Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: 8COOdkxj/uaf2qo+G+ZgZDT9JNbnBpS54T2nuJ0oGAM=
Subject key identifier: F6:BE:3C:AB:0E:E4:6B:EF:0D:5C:15:D5:BC:EA:18:A1:D3:1A:0C:9C
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 0198D4A7A82729F589CCA69DDB0E61ACE2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 0973
Signing time: Sat 23 Aug 2025 02:00:13 +0000
Manifest this update: Sat 23 Aug 2025 02:00:13 +0000
Manifest next update: Sun 24 Aug 2025 02:00:13 +0000
Files and hashes: 1: HdoRWbIURzhfnaDDK7ySYFVN2ik.roa (hash: HVbpXptfvhv4ApWMw5QWNQjQp3Pw35JC0KFrZynPEas=)
2: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: yKuF6bO5juIVpYbOq2u8dkPZachRnUsCu/GXs45jE/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a8:27:29:f5:89:cc:a6:9d:db:0e:61:ac:e2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Aug 23 02:00:13 2025 GMT
Not After : Aug 24 02:00:13 2025 GMT
Subject: CN=f6be3cab0ee46bef0d5c15d5bcea18a1d31a0c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:9e:c8:52:75:4b:dd:6e:09:b4:1b:4d:08:
46:c8:5f:2b:4a:02:9c:1d:ab:cc:0f:37:51:13:80:
02:75:c8:2c:71:0c:1a:fb:5c:fa:9b:7b:1c:11:83:
19:2f:34:6b:03:90:c3:58:31:94:b6:0c:7d:12:ae:
74:fe:ca:ce:51:20:9b:38:77:21:3e:82:e1:20:58:
ee:58:20:eb:f6:74:07:1b:8d:99:d3:a5:ea:9a:5d:
59:76:38:9a:2a:ca:89:9f:cd:e2:f8:3f:ca:3b:b3:
ef:c2:62:e7:df:6f:6d:e4:93:cb:f7:06:6f:0a:cc:
9e:2b:ad:2f:8c:e4:54:8d:74:0c:2f:9c:1d:75:e9:
06:8e:1e:26:12:c7:b6:57:c9:a0:b8:25:d5:39:c6:
aa:52:df:b1:14:7b:9c:3f:59:dc:e7:31:b8:e7:3e:
b6:ea:fe:32:2c:56:6b:3b:05:cb:62:65:3a:77:9a:
5b:8f:77:80:43:fe:b0:a2:2e:ed:02:34:71:4c:d1:
9f:32:11:0a:43:92:61:47:d1:b7:17:d2:73:a8:57:
ec:bd:c7:0d:e1:e6:40:fe:1c:25:bd:eb:68:73:6f:
5b:41:bf:78:ef:2d:81:73:22:2b:f0:57:c8:96:53:
66:19:ef:1b:9b:7c:d0:bb:9f:3e:86:af:e0:8d:84:
39:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BE:3C:AB:0E:E4:6B:EF:0D:5C:15:D5:BC:EA:18:A1:D3:1A:0C:9C
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5d:98:ef:05:7a:6e:92:7f:32:7f:d2:de:c9:73:cb:42:fa:
73:64:db:f2:64:0e:35:80:e1:d9:f2:8e:87:fb:e5:ac:07:0b:
a1:cb:b1:4b:c9:20:79:a6:26:e3:3f:9e:dc:05:5f:89:24:70:
c8:ca:a8:6c:b6:47:76:a5:17:af:2d:36:e6:27:79:9a:e2:b8:
07:54:36:f2:3c:03:d8:30:19:5a:85:97:49:74:fe:8f:4e:33:
3e:a4:5c:2f:de:06:f6:57:10:5b:9d:cb:3f:4a:69:dc:bf:32:
e4:ec:2f:17:89:83:a5:69:89:17:7f:11:b1:91:1f:43:8e:05:
00:41:5e:7a:48:22:04:02:e2:ba:13:c8:0a:b3:1f:13:e2:96:
5d:e0:45:47:88:e0:f6:83:50:49:00:d2:f5:1b:fd:47:fb:a6:
76:94:4e:43:b4:0b:77:5c:58:58:7b:5e:a1:e5:6f:c7:fb:ae:
68:b6:f7:4f:b8:42:16:27:5b:f0:2f:ac:79:a1:4e:ba:44:e9:
30:14:ed:1f:d0:22:7d:9f:5e:91:fa:83:21:80:3f:8f:a9:2d:
0b:cd:81:05:83:71:6f:fe:da:04:59:7f:70:5e:a3:d3:e9:d2:
b6:e2:1e:79:18:2f:9f:d3:f7:af:1c:98:21:36:67:fa:a9:1e:
e3:92:20:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp6gnKfWJzKad2w5hrOLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx
YTkyMzMwHhcNMjUwODIzMDIwMDEzWhcNMjUwODI0MDIwMDEzWjAzMTEwLwYDVQQD
EyhmNmJlM2NhYjBlZTQ2YmVmMGQ1YzE1ZDViY2VhMThhMWQzMWEwYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCueyFJ1S91uCbQbTQhGyF8rSgKc
HavMDzdRE4ACdcgscQwa+1z6m3scEYMZLzRrA5DDWDGUtgx9Eq50/srOUSCbOHch
PoLhIFjuWCDr9nQHG42Z06Xqml1ZdjiaKsqJn83i+D/KO7PvwmLn329t5JPL9wZv
CsyeK60vjORUjXQML5wddekGjh4mEse2V8mguCXVOcaqUt+xFHucP1nc5zG45z62
6v4yLFZrOwXLYmU6d5pbj3eAQ/6woi7tAjRxTNGfMhEKQ5JhR9G3F9JzqFfsvccN
4eZA/hwlvetoc29bQb947y2BcyIr8FfIllNmGe8bm3zQu58+hq/gjYQ5pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPa+PKsO5GvvDVwV1bzqGKHTGgycMB8GA1UdIwQY
MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt
NWFkZmUzMGZmZGE1LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1
LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkF2Y7wV6
bpJ/Mn/S3slzy0L6c2Tb8mQONYDh2fKOh/vlrAcLocuxS8kgeaYm4z+e3AVfiSRw
yMqobLZHdqUXry025id5muK4B1Q28jwD2DAZWoWXSXT+j04zPqRcL94G9lcQW53L
P0pp3L8y5OwvF4mDpWmJF38RsZEfQ44FAEFeekgiBALiuhPICrMfE+KWXeBFR4jg
9oNQSQDS9Rv9R/umdpROQ7QLd1xYWHteoeVvx/uuaLb3T7hCFidb8C+seaFOukTp
MBTtH9AifZ9ekfqDIYA/j6ktC82BBYNxb/7aBFl/cF6j0+nStuIeeRgvn9P3rxyY
ITZn+qke45IgrA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:49 2025 by rpki-client