Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: gfWstdAFR/l8s0f7arnif3urr08ztoXg8DD8SnQjOFA=
Subject key identifier: 8F:FA:85:DE:37:F8:E3:50:F9:1E:D7:6B:48:F0:90:40:75:A2:7C:9B
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 0198D660298CEA2440B7E834087358F7DD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 165F
Signing time: Sat 23 Aug 2025 10:01:22 +0000
Manifest this update: Sat 23 Aug 2025 10:01:22 +0000
Manifest next update: Sun 24 Aug 2025 10:01:22 +0000
Files and hashes: 1: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (hash: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=)
2: 54AIlsCbzgy0XCYwE0wdAC4kiqw.roa (hash: yJyuDkNiVUNUnxXEpeacfSUjn5at6QtcOaws+zppt2w=)
3: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: PxW5F6Ywf8UqIPTLAf8Jkch09FiDVSZaQpJG/M6baT4=)
4: I9n8PdlI12zk3ftrt5ZejA1FrCU.roa (hash: kf3O7lpj7s7VfmT2vuNx6GwPZjLLFUhTpSV85VBR1i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:29:8c:ea:24:40:b7:e8:34:08:73:58:f7:dd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Aug 23 10:01:22 2025 GMT
Not After : Aug 24 10:01:22 2025 GMT
Subject: CN=8ffa85de37f8e350f91ed76b48f0904075a27c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:31:d2:19:91:d0:f3:92:38:cc:91:d7:e9:
01:62:60:13:6a:6b:27:a3:c7:ca:2d:0b:6f:f9:23:
6c:80:42:7b:e7:40:e4:cf:b6:e2:13:32:b6:b2:6f:
c2:ec:9d:15:ad:02:f6:11:16:95:cd:f2:32:8e:af:
f4:a2:21:2b:60:90:81:ca:4e:a4:4a:9d:2d:f1:81:
d3:b1:20:65:e3:ba:06:9a:8e:ae:9b:1f:18:9b:87:
1c:f2:51:1e:b6:d0:60:f8:f9:7c:77:da:87:f2:d7:
1c:ef:e3:14:9c:a1:d3:7e:a6:11:12:fb:6f:8c:46:
15:4a:88:9d:3f:5a:a8:17:07:5a:49:eb:46:4b:dd:
34:be:5b:52:dd:25:bc:f5:28:ba:ca:06:24:3c:00:
db:70:7a:29:59:c8:50:6f:a4:f7:d4:e8:29:d4:e0:
64:f7:40:00:fa:dd:08:99:45:f8:4c:99:ca:91:c1:
f0:44:52:31:fc:f3:82:be:0d:08:86:d9:ee:41:b4:
74:39:8d:28:83:87:6c:d0:ab:f8:fe:a5:c5:74:b2:
58:da:97:85:90:39:ec:74:97:f8:a2:7a:64:e9:bb:
f5:7d:fd:70:fc:39:d6:80:16:94:af:9c:58:51:2a:
b0:d7:3a:3c:61:d8:46:01:f5:3a:7a:8b:80:5a:38:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FA:85:DE:37:F8:E3:50:F9:1E:D7:6B:48:F0:90:40:75:A2:7C:9B
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e8:1f:89:90:59:16:32:e2:0e:da:16:f2:bb:02:09:c3:0d:
20:20:73:89:90:11:a7:ce:c2:c5:b1:24:0d:27:e3:57:46:8e:
69:0a:36:c4:46:84:81:99:02:82:f1:47:5b:b0:7f:b5:1b:8e:
f4:eb:82:b3:ee:f4:e8:5b:6e:56:85:85:9b:94:9d:9a:ee:68:
74:2d:43:ec:8b:df:ea:9b:21:e0:ee:70:e3:ed:8d:5a:7b:b6:
93:00:df:1d:51:06:c4:61:8d:f1:cc:eb:ea:b1:ac:00:28:c0:
42:9b:b4:27:2b:18:3d:df:46:ab:08:87:ed:0e:04:19:72:16:
d3:a0:f7:06:a9:93:2a:cd:bb:da:22:a0:36:36:63:6e:39:54:
95:6c:62:a8:d5:e8:2f:e4:33:dd:a9:5f:80:ff:55:e5:fb:c0:
d7:f8:db:8f:ff:6b:c4:e7:44:e4:c7:b4:3a:4b:80:3c:8c:92:
aa:5f:c3:39:9a:02:15:ea:18:8e:50:75:a7:a0:56:23:33:b0:
60:d0:4d:5f:c4:04:3f:0c:94:c7:34:06:39:c0:8c:c0:4d:1f:
46:fa:e4:48:b4:d1:19:69:f1:d6:6f:88:e9:ea:b6:5d:d8:66:
43:39:a1:76:6a:b1:3a:49:9a:84:6e:7f:20:95:8a:17:e9:3d:
54:09:dc:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYCmM6iRAt+g0CHNY991bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWU3MmYzZDA5NTdmNWE2ZTNiZDFiODQ0YTEyYTYxNDc0
NDkwMjcwHhcNMjUwODIzMTAwMTIyWhcNMjUwODI0MTAwMTIyWjAzMTEwLwYDVQQD
Eyg4ZmZhODVkZTM3ZjhlMzUwZjkxZWQ3NmI0OGYwOTA0MDc1YTI3YzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqysx0hmR0POSOMyR1+kBYmATamsn
o8fKLQtv+SNsgEJ750Dkz7biEzK2sm/C7J0VrQL2ERaVzfIyjq/0oiErYJCByk6k
Sp0t8YHTsSBl47oGmo6umx8Ym4cc8lEettBg+Pl8d9qH8tcc7+MUnKHTfqYREvtv
jEYVSoidP1qoFwdaSetGS900vltS3SW89Si6ygYkPADbcHopWchQb6T31Ogp1OBk
90AA+t0ImUX4TJnKkcHwRFIx/POCvg0IhtnuQbR0OY0og4ds0Kv4/qXFdLJY2peF
kDnsdJf4onpk6bv1ff1w/DnWgBaUr5xYUSqw1zo8YdhGAfU6eouAWjhrxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/6hd43+ONQ+R7Xa0jwkEB1onybMB8GA1UdIwQY
MBaAFAsecvPQlX9abjvRuEShKmFHRJAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQt
MDU0OGQzODk1YTU1LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQtMDU0OGQzODk1YTU1
LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+gfiZBZ
FjLiDtoW8rsCCcMNICBziZARp87CxbEkDSfjV0aOaQo2xEaEgZkCgvFHW7B/tRuO
9OuCs+706FtuVoWFm5Sdmu5odC1D7Ivf6psh4O5w4+2NWnu2kwDfHVEGxGGN8czr
6rGsACjAQpu0JysYPd9GqwiH7Q4EGXIW06D3BqmTKs272iKgNjZjbjlUlWxiqNXo
L+Qz3alfgP9V5fvA1/jbj/9rxOdE5Me0OkuAPIySql/DOZoCFeoYjlB1p6BWIzOw
YNBNX8QEPwyUxzQGOcCMwE0fRvrkSLTRGWnx1m+I6eq2XdhmQzmhdmqxOkmahG5/
IJWKF+k9VAnc7A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:20 2025 by rpki-client