Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
File: j4aF263_sB3czmxNgql_M8BA7S0.mft (raw, json)
Hash identifier: 7UV4sg/uwlURfF5GGkutPXivXJeeCcdc20DhDpuyTN4=
Subject key identifier: EC:C3:01:E3:98:BF:35:C4:DB:64:EC:A2:D7:5D:F3:90:65:47:D3:5D
Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
Certificate issuer: /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Certificate serial: 0198D84FA41CB23F3CE0842F2C5DE7D6379C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 19:02:34 +0000
Manifest this update: Sat 23 Aug 2025 19:02:34 +0000
Manifest next update: Sun 24 Aug 2025 19:02:34 +0000
Files and hashes: 1: CnLBnKO7kUWDOtI_wZowil8ZDY0.roa (hash: +ZLQWoCpBdEd1GfrIrkM6Ixuxre1nfZzdo3/CXXl60U=)
2: j4aF263_sB3czmxNgql_M8BA7S0.crl (hash: 9i3I6UetsxV2K7j79xUHLJNjmZz3Psh8rnZOsqAhIrc=)
3: sUWUQ7xVOWG88c1zTJfQJSXfUGM.roa (hash: VIZMGPKQd062ThwggTDHc4EOlVHSYbX0SY8qNlvlezs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:a4:1c:b2:3f:3c:e0:84:2f:2c:5d:e7:d6:37:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Validity
Not Before: Aug 23 19:02:34 2025 GMT
Not After : Aug 24 19:02:34 2025 GMT
Subject: CN=ecc301e398bf35c4db64eca2d75df3906547d35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:42:e1:e9:b4:d8:78:5b:1c:ce:43:d2:61:
e7:e3:a2:50:da:24:f6:20:f2:67:ed:b7:9a:b6:50:
66:43:8d:e0:d1:f7:09:76:5f:bb:2c:e9:31:b1:a7:
9f:76:84:38:01:95:5c:73:3b:58:34:24:3e:ce:3b:
24:a8:8c:ed:11:b9:4c:dc:98:11:a8:a0:cc:cd:d2:
b7:9e:04:52:da:a4:4c:bd:2c:7e:2c:e2:c8:5d:54:
81:a6:db:56:9c:c2:1a:eb:15:61:fb:12:d5:7c:16:
2d:c7:88:43:49:b6:3f:2e:1d:c2:59:4c:28:cc:0d:
64:29:0a:c5:3e:37:df:0a:f9:2f:95:43:09:e6:9d:
ff:cc:0f:fe:96:75:e1:29:72:90:ac:2a:a5:2b:9a:
4c:2c:d4:0e:d1:86:fc:e3:66:37:35:7b:d9:3a:96:
04:52:0f:83:53:ec:3a:5c:da:83:a5:11:9b:50:47:
48:25:cf:9d:16:11:aa:a0:e8:37:b5:43:95:25:47:
51:1e:51:6d:88:4f:bf:b8:00:02:81:bf:f7:7a:db:
24:5e:79:ba:89:4d:ef:52:2f:6e:89:ff:12:40:89:
9e:23:85:fe:8f:b9:be:09:e3:2a:22:28:57:92:49:
e1:38:1d:f8:e7:c6:ea:2f:20:23:a6:dc:0e:51:ce:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C3:01:E3:98:BF:35:C4:DB:64:EC:A2:D7:5D:F3:90:65:47:D3:5D
X509v3 Authority Key Identifier:
keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c3:83:72:f0:d8:49:07:85:c5:17:d6:c5:16:74:ae:06:bf:
8a:b6:22:a3:06:1e:70:42:f6:0f:5a:63:82:d2:f4:ac:2f:8f:
7b:4e:96:e6:ec:73:ae:c9:33:82:c5:3e:de:85:19:59:ea:b6:
12:50:75:4e:7c:ec:e7:fe:2f:ca:83:cc:57:47:94:94:81:f4:
9a:f2:be:89:0e:db:4e:7d:b7:a4:d2:ad:e3:74:24:15:ff:8a:
96:d5:c9:f2:b2:53:7d:ba:26:67:05:42:c3:73:93:68:94:64:
19:04:34:25:23:7e:68:eb:58:80:04:6b:f3:42:6d:72:2f:be:
93:b1:16:fc:91:46:12:70:49:a4:c4:c8:01:d8:70:aa:85:55:
24:c1:ad:7b:1f:6d:0d:a7:15:5a:b7:a4:6c:5d:ef:f1:2e:3d:
28:08:3d:f7:95:8e:21:28:b2:ca:cb:91:5b:68:ed:13:ec:44:
55:24:33:50:fd:72:6c:9d:bf:92:87:64:a1:7d:7d:7f:23:b6:
33:f7:08:ae:87:b9:ed:28:10:09:ed:0d:1c:ae:11:8a:8e:69:
d8:87:86:06:b2:0f:b8:55:2b:90:f6:5e:0a:ea:4c:0b:1e:eb:
4a:18:f0:d8:27:b6:98:2f:82:d6:9f:8f:6a:30:78:87:24:72:
c9:4b:04:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT6Qcsj884IQvLF3n1jecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmODY4NWRiYWRmZmIwMWRkY2NlNmM0ZDgyYTk3ZjMzYzA0
MGVkMmQwHhcNMjUwODIzMTkwMjM0WhcNMjUwODI0MTkwMjM0WjAzMTEwLwYDVQQD
EyhlY2MzMDFlMzk4YmYzNWM0ZGI2NGVjYTJkNzVkZjM5MDY1NDdkMzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXhC4em02HhbHM5D0mHn46JQ2iT2
IPJn7beatlBmQ43g0fcJdl+7LOkxsaefdoQ4AZVccztYNCQ+zjskqIztEblM3JgR
qKDMzdK3ngRS2qRMvSx+LOLIXVSBpttWnMIa6xVh+xLVfBYtx4hDSbY/Lh3CWUwo
zA1kKQrFPjffCvkvlUMJ5p3/zA/+lnXhKXKQrCqlK5pMLNQO0Yb842Y3NXvZOpYE
Ug+DU+w6XNqDpRGbUEdIJc+dFhGqoOg3tUOVJUdRHlFtiE+/uAACgb/3etskXnm6
iU3vUi9uif8SQImeI4X+j7m+CeMqIihXkknhOB3458bqLyAjptwOUc7VzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzDAeOYvzXE22Tsotdd85BlR9NdMB8GA1UdIwQY
MBaAFI+Ghdut/7Ad3M5sTYKpfzPAQO0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMt
NjdjZmUzMDY3YjJhLzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMtNjdjZmUzMDY3YjJh
LzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMODcvDY
SQeFxRfWxRZ0rga/irYiowYecEL2D1pjgtL0rC+Pe06W5uxzrskzgsU+3oUZWeq2
ElB1Tnzs5/4vyoPMV0eUlIH0mvK+iQ7bTn23pNKt43QkFf+KltXJ8rJTfbomZwVC
w3OTaJRkGQQ0JSN+aOtYgARr80Jtci++k7EW/JFGEnBJpMTIAdhwqoVVJMGtex9t
DacVWrekbF3v8S49KAg995WOISiyysuRW2jtE+xEVSQzUP1ybJ2/kodkoX19fyO2
M/cIroe57SgQCe0NHK4Rio5p2IeGBrIPuFUrkPZeCupMCx7rShjw2Ce2mC+C1p+P
ajB4hyRyyUsEvg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:31:35 2025 by rpki-client