Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier: bVc0ZxxHg+FXutUK3C3wfR/+hBvpMYaXUItn+vIfUvY=
Subject key identifier: B8:C8:09:27:27:5C:FB:53:F3:27:A7:F9:E9:76:3C:27:B5:3E:2F:03
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 0199FE7D8B2AE76FAD0CCF24EA984336FEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number: 0887
Signing time: Sun 19 Oct 2025 22:01:04 +0000
Manifest this update: Sun 19 Oct 2025 22:01:04 +0000
Manifest next update: Mon 20 Oct 2025 22:01:04 +0000
Files and hashes: 1: a9ofITqqYa60yp597jFNJiFfkDk.roa (hash: +VNpTQzKJJZj8EZ6senrGu1+xne4/xLouiN0wCmmxbU=)
2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: ZXTx3Fz8M1k0bjzaoccsERlTpXJRZphA+qZA8b4UazI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:8b:2a:e7:6f:ad:0c:cf:24:ea:98:43:36:fe:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Oct 19 22:01:04 2025 GMT
Not After : Oct 20 22:01:04 2025 GMT
Subject: CN=b8c80927275cfb53f327a7f9e9763c27b53e2f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:36:1e:8c:d8:a9:97:82:a5:87:94:49:64:
2c:11:b5:26:24:77:eb:da:ac:ae:dc:df:90:4f:98:
17:69:cd:50:91:1c:15:9f:4d:cc:88:ac:55:ca:35:
80:fd:49:f0:95:bc:c9:5f:5a:06:36:66:28:7a:35:
6e:c0:4d:ee:69:36:9b:78:95:2c:28:0b:5e:e8:3b:
eb:34:6e:ef:34:04:f6:ff:05:5c:2f:5a:8a:74:fe:
e8:23:53:15:ea:93:2c:c1:5c:11:b6:d0:79:89:91:
67:73:69:42:91:23:09:78:b0:0e:0d:70:8f:77:a9:
fc:78:41:b5:3b:28:85:51:d5:fa:dd:37:38:af:80:
c8:b5:ae:36:fd:40:fb:d2:e4:5a:53:c4:f6:2a:ff:
7c:11:e8:ad:ce:87:e7:e2:a4:13:d0:09:fa:da:36:
be:15:ee:6a:99:dd:18:ab:bf:d8:c0:a8:a2:c0:dd:
79:5c:84:89:ad:88:f4:7c:3e:6f:96:81:52:47:11:
8b:9c:b6:8f:a7:74:36:57:8a:43:1b:5e:43:b8:bb:
c8:fd:1d:8c:9c:18:e7:a7:94:f4:5f:45:84:9d:5b:
a9:5d:3c:7f:b6:04:55:60:72:4a:51:23:55:84:bd:
03:94:70:08:34:f2:66:d1:cc:04:cd:ca:9d:8e:39:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C8:09:27:27:5C:FB:53:F3:27:A7:F9:E9:76:3C:27:B5:3E:2F:03
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:84:69:05:76:0f:a6:11:db:89:f4:4d:39:3b:1b:a3:c2:da:
71:72:b6:d3:76:8a:a6:d9:0a:e7:3c:dc:35:b5:3a:84:4f:86:
26:d0:32:a2:f3:1c:cf:77:76:d6:24:2d:de:ba:c4:b1:c7:ac:
f0:b1:61:02:78:6a:f0:f0:e5:47:8c:12:b4:67:a0:71:d4:00:
e7:2b:1f:5e:cd:5b:81:63:c8:1c:00:69:d1:84:00:a1:19:46:
4d:de:39:a5:c7:19:4c:bb:b8:9b:eb:26:4c:5e:cf:c9:74:f4:
64:9f:74:ad:7a:83:2e:20:21:91:53:33:c9:de:f9:86:45:23:
74:24:d4:96:86:43:6f:4a:2b:79:10:ba:0e:dd:ee:77:ca:70:
ff:ab:fc:b2:8f:ba:56:b4:55:83:bc:ca:47:8b:da:fb:5d:b1:
a4:d8:19:2a:c7:12:02:3f:74:36:80:91:2f:56:36:12:cf:a8:
49:7f:ba:22:73:0c:f6:76:8e:0c:95:cf:44:3c:d9:75:4a:57:
a6:1f:b7:79:8d:bd:b4:4f:0f:44:9a:ea:1f:79:1b:84:72:30:
03:9b:13:97:27:e0:6e:d6:3e:4a:54:41:d7:da:83:2e:4a:cb:
18:7e:c3:0d:7b:31:9a:33:c3:18:e7:3b:75:8c:1d:71:5c:5f:
00:a6:4a:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fYsq52+tDM8k6phDNv7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjc2MzIxYzhkNDY5ZWUzYmEwMjM5MjBiMzcyY2NkYTVk
ZTllMGYwHhcNMjUxMDE5MjIwMTA0WhcNMjUxMDIwMjIwMTA0WjAzMTEwLwYDVQQD
EyhiOGM4MDkyNzI3NWNmYjUzZjMyN2E3ZjllOTc2M2MyN2I1M2UyZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uw2HozYqZeCpYeUSWQsEbUmJHfr
2qyu3N+QT5gXac1QkRwVn03MiKxVyjWA/UnwlbzJX1oGNmYoejVuwE3uaTabeJUs
KAte6DvrNG7vNAT2/wVcL1qKdP7oI1MV6pMswVwRttB5iZFnc2lCkSMJeLAODXCP
d6n8eEG1OyiFUdX63Tc4r4DIta42/UD70uRaU8T2Kv98Eeitzofn4qQT0An62ja+
Fe5qmd0Yq7/YwKiiwN15XISJrYj0fD5vloFSRxGLnLaPp3Q2V4pDG15DuLvI/R2M
nBjnp5T0X0WEnVupXTx/tgRVYHJKUSNVhL0DlHAINPJm0cwEzcqdjjkHjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjICScnXPtT8yen+el2PCe1Pi8DMB8GA1UdIwQY
MBaAFK63YyHI1GnuO6Ajkgs3LM2l3p4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAt
YzdkY2MyMzkxY2M5LzEvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAtYzdkY2MyMzkxY2M5
LzEvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYRpBXYP
phHbifRNOTsbo8LacXK203aKptkK5zzcNbU6hE+GJtAyovMcz3d21iQt3rrEsces
8LFhAnhq8PDlR4wStGegcdQA5ysfXs1bgWPIHABp0YQAoRlGTd45pccZTLu4m+sm
TF7PyXT0ZJ90rXqDLiAhkVMzyd75hkUjdCTUloZDb0oreRC6Dt3ud8pw/6v8so+6
VrRVg7zKR4va+12xpNgZKscSAj90NoCRL1Y2Es+oSX+6InMM9naODJXPRDzZdUpX
ph+3eY29tE8PRJrqH3kbhHIwA5sTlyfgbtY+SlRB19qDLkrLGH7DDXsxmjPDGOc7
dYwdcVxfAKZKkQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:37 2025 by rpki-client