Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
File: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft (raw, json)
Hash identifier: dVevGl2xr6p0o3n+LTyTXtk4aiTRSVaflhdtEx+Jt3M=
Subject key identifier: 80:D2:73:F6:B4:69:86:BF:32:40:DD:47:18:75:E5:87:4A:D5:FC:3E
Authority key identifier: 89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
Certificate issuer: /CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Certificate serial: 0198D705C54E827E8AE12C50993E807532FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
Manifest number: 0DFF
Signing time: Sat 23 Aug 2025 13:02:16 +0000
Manifest this update: Sat 23 Aug 2025 13:02:16 +0000
Manifest next update: Sun 24 Aug 2025 13:02:16 +0000
Files and hashes: 1: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl (hash: tvK31ZlbZvf7ZHCsOG55H5zfKvgwcFJqQjtPdPWu14Q=)
2: qmO8Fiuuh9KuRm81yMzephu_U-o.roa (hash: JTX7Cj1zPyi8sR8Cn5QR+pzD+tvVds3MwvVGO5fjdhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:c5:4e:82:7e:8a:e1:2c:50:99:3e:80:75:32:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Validity
Not Before: Aug 23 13:02:16 2025 GMT
Not After : Aug 24 13:02:16 2025 GMT
Subject: CN=80d273f6b46986bf3240dd471875e5874ad5fc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:32:46:4a:b4:27:c2:4a:f5:f2:b0:79:9e:
b6:d3:a5:25:7d:fc:80:54:96:86:f5:02:f7:fd:3d:
9c:54:2e:57:8d:db:16:e1:d7:b7:fc:53:95:50:da:
45:96:ac:b5:9d:08:81:70:52:73:e2:5f:10:8d:b5:
02:02:10:7e:a6:14:8c:6a:1c:f1:94:a6:ff:5b:19:
51:bb:96:06:1e:74:40:eb:e7:7a:88:1a:d3:58:59:
0b:d1:d6:a0:7b:34:7c:16:16:cd:00:d3:02:d9:f1:
25:f2:bb:0f:6c:82:4e:8d:a9:a0:19:cb:62:7f:1d:
fb:ec:29:3e:f7:15:74:a8:24:78:09:8a:9b:a6:b8:
3a:33:93:e7:f5:51:c7:c7:31:cf:87:66:ae:98:e3:
2e:d0:7f:93:32:fa:8d:2e:9b:14:e2:b0:c6:99:b4:
35:55:8c:90:44:80:04:e4:46:42:3a:ae:85:4c:14:
ad:69:ed:25:7b:20:ed:72:e3:f8:2b:56:4b:97:82:
ca:e7:85:b7:e8:45:07:b4:6e:95:ea:d1:13:fb:9f:
77:d9:88:f8:89:83:25:46:45:e0:ed:c1:ba:59:d7:
17:a2:b8:e9:1e:83:b0:66:9b:4a:37:ec:8d:d5:f1:
7f:d9:31:da:45:d4:e1:bf:4f:f6:1d:9a:5f:c3:09:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D2:73:F6:B4:69:86:BF:32:40:DD:47:18:75:E5:87:4A:D5:FC:3E
X509v3 Authority Key Identifier:
keyid:89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:03:1b:73:7f:21:66:09:9c:52:dd:e4:1a:de:31:be:5b:ad:
26:3b:4b:6d:29:a1:fb:94:0a:f8:15:21:3f:e4:a6:07:f9:24:
21:89:63:18:43:dc:5e:38:13:59:2a:88:ab:e8:6f:54:fa:35:
21:a6:28:62:31:57:69:17:e1:bd:58:0f:a3:ae:e9:34:5c:c7:
64:24:1c:95:56:12:bb:6f:c8:b2:b8:50:19:68:a4:7e:0c:d2:
ab:9a:bf:cf:aa:27:82:ac:e5:93:2c:19:b8:8c:5e:08:4c:a4:
99:f0:ed:45:44:81:0b:4c:f5:10:69:ca:a5:d4:d8:11:d9:8b:
7d:3e:1a:39:ec:74:3c:a0:be:4f:85:d9:d3:70:9b:93:58:e3:
59:11:6a:81:52:23:e2:78:14:6d:9b:07:5d:2b:b3:59:22:f5:
6a:cc:26:6a:44:f6:10:a1:2a:96:7b:7f:2e:e2:4b:d2:8c:d6:
6a:fe:e5:40:f7:e5:4c:56:36:2a:70:47:25:1b:e1:24:fd:84:
e9:2e:06:fc:b5:06:02:43:7a:ba:ec:ef:05:70:68:a0:52:c6:
ff:50:28:4b:1e:25:27:bd:c5:35:56:88:4f:11:56:5e:54:ef:
7e:0b:68:de:e2:00:42:f2:12:a0:a2:a9:d6:10:ea:2f:5b:62:
7b:a2:92:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBcVOgn6K4SxQmT6AdTL7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWUyMjBiNDc2OGRhNmUyNzZlNmE2MmVkZDY3NDZkOGZj
M2MxZmIwHhcNMjUwODIzMTMwMjE2WhcNMjUwODI0MTMwMjE2WjAzMTEwLwYDVQQD
Eyg4MGQyNzNmNmI0Njk4NmJmMzI0MGRkNDcxODc1ZTU4NzRhZDVmYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUUyRkq0J8JK9fKweZ6206UlffyA
VJaG9QL3/T2cVC5XjdsW4de3/FOVUNpFlqy1nQiBcFJz4l8QjbUCAhB+phSMahzx
lKb/WxlRu5YGHnRA6+d6iBrTWFkL0dagezR8FhbNANMC2fEl8rsPbIJOjamgGcti
fx377Ck+9xV0qCR4CYqbprg6M5Pn9VHHxzHPh2aumOMu0H+TMvqNLpsU4rDGmbQ1
VYyQRIAE5EZCOq6FTBStae0leyDtcuP4K1ZLl4LK54W36EUHtG6V6tET+5932Yj4
iYMlRkXg7cG6WdcXorjpHoOwZptKN+yN1fF/2THaRdThv0/2HZpfwwmhSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDSc/a0aYa/MkDdRxh15YdK1fw+MB8GA1UdIwQY
MBaAFImuIgtHaNpuJ25qYu3WdG2Pw8H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWE0aUMwZG8ybTRuYm1waTdkWjBiWV9Ed2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYjhhNDAtNzYxMC00ZTRkLTliMzct
NzQxZmE0ZTEwZTM2LzEvaWE0aUMwZG8ybTRuYm1waTdkWjBiWV9Ed2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zYjhhNDAtNzYxMC00ZTRkLTliMzctNzQxZmE0ZTEwZTM2
LzEvaWE0aUMwZG8ybTRuYm1waTdkWjBiWV9Ed2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAMbc38h
ZgmcUt3kGt4xvlutJjtLbSmh+5QK+BUhP+SmB/kkIYljGEPcXjgTWSqIq+hvVPo1
IaYoYjFXaRfhvVgPo67pNFzHZCQclVYSu2/IsrhQGWikfgzSq5q/z6ongqzlkywZ
uIxeCEykmfDtRUSBC0z1EGnKpdTYEdmLfT4aOex0PKC+T4XZ03Cbk1jjWRFqgVIj
4ngUbZsHXSuzWSL1aswmakT2EKEqlnt/LuJL0ozWav7lQPflTFY2KnBHJRvhJP2E
6S4G/LUGAkN6uuzvBXBooFLG/1AoSx4lJ73FNVaITxFWXlTvfgto3uIAQvISoKKp
1hDqL1tie6KSBQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:22 2025 by rpki-client