Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: DJjQfPHDKv72MYrnZ89tgUNIY6XlH0Q+RiOf4iI//4I=
Subject key identifier: B1:AC:48:91:BF:F3:C2:FD:86:84:0F:F7:C2:96:29:CA:B9:3E:B1:F4
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 0198D4E03172AA06A42FCA3E7443F84EA876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:01:59 +0000
Manifest this update: Sat 23 Aug 2025 03:01:59 +0000
Manifest next update: Sun 24 Aug 2025 03:01:59 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: /a1wByz6OA8sHE3KBZw75ZC1ph7hqFAOJyjMmCK66+8=)
2: XHfhEGwfsHA5Cy6rVzKyCX0VS7I.roa (hash: r0CY6B9tn8PTb3kJeN+vQ/cBCfQUrTHL37aoDlJepRA=)
3: tcPEvHuX8bqS2YKyM4C5K4tHwxk.roa (hash: rKNoYxngd5L4bRt06ua2/XaA1SqXHMSPI/cKc0JvWoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:31:72:aa:06:a4:2f:ca:3e:74:43:f8:4e:a8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Aug 23 03:01:59 2025 GMT
Not After : Aug 24 03:01:59 2025 GMT
Subject: CN=b1ac4891bff3c2fd86840ff7c29629cab93eb1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:a2:d6:a2:7f:b0:b2:f4:9e:b5:20:79:3d:
27:33:63:da:75:f6:41:9a:a6:d1:da:41:99:ea:87:
3e:7a:67:3a:82:9e:15:58:c4:23:33:c3:85:e0:0c:
9b:e3:da:82:a4:df:33:c7:d3:4b:d6:e2:75:55:dd:
5a:71:5f:90:ec:ee:97:93:83:30:5e:97:f2:bb:eb:
53:aa:f5:22:70:1a:d9:c1:2f:d0:60:4d:9c:a3:da:
52:cf:49:5c:78:5e:e0:09:f5:93:53:fa:78:4d:8d:
5e:2d:71:15:cc:9d:c1:d0:69:b2:03:9f:69:63:88:
a2:8e:52:81:91:82:a1:f0:f2:db:cf:30:a6:6a:c7:
ca:a3:3c:12:84:6e:66:c7:38:9f:e7:fc:b7:1a:7e:
80:40:ca:35:21:d4:3d:a6:7d:58:19:26:0f:4b:6c:
6e:0a:6f:fd:72:fe:2c:6a:a7:a5:53:7f:8e:94:b5:
27:ec:6f:3d:10:85:1d:85:50:bf:54:aa:7e:a2:63:
77:57:c8:83:47:6a:cc:f2:16:cf:dd:bf:2e:0c:d8:
b2:b8:76:29:70:77:f7:1a:bb:33:4f:53:ca:45:bb:
e4:97:72:b5:bd:cc:c6:46:e7:b8:e7:d6:58:99:e6:
11:68:46:7f:df:12:42:03:83:bc:88:d4:4c:a2:bd:
3d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:48:91:BF:F3:C2:FD:86:84:0F:F7:C2:96:29:CA:B9:3E:B1:F4
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:76:1b:08:0b:08:05:0e:fd:e9:d2:fe:c6:79:df:65:1d:c1:
ee:31:f6:83:0c:b8:1a:44:fe:1f:a0:52:0e:c3:3c:04:73:96:
e6:7b:74:f9:d0:75:d3:bb:2c:bb:f6:aa:ab:ef:3f:c2:3b:03:
61:c2:91:31:ac:41:c6:7c:47:00:90:54:80:70:6a:c3:4b:c6:
37:bc:bc:5b:d1:27:36:97:d1:9b:10:76:84:83:e9:0d:c4:57:
ce:f6:d9:e1:20:c8:03:58:1c:ef:1c:3f:71:cb:a9:32:b1:64:
7d:c6:06:c5:41:e2:16:6e:de:7a:01:cd:1a:72:65:b6:72:98:
26:5f:56:56:27:22:00:0e:19:28:08:8a:5a:f7:69:b4:8b:75:
4b:5a:a2:5a:71:68:c8:06:7d:d6:d6:b7:4a:7f:13:d9:d8:f3:
6a:40:cc:ec:c0:12:d9:07:c9:22:c0:5e:1f:08:94:5c:ba:cf:
fa:d4:7a:a4:82:75:9f:bc:cb:8a:0b:0a:d8:10:04:b3:e2:94:
37:54:ff:f7:36:4b:32:90:21:2d:3d:1f:f5:cd:c8:ec:24:89:
b6:9d:4c:1f:60:ee:98:6f:a4:c4:26:3a:1d:3e:9f:40:7a:a3:
b2:e5:93:7a:b0:5f:e1:a7:7b:6f:42:6d:d7:bb:ea:a7:bc:40:
c4:66:d2:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4DFyqgakL8o+dEP4Tqh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzODg1NzY2MGRjN2ZhNjA4NDZmNzY1Yjk0Y2I2OTU3NjI1
NWFkYjYwHhcNMjUwODIzMDMwMTU5WhcNMjUwODI0MDMwMTU5WjAzMTEwLwYDVQQD
EyhiMWFjNDg5MWJmZjNjMmZkODY4NDBmZjdjMjk2MjljYWI5M2ViMWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cii1qJ/sLL0nrUgeT0nM2PadfZB
mqbR2kGZ6oc+emc6gp4VWMQjM8OF4Ayb49qCpN8zx9NL1uJ1Vd1acV+Q7O6Xk4Mw
Xpfyu+tTqvUicBrZwS/QYE2co9pSz0lceF7gCfWTU/p4TY1eLXEVzJ3B0GmyA59p
Y4iijlKBkYKh8PLbzzCmasfKozwShG5mxzif5/y3Gn6AQMo1IdQ9pn1YGSYPS2xu
Cm/9cv4saqelU3+OlLUn7G89EIUdhVC/VKp+omN3V8iDR2rM8hbP3b8uDNiyuHYp
cHf3GrszT1PKRbvkl3K1vczGRue459ZYmeYRaEZ/3xJCA4O8iNRMor09KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGsSJG/88L9hoQP98KWKