Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
File: isfq5knZVHsK0KsAerTopI3tTV0.mft (raw, json)
Hash identifier: bYq9yiMpIvQLiujc5prFK4KLBrgx1uN9NJ558jzmHSA=
Subject key identifier: 56:22:19:97:82:2B:E0:98:C3:14:DF:8E:85:1F:94:85:21:30:D9:ED
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 0198D54DC54D4B3C8F1314061F302C0EB4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 05:01:40 +0000
Manifest this update: Sat 23 Aug 2025 05:01:40 +0000
Manifest next update: Sun 24 Aug 2025 05:01:40 +0000
Files and hashes: 1: VnjAZXEV2IpEDwg3p4BnaouHiwY.roa (hash: +OjGTLOvqNCpLYSjRU9GeBSRZeFRlVpWW6Mj3HPVgqw=)
2: isfq5knZVHsK0KsAerTopI3tTV0.crl (hash: GSFC8P0rsJOjlCg3hlghSsEV62Ddl/8T7sXZJ0b2Wmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c5:4d:4b:3c:8f:13:14:06:1f:30:2c:0e:b4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: Aug 23 05:01:40 2025 GMT
Not After : Aug 24 05:01:40 2025 GMT
Subject: CN=56221997822be098c314df8e851f94852130d9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:d5:3b:7a:21:42:64:5b:c8:cf:da:6d:eb:
9d:c9:43:c5:b0:76:b6:80:af:ae:69:fa:6c:8a:76:
db:d9:57:4a:16:03:56:e1:fa:d6:83:e1:1f:f5:d5:
73:d1:a1:37:67:a8:7f:84:f8:3a:13:7f:64:62:46:
0b:3b:20:61:95:96:70:8e:bb:8d:2c:5f:16:19:c3:
08:e4:a7:25:ff:4f:8c:83:15:fd:33:a9:b5:3d:fd:
cd:23:fc:87:db:26:e5:29:c7:d9:d5:52:b8:72:aa:
1f:c0:74:cd:63:be:09:2b:6b:dc:5d:73:fb:fa:38:
cd:fb:ab:26:24:0c:df:d8:8d:74:f4:54:bf:a6:82:
ea:49:9c:79:d3:64:10:65:cd:5b:7d:db:2b:24:59:
ee:6c:77:c0:de:d0:64:ec:ed:f7:bb:2b:a0:4d:e8:
90:65:64:bd:bc:19:4f:48:a4:a8:67:04:82:86:74:
09:38:b0:ac:48:08:50:2b:19:19:41:30:d5:05:d7:
d7:9a:f3:6c:8d:a4:25:3b:86:c7:77:fa:9d:48:ae:
fd:3e:0d:a2:29:8a:a0:1f:66:7b:de:4a:24:04:f6:
8c:69:36:88:b5:e1:97:30:25:74:8d:b2:f3:3f:c7:
c0:ff:af:90:95:31:58:ed:ac:43:a4:7c:3d:83:42:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:22:19:97:82:2B:E0:98:C3:14:DF:8E:85:1F:94:85:21:30:D9:ED
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:14:e2:27:1c:8b:fd:32:23:eb:c1:16:a7:b1:81:8d:a9:37:
0e:7b:32:4e:17:9b:db:0f:41:68:15:78:28:6f:6a:67:83:df:
08:9a:04:09:8b:2e:95:95:c8:a4:8d:68:49:b4:14:04:51:25:
32:f9:34:7a:11:da:51:c1:63:c5:c1:ee:88:59:a3:14:83:20:
32:de:4a:83:14:9f:d4:75:47:55:ad:55:d5:08:01:b8:db:da:
33:7e:ec:ff:5a:2e:e5:27:60:66:01:6c:86:e3:22:61:85:52:
96:ec:f7:9d:32:99:c0:38:e7:c4:10:1b:23:1d:ab:0c:13:ae:
a0:bb:59:a0:74:48:c2:e4:2f:ad:72:8b:ff:1d:c4:a0:8e:9f:
8f:58:c8:5f:d6:98:96:9f:8f:15:1f:95:97:71:bc:13:ac:18:
1c:af:6b:16:73:35:49:57:5e:11:b9:35:ac:2d:5a:2f:d6:10:
76:cf:ad:a1:02:84:6d:f4:d7:7d:74:86:51:66:a0:d5:d2:8a:
73:cc:53:6a:84:2b:ec:81:94:f8:d2:1c:9e:5f:61:e6:d8:d0:
b2:30:61:81:dc:a4:f8:b6:78:a6:68:e9:4a:8e:1e:8e:3b:23:
87:6f:d8:1b:d4:77:ec:11:12:04:b6:2a:b5:c3:f9:93:88:6b:
22:9c:15:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcVNSzyPExQGHzAsDrTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzdlYWU2NDlkOTU0N2IwYWQwYWIwMDdhYjRlOGE0OGRl
ZDRkNWQwHhcNMjUwODIzMDUwMTQwWhcNMjUwODI0MDUwMTQwWjAzMTEwLwYDVQQD
Eyg1NjIyMTk5NzgyMmJlMDk4YzMxNGRmOGU4NTFmOTQ4NTIxMzBkOWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaTVO3ohQmRbyM/abeudyUPFsHa2
gK+uafpsinbb2VdKFgNW4frWg+Ef9dVz0aE3Z6h/hPg6E39kYkYLOyBhlZZwjruN
LF8WGcMI5Kcl/0+MgxX9M6m1Pf3NI/yH2yblKcfZ1VK4cqofwHTNY74JK2vcXXP7
+jjN+6smJAzf2I109FS/poLqSZx502QQZc1bfdsrJFnubHfA3tBk7O33uyugTeiQ
ZWS9vBlPSKSoZwSChnQJOLCsSAhQKxkZQTDVBdfXmvNsjaQlO4bHd/qdSK79Pg2i
KYqgH2Z73kokBPaMaTaIteGXMCV0jbLzP8fA/6+QlTFY7axDpHw9g0JukQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYiGZeCK+CYwxTfjoUflIUhMNntMB8GA1UdIwQY
MBaAFIrH6uZJ2VR7CtCrAHq06KSN7U1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNmcTVrblpWSHNLMEtzQWVyVG9wSTN0VFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC82N2RiMGItMWQxMC00Yzk3LTlhZjYt
YWMwMWYwYzU2NjJiLzEvaXNmcTVrblpWSHNLMEtzQWVyVG9wSTN0VFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC82N2RiMGItMWQxMC00Yzk3LTlhZjYtYWMwMWYwYzU2NjJi
LzEvaXNmcTVrblpWSHNLMEtzQWVyVG9wSTN0VFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxTiJxyL
/TIj68EWp7GBjak3DnsyTheb2w9BaBV4KG9qZ4PfCJoECYsulZXIpI1oSbQUBFEl
Mvk0ehHaUcFjxcHuiFmjFIMgMt5KgxSf1HVHVa1V1QgBuNvaM37s/1ou5SdgZgFs
huMiYYVSluz3nTKZwDjnxBAbIx2rDBOuoLtZoHRIwuQvrXKL/x3EoI6fj1jIX9aY
lp+PFR+Vl3G8E6wYHK9rFnM1SVdeEbk1rC1aL9YQds+toQKEbfTXfXSGUWag1dKK
c8xTaoQr7IGU+NIcnl9h5tjQsjBhgdyk+LZ4pmjpSo4ejjsjh2/YG9R37BESBLYq
tcP5k4hrIpwVkg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:23 2025 by rpki-client