Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
File: d_u84sIID4H1oPmPJ5Ipgm3khQs.mft (raw, json)
Hash identifier: U2bAkhHczk/In9K/5uQAdFF1Nu12z25854blp+T0dZs=
Subject key identifier: 18:F7:51:D3:CF:EA:3E:9C:36:EE:3E:A0:A7:60:78:F0:3F:7D:A3:17
Authority key identifier: 77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
Certificate issuer: /CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Certificate serial: 0198D54DEE0AC4017F39A5795ECDF76EBD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
Manifest number: 0D6E
Signing time: Sat 23 Aug 2025 05:01:50 +0000
Manifest this update: Sat 23 Aug 2025 05:01:50 +0000
Manifest next update: Sun 24 Aug 2025 05:01:50 +0000
Files and hashes: 1: AOhn7xhM2kSUfRAFFhvDCxU-O20.roa (hash: 1VAhBGtFhGjWFmWSsORfWNgJJ1LUT2F54ZQ/3ep5zho=)
2: d_u84sIID4H1oPmPJ5Ipgm3khQs.crl (hash: eJYk59591YtxoajqZBw82zOG0sTjVFHuSZmp11JkIhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ee:0a:c4:01:7f:39:a5:79:5e:cd:f7:6e:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Validity
Not Before: Aug 23 05:01:50 2025 GMT
Not After : Aug 24 05:01:50 2025 GMT
Subject: CN=18f751d3cfea3e9c36ee3ea0a76078f03f7da317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:62:45:a8:38:d5:7e:7c:83:41:a3:83:52:
20:6b:9a:ba:71:ba:ce:52:c0:0d:4f:9c:eb:f6:be:
a0:cd:0e:44:52:49:2f:2e:77:8e:33:cd:61:62:7f:
3c:34:f1:f3:c9:07:ce:59:b9:57:08:7a:f2:a8:92:
26:66:46:61:4b:48:b0:5f:3e:e4:c9:1c:e6:4b:22:
a1:10:b0:ff:a7:89:b8:b0:d6:c4:11:89:9e:b1:d2:
95:42:22:7a:b0:3b:43:c6:65:6e:4d:44:28:0c:ea:
61:14:a5:75:a6:3b:98:89:35:b5:c4:a0:1d:64:11:
34:59:28:a9:d3:65:a9:3e:91:48:a2:3c:91:0d:ba:
89:6b:e8:e5:05:bd:08:21:15:53:3f:d1:a9:15:77:
75:da:1b:44:15:74:cf:cc:ba:fd:de:82:89:55:0f:
2b:34:46:ee:9f:e8:93:3a:4a:d9:62:7a:3d:eb:bc:
57:ba:12:97:44:39:06:8f:c8:b7:2e:69:af:7b:39:
7e:0c:40:aa:5b:5d:58:50:c6:c0:24:ba:65:e4:f3:
52:19:33:38:b8:e7:f0:fa:4e:f3:f7:6d:5f:21:29:
30:6b:64:96:5b:20:de:f5:84:04:f5:ca:d2:0e:95:
16:ea:40:ca:38:e3:23:51:58:09:52:5c:ed:9f:e2:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F7:51:D3:CF:EA:3E:9C:36:EE:3E:A0:A7:60:78:F0:3F:7D:A3:17
X509v3 Authority Key Identifier:
keyid:77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d8:21:d9:be:ba:4f:c7:f3:42:7c:27:52:32:bd:0e:21:54:
1a:f4:8c:8e:ff:6c:e7:57:f9:77:e5:2b:d2:46:36:69:2a:e7:
