Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: lT4mqwVsEgg4v1IJ6uH4MtJyUKeghuLCEXINlrUJYB8=
Subject key identifier: 83:31:B6:FC:11:68:DE:84:DC:90:06:D3:A4:F6:1D:2D:C5:ED:A2:8D
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 0198D54E6C221E658CDFA5274491424A13F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0B67
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: nd2mEoM182MlqnyU97QFBEBtYLc.roa (hash: H4CTJi+dex4a2tP/U9S7boExXOmFzvTZ0iE52ANC1z0=)
2: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: eSDjf2d0Pxz8PlZw1xuldbNFxD+tM5UH3AV06cfsWwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6c:22:1e:65:8c:df:a5:27:44:91:42:4a:13:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=8331b6fc1168de84dc9006d3a4f61d2dc5eda28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:69:fa:65:6c:75:62:56:86:0d:06:54:30:
43:13:ff:5a:ea:8d:75:22:77:1a:cd:f6:22:8f:53:
ab:82:42:8f:e6:73:39:12:6b:68:b7:8b:cd:85:c9:
99:bd:1b:8b:a1:c9:e3:a0:83:9a:e0:03:3d:5f:bf:
8e:57:8a:9f:d2:94:54:b3:5c:96:4d:81:85:04:fa:
5d:20:81:ef:a7:b2:f8:2f:f7:64:50:0a:03:77:db:
86:09:2b:f3:9b:6a:80:27:10:8f:c8:21:8b:49:07:
35:08:1b:ff:31:6b:42:e9:48:93:67:68:b5:e1:5e:
65:8f:f6:ab:e3:fe:9e:20:6b:5c:bc:6f:56:1c:1b:
43:89:d5:1a:69:0c:53:62:ab:4e:cc:80:08:d7:40:
ca:fc:24:29:b6:f9:e4:fd:ec:30:81:be:c5:27:2c:
ae:e5:e9:e6:e5:c6:74:ce:14:a4:c1:02:ce:1d:63:
b6:37:3f:e9:0a:cc:f2:75:5e:72:d9:39:e5:ab:8a:
b4:61:b9:66:c6:da:bd:22:01:5a:5a:82:77:56:07:
1e:2e:4e:6c:4f:49:47:19:94:8d:de:bb:4c:13:c4:
c2:df:06:94:35:dc:8f:c7:27:a6:ba:65:c4:1c:d6:
67:5f:a1:94:ae:81:bc:74:3f:81:a2:e6:dd:09:9e:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:31:B6:FC:11:68:DE:84:DC:90:06:D3:A4:F6:1D:2D:C5:ED:A2:8D
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:58:b4:b7:5b:fe:a5:fe:15:25:9d:f4:71:06:4a:ae:24:92:
91:04:c9:ac:38:f0:e3:73:00:27:0d:30:64:35:69:37:95:5c:
81:f6:ba:2d:72:b1:e1:30:48:bd:2a:bc:f5:0e:cf:6f:72:d2:
17:88:e8:85:b8:99:3d:bb:ae:fe:14:92:fa:53:85:f1:c0:7a:
85:aa:c8:b8:a6:36:bf:57:74:f1:2c:4b:7f:37:01:64:fd:7a:
f3:b7:2a:ce:dc:56:01:d2:d7:8d:e2:15:3e:8d:91:7e:36:98:
61:68:21:c5:ac:00:25:d1:4a:f2:8e:ad:d1:a3:7e:b3:e4:7b:
48:d0:53:46:70:b1:b4:6e:d9:fd:86:8e:b8:14:13:53:84:46:
25:35:98:c9:79:a2:0d:f6:b8:ca:f8:4b:e6:e9:bc:8a:7d:0d:
ad:97:ef:5b:81:ff:60:dd:1e:da:03:fa:69:e9:33:54:a3:9e:
61:21:ec:c5:ab:cf:75:f3:4e:fa:32:e4:fb:30:e7:e8:53:21:
d9:5a:a9:a9:41:b0:8a:d0:c1:a1:d3:ac:67:21:c3:65:11:77:
8e:c7:3b:e2:8b:33:03:aa:8f:cc:d4:d8:af:51:e7:ce:5c:f9:
8b:7c:85:74:6e:f2:36:f0:d5:88:60:78:ae:22:ae:77:53:b8:
ce:e4:5a:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTmwiHmWM36UnRJFCShP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjExOTE3OGJmZDkyM2E0YjVlYzQwNmQ5ZmUxNDUyYjI3
NzZlZmEwHhcNMjUwODIzMDUwMjIzWhcNMjUwODI0MDUwMjIzWjAzMTEwLwYDVQQD
Eyg4MzMxYjZmYzExNjhkZTg0ZGM5MDA2ZDNhNGY2MWQyZGM1ZWRhMjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bNp+mVsdWJWhg0GVDBDE/9a6o11
IncazfYij1OrgkKP5nM5Emtot4vNhcmZvRuLocnjoIOa4AM9X7+OV4qf0pRUs1yW
TYGFBPpdIIHvp7L4L/dkUAoDd9uGCSvzm2qAJxCPyCGLSQc1CBv/MWtC6UiTZ2i1
4V5lj/ar4/6eIGtcvG9WHBtDidUaaQxTYqtOzIAI10DK/CQptvnk/ewwgb7FJyyu
5enm5cZ0zhSkwQLOHWO2Nz/pCszydV5y2Tnlq4q0Yblmxtq9IgFaWoJ3VgceLk5s
T0lHGZSN3rtME8TC3waUNdyPxyemumXEHNZnX6GUroG8dD+BoubdCZ4YUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMxtvwRaN6E3JAG06T2HS3F7aKNMB8GA1UdIwQY
MBaAFKwhGReL/ZI6S17EBtn+FFKyd276MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yYThmN2UtZTYwNS00MTE0LTkwZTgt
ZjYwMGQwZmQwM2NlLzEvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yYThmN2UtZTYwNS00MTE0LTkwZTgtZjYwMGQwZmQwM2Nl
LzEvckNFWkY0djlranBMWHNRRzJmNFVVckozYnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFi0t1v+
pf4VJZ30cQZKriSSkQTJrDjw43MAJw0wZDVpN5Vcgfa6LXKx4TBIvSq89Q7Pb3LS
F4johbiZPbuu/hSS+lOF8cB6harIuKY2v1d08SxLfzcBZP1687cqztxWAdLXjeIV
Po2RfjaYYWghxawAJdFK8o6t0aN+s+R7SNBTRnCxtG7Z/YaOuBQTU4RGJTWYyXmi
Dfa4yvhL5um8in0NrZfvW4H/YN0e2gP6aekzVKOeYSHsxavPdfNO+jLk+zDn6FMh
2VqpqUGwitDBodOsZyHDZRF3jsc74oszA6qPzNTYr1Hnzlz5i3yFdG7yNvDViGB4
riKud1O4zuRaTA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:59 2025 by rpki-client