Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: rdxGsxdYSBdV1xU+Rr6JqqdEK9qPu0i4xvyMn4WDZmE=
Subject key identifier: 81:15:ED:F8:32:62:D5:03:EE:22:91:CF:F0:82:E3:D3:CC:C3:48:F2
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 0198D5BB7F0FC6D970F3CB3EA217F46B1E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:01:31 +0000
Manifest this update: Sat 23 Aug 2025 07:01:31 +0000
Manifest next update: Sun 24 Aug 2025 07:01:31 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: LwWDrq5rlmpWNg+p9HbsnTIvUVz+JpKwubYgNDrDCs0=)
2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=)
3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7f:0f:c6:d9:70:f3:cb:3e:a2:17:f4:6b:1e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Aug 23 07:01:31 2025 GMT
Not After : Aug 24 07:01:31 2025 GMT
Subject: CN=8115edf83262d503ee2291cff082e3d3ccc348f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:f8:67:51:2e:50:e8:0e:95:2b:6c:41:fe:
cd:da:42:f4:4f:92:1d:bc:c3:7b:05:4b:5e:8d:43:
13:ca:4c:4e:dc:d6:2f:3c:25:e1:2b:db:c0:62:94:
0c:a7:af:3c:4d:c4:b4:e1:6b:54:4d:ab:3f:4d:a0:
c6:f4:1d:87:37:27:e1:6a:90:1e:14:d2:e2:02:99:
c6:16:23:4c:85:92:5b:e2:cf:10:94:78:92:e5:19:
0f:10:5c:ef:9d:fb:5a:bd:e9:f9:30:88:64:71:cb:
93:15:d2:7b:95:93:d5:78:32:f4:28:7a:ca:ec:3e:
59:ee:ad:0f:44:31:34:00:4a:4b:eb:64:80:a0:c1:
42:1a:a4:62:44:0e:e2:e0:52:50:d0:b4:47:63:6e:
e3:5a:b5:c7:5d:80:53:7a:d1:aa:83:48:c9:f7:d2:
36:55:ed:d9:ab:3b:51:21:1f:14:98:c6:5a:18:cf:
f8:2b:fa:aa:61:54:ec:50:f3:c5:12:9a:af:7e:24:
c1:2a:0a:f0:7c:1e:34:22:eb:0f:dc:07:6f:91:51:
6e:47:12:98:76:c2:54:cd:1d:d4:62:66:5a:b9:b8:
68:7e:55:b7:2c:73:82:90:5c:a8:7f:67:ee:fd:98:
37:cb:97:3d:a8:9b:a4:cb:3a:dc:9e:f8:4e:ff:4e:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:15:ED:F8:32:62:D5:03:EE:22:91:CF:F0:82:E3:D3:CC:C3:48:F2
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d0:41:5c:c6:8a:15:51:1c:cd:72:fa:07:80:2c:21:70:b7:
de:d1:02:fc:74:0b:b4:6d:a8:86:3d:35:6d:56:df:81:46:cd:
c9:a4:a3:1e:f9:24:ff:de:40:2f:9c:00:af:23:9a:5a:dd:bd:
00:52:62:17:5a:1e:76:c3:28:a4:ca:6e:b8:73:bd:62:4e:a1:
1a:ed:cc:98:11:e7:b7:35:39:a8:87:34:a1:a0:ed:b9:f8:af:
b0:b1:52:cd:bb:c2:c8:6c:12:1e:2e:4d:0d:d8:b7:74:88:6a:
28:02:86:b4:f1:6a:9a:c4:c8:66:c5:30:0f:b0:8d:f4:3a:25:
bb:6f:7e:98:32:6a:e6:e1:6c:f3:20:f0:15:ce:ea:5b:80:86:
da:93:1f:61:d2:a7:24:39:1e:ce:47:a0:aa:08:71:22:63:97:
85:12:e9:ef:ca:dd:1d:e7:89:aa:59:94:8f:e7:0f:f9:7f:0b:
44:91:da:d9:70:c5:be:b8:a3:b0:36:1b:eb:05:54:7a:69:87:
9e:32:c6:0f:7e:eb:4e:83:28:ac:0b:36:da:44:8b:95:13:f1:
14:9c:2e:3a:c4:3c:4d:32:63:30:b7:13:3b:d5:d5:f5:66:37:
75:43:68:ef:da:b6:d2:32:36:a9:12:65:93:a8:51:3a:17:30:
fa:22:cb:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu38Pxtlw88s+ohf0ax5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDczN2Q4YTQ4NGQxMjUzNGNhNDBmOGRkODE4YTU4OGMz
YjNkZTIwHhcNMjUwODIzMDcwMTMxWhcNMjUwODI0MDcwMTMxWjAzMTEwLwYDVQQD
Eyg4MTE1ZWRmODMyNjJkNTAzZWUyMjkxY2ZmMDgyZTNkM2NjYzM0OGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRL4Z1EuUOgOlStsQf7N2kL0T5Id
vMN7BUtejUMTykxO3NYvPCXhK9vAYpQMp688TcS04WtUTas/TaDG9B2HNyfhapAe
FNLiApnGFiNMhZJb4s8QlHiS5RkPEFzvnftaven5MIhkccuTFdJ7lZPVeDL0KHrK
7D5Z7q0PRDE0AEpL62SAoMFCGqRiRA7i4FJQ0LRHY27jWrXHXYBTetGqg0jJ99I2
Ve3ZqztRIR8UmMZaGM/4K/qqYVTsUPPFEpqvfiTBKgrwfB40IusP3AdvkVFuRxKY
dsJUzR3UYmZaubhoflW3LHOCkFyof2fu/Zg3y5c9qJukyzrcnvhO/04CKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEV7fgyYtUD7iKRz/CC49PMw0jyMB8GA1UdIwQY
MBaAFBdHN9ikhNElNMpA+N2BiliMOz3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMt
N2I3NDZlYTFhYjgyLzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMtN2I3NDZlYTFhYjgy
LzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNBBXMaK
FVEczXL6B4AsIXC33tEC/HQLtG2ohj01bVbfgUbNyaSjHvkk/95AL5wAryOaWt29
AFJiF1oedsMopMpuuHO9Yk6hGu3MmBHntzU5qIc0oaDtufivsLFSzbvCyGwSHi5N
Ddi3dIhqKAKGtPFqmsTIZsUwD7CN9Dolu29+mDJq5uFs8yDwFc7qW4CG2pMfYdKn
JDkezkegqghxImOXhRLp78rdHeeJqlmUj+cP+X8LRJHa2XDFvrijsDYb6wVUemmH
njLGD37rToMorAs22kSLlRPxFJwuOsQ8TTJjMLcTO9XV9WY3dUNo79q20jI2qRJl
k6hROhcw+iLL1w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:37 2025 by rpki-client