Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: RSgy8u0+4qNhGzVnn+TB6S9kRUVPlLK/mQ9kUkSiS4I=
Subject key identifier: C1:FC:B4:17:44:85:B3:D3:47:2B:AC:68:90:6E:BF:11:EC:F1:E7:52
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 0198D660CFCD4A900AA61321A628C27A856E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 10:02:05 +0000
Manifest this update: Sat 23 Aug 2025 10:02:05 +0000
Manifest next update: Sun 24 Aug 2025 10:02:05 +0000
Files and hashes: 1: MmMjPcmgSnmpat_UrnnkwrG8N3M.roa (hash: P+6oU+/zVxV3KfOFEMlrjbqkg2yguA/0UthTHnReUm8=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: fN85kLe+SMbGFFwZmjrn4S0hD2Snia1dk8i8YnR3/J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:cf:cd:4a:90:0a:a6:13:21:a6:28:c2:7a:85:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Aug 23 10:02:05 2025 GMT
Not After : Aug 24 10:02:05 2025 GMT
Subject: CN=c1fcb4174485b3d3472bac68906ebf11ecf1e752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:14:f6:c1:59:cf:5c:17:55:fc:2c:eb:5e:30:
7c:80:d8:cb:c6:05:e8:2c:6e:8a:ad:aa:8b:8e:34:
72:1b:39:ee:94:53:7c:d5:2e:90:50:64:b4:f2:f3:
42:c0:cb:50:58:8c:6d:17:4d:d4:6b:f5:ee:66:c3:
39:50:8f:23:83:25:af:3c:3a:52:20:a7:9f:e0:ec:
1d:fb:3c:57:b4:b2:b1:c9:7a:63:14:d1:2a:65:eb:
cf:c8:25:d6:a5:bb:44:bb:17:a2:0d:6c:3e:87:a7:
3f:37:b1:90:b9:17:25:82:17:88:38:fc:c8:ed:c5:
ed:05:20:61:cb:14:4f:17:3b:d5:ee:f4:00:36:8a:
d2:c8:18:08:7e:36:38:13:6c:84:e7:bf:11:5e:0d:
0d:30:3d:33:33:60:52:dd:9b:0d:7e:4d:78:d1:24:
e7:50:a5:d3:53:57:87:a4:b2:8a:18:c4:4e:21:35:
04:80:ea:8e:c8:f8:29:cb:bf:bb:bf:8e:05:59:18:
17:1a:2b:36:b0:e7:8c:85:34:f3:13:b3:c7:27:87:
d9:60:a1:62:82:39:f9:72:8f:a8:20:a1:2d:d6:7b:
39:a2:f5:5d:60:00:be:fa:91:6c:aa:fb:b2:9f:9e:
33:a3:76:9c:5f:f4:49:ae:2b:61:b6:21:18:1a:66:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FC:B4:17:44:85:B3:D3:47:2B:AC:68:90:6E:BF:11:EC:F1:E7:52
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:6d:a5:f5:26:eb:fb:bf:0c:95:85:12:6f:5f:8d:b0:ef:81:
ae:86:5e:ec:d6:de:1e:52:8f:e6:7f:14:a1:fa:92:5e:05:45:
7c:10:66:28:6a:05:36:62:87:25:5a:66:8d:c6:70:ad:6a:7e:
43:50:b1:c9:90:bb:3a:bf:c8:a0:fd:77:85:a6:65:1a:fc:37:
fc:ab:0e:de:ed:43:3d:45:82:35:ff:5f:99:c6:82:f1:35:9c:
bf:42:9a:f2:e1:d8:16:d7:92:e1:8d:5a:60:71:20:26:fe:77:
ef:3c:d1:84:01:34:46:05:08:24:7c:18:d1:be:9d:63:54:27:
73:1b:3e:61:5c:84:c0:6c:95:82:a6:4e:1b:be:e5:dd:e5:6b:
ec:f5:54:fb:fb:7c:c0:8f:b6:85:00:51:78:1b:95:0e:a1:84:
5d:7d:ad:a8:67:41:9e:75:33:a3:6e:26:4e:d1:29:18:69:97:
1f:e0:9b:5a:0d:d2:94:47:46:1d:7a:c5:2c:81:51:44:e1:85:
cb:5a:8a:1c:f3:1a:cb:6f:02:6c:fe:71:75:54:dc:79:ac:d6:
0e:c2:50:aa:3c:28:ac:b9:01:06:e4:e2:28:84:8c:9c:18:28:
94:b5:5d:1d:5b:d5:e6:7d:0a:b6:c1:86:95:a6:64:a0:47:fb:
94:37:f8:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYM/NSpAKphMhpijCeoVuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwN2YzZGFiYWVlMjRmYzQzYjg2NWFhZmEzZjNjOWMyZjM2
NGJmYzkwHhcNMjUwODIzMTAwMjA1WhcNMjUwODI0MTAwMjA1WjAzMTEwLwYDVQQD
EyhjMWZjYjQxNzQ0ODViM2QzNDcyYmFjNjg5MDZlYmYxMWVjZjFlNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xT2wVnPXBdV/CzrXjB8gNjLxgXo
LG6KraqLjjRyGznulFN81S6QUGS08vNCwMtQWIxtF03Ua/XuZsM5UI8jgyWvPDpS
IKef4Owd+zxXtLKxyXpjFNEqZevPyCXWpbtEuxeiDWw+h6c/N7GQuRclgheIOPzI
7cXtBSBhyxRPFzvV7vQANorSyBgIfjY4E2yE578RXg0NMD0zM2BS3ZsNfk140STn
UKXTU1eHpLKKGMROITUEgOqOyPgpy7+7v44FWRgXGis2sOeMhTTzE7PHJ4fZYKFi
gjn5co+oIKEt1ns5ovVdYAC++pFsqvuyn54zo3acX/RJrithtiEYGmb3LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH8tBdEhbPTRyusaJBuvxHs8edSMB8GA1UdIwQY
MBaAFHB/Pauu4k/EO4Zar6PzycLzZL/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUt
ZWNjZDY2NWYxZjAzLzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUtZWNjZDY2NWYxZjAz
LzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwG2l9Sbr
+78MlYUSb1+NsO+BroZe7NbeHlKP5n8UofqSXgVFfBBmKGoFNmKHJVpmjcZwrWp+
Q1CxyZC7Or/IoP13haZlGvw3/KsO3u1DPUWCNf9fmcaC8TWcv0Ka8uHYFteS4Y1a
YHEgJv537zzRhAE0RgUIJHwY0b6dY1Qncxs+YVyEwGyVgqZOG77l3eVr7PVU+/t8
wI+2hQBReBuVDqGEXX2tqGdBnnUzo24mTtEpGGmXH+CbWg3SlEdGHXrFLIFRROGF
y1qKHPMay28CbP5xdVTceazWDsJQqjworLkBBuTiKISMnBgolLVdHVvV5n0KtsGG
laZkoEf7lDf4LQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:51 2025 by rpki-client