Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier: ObCNrAXTsJF9AaX7HU8J6HDa9L1h83FXpx9e8lKa8KI=
Subject key identifier: 3C:AF:47:CB:47:C0:CD:7A:15:E7:D0:B5:BC:96:2D:8C:F1:F0:00:5E
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial: 0198D4E02F5DF85205A059651A3FEC6EA875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number: 1317
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: AGh_BXwDaFnqdr1rluMLMPMOrnM.roa (hash: L7VSHEAFfvwnZGbHuhPcAH6Mmh4M0FtFsSBsZ0VnfV0=)
2: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: 4tOD/WGlrldzSCRw3Z3oDXy5qYLnKVWkdwElekfdpX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2f:5d:f8:52:05:a0:59:65:1a:3f:ec:6e:a8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=3caf47cb47c0cd7a15e7d0b5bc962d8cf1f0005e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:5a:29:dc:d1:2a:56:80:1c:9a:ab:37:3f:
c1:f5:7f:f3:7b:d9:b8:4a:e0:42:fb:23:36:7e:4a:
10:51:80:a0:01:a3:c2:18:3e:53:10:58:0e:b9:1f:
28:49:1f:d8:92:f4:d9:90:a3:8e:3d:b3:ea:18:24:
6f:9c:61:5b:8c:c8:b0:38:1c:c2:4c:db:6d:9f:04:
8d:f9:ad:9a:90:8b:af:3f:0e:84:c7:e8:1b:2e:ef:
9b:60:dd:66:40:d6:13:c8:8f:2f:86:4b:7d:38:41:
94:1a:8b:77:6f:5c:b9:37:19:bd:82:a9:b8:ff:a5:
c5:50:a9:d4:a8:44:41:41:32:58:90:09:f1:42:05:
fb:cb:16:b7:c3:9c:25:f1:2c:55:25:9d:3c:1e:bf:
31:e3:f3:79:ab:bf:eb:28:43:f6:68:e1:14:f6:cf:
9e:8e:ca:57:c2:33:a6:5f:b2:a0:a8:0d:ca:ba:fa:
c3:86:c2:96:9d:35:91:25:45:8c:3d:94:b0:4a:d7:
67:14:da:c4:df:ec:40:68:c0:ff:5c:15:92:34:c8:
29:67:c3:27:34:97:bc:73:41:c5:29:f8:d2:f5:ba:
4f:5a:2b:9d:be:8e:38:05:bb:7c:5b:2f:4d:1a:fc:
52:64:af:05:d9:8d:92:51:bc:e0:65:63:2c:f3:87:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AF:47:CB:47:C0:CD:7A:15:E7:D0:B5:BC:96:2D:8C:F1:F0:00:5E
X509v3 Authority Key Identifier:
keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9f:e3:af:bf:5f:27:e0:3e:63:c7:0b:4f:22:be:c7:ac:15:
7d:b9:8a:ed:ee:9a:67:74:a4:49:c2:7f:1a:a6:a5:e8:92:ce:
ac:ba:7a:31:3c:30:d8:79:33:48:e9:cf:7f:13:ea:9c:2d:df:
be:ce:a5:73:2c:06:55:14:1d:9c:06:bd:2a:3b:59:e1:b4:dd:
d4:88:11:7c:93:fa:75:fa:61:9f:0b:6d:b7:a5:6d:ae:07:ca:
e1:72:27:62:34:fa:99:e3:6a:25:ab:6d:87:f1:97:24:89:a9:
71:81:20:cd:22:ba:e7:68:6b:a3:e3:c4:7e:09:10:62:35:bb:
61:ec:60:dc:5d:ff:86:c0:b9:ee:1d:52:66:c2:6a:2d:ab:86:
58:7d:c4:d6:b5:dd:a4:d4:4f:b2:d4:2b:a2:b5:c7:c2:fe:3d:
5e:08:2c:93:81:ac:70:7a:36:82:f2:42:74:bb:fb:bb:a1:14:
20:8e:68:55:7d:57:3f:26:6f:4c:7b:12:25:21:8c:ae:2e:fa:
25:65:bd:a8:fc:87:d5:ed:96:75:ea:c5:36:a4:6e:2d:58:da:
72:fc:42:94:12:41:e3:0f:b0:f1:af:4c:21:ff:a3:eb:06:6e:
cd:e3:3e:dc:82:8d:58:f6:88:8c:ac:d0:f0:73:72:46:9f:5b:
c5:0f:4e:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4C9d+FIFoFllGj/sbqh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Y2E5YWRhNDQ1MjRmYzUzNmZhM2VjYWJmNzU4ZGYyNjQw
N2M4YjEwHhcNMjUwODIzMDMwMTU4WhcNMjUwODI0MDMwMTU4WjAzMTEwLwYDVQQD
EygzY2FmNDdjYjQ3YzBjZDdhMTVlN2QwYjViYzk2MmQ4Y2YxZjAwMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FNaKdzRKlaAHJqrNz/B9X/ze9m4
SuBC+yM2fkoQUYCgAaPCGD5TEFgOuR8oSR/YkvTZkKOOPbPqGCRvnGFbjMiwOBzC
TNttnwSN+a2akIuvPw6Ex+gbLu+bYN1mQNYTyI8vhkt9OEGUGot3b1y5Nxm9gqm4
/6XFUKnUqERBQTJYkAnxQgX7yxa3w5wl8SxVJZ08Hr8x4/N5q7/rKEP2aOEU9s+e
jspXwjOmX7KgqA3KuvrDhsKWnTWRJUWMPZSwStdnFNrE3+xAaMD/XBWSNMgpZ8Mn
NJe8c0HFKfjS9bpPWiudvo44Bbt8Wy9NGvxSZK8F2Y2SUbzgZWMs84fVlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyvR8tHwM16FefQtbyWLYzx8ABeMB8GA1UdIwQY
MBaAFKfKmtpEUk/FNvo+yr91jfJkB8ixMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mN2VjNzAtMGRlZC00MmNhLTlkMDAt
OWQ5ZTFiNmJlZWU5LzEvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mN2VjNzAtMGRlZC00MmNhLTlkMDAtOWQ5ZTFiNmJlZWU5
LzEvcDhxYTJrUlNUOFUyLWo3S3YzV044bVFIeUxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARp/jr79f
J+A+Y8cLTyK+x6wVfbmK7e6aZ3SkScJ/Gqal6JLOrLp6MTww2HkzSOnPfxPqnC3f
vs6lcywGVRQdnAa9KjtZ4bTd1IgRfJP6dfphnwttt6VtrgfK4XInYjT6meNqJatt
h/GXJImpcYEgzSK652hro+PEfgkQYjW7Yexg3F3/hsC57h1SZsJqLauGWH3E1rXd
pNRPstQrorXHwv49Xggsk4GscHo2gvJCdLv7u6EUII5oVX1XPyZvTHsSJSGMri76
JWW9qPyH1e2WderFNqRuLVjacvxClBJB4w+w8a9MIf+j6wZuzeM+3IKNWPaIjKzQ
8HNyRp9bxQ9OGg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:45 2025 by rpki-client