subject: CN=c2dc37287405334130e2b80545f5b786acf78469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:d7:87:a4:c8:95:d1:1e:5b:33:d4:84:06:
3f:3a:cb:c5:ec:86:7e:09:15:c5:b5:a0:59:ed:8c:
c7:70:b7:5f:ee:80:54:cd:74:fe:36:57:eb:57:1e:
40:c9:c4:6b:27:9c:9a:1f:33:67:42:4f:32:81:4f:
e2:77:16:2b:ac:17:3c:28:4b:b7:6b:f6:f9:d6:e9:
33:8f:d3:ee:ee:bb:9a:b6:3e:8e:7e:59:3d:d9:50:
58:82:41:14:77:90:78:c0:ef:2a:eb:42:76:de:53:
c8:0e:09:53:e4:e2:b5:41:4a:7d:8f:75:22:ec:67:
4d:a7:23:8c:7c:79:32:74:d6:fa:42:7f:54:3e:17:
b2:e1:1b:97:b8:a2:b3:d4:d4:f7:00:6e:f1:c9:86:
6b:30:2f:33:ed:80:89:41:8b:c6:d5:bb:8f:0c:38:
3f:1e:36:82:b0:d3:40:e5:62:0b:94:bc:01:25:bc:
f9:9d:b4:2e:16:58:b8:34:12:64:7b:65:28:7f:34:
99:b1:51:3a:4a:67:6b:f9:30:d1:e4:bc:13:06:fc:
47:3e:3c:26:4d:c4:27:1e:70:df:93:d4:d6:69:72:
6f:40:71:40:d0:23:75:1b:20:7a:e6:19:b1:6f:db:
3b:40:db:1f:d6:a5:bb:34:9a:e5:a7:6c:7d:0a:ca:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DC:37:28:74:05:33:41:30:E2:B8:05:45:F5:B7:86:AC:F7:84:69
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c1:6e:1c:07:d2:66:61:18:b4:60:dc:e9:1d:50:74:fc:85:
7b:42:8a:55:54:7c:14:1d:97:05:51:79:37:85:88:5e:11:51:
75:63:22:90:0d:3e:c7:6b:ad:fb:c3:a8:43:bb:17:a0:01:55:
a2:1c:d3:cc:b3:b4:40:7f:54:ad:86:c6:87:16:84:ed:05:a1:
6b:34:b9:fa:6a:53:49:08:ea:41:36:87:92:71:2b:60:44:61:
e4:ca:af:4a:d6:f5:d3:7f:dd:70:9a:3d:4f:ef:1e:ea:35:97:
dd:c3:bb:b3:6e:7b:ec:20:0b:f2:aa:00:47:5d:e7:7f:18:82:
8e:a3:d5:5c:4e:a5:e5:58:3c:47:bf:c5:7e:ab:6e:b4:5f:75:
0b:1c:f8:13:47:cb:2c:b6:44:de:37:24:1e:31:f8:55:f7:43:
db:ef:57:5b:64:39:89:3d:3e:c0:b7:c3:9b:ff:6a:7b:96:a5:
f5:3c:3f:28:ff:c6:93:90:c0:7f:74:21:a8:ab:cd:eb:83:a1:
e6:9c:6c:ed:db:21:b0:50:f1:ea:ff:c7:3c:3d:8a:70:88:ed:
21:27:2f:2a:6d:11:1d:66:47:70:63:90:59:e5:6e:d1:12:1a:
24:3f:52:5f:1d:38:b0:e1:70:58:11:08:ac:54:de:09:31:97:
0e:16:72:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg17ZpCXB2DkkYlNk/lxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkN2QxY2IxMTQ5NGViMzg5OGYxMGQzZDYzNWJlNzVmMTZi
MmRjNTEwHhcNMjUwODIzMDYwMDEzWhcNMjUwODI0MDYwMDEzWjAzMTEwLwYDVQQD
EyhjMmRjMzcyODc0MDUzMzQxMzBlMmI4MDU0NWY1Yjc4NmFjZjc4NDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhXXh6TIldEeWzPUhAY/OsvF7IZ+
CRXFtaBZ7YzHcLdf7oBUzXT+NlfrVx5AycRrJ5yaHzNnQk8ygU/idxYrrBc8KEu3
a/b51ukzj9Pu7ruatj6Oflk92VBYgkEUd5B4wO8q60J23lPIDglT5OK1QUp9j3Ui
7GdNpyOMfHkydNb6Qn9UPhey4RuXuKKz1NT3AG7xyYZrMC8z7YCJQYvG1buPDDg/
HjaCsNNA5WILlLwBJbz5nbQuFli4NBJke2UofzSZsVE6Smdr+TDR5LwTBvxHPjwm
TcQnHnDfk9TWaXJvQHFA0CN1GyB65hmxb9s7QNsf1qW7NJrlp2x9CsrqqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLcNyh0BTNBMOK4BUX1t4as94RpMB8GA1UdIwQY
MBaAFP19HLEUlOs4mPENPWNb518WstxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hNmMxNTItMzdkMy00Zjg2LThmNmUt
NzY1OWJmODZhYzRjLzEvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hNmMxNTItMzdkMy00Zjg2LThmNmUtNzY1OWJmODZhYzRj
LzEvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcFuHAfS
ZmEYtGDc6R1QdPyFe0KKVVR8FB2XBVF5N4WIXhFRdWMikA0+x2ut+8OoQ7sXoAFV
ohzTzLO0QH9UrYbGhxaE7QWhazS5+mpTSQjqQTaHknErYERh5MqvStb103/dcJo9
T+8e6jWX3cO7s2577CAL8qoAR13nfxiCjqPVXE6l5Vg8R7/FfqtutF91Cxz4E0fL
LLZE3jckHjH4VfdD2+9XW2Q5iT0+wLfDm/9qe5al9Tw/KP/Gk5DAf3QhqKvN64Oh
5pxs7dshsFDx6v/HPD2KcIjtIScvKm0RHWZHcGOQWeVu0RIaJD9SXx04sOFwWBEI
rFTeCTGXDhZyuw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:09 2025 by rpki-client