Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
File: e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json)
Hash identifier: OGHFApSIupalfKqjWCT3KVAMUmxBpIqS5pRdPUAh5q0=
Subject key identifier: 89:8D:BD:B2:68:6F:5A:15:E2:E1:03:6C:8E:E3:77:17:11:17:50:69
Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
Certificate issuer: /CN=7b89385c0002330b096567b21514d8e1bc09689f
Certificate serial: 0198D6CD06BA6C87CB21B4570F0C33E7B5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 12:00:17 +0000
Manifest this update: Sat 23 Aug 2025 12:00:17 +0000
Manifest next update: Sun 24 Aug 2025 12:00:17 +0000
Files and hashes: 1: cLYB6l9FZL9zQXyfpqoagDuHdic.roa (hash: bfsqI0s1izdNOdCWZ5Wt/vOuavl9t3l+ssIuSAYSQTY=)
2: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: x306AIpZQqt1cGgTjgj+jG2ImMgnOD9tE0qqo+Tinac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:06:ba:6c:87:cb:21:b4:57:0f:0c:33:e7:b5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f
Validity
Not Before: Aug 23 12:00:17 2025 GMT
Not After : Aug 24 12:00:17 2025 GMT
Subject: CN=898dbdb2686f5a15e2e1036c8ee3771711175069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:b6:90:bd:9d:ec:b8:72:0d:15:0c:a4:90:
0b:ac:63:86:44:7c:a3:d6:0d:ad:e1:94:9b:7e:70:
fa:7b:0b:49:03:24:25:45:88:33:03:88:f1:9b:6c:
69:f5:4c:23:3e:bb:43:63:b5:52:e6:5a:54:68:b2:
e5:e1:ef:99:ec:48:0d:bf:63:8d:8b:7a:69:40:94:
90:de:be:95:af:18:14:68:26:1f:f1:26:c1:38:95:
83:60:6e:05:82:ad:71:c4:5e:8e:f7:55:b4:6c:d4:
ba:0b:79:19:ca:07:74:63:da:7d:33:80:7c:a0:f8:
3e:ae:47:e9:79:9a:98:86:03:e8:cf:de:86:d5:5f:
00:99:0b:57:2f:80:5f:6e:f1:85:7a:ba:3f:0c:f1:
2b:a2:d5:15:04:b8:73:28:eb:19:d2:87:d8:c2:96:
f5:1d:4a:f6:e7:89:6f:86:1c:23:65:ae:47:45:13:
20:19:3b:7e:af:46:67:b7:dd:c6:58:ac:ce:d9:44:
97:1d:db:21:5a:6e:ab:e8:49:d5:be:df:10:77:79:
41:58:7b:c4:f8:19:7b:f8:01:9b:84:d3:6d:fe:5f:
1d:aa:65:2c:ea:27:e1:46:cb:2a:40:e9:4c:c1:42:
51:9f:93:47:f1:d1:87:cd:a4:34:69:7b:cb:6c:0d:
dd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8D:BD:B2:68:6F:5A:15:E2:E1:03:6C:8E:E3:77:17:11:17:50:69
X509v3 Authority Key Identifier:
keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:45:c3:6f:f8:49:05:a9:8d:0f:1b:9c:84:00:85:a9:67:26:
59:7d:21:e9:d8:c0:de:11:f9:48:6a:71:84:67:67:2b:43:c7:
80:fa:a4:dd:78:64:f7:63:f1:ec:2d:28:e2:f0:fd:3f:14:cc:
bf:d7:c7:1e:63:67:26:0d:8b:8a:85:91:f1:79:f0:39:a9:a7:
be:82:69:60:21:74:43:24:b0:e4:d4:da:f7:b9:81:74:6c:2f:
45:ad:56:c4:8b:92:90:d2:79:eb:da:04:ad:0b:bc:9f:3e:ba:
6f:a5:88:7a:bb:df:c8:51:12:3e:d9:b6:47:74:cc:dc:bf:9f:
33:39:2b:01:ca:3b:d4:33:09:84:f8:75:26:eb:e0:08:42:07:
a8:82:af:38:01:0a:07:14:4b:e3:b4:47:78:80:48:a0:87:05:
b0:87:c7:84:17:75:ed:23:b2:2c:28:b6:48:19:06:66:47:1f:
38:7a:30:55:fd:5e:5b:f2:61:63:8f:b4:57:8a:92:47:e6:50:
52:e9:8c:7a:65:53:0f:a3:01:ba:08:2b:35:9a:86:1d:b1:17:
ff:6f:af:72:57:7e:eb:5e:d4:d8:5d:af:62:20:13:3d:7e:0e:
92:28:3a:71:a8:61:55:38:f2:7e:47:67:35:18:bd:50:d6:70:
f3:1c:3a:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzQa6bIfLIbRXDwwz57XmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODkzODVjMDAwMjMzMGIwOTY1NjdiMjE1MTRkOGUxYmMw
OTY4OWYwHhcNMjUwODIzMTIwMDE3WhcNMjUwODI0MTIwMDE3WjAzMTEwLwYDVQQD
Eyg4OThkYmRiMjY4NmY1YTE1ZTJlMTAzNmM4ZWUzNzcxNzExMTc1MDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIa2kL2d7LhyDRUMpJALrGOGRHyj
1g2t4ZSbfnD6ewtJAyQlRYgzA4jxm2xp9UwjPrtDY7VS5lpUaLLl4e+Z7EgNv2ON
i3ppQJSQ3r6VrxgUaCYf8SbBOJWDYG4Fgq1xxF6O91W0bNS6C3kZygd0Y9p9M4B8
oPg+rkfpeZqYhgPoz96G1V8AmQtXL4BfbvGFero/DPErotUVBLhzKOsZ0ofYwpb1
HUr254lvhhwjZa5HRRMgGTt+r0Znt93GWKzO2USXHdshWm6r6EnVvt8Qd3lBWHvE
+Bl7+AGbhNNt/l8dqmUs6ifhRssqQOlMwUJRn5NH8dGHzaQ0aXvLbA3dIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImNvbJob1oV4uEDbI7jdxcRF1BpMB8GA1UdIwQY
MBaAFHuJOFwAAjMLCWVnshUU2OG8CWifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zNzk4MTYtZDZiNC00MmI1LTk1YWQt
ZmUyNzkyMWUxNTQyLzEvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zNzk4MTYtZDZiNC00MmI1LTk1YWQtZmUyNzkyMWUxNTQy
LzEvZTRrNFhBQUNNd3NKWldleUZSVFk0YndKYUo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0EXDb/hJ
BamNDxuchACFqWcmWX0h6djA3hH5SGpxhGdnK0PHgPqk3Xhk92Px7C0o4vD9PxTM
v9fHHmNnJg2LioWR8XnwOamnvoJpYCF0QySw5NTa97mBdGwvRa1WxIuSkNJ569oE
rQu8nz66b6WIervfyFESPtm2R3TM3L+fMzkrAco71DMJhPh1JuvgCEIHqIKvOAEK
BxRL47RHeIBIoIcFsIfHhBd17SOyLCi2SBkGZkcfOHowVf1eW/JhY4+0V4qSR+ZQ
UumMemVTD6MBuggrNZqGHbEX/2+vcld+617U2F2vYiATPX4Okig6cahhVTjyfkdn
NRi9UNZw8xw6Ow==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:55 2025 by rpki-client