40:c2:3f:07:ef:ce:16:18:73:2d:9b:da:ab:26:9b:54:4e:11:
cc:c2:03:56:ce:24:0e:1e:af:c0:60:ae:56:95:9d:6a:d1:46:
21:03:d4:42:31:a0:47:ca:6d:b0:76:f8:f1:ed:6b:0e:d5:ff:
6a:d6:96:ee:10:49:28:29:b7:6c:97:d0:be:f6:20:b0:04:7c:
15:57:a3:a0:2e:63:ad:99:24:60:a7:8a:6d:d5:3d:da:eb:4e:
05:4c:4d:71:25:25:af:a4:e8:f7:ca:ff:4e:4e:d4:4d:fc:c6:
69:91:85:64:66:bc:2d:ea:91:11:5b:57:32:eb:fc:20:f0:8b:
ba:34:43:7a:52:32:4b:f5:1f:f9:39:23:22:7a:cb:91:46:cf:
ad:34:c0:c3:00:c3:cc:1e:c9:bb:c6:68:22:05:86:ee:2d:3f:
b2:a2:b4:4c:3a:c7:ff:af:0b:dc:18:19:2c:b8:fa:db:2d:c8:
54:a9:28:2b:2f:7f:eb:76:6a:79:c4:72:79:a4:56:08:07:00:
32:18:3d:db:f1:d4:59:09:1a:52:51:7e:46:bb:e5:64:d0:b9:
45:78:9b:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTe4KxAF/OaV5Xs33br1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZmJiY2UyYzIwODBmODFmNWEwZjk4ZjI3OTIyOTgyNmRl
NDg1MGIwHhcNMjUwODIzMDUwMTUwWhcNMjUwODI0MDUwMTUwWjAzMTEwLwYDVQQD
EygxOGY3NTFkM2NmZWEzZTljMzZlZTNlYTBhNzYwNzhmMDNmN2RhMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRFiRag41X58g0Gjg1Iga5q6cbrO
UsANT5zr9r6gzQ5EUkkvLneOM81hYn88NPHzyQfOWblXCHryqJImZkZhS0iwXz7k
yRzmSyKhELD/p4m4sNbEEYmesdKVQiJ6sDtDxmVuTUQoDOphFKV1pjuYiTW1xKAd
ZBE0WSip02WpPpFIojyRDbqJa+jlBb0IIRVTP9GpFXd12htEFXTPzLr93oKJVQ8r
NEbun+iTOkrZYno967xXuhKXRDkGj8i3Lmmvezl+DECqW11YUMbAJLpl5PNSGTM4
uOfw+k7z921fISkwa2SWWyDe9YQE9crSDpUW6kDKOOMjUVgJUlztn+Jn7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBj3UdPP6j6cNu4+oKdgePA/faMXMB8GA1UdIwQY
MBaAFHf7vOLCCA+B9aD5jyeSKYJt5IULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF91ODRzSUlENEgxb1BtUEo1SXBnbTNraFFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xZWQ3MzktMjc1NC00NDBmLTk1NDYt
M2FhMjdkZjQ3NTIxLzEvZF91ODRzSUlENEgxb1BtUEo1SXBnbTNraFFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xZWQ3MzktMjc1NC00NDBmLTk1NDYtM2FhMjdkZjQ3NTIx
LzEvZF91ODRzSUlENEgxb1BtUEo1SXBnbTNraFFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNgh2b66
T8fzQnwnUjK9DiFUGvSMjv9s51f5d+Ur0kY2aSrnQMI/B+/OFhhzLZvaqyabVE4R
zMIDVs4kDh6vwGCuVpWdatFGIQPUQjGgR8ptsHb48e1rDtX/ataW7hBJKCm3bJfQ
vvYgsAR8FVejoC5jrZkkYKeKbdU92utOBUxNcSUlr6To98r/Tk7UTfzGaZGFZGa8
LeqREVtXMuv8IPCLujRDelIyS/Uf+TkjInrLkUbPrTTAwwDDzB7Ju8ZoIgWG7i0/
sqK0TDrH/68L3BgZLLj62y3IVKkoKy9/63ZqecRyeaRWCAcAMhg92/HUWQkaUlF+
RrvlZNC5RXibJw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:56 2025 by rpki-client