Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
File: i29IgAONVauY18tm38-ol7e6Eeg.mft (raw, json)
Hash identifier: d2YZZvRA9m+54EJSgx2UkzTpXD9QgDhYJ231P8cVAxw=
Subject key identifier: 69:FC:A1:EF:BE:73:1F:03:2F:DB:E7:B1:20:55:F9:21:CD:DC:55:AC
Authority key identifier: 8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
Certificate issuer: /CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Certificate serial: 0198D5BBC1C32FB951DD60AA1AA8A221ABE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
Manifest number: 04C2
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: i29IgAONVauY18tm38-ol7e6Eeg.crl (hash: +yGP6G44auhuNeAHOkrooNpZMAo4tGX6OyfaUhQ02oA=)
2: uJrupPlV0TuAxsM7Yezc0lvFtvQ.roa (hash: zjqfplB2jtSi/5nKhDu31J1mMkLaG/4MZV1txaGrR6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c1:c3:2f:b9:51:dd:60:aa:1a:a8:a2:21:ab:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=69fca1efbe731f032fdbe7b12055f921cddc55ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:74:85:f5:18:c1:46:28:ad:f1:8c:fa:28:f6:
66:5a:12:9b:fe:5e:d1:57:41:3c:3f:09:78:c6:62:
3f:4c:20:6d:da:8f:b8:09:a6:2f:27:b0:82:f2:19:
f9:2f:39:21:b0:f7:fc:06:8e:49:08:4f:b4:76:7f:
58:9f:e3:71:e2:89:ec:30:45:4d:ee:2f:0b:f3:04:
c3:c5:ac:0c:11:e4:36:67:6b:a1:47:4f:58:11:a1:
72:24:1d:4f:33:eb:3b:d4:1e:91:d8:fb:95:71:5e:
89:aa:a9:93:35:ad:26:7c:2c:0d:de:33:13:27:c6:
1c:d9:45:be:d5:79:54:a7:87:4c:40:42:f0:38:b4:
a0:fa:80:a4:b1:a7:d1:ae:a6:a9:ac:f4:1d:70:ee:
fd:d7:c1:e5:c5:65:1c:84:ef:9f:5b:03:90:75:90:
4b:47:a2:a5:ce:cf:de:31:7c:75:98:a0:21:a3:8b:
76:b5:0f:7f:0f:1d:05:ec:b1:38:40:6d:25:11:6f:
0c:a4:1d:0b:bf:34:39:02:8c:68:a1:0b:b8:3a:a9:
d5:5e:df:a3:72:63:1e:90:c1:78:c4:34:6e:75:89:
02:fc:98:6d:48:4a:da:37:6f:dd:bb:e7:5a:f7:e5:
d4:ed:0c:1f:b4:26:4f:13:03:ae:d2:3e:49:8b:40:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FC:A1:EF:BE:73:1F:03:2F:DB:E7:B1:20:55:F9:21:CD:DC:55:AC
X509v3 Authority Key Identifier:
keyid:8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:dc:d2:08:d9:ec:00:c2:27:1e:72:29:14:48:f8:20:26:4e:
a9:7e:b6:dd:14:96:fa:2f:7c:9a:e8:3f:e9:1a:69:39:15:35:
02:7d:d4:19:50:82:85:0b:e8:9b:ae:8f:1e:b1:d1:e1:82:68:
d5:dc:60:64:7b:ca:2a:29:d7:e5:d9:c6:15:c2:39:b7:88:04:
5d:64:7c:dd:66:fb:08:75:6b:92:2a:8c:29:e6:57:5e:a8:a3:
a2:32:05:f4:ed:ea:eb:c5:02:28:b2:0a:e6:df:25:b7:b4:4c:
22:e1:42:ed:fa:86:eb:ab:8c:f1:cf:8d:90:c3:7a:64:36:de:
e0:3a:65:ed:96:cf:c8:d5:d9:36:77:4b:73:b3:71:de:15:f9:
c4:d9:43:e3:aa:40:59:c8:a0:a0:29:62:76:99:31:a3:1b:c2:
1b:a7:72:52:7a:59:1d:4e:ed:aa:63:6b:f1:3b:ec:9f:36:02:
e3:60:54:6e:f1:29:ea:11:de:f4:4d:61:d6:f6:a2:75:45:2e:
9e:0a:dc:9c:67:92:be:4b:15:97:6c:82:6f:fa:65:d4:ba:cb:
dd:c9:9a:5b:71:40:65:8d:52:75:29:15:67:60:27:5e:d8:c7:
36:0f:71:7b:9b:01:0f:2c:72:20:45:d9:54:e7:99:be:2e:49:
9e:94:a8:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu8HDL7lR3WCqGqiiIavlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNmY0ODgwMDM4ZDU1YWI5OGQ3Y2I2NmRmY2ZhODk3Yjdi
YTExZTgwHhcNMjUwODIzMDcwMTQ4WhcNMjUwODI0MDcwMTQ4WjAzMTEwLwYDVQQD
Eyg2OWZjYTFlZmJlNzMxZjAzMmZkYmU3YjEyMDU1ZjkyMWNkZGM1NWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XSF9RjBRiit8Yz6KPZmWhKb/l7R
V0E8Pwl4xmI/TCBt2o+4CaYvJ7CC8hn5LzkhsPf8Bo5JCE+0dn9Yn+Nx4onsMEVN
7i8L8wTDxawMEeQ2Z2uhR09YEaFyJB1PM+s71B6R2PuVcV6JqqmTNa0mfCwN3jMT
J8Yc2UW+1XlUp4dMQELwOLSg+oCksafRrqaprPQdcO7918HlxWUchO+fWwOQdZBL
R6Klzs/eMXx1mKAho4t2tQ9/Dx0F7LE4QG0lEW8MpB0LvzQ5AoxooQu4OqnVXt+j
cmMekMF4xDRudYkC/JhtSEraN2/du+da9+XU7QwftCZPEwOu0j5Ji0BL6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn8oe++cx8DL9vnsSBV+SHN3FWsMB8GA1UdIwQY
MBaAFItvSIADjVWrmNfLZt/PqJe3uhHoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTI5SWdBT05WYXVZMTh0bTM4LW9sN2U2RWVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kMGMzOGQtOWYwMi00MThiLTk2YjIt
ZmIzMTExZGJkMWNhLzEvaTI5SWdBT05WYXVZMTh0bTM4LW9sN2U2RWVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kMGMzOGQtOWYwMi00MThiLTk2YjItZmIzMTExZGJkMWNh
LzEvaTI5SWdBT05WYXVZMTh0bTM4LW9sN2U2RWVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2NzSCNns
AMInHnIpFEj4ICZOqX623RSW+i98mug/6RppORU1An3UGVCChQvom66PHrHR4YJo
1dxgZHvKKinX5dnGFcI5t4gEXWR83Wb7CHVrkiqMKeZXXqijojIF9O3q68UCKLIK
5t8lt7RMIuFC7fqG66uM8c+NkMN6ZDbe4Dpl7ZbPyNXZNndLc7Nx3hX5xNlD46pA
WcigoClidpkxoxvCG6dyUnpZHU7tqmNr8TvsnzYC42BUbvEp6hHe9E1h1vaidUUu
ngrcnGeSvksVl2yCb/pl1LrL3cmaW3FAZY1SdSkVZ2AnXtjHNg9xe5sBDyxyIEXZ
VOeZvi5JnpSoIA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:03 2025 by rpki-client