Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
File: 0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json)
Hash identifier: avT1vgGCH+YNfMwYpSEd0OXMKDzboM5gGwdAffGExFo=
Subject key identifier: 6F:8F:24:8E:F3:69:4B:89:AF:20:6A:6E:64:99:24:D1:24:04:A7:2E
Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
Certificate issuer: /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Certificate serial: 0198D4A84D6FE4A24FAB7D56645B23C6E565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:56 +0000
Manifest this update: Sat 23 Aug 2025 02:00:56 +0000
Manifest next update: Sun 24 Aug 2025 02:00:56 +0000
Files and hashes: 1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: kspaR58lw6tVGbKtJSCIqCVcOrAMC8ztRRTrS5wLoJs=)
2: 814d1F1Lpiv2ZmQt3nv-Q0MhR14.roa (hash: vJZyCty8aaf+QpA3OskD2b+GSFI6e+26K8I9XWLd+A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:4d:6f:e4:a2:4f:ab:7d:56:64:5b:23:c6:e5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Validity
Not Before: Aug 23 02:00:56 2025 GMT
Not After : Aug 24 02:00:56 2025 GMT
Subject: CN=6f8f248ef3694b89af206a6e649924d12404a72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:18:e6:28:40:f7:05:54:20:1e:ad:ff:51:
bd:ae:43:88:f8:98:3d:94:22:74:c6:31:75:17:e8:
70:db:2c:66:bb:7b:4d:04:36:26:76:80:2e:e9:e5:
de:21:fa:55:e1:96:12:30:85:0b:83:9e:8f:18:b3:
77:71:70:44:44:44:1c:37:57:be:6a:6f:83:09:c1:
2f:c5:b0:b4:55:52:76:f6:5d:c3:05:39:6b:4c:ef:
e7:7a:b5:5c:64:6e:d0:79:c1:73:62:78:96:cf:ee:
e0:54:f4:c3:5c:c6:c0:79:08:62:a7:bc:5a:ae:81:
a6:c5:6b:2d:7e:a8:fc:74:fd:b7:c1:b1:31:5a:67:
12:d0:c4:22:b9:f3:5e:c4:3f:60:c5:f5:5d:32:98:
f8:f4:e0:6e:ac:75:93:bd:39:c4:a7:7c:0e:b0:f7:
c5:71:cd:bd:73:51:7b:8b:0b:df:c7:81:3a:5e:36:
4c:08:76:6d:e4:c1:6d:43:44:57:07:bd:b0:aa:23:
ac:c8:a7:c3:bb:c1:a6:cb:33:4c:a6:65:d9:a7:00:
72:c8:bc:9f:56:56:e7:01:c1:9a:20:0d:40:7c:a9:
f1:1a:e5:e5:76:34:77:08:02:d4:36:a5:2e:48:33:
61:e7:9d:d6:3b:38:4d:f3:01:8a:be:aa:5c:48:be:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8F:24:8E:F3:69:4B:89:AF:20:6A:6E:64:99:24:D1:24:04:A7:2E
X509v3 Authority Key Identifier:
keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:60:a5:6d:9a:7d:76:13:a9:16:d5:60:41:7c:57:1d:1a:d3:
73:3d:f7:1c:f5:ee:23:bc:7e:b6:28:0f:9b:e3:ce:ee:f3:e9:
b7:06:1d:fb:07:68:4a:ee:7e:b3:07:39:22:20:dc:d3:3a:dd:
6d:16:db:56:58:2c:03:46:3f:80:25:78:db:0e:ca:33:90:51:
6d:68:dc:0a:2d:36:9b:b1:5c:ff:cf:50:93:b4:07:85:90:22:
87:0e:5f:b5:5c:d5:95:ad:b0:b6:9c:3b:e9:d6:f6:59:d0:0a:
18:00:22:6b:04:cb:4a:a6:e9:eb:36:ff:b9:7f:05:08:21:f1:
af:b7:e7:22:9b:f2:ed:89:98:f0:b6:da:fa:12:d0:e2:0f:98:
87:22:36:9f:c8:51:f9:a1:b5:51:e2:e0:29:c6:be:65:85:0a:
ff:c6:80:c8:a5:80:92:57:f7:03:a1:1e:cc:aa:cf:d2:f2:e9:
94:c0:82:db:4b:64:a5:63:b3:f3:94:6f:a3:4a:e8:bb:8b:fc:
e7:35:e7:10:1b:f3:24:84:a3:fa:63:1f:e2:dc:20:e6:4f:ab:
57:45:d6:57:8a:89:b3:95:49:2c:06:62:72:af:13:c0:52:8a:
20:63:f8:c4:bb:4b:70:06:ab:f7:80:21:c3:bb:7d:72:a1:96:
42:b5:35:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqE1v5KJPq31WZFsjxuVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZThkNGNiOGU0NDJlYzM4YTZiYzNmYTQwMGEyYTUxN2Nl
ZTBkMWUwHhcNMjUwODIzMDIwMDU2WhcNMjUwODI0MDIwMDU2WjAzMTEwLwYDVQQD
Eyg2ZjhmMjQ4ZWYzNjk0Yjg5YWYyMDZhNmU2NDk5MjRkMTI0MDRhNzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw98Y5ihA9wVUIB6t/1G9rkOI+Jg9
lCJ0xjF1F+hw2yxmu3tNBDYmdoAu6eXeIfpV4ZYSMIULg56PGLN3cXBEREQcN1e+
am+DCcEvxbC0VVJ29l3DBTlrTO/nerVcZG7QecFzYniWz+7gVPTDXMbAeQhip7xa
roGmxWstfqj8dP23wbExWmcS0MQiufNexD9gxfVdMpj49OBurHWTvTnEp3wOsPfF
cc29c1F7iwvfx4E6XjZMCHZt5MFtQ0RXB72wqiOsyKfDu8GmyzNMpmXZpwByyLyf
VlbnAcGaIA1AfKnxGuXldjR3CALUNqUuSDNh553WOzhN8wGKvqpcSL7gtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+PJI7zaUuJryBqbmSZJNEkBKcuMB8GA1UdIwQY
MBaAFNPo1MuORC7DimvD+kAKKlF87g0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82Yjg1MGEtNGYxMi00MjA2LWE1MGYt
NWQ1ODcxMWYzNjYyLzEvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi82Yjg1MGEtNGYxMi00MjA2LWE1MGYtNWQ1ODcxMWYzNjYy
LzEvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyWClbZp9
dhOpFtVgQXxXHRrTcz33HPXuI7x+tigPm+PO7vPptwYd+wdoSu5+swc5IiDc0zrd
bRbbVlgsA0Y/gCV42w7KM5BRbWjcCi02m7Fc/89Qk7QHhZAihw5ftVzVla2wtpw7
6db2WdAKGAAiawTLSqbp6zb/uX8FCCHxr7fnIpvy7YmY8Lba+hLQ4g+YhyI2n8hR
+aG1UeLgKca+ZYUK/8aAyKWAklf3A6EezKrP0vLplMCC20tkpWOz85Rvo0rou4v8
5zXnEBvzJISj+mMf4twg5k+rV0XWV4qJs5VJLAZicq8TwFKKIGP4xLtLcAar94Ah
w7t9cqGWQrU1hw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:06 2025 by rpki-client