Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
File: w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json)
Hash identifier: 3mIDvU7pjojNyL9hhaZjMsL3bGc3FQ/+YjwWbDlBmAk=
Subject key identifier: 5B:11:FF:42:FA:D7:CF:04:DF:29:4E:E1:E4:FE:EE:7E:95:FE:73:F4
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 0198D65FA0D1E70E44B379304F53B83CB394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:00:47 +0000
Manifest this update: Sat 23 Aug 2025 10:00:47 +0000
Manifest next update: Sun 24 Aug 2025 10:00:47 +0000
Files and hashes: 1: 4mL1zKKLOxGn25fl7m9On5y2ZYA.roa (hash: 9EgYMO8cQ5z/aiE1aC8zT4GRbu01MVUJ2bPVFVsvu8U=)
2: jdL88fKfBRcDZQd2LJ3KQAGZWz0.roa (hash: Rtx6TLOA/PMGBKD0sU4jO9D8OJMlb2E7ArhYwQT50vQ=)
3: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: Th7IV4Ju+GtTV37qvxj9HwWoY7kWeiAk46tVLv8m31Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a0:d1:e7:0e:44:b3:79:30:4f:53:b8:3c:b3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: Aug 23 10:00:47 2025 GMT
Not After : Aug 24 10:00:47 2025 GMT
Subject: CN=5b11ff42fad7cf04df294ee1e4feee7e95fe73f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:c1:bf:b4:18:57:bb:19:93:b5:b6:20:1d:
92:f4:b6:53:a0:fb:72:11:f7:16:88:20:66:ea:a1:
b3:eb:98:e9:06:09:4b:15:15:b2:09:12:77:19:d8:
fb:1c:fe:55:b9:ca:f1:98:40:7e:73:81:a2:af:f8:
21:48:11:52:02:aa:aa:01:2b:97:85:b3:83:0a:25:
03:9c:c6:74:e0:4a:8c:49:df:79:c3:73:0c:17:e4:
7f:62:a1:b1:f3:fc:cd:44:c1:d7:95:41:4e:a4:d2:
7b:5e:61:0f:61:a6:74:f1:03:f0:21:43:14:8e:19:
d8:2d:06:52:c7:8c:c4:78:8f:f2:d5:0b:7a:16:cc:
bb:ab:b0:14:32:24:29:3d:75:82:0c:9d:fe:89:1d:
59:8f:19:0e:a9:7c:96:4a:4b:62:59:c4:6d:a0:4f:
ca:f3:17:f9:b1:1e:32:e2:0c:0f:23:23:b2:7f:bb:
12:b9:c5:df:8a:8c:46:e9:fd:c8:87:26:14:a2:2b:
6c:0c:40:e0:24:11:ad:b6:f8:bb:e2:c7:9b:99:42:
13:ab:99:c7:00:3c:91:53:f5:ac:d3:94:93:41:ba:
86:af:1f:1a:09:86:3d:a5:11:a0:15:b3:37:35:70:
f0:e7:fa:4b:02:8f:f8:a2:52:8b:73:b6:66:f0:48:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:11:FF:42:FA:D7:CF:04:DF:29:4E:E1:E4:FE:EE:7E:95:FE:73:F4
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c0:fc:ae:0f:90:74:19:d7:46:17:42:0d:68:90:44:45:dd:
0e:ee:6d:a0:bb:ce:33:7b:c3:fa:21:a3:1c:5f:41:3a:8c:7d:
95:27:8d:dc:45:15:f4:06:01:e6:a8:98:27:ea:1e:cb:0e:c7:
e5:2a:24:29:04:37:d0:ae:22:70:43:ae:96:28:0f:16:72:53:
44:74:5d:ca:55:9f:b2:c0:75:ee:6e:38:e8:5e:63:fc:a9:17:
9f:a0:29:47:49:c0:61:00:f5:38:db:77:b2:f5:59:19:5a:40:
a4:35:a9:99:2f:f1:95:ee:a3:c5:e8:b7:a0:97:1b:28:06:71:
ea:2c:df:c2:e2:21:e1:1d:77:5f:a2:d2:87:69:28:b4:fb:68:
91:6a:e3:be:07:b0:e4:d2:85:b6:7d:32:84:85:48:d4:5c:4c:
1f:43:2a:d3:61:1e:90:dc:20:66:f4:8d:5e:29:6f:e5:85:44:
f3:e8:5f:97:d6:32:81:9f:50:27:c9:a6:a5:d9:83:4d:01:b6:
35:19:4d:87:66:fc:8c:32:89:de:be:06:5c:3d:71:41:ac:f6:
f4:4d:6f:d8:83:75:d8:5f:0f:f2:b5:d5:1a:92:4c:4f:59:40:
a0:ed:09:b2:98:0b:19:a3:17:6b:a9:62:8e:12:98:ef:58:bd:
1b:a8:3d:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX6DR5w5Es3kwT1O4PLOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjQzNTFlMGE0OTVjMjZlZmRjNmU0MTVmMGJiMTg5ZmJi
ZDZlZGYwHhcNMjUwODIzMTAwMDQ3WhcNMjUwODI0MTAwMDQ3WjAzMTEwLwYDVQQD
Eyg1YjExZmY0MmZhZDdjZjA0ZGYyOTRlZTFlNGZlZWU3ZTk1ZmU3M2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqDBv7QYV7sZk7W2IB2S9LZToPty
EfcWiCBm6qGz65jpBglLFRWyCRJ3Gdj7HP5VucrxmEB+c4Gir/ghSBFSAqqqASuX
hbODCiUDnMZ04EqMSd95w3MMF+R/YqGx8/zNRMHXlUFOpNJ7XmEPYaZ08QPwIUMU
jhnYLQZSx4zEeI/y1Qt6Fsy7q7AUMiQpPXWCDJ3+iR1ZjxkOqXyWSktiWcRtoE/K
8xf5sR4y4gwPIyOyf7sSucXfioxG6f3IhyYUoitsDEDgJBGttvi74sebmUITq5nH
ADyRU/Ws05STQbqGrx8aCYY9pRGgFbM3NXDw5/pLAo/4olKLc7Zm8EiVswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsR/0L6188E3ylO4eT+7n6V/nP0MB8GA1UdIwQY
MBaAFMO0NR4KSVwm79xuQV8LsYn7vW7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTIt
MGVmMWNhYzc0MThkLzEvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTItMGVmMWNhYzc0MThk
LzEvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcD8rg+Q
dBnXRhdCDWiQREXdDu5toLvOM3vD+iGjHF9BOox9lSeN3EUV9AYB5qiYJ+oeyw7H
5SokKQQ30K4icEOuligPFnJTRHRdylWfssB17m446F5j/KkXn6ApR0nAYQD1ONt3
svVZGVpApDWpmS/xle6jxei3oJcbKAZx6izfwuIh4R13X6LSh2kotPtokWrjvgew
5NKFtn0yhIVI1FxMH0Mq02EekNwgZvSNXilv5YVE8+hfl9YygZ9QJ8mmpdmDTQG2
NRlNh2b8jDKJ3r4GXD1xQaz29E1v2IN12F8P8rXVGpJMT1lAoO0JspgLGaMXa6li
jhKY71i9G6g9+w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:19 2025 by rpki-client