Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier: NiFb0OtPPYjWWTwOsIEhSGU5GliXM3avsrq1WV5eebU=
Subject key identifier: 12:A8:DA:95:E6:29:C0:68:A3:E3:9C:A3:09:F2:0C:F9:85:77:D8:C1
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 0198D4724D0520849F24DA6970072BE81B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 01:01:56 +0000
Manifest this update: Sat 23 Aug 2025 01:01:56 +0000
Manifest next update: Sun 24 Aug 2025 01:01:56 +0000
Files and hashes: 1: 16VwzWVgNRyLCtAXch9PWfSWgeM.roa (hash: C203Vfz7VUs5MzzkDe6+jJ/0Hm3QJ8YvUWmNLcGjW6Q=)
2: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: xymi0lRLhxc8QsUEjB7Dv7CppK+JVPD/WZ+5O8yhL5U=)
3: si754UrpKqsViXC-aHyx2LtipFA.roa (hash: VCYyh8ACSkDGJLu/cfRmB43QT8YqJ4jUUodjDefcg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:4d:05:20:84:9f:24:da:69:70:07:2b:e8:1b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: Aug 23 01:01:56 2025 GMT
Not After : Aug 24 01:01:56 2025 GMT
Subject: CN=12a8da95e629c068a3e39ca309f20cf98577d8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:30:ac:9b:22:df:55:82:ec:f4:6a:10:1d:0b:
2f:2a:17:5f:0f:09:9d:f5:3f:cd:90:29:29:d2:1e:
d5:87:e4:2a:e0:aa:c5:e9:a7:e4:bd:6f:8d:05:97:
8a:a8:42:1a:d2:3c:9c:72:17:53:59:87:e2:7a:77:
51:fc:26:a9:ce:67:53:2d:13:49:11:65:eb:58:68:
f4:b8:9c:12:fb:78:83:68:47:b4:85:18:78:0b:24:
48:ce:32:00:6a:15:37:2c:3d:40:2b:81:ef:a8:8e:
90:39:01:73:36:62:b6:69:5c:24:41:15:e9:d6:63:
06:54:0f:b1:b2:68:e5:ba:84:f1:e4:73:e6:b5:57:
09:be:47:f2:68:fd:bb:e6:40:c8:94:92:36:e4:01:
52:5e:9f:65:4d:ba:ea:91:36:ca:72:71:18:ea:ca:
fa:5a:f3:97:0b:f7:76:39:8a:04:61:b4:15:8d:48:
d3:6f:28:87:3a:bd:b1:0b:3a:3e:1f:d4:b9:de:2b:
a2:19:29:a7:27:5d:54:f6:a9:08:eb:a2:31:ed:dc:
fe:7c:27:7a:4d:d4:e6:4b:52:c4:dc:7b:48:6d:7a:
91:a6:60:fd:08:f7:ac:da:82:3a:67:83:4a:a8:4f:
b2:0a:ed:a3:6f:23:a5:62:95:0e:84:2d:9b:4d:5f:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A8:DA:95:E6:29:C0:68:A3:E3:9C:A3:09:F2:0C:F9:85:77:D8:C1
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5d:7c:84:42:8a:7a:ae:51:20:29:d0:ed:16:90:fd:6b:73:
72:fc:ac:08:b8:a0:dc:99:ef:53:0d:c2:57:64:88:b2:e2:ff:
6a:14:8f:34:52:16:21:da:46:81:bb:ac:9f:8a:15:4f:da:53:
3a:65:f9:74:84:c5:b0:1e:b1:30:08:90:07:9c:ee:e5:ab:c7:
3f:0d:da:6e:81:11:02:f7:b6:44:7e:9a:b1:9d:3c:3d:97:f6:
aa:c6:ae:aa:e0:81:ea:51:05:7a:bd:c4:f0:44:e6:e8:a7:a3:
31:2e:a0:e0:9e:46:13:c8:b4:1b:db:6c:74:2e:c9:86:be:db:
a7:e8:71:35:e0:64:5f:c8:73:89:37:e7:f9:64:e1:49:1f:a0:
69:cc:6e:64:ec:21:70:f8:01:cc:23:e6:33:dc:c9:19:e7:4e:
2f:c4:0f:da:90:17:b9:fb:e7:7d:01:31:fd:28:99:e2:fc:2c:
f2:81:ce:ae:a8:8b:7d:3c:d0:f8:67:c4:d3:79:f3:6e:fe:3d:
54:15:6e:94:31:a8:39:61:40:07:8e:92:fc:4b:6d:f9:fc:eb:
f9:30:58:35:f0:b2:ae:71:82:2f:02:df:ad:5d:71:e1:72:b3:
70:8f:bb:13:2c:dc:94:53:aa:e2:ff:d3:2c:20:ac:24:79:d0:
4c:41:34:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUck0FIISfJNppcAcr6BuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDdjOTUxMzQ4YmQyZTA5Y2NhZjc2ZjU3YjgzODVmMTVk
ZjQ0ZTQwHhcNMjUwODIzMDEwMTU2WhcNMjUwODI0MDEwMTU2WjAzMTEwLwYDVQQD
EygxMmE4ZGE5NWU2MjljMDY4YTNlMzljYTMwOWYyMGNmOTg1NzdkOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TCsmyLfVYLs9GoQHQsvKhdfDwmd
9T/NkCkp0h7Vh+Qq4KrF6afkvW+NBZeKqEIa0jycchdTWYfiendR/CapzmdTLRNJ
EWXrWGj0uJwS+3iDaEe0hRh4CyRIzjIAahU3LD1AK4HvqI6QOQFzNmK2aVwkQRXp
1mMGVA+xsmjluoTx5HPmtVcJvkfyaP275kDIlJI25AFSXp9lTbrqkTbKcnEY6sr6
WvOXC/d2OYoEYbQVjUjTbyiHOr2xCzo+H9S53iuiGSmnJ11U9qkI66Ix7dz+fCd6
TdTmS1LE3HtIbXqRpmD9CPes2oI6Z4NKqE+yCu2jbyOlYpUOhC2bTV8oDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKo2pXmKcBoo+OcownyDPmFd9jBMB8GA1UdIwQY
MBaAFNvXyVE0i9LgnMr3b1e4OF8V30TkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEt
N2QwYWM1MjgxNWE2LzEvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEtN2QwYWM1MjgxNWE2
LzEvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATV18hEKK
eq5RICnQ7RaQ/WtzcvysCLig3JnvUw3CV2SIsuL/ahSPNFIWIdpGgbusn4oVT9pT
OmX5dITFsB6xMAiQB5zu5avHPw3aboERAve2RH6asZ08PZf2qsauquCB6lEFer3E
8ETm6KejMS6g4J5GE8i0G9tsdC7Jhr7bp+hxNeBkX8hziTfn+WThSR+gacxuZOwh
cPgBzCPmM9zJGedOL8QP2pAXufvnfQEx/SiZ4vws8oHOrqiLfTzQ+GfE03nzbv49
VBVulDGoOWFAB46S/Ett+fzr+TBYNfCyrnGCLwLfrV1x4XKzcI+7EyzclFOq4v/T
LCCsJHnQTEE0PA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:58 2025 by rpki-client