Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: mj0Hi9KKUGpk/p4hUP4LepOawj+ObTgjztAY72vMvoc=
Subject key identifier: 4D:1C:9F:FB:80:FE:E4:A0:D2:05:E3:29:BE:11:7F:22:E8:28:D0:C3
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 0198D6601204AD53FFFF97860ABEBF9F3990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:16 +0000
Manifest this update: Sat 23 Aug 2025 10:01:16 +0000
Manifest next update: Sun 24 Aug 2025 10:01:16 +0000
Files and hashes: 1: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: c28Mf+WdW/k8hMMFWFrR9G/bvsrBEg9ytuW7aTxJW7o=)
2: hwl_pJftKoYgWaDLkyi1NUP4Iqo.roa (hash: zD6uA78lx0+tAtyuIqfvTt4SALf3UDD47V0kgwtFI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:12:04:ad:53:ff:ff:97:86:0a:be:bf:9f:39:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Aug 23 10:01:16 2025 GMT
Not After : Aug 24 10:01:16 2025 GMT
Subject: CN=4d1c9ffb80fee4a0d205e329be117f22e828d0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:0a:fc:4d:2a:fc:72:73:70:8b:de:b0:06:
60:45:57:0d:ec:9d:84:7d:68:78:94:e8:b4:15:5c:
ee:05:7e:34:1a:da:21:c9:06:09:82:eb:ba:5c:52:
e7:6f:cc:ba:af:3e:4e:bb:c1:a0:c9:0a:eb:fb:24:
21:36:0a:01:8d:41:4e:d1:83:0a:76:29:a8:a9:59:
6b:e3:df:03:fc:9b:6f:be:12:fb:a2:d0:b1:29:f9:
72:40:b7:5f:7a:4a:6d:43:35:2a:51:bd:ec:f0:14:
aa:c2:08:c3:ab:36:14:8f:9a:6c:95:45:dd:c3:71:
50:03:47:ca:0c:2f:73:ae:7d:68:c6:63:57:30:62:
16:b5:f1:89:fd:fd:a1:00:57:59:fd:cf:8e:56:75:
49:44:7c:b3:41:f7:03:84:e5:d6:4b:d6:70:24:bf:
ec:90:ee:b8:a9:4e:e7:39:df:9b:00:92:04:e3:af:
f8:90:0d:cf:92:15:da:eb:22:23:41:a6:1a:17:8e:
02:f3:4c:e4:ab:42:cd:40:91:e4:fa:6f:41:95:be:
6a:84:85:f0:4f:c6:d2:7d:2c:28:81:5d:ab:0d:31:
7c:32:a3:17:cf:aa:11:f6:97:b9:aa:89:b2:9a:87:
11:0d:ab:36:1a:16:d8:82:b0:9c:48:d4:00:2b:54:
84:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1C:9F:FB:80:FE:E4:A0:D2:05:E3:29:BE:11:7F:22:E8:28:D0:C3
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ca:03:01:21:d1:45:82:22:41:89:d8:04:88:95:99:5a:9c:
98:17:d8:8a:aa:ff:dc:52:df:8a:7b:41:fe:56:41:f7:6d:8f:
b7:83:03:b3:56:24:51:6e:0d:07:3a:f0:5c:65:4e:33:77:94:
f3:f5:38:76:a3:ff:7d:8c:ae:4e:91:86:27:f0:09:89:c8:89:
c1:c7:ae:12:cb:80:b5:3f:2e:68:a6:b8:d0:38:60:66:7b:aa:
c0:c5:ce:1b:ff:6f:86:a7:8e:2a:62:6c:20:5c:96:13:b3:47:
9e:92:ed:f9:36:96:c1:2e:32:ca:26:7c:d6:4a:55:6d:f5:07:
7b:9a:20:67:f2:b8:ad:99:c6:7a:34:d5:66:5b:b5:2a:0a:fb:
2e:5a:b7:c3:77:20:90:15:c1:bd:3a:4c:88:c2:d6:31:ad:da:
79:ff:01:e0:aa:1e:ac:8e:e9:ff:82:31:ec:ad:6d:b0:f7:bd:
e9:5d:4e:aa:4b:74:62:17:fd:14:01:fd:9e:5a:bc:34:13:58:
14:2a:3a:c2:b5:be:50:24:38:d8:a3:04:a2:fc:38:16:a3:99:
26:91:d4:d0:1f:16:f2:34:30:e3:eb:94:94:26:63:49:fe:d2:
fc:24:92:76:00:07:39:29:7f:69:4c:69:ff:49:99:d5:5d:63:
4d:29:dc:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYBIErVP//5eGCr6/nzmQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYzNjMWJlZjE1ZjRiY2NjNGU3NDhjMDg5NTdlY2MyMjlh
MGYxZWYwHhcNMjUwODIzMTAwMTE2WhcNMjUwODI0MTAwMTE2WjAzMTEwLwYDVQQD
Eyg0ZDFjOWZmYjgwZmVlNGEwZDIwNWUzMjliZTExN2YyMmU4MjhkMGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUYK/E0q/HJzcIvesAZgRVcN7J2E
fWh4lOi0FVzuBX40GtohyQYJguu6XFLnb8y6rz5Ou8GgyQrr+yQhNgoBjUFO0YMK
dimoqVlr498D/JtvvhL7otCxKflyQLdfekptQzUqUb3s8BSqwgjDqzYUj5pslUXd
w3FQA0fKDC9zrn1oxmNXMGIWtfGJ/f2hAFdZ/c+OVnVJRHyzQfcDhOXWS9ZwJL/s
kO64qU7nOd+bAJIE46/4kA3PkhXa6yIjQaYaF44C80zkq0LNQJHk+m9Blb5qhIXw
T8bSfSwogV2rDTF8MqMXz6oR9pe5qomymocRDas2GhbYgrCcSNQAK1SEZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0cn/uA/uSg0gXjKb4RfyLoKNDDMB8GA1UdIwQY
MBaAFBvDwb7xX0vMxOdIwIlX7MIpoPHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iYzk0ZGYtNzI1OS00MmQxLTgyMmEt
M2Q5ODEwMDk4NzAzLzEvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iYzk0ZGYtNzI1OS00MmQxLTgyMmEtM2Q5ODEwMDk4NzAz
LzEvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksoDASHR
RYIiQYnYBIiVmVqcmBfYiqr/3FLfintB/lZB922Pt4MDs1YkUW4NBzrwXGVOM3eU
8/U4dqP/fYyuTpGGJ/AJiciJwceuEsuAtT8uaKa40DhgZnuqwMXOG/9vhqeOKmJs
IFyWE7NHnpLt+TaWwS4yyiZ81kpVbfUHe5ogZ/K4rZnGejTVZlu1Kgr7Llq3w3cg
kBXBvTpMiMLWMa3aef8B4KoerI7p/4Ix7K1tsPe96V1Oqkt0Yhf9FAH9nlq8NBNY
FCo6wrW+UCQ42KMEovw4FqOZJpHU0B8W8jQw4+uUlCZjSf7S/CSSdgAHOSl/aUxp
/0mZ1V1jTSncOQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:34:07 2025 by rpki-client