Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
File: m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft (raw, json)
Hash identifier: OteZLI4YBzF8wVDz/Dp/h/MknJFSySo4nmwH2kjN/LM=
Subject key identifier: 09:0A:22:17:F4:99:F7:3F:9E:53:F9:44:68:5A:5A:3E:42:59:D3:24
Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6
Certificate serial: 0198D4A82CD340D0E62CA31CBADC488E38DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
Manifest number: 1348
Signing time: Sat 23 Aug 2025 02:00:47 +0000
Manifest this update: Sat 23 Aug 2025 02:00:47 +0000
Manifest next update: Sun 24 Aug 2025 02:00:47 +0000
Files and hashes: 1: L3trElfXoCVLz1PtzkkdBJeOsww.roa (hash: YCjBwT8TXGDjubr28OCLsTgDEI+YuVxGgn8zV5rTLys=)
2: m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl (hash: BTz8wHCqkx+KQxcbDxC2Epa82KPehJeyIhMsh7za+Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2c:d3:40:d0:e6:2c:a3:1c:ba:dc:48:8e:38:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6
Validity
Not Before: Aug 23 02:00:47 2025 GMT
Not After : Aug 24 02:00:47 2025 GMT
Subject: CN=090a2217f499f73f9e53f944685a5a3e4259d324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:41:22:2f:7f:81:31:83:d3:ba:02:fe:79:
55:ba:f7:72:8c:04:0a:7a:a0:d1:d3:85:58:64:1c:
51:a8:56:10:53:53:32:29:0a:3d:a0:09:90:67:bd:
8e:ed:92:6e:41:32:b4:1e:16:72:20:bd:73:ff:5b:
f7:a8:45:ef:cc:81:36:e6:ad:c2:28:24:69:28:f4:
31:6b:ae:d8:86:e2:9b:6c:ec:b0:40:aa:af:c4:47:
54:67:ba:91:a4:81:87:0c:26:cd:fb:a1:af:db:3a:
92:29:9f:68:fe:f2:19:46:7c:cf:09:57:38:bc:40:
c7:d4:6d:d9:09:dd:f4:0e:c6:ab:58:f2:fd:3f:a6:
3f:d5:a1:ca:3c:bb:ce:da:9d:9f:1d:c0:f0:2f:6b:
21:44:19:bb:44:b9:e4:fa:fd:20:d0:34:0b:e4:15:
64:87:66:6d:db:40:35:cf:85:35:bb:98:c8:d4:c6:
de:21:35:ae:eb:07:59:92:71:18:f3:bf:44:c2:03:
8e:69:07:e7:dd:c3:c9:09:61:f1:d5:aa:e8:24:24:
ea:2e:ea:d2:cb:1f:35:53:f1:ea:df:63:e9:34:53:
83:d3:64:b1:1a:89:42:d3:53:5f:e3:ad:73:81:3f:
48:f1:3e:b4:cf:a4:b2:54:e9:75:af:b1:e5:6c:4c:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0A:22:17:F4:99:F7:3F:9E:53:F9:44:68:5A:5A:3E:42:59:D3:24
X509v3 Authority Key Identifier:
keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:87:ca:46:92:6e:c2:d3:16:77:32:d5:3a:d0:d8:07:67:eb:
e0:de:eb:ab:df:c3:5d:0d:5f:9c:0e:2d:c0:7b:8b:71:9a:1c:
6d:5c:53:e7:84:7b:23:62:3b:97:73:6d:c9:a0:d7:5f:7c:03:
17:bf:3b:2b:c2:9b:e6:40:e3:b5:1c:6a:6f:6e:6a:56:08:37:
7f:9d:d7:65:a3:55:c6:c8:df:97:88:b4:66:6b:6e:ff:e7:4a:
e6:00:79:38:6a:23:b7:e8:72:30:56:37:cc:ff:6a:25:39:0b:
c6:d4:7e:f5:8e:f9:ac:89:53:64:76:ac:0b:45:16:3d:c8:b2:
3b:81:ca:04:86:1a:87:35:fd:2c:29:7b:ea:db:2f:4e:66:f1:
fc:51:7f:ac:6e:f0:1e:37:a6:c3:e6:dc:54:a3:66:03:f6:2d:
05:52:9e:06:df:24:63:26:c9:53:1f:21:80:75:e4:04:f4:13:
f8:5a:f4:4b:34:94:fb:b7:9a:b8:83:15:b9:18:73:e6:7b:f6:
82:4d:da:fa:15:f3:e7:38:75:62:00:e0:7b:38:d3:cf:ca:50:
59:7a:e7:c1:6a:25:c5:03:9a:c7:cc:22:38:4a:34:59:f0:5f:
5f:fe:8d:af:18:19:ac:bb:e9:c7:de:85:86:e3:83:11:e2:69:
27:bb:90:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqCzTQNDmLKMcutxIjjjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYzM1MGJjNjEzZDA1ZGU5MTBhOGRhMjZjOTFjMjk3MTcx
MDc4YjYwHhcNMjUwODIzMDIwMDQ3WhcNMjUwODI0MDIwMDQ3WjAzMTEwLwYDVQQD
EygwOTBhMjIxN2Y0OTlmNzNmOWU1M2Y5NDQ2ODVhNWEzZTQyNTlkMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdtBIi9/gTGD07oC/nlVuvdyjAQK
eqDR04VYZBxRqFYQU1MyKQo9oAmQZ72O7ZJuQTK0HhZyIL1z/1v3qEXvzIE25q3C
KCRpKPQxa67YhuKbbOywQKqvxEdUZ7qRpIGHDCbN+6Gv2zqSKZ9o/vIZRnzPCVc4
vEDH1G3ZCd30DsarWPL9P6Y/1aHKPLvO2p2fHcDwL2shRBm7RLnk+v0g0DQL5BVk
h2Zt20A1z4U1u5jI1MbeITWu6wdZknEY879EwgOOaQfn3cPJCWHx1aroJCTqLurS
yx81U/Hq32PpNFOD02SxGolC01Nf461zgT9I8T60z6SyVOl1r7HlbEx0PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkKIhf0mfc/nlP5RGhaWj5CWdMkMB8GA1UdIwQY
MBaAFJvDULxhPQXekQqNomyRwpcXEHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMt
MjJkMTA2MzVmMGM0LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMtMjJkMTA2MzVmMGM0
LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYfKRpJu
wtMWdzLVOtDYB2fr4N7rq9/DXQ1fnA4twHuLcZocbVxT54R7I2I7l3NtyaDXX3wD
F787K8Kb5kDjtRxqb25qVgg3f53XZaNVxsjfl4i0Zmtu/+dK5gB5OGojt+hyMFY3
zP9qJTkLxtR+9Y75rIlTZHasC0UWPciyO4HKBIYahzX9LCl76tsvTmbx/FF/rG7w
Hjemw+bcVKNmA/YtBVKeBt8kYybJUx8hgHXkBPQT+Fr0SzSU+7eauIMVuRhz5nv2
gk3a+hXz5zh1YgDgezjTz8pQWXrnwWolxQOax8wiOEo0WfBfX/6NrxgZrLvpx96F
huODEeJpJ7uQ4Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:02 2025 by rpki-client