Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier: VYM7PP+c3/aDLhBx6neRZIFwank5sgUqc2EBrEBwpXY=
Subject key identifier: 77:8E:79:88:A7:B8:0D:37:7D:DA:7A:EA:2C:D3:FF:DD:71:2D:D0:E2
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial: 0197B88EF305BAD52C268CA13986900346EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number: 0297
Signing time: Sat 28 Jun 2025 22:01:05 +0000
Manifest this update: Sat 28 Jun 2025 22:01:05 +0000
Manifest next update: Sun 29 Jun 2025 22:01:05 +0000
Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: Vtx85joIKr/c2xriutu7fdKBgSN960Bbb739zPzjIPQ=)
2: 9Mc_YHkeRnOleVXlULa1kHSDpsY.roa (hash: vM50N/l+aDNC1xeVIe5zjbI+WcZUV2cPPG76tUoJrmA=)
3: I-0idQ-x8b_iuF_AN1e-P1ZFsto.roa (hash: J959UKPkKfG7mGSEhJQ4lp0ApYm6t4BNil0ibX/rnJ0=)
4: I8X4-fx8YNfYZj3EvfIsATaUGac.roa (hash: c5YWTRrX3QnWTxXe+8t+vVb1UcDfoatadHEMGSgtrjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:f3:05:ba:d5:2c:26:8c:a1:39:86:90:03:46:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
Validity
Not Before: Jun 28 22:01:05 2025 GMT
Not After : Jun 29 22:01:05 2025 GMT
Subject: CN=778e7988a7b80d377dda7aea2cd3ffdd712dd0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:c4:41:8f:ca:95:6f:fe:03:cf:52:64:b0:
67:c5:ef:b0:49:9b:2e:72:a4:42:2f:45:53:32:44:
94:e3:61:30:98:e9:0d:5a:e3:13:41:35:d0:88:43:
af:82:ea:10:5e:d8:c8:0b:43:bd:45:3c:d9:61:90:
b3:40:9a:a6:dc:8b:71:6b:f8:20:97:1a:87:49:86:
cd:00:67:ab:c2:56:c0:ec:bb:43:6c:e1:23:88:a6:
9f:e5:7f:98:c8:75:ce:ea:4e:ed:cc:c1:2f:ba:e8:
d9:77:fe:e8:9e:76:64:1f:87:61:51:66:0a:81:3d:
77:cf:45:b5:8d:75:64:7c:12:b1:ba:0d:68:6b:d4:
62:35:55:2d:5f:9a:95:c0:25:36:32:cb:c4:6f:a0:
25:29:ff:46:6e:3e:8e:f8:e0:09:fc:7c:18:62:5f:
7f:79:32:3b:ab:f6:a0:55:ef:53:f5:d6:f7:03:59:
5a:46:1b:2d:45:de:e1:87:6e:a2:79:f4:8f:0e:2f:
8e:1e:a7:60:0b:f0:e4:4b:6e:82:27:50:ae:4e:d7:
16:a4:7a:26:2e:17:4c:cb:ea:32:c7:5c:e6:c7:71:
ab:e3:0c:51:cf:db:94:77:c1:d5:d6:7f:7a:aa:57:
12:5c:6c:0a:6f:63:d1:4f:f2:7e:f7:19:4e:f9:c7:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8E:79:88:A7:B8:0D:37:7D:DA:7A:EA:2C:D3:FF:DD:71:2D:D0:E2
X509v3 Authority Key Identifier:
keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ab:e5:4d:33:3f:a9:3a:99:08:76:2f:d4:94:42:ff:cd:3e:
d3:a6:44:a7:41:e9:9e:14:c3:42:8d:58:18:63:27:d4:6f:af:
3f:bb:92:ec:1e:35:f1:88:fb:47:ac:b5:96:78:a0:e4:a9:63:
20:ac:f7:6e:3b:29:68:26:15:39:5f:df:59:8c:c4:ed:b5:03:
d8:83:24:95:a3:9f:9e:de:3b:dd:46:e3:6d:3f:92:3f:a2:16:
c3:69:19:f9:aa:a9:7e:a8:02:22:40:48:78:a6:10:8c:7c:93:
62:a6:86:6e:ee:67:a9:6f:a5:a5:14:99:0e:b1:b9:37:08:11:
db:9a:8b:c7:b5:14:c0:9a:d8:df:bb:6d:43:94:30:cc:6d:d7:
04:d8:a2:f8:21:99:67:b1:c0:f3:c7:3b:f8:8c:ce:67:80:5e:
e2:3b:46:cd:9e:73:2e:fe:1b:c1:b9:b7:e7:b5:4d:34:52:c4:
d9:fa:2f:d5:21:82:02:70:bc:83:93:c6:9b:cc:60:e2:76:96:
c0:87:2f:36:34:2a:16:10:a3:6f:3c:48:81:9a:f9:a5:f3:43:
84:9f:a8:dc:9b:16:d6:4c:90:45:c0:4d:e3:85:e9:ae:7c:8e:
3b:28:5e:a9:b9:76:21:aa:06:b8:c9:4e:c8:e9:92:95:67:b6:
e5:aa:a5:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jvMFutUsJoyhOYaQA0buMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjYyZmFmNDM3NjQyMDAyNGFhZDcyOTgzYWMzZTg3OTQ0
ZWE3YTUwHhcNMjUwNjI4MjIwMTA1WhcNMjUwNjI5MjIwMTA1WjAzMTEwLwYDVQQD
Eyg3NzhlNzk4OGE3YjgwZDM3N2RkYTdhZWEyY2QzZmZkZDcxMmRkMGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJrEQY/KlW/+A89SZLBnxe+wSZsu
cqRCL0VTMkSU42EwmOkNWuMTQTXQiEOvguoQXtjIC0O9RTzZYZCzQJqm3Itxa/gg
lxqHSYbNAGerwlbA7LtDbOEjiKaf5X+YyHXO6k7tzMEvuujZd/7onnZkH4dhUWYK
gT13z0W1jXVkfBKxug1oa9RiNVUtX5qVwCU2MsvEb6AlKf9Gbj6O+OAJ/HwYYl9/
eTI7q/agVe9T9db3A1laRhstRd7hh26iefSPDi+OHqdgC/DkS26CJ1CuTtcWpHom
LhdMy+oyx1zmx3Gr4wxRz9uUd8HV1n96qlcSXGwKb2PRT/J+9xlO+cfQfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeOeYinuA03fdp66izT/91xLdDiMB8GA1UdIwQY
MBaAFPImL69DdkIAJKrXKYOsPoeUTqelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMt
YmFkYWZjYTM5NDRmLzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMtYmFkYWZjYTM5NDRm
LzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKvlTTM/
qTqZCHYv1JRC/80+06ZEp0HpnhTDQo1YGGMn1G+vP7uS7B418Yj7R6y1lnig5Klj
IKz3bjspaCYVOV/fWYzE7bUD2IMklaOfnt473UbjbT+SP6IWw2kZ+aqpfqgCIkBI
eKYQjHyTYqaGbu5nqW+lpRSZDrG5NwgR25qLx7UUwJrY37ttQ5QwzG3XBNii+CGZ
Z7HA88c7+IzOZ4Be4jtGzZ5zLv4bwbm357VNNFLE2fov1SGCAnC8g5PGm8xg4naW
wIcvNjQqFhCjbzxIgZr5pfNDhJ+o3JsW1kyQRcBN44XprnyOOyheqbl2IaoGuMlO
yOmSlWe25aqlkg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:16 2025 by rpki-client