Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: nEvId1abam6n83naHPccNTi8WZVsHEVgWromqAQfAr4=
Subject key identifier: 2A:09:31:1F:4F:6C:54:D1:40:C0:E3:2F:E0:2E:CE:D5:47:20:E7:93
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 0197B8C5C8C19487CC8EA000E74DF2FA5635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 08E0
Signing time: Sat 28 Jun 2025 23:00:59 +0000
Manifest this update: Sat 28 Jun 2025 23:00:59 +0000
Manifest next update: Sun 29 Jun 2025 23:00:59 +0000
Files and hashes: 1: HdoRWbIURzhfnaDDK7ySYFVN2ik.roa (hash: HVbpXptfvhv4ApWMw5QWNQjQp3Pw35JC0KFrZynPEas=)
2: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: ONJ/K6v1kDxij8nmUVkFP3b9S8fuM5qJb43VoNQOvSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:c8:c1:94:87:cc:8e:a0:00:e7:4d:f2:fa:56:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Jun 28 23:00:59 2025 GMT
Not After : Jun 29 23:00:59 2025 GMT
Subject: CN=2a09311f4f6c54d140c0e32fe02eced54720e793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:57:d8:29:66:e6:e1:8d:0c:92:84:fd:77:
6b:19:f8:22:df:20:ec:4d:46:0a:cc:51:c0:4d:01:
ed:6b:17:f2:0d:e1:c2:37:1c:04:ad:67:6c:7c:67:
da:28:d5:9a:e1:af:34:98:f7:ac:dc:33:67:0c:1e:
2e:89:95:fe:56:b6:59:96:31:eb:91:30:b6:b2:95:
3c:a5:e1:c0:e5:23:a0:07:a5:6e:37:17:23:e5:ea:
84:f8:bf:14:67:02:c6:5c:4b:f8:09:02:5b:3c:05:
ce:07:0f:0e:1f:ed:c5:f5:1f:b6:e1:af:41:42:71:
74:7f:37:7c:30:6a:bf:97:a8:fd:79:43:de:7a:fe:
5b:78:96:87:cf:e6:91:d6:b4:96:e7:b2:38:09:0e:
a6:19:64:f3:06:40:23:9a:26:14:85:f4:c1:0f:12:
74:ac:7d:1d:66:6e:84:f6:46:65:b5:16:f8:c1:0f:
10:dc:6b:5a:c3:6b:86:68:e4:72:50:93:d9:f1:4d:
c8:14:75:40:bd:69:b7:3a:27:57:8d:49:be:a2:78:
76:04:7c:90:7d:5b:3a:27:39:d5:9f:48:af:b8:5c:
bb:97:d6:d4:a4:b5:c3:ad:30:3c:62:c9:af:41:93:
98:91:df:78:7d:35:f5:53:5a:92:0d:c0:84:29:c3:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:09:31:1F:4F:6C:54:D1:40:C0:E3:2F:E0:2E:CE:D5:47:20:E7:93
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:96:c8:75:45:23:9e:df:05:0a:16:fa:63:1f:30:e0:6d:e0:
bd:0c:44:70:10:10:6b:b7:be:57:c6:30:af:46:fc:c0:22:27:
76:1f:5e:4b:04:e8:3d:03:72:23:0f:c3:d3:27:23:e9:8c:cd:
5d:e1:78:ac:ef:ba:b2:d5:2d:2a:cc:2f:f2:86:07:a9:70:ab:
c7:fb:f1:0b:19:39:c0:7f:97:3d:25:12:b2:4f:18:36:60:3d:
5f:c8:5c:7c:a7:5e:72:fd:6f:33:44:9b:21:6c:a8:ba:cb:59:
63:bb:3a:5c:12:31:52:06:cc:01:ff:f8:ab:a5:e9:96:c9:11:
26:1e:63:11:b3:72:87:37:c9:96:eb:11:d3:77:a6:fc:bc:23:
8e:a8:90:68:8c:3f:94:5b:be:58:2a:39:38:2e:ae:78:4e:79:
ba:6d:15:01:73:a7:7e:8d:e6:ff:ab:ca:1f:6b:57:2e:03:6f:
89:c0:35:5b:d2:65:cf:44:f1:f4:28:a6:73:30:a8:d8:11:9a:
b7:a3:b8:1f:bf:7c:3c:bc:03:e6:0b:65:3c:4a:ae:91:45:e3:
c6:b2:b0:d6:3c:b8:b9:72:94:e5:d3:d0:f6:c2:2b:58:d5:09:
b4:45:65:23:ef:3b:1d:6c:07:e1:31:0e:fa:26:5d:1d:3a:eb:
54:f0:58:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xcjBlIfMjqAA503y+lY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx
YTkyMzMwHhcNMjUwNjI4MjMwMDU5WhcNMjUwNjI5MjMwMDU5WjAzMTEwLwYDVQQD
EygyYTA5MzExZjRmNmM1NGQxNDBjMGUzMmZlMDJlY2VkNTQ3MjBlNzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01NX2Clm5uGNDJKE/XdrGfgi3yDs
TUYKzFHATQHtaxfyDeHCNxwErWdsfGfaKNWa4a80mPes3DNnDB4uiZX+VrZZljHr
kTC2spU8peHA5SOgB6VuNxcj5eqE+L8UZwLGXEv4CQJbPAXOBw8OH+3F9R+24a9B
QnF0fzd8MGq/l6j9eUPeev5beJaHz+aR1rSW57I4CQ6mGWTzBkAjmiYUhfTBDxJ0
rH0dZm6E9kZltRb4wQ8Q3Gtaw2uGaORyUJPZ8U3IFHVAvWm3OidXjUm+onh2BHyQ
fVs6JznVn0ivuFy7l9bUpLXDrTA8YsmvQZOYkd94fTX1U1qSDcCEKcMvqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoJMR9PbFTRQMDjL+AuztVHIOeTMB8GA1UdIwQY
MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt
NWFkZmUzMGZmZGE1LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1
LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZbIdUUj
nt8FChb6Yx8w4G3gvQxEcBAQa7e+V8Ywr0b8wCIndh9eSwToPQNyIw/D0ycj6YzN
XeF4rO+6stUtKswv8oYHqXCrx/vxCxk5wH+XPSUSsk8YNmA9X8hcfKdecv1vM0Sb
IWyoustZY7s6XBIxUgbMAf/4q6XplskRJh5jEbNyhzfJlusR03em/LwjjqiQaIw/
lFu+WCo5OC6ueE55um0VAXOnfo3m/6vKH2tXLgNvicA1W9Jlz0Tx9CimczCo2BGa
t6O4H798PLwD5gtlPEqukUXjxrKw1jy4uXKU5dPQ9sIrWNUJtEVlI+87HWwH4TEO
+iZdHTrrVPBYlg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:33:39 2025 by rpki-client