Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
File: U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json)
Hash identifier: 0QzhLUHshCgKrOeJ6I8SybfYKIDpjQM65tN+itf059s=
Subject key identifier: AB:F2:6C:32:58:AB:34:35:F1:B3:BC:92:66:3B:9E:63:37:7C:01:16
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial: 0198D5BBA3A8E5E1731343411F8FC9F81ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: VgTVHo4Ec8iIjFNYTcjQogdDR3t1938og9VQTy2vs7o=)
2: dxBH4TV51cTFiAYXOVtwRqrZraY.roa (hash: kYpITsy+89G8dkg3+FaIKDSidYdWIry8+rbXb5yDBDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a3:a8:e5:e1:73:13:43:41:1f:8f:c9:f8:1a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=abf26c3258ab3435f1b3bc92663b9e63377c0116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:64:98:36:72:6f:b7:c6:7e:5d:20:d2:63:
6b:7a:2f:47:47:d1:8e:57:2a:98:68:31:08:45:dc:
f2:c7:e9:29:6f:c7:c4:ed:00:81:a1:0d:3c:8e:96:
8e:1c:e3:e3:d7:70:ea:2f:77:ec:72:e6:76:c0:04:
0a:ba:4d:48:75:05:d6:ba:1b:7d:e2:a5:4b:8a:a0:
b4:2f:fb:f1:dd:40:d1:63:d9:db:e8:63:03:76:34:
7f:d1:06:47:54:9d:9e:1d:8d:9f:5a:a4:4b:97:ec:
6f:c3:43:1a:39:43:3c:ad:bf:79:20:99:97:25:d5:
a6:fc:b5:06:8c:f5:14:eb:55:02:2a:f9:ac:43:b6:
3a:5d:04:6e:56:d8:5b:e7:79:eb:10:c3:dc:2e:29:
19:52:73:0a:e8:f4:f0:a4:9f:22:fe:ce:72:1a:8d:
54:dd:87:05:b9:ab:6e:fb:3e:a5:c4:c4:97:52:29:
a2:05:54:df:c0:b9:a2:24:73:2f:bd:2b:e1:de:5f:
9d:67:d0:4c:f3:d7:82:6b:88:86:7b:4b:a4:84:3d:
6f:99:f5:13:0c:ab:4d:3b:d2:52:06:8e:15:87:82:
57:bc:da:48:db:9b:fc:5c:6c:22:28:20:6a:07:e9:
3d:4e:c5:33:49:82:6d:a9:91:95:98:79:9c:8f:09:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F2:6C:32:58:AB:34:35:F1:B3:BC:92:66:3B:9E:63:37:7C:01:16
X509v3 Authority Key Identifier:
keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:99:91:f3:28:92:5a:ce:9b:34:9e:52:2b:56:d6:6d:ca:5f:
40:82:e8:aa:c4:6e:79:94:af:72:98:3e:3b:cf:79:a9:d4:0a:
0e:26:9a:8a:72:4e:29:65:c6:82:94:c5:c1:3d:ec:fc:28:d9:
aa:fc:65:f4:ed:5c:0d:42:cd:82:e9:e9:f5:32:b0:fb:4a:cf:
ac:07:b8:2f:35:4d:48:d9:0d:32:de:96:aa:c8:55:cd:ef:23:
14:69:3c:22:b7:94:8c:f9:93:2b:3a:6f:e7:e4:b3:2f:50:30:
a1:43:1d:b7:07:3d:79:7d:86:f9:1a:21:40:9c:17:09:5c:de:
4b:b2:65:8f:e9:b7:e3:45:6d:07:ea:57:6a:39:df:d9:4a:d5:
60:04:dc:8d:27:3b:6e:52:48:93:9b:1a:7a:7c:11:a2:96:63:
81:58:4c:7a:e5:73:a1:bd:b6:f1:d9:73:d0:4c:65:77:fb:e5:
41:78:06:07:e5:d7:f8:63:3f:9d:f7:96:ac:d8:63:c7:03:14:
7b:36:49:fb:f8:69:ec:1b:29:a8:29:9e:4b:69:06:23:8f:37:
5d:a8:84:fe:e2:0d:25:ae:4e:b2:48:89:76:61:91:76:36:3f:
41:8a:b5:38:26:28:e0:ec:6f:cf:76:1b:2d:ab:ad:71:51:ce:
64:6b:3c:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6Oo5eFzE0NBH4/J+BraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDYzM2YxOWY2MWQ2NTQ2ZWJhYmY3ZGU5ZmI3YWE5ODdl
ZDViZjMwHhcNMjUwODIzMDcwMTQwWhcNMjUwODI0MDcwMTQwWjAzMTEwLwYDVQQD
EyhhYmYyNmMzMjU4YWIzNDM1ZjFiM2JjOTI2NjNiOWU2MzM3N2MwMTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyhkmDZyb7fGfl0g0mNrei9HR9GO
VyqYaDEIRdzyx+kpb8fE7QCBoQ08jpaOHOPj13DqL3fscuZ2wAQKuk1IdQXWuht9
4qVLiqC0L/vx3UDRY9nb6GMDdjR/0QZHVJ2eHY2fWqRLl+xvw0MaOUM8rb95IJmX
JdWm/LUGjPUU61UCKvmsQ7Y6XQRuVthb53nrEMPcLikZUnMK6PTwpJ8i/s5yGo1U
3YcFuatu+z6lxMSXUimiBVTfwLmiJHMvvSvh3l+dZ9BM89eCa4iGe0ukhD1vmfUT
DKtNO9JSBo4Vh4JXvNpI25v8XGwiKCBqB+k9TsUzSYJtqZGVmHmcjwmGrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvybDJYqzQ18bO8kmY7nmM3fAEWMB8GA1UdIwQY
MBaAFFNGM/GfYdZUbrq/fen7eqmH7VvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgt
ZjBjYWQ5ZmY2NWJlLzEvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84YmY3OGQtYzNiNS00NjkxLTgxMDgtZjBjYWQ5ZmY2NWJl
LzEvVTBZejhaOWgxbFJ1dXI5OTZmdDZxWWZ0V19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpmR8yiS
Ws6bNJ5SK1bWbcpfQILoqsRueZSvcpg+O895qdQKDiaainJOKWXGgpTFwT3s/CjZ
qvxl9O1cDULNgunp9TKw+0rPrAe4LzVNSNkNMt6WqshVze8jFGk8IreUjPmTKzpv
5+SzL1AwoUMdtwc9eX2G+RohQJwXCVzeS7Jlj+m340VtB+pXajnf2UrVYATcjSc7
blJIk5saenwRopZjgVhMeuVzob228dlz0Exld/vlQXgGB+XX+GM/nfeWrNhjxwMU
ezZJ+/hp7BspqCmeS2kGI483XaiE/uINJa5OskiJdmGRdjY/QYq1OCYo4Oxvz3Yb
LautcVHOZGs8QQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:34 2025 by rpki-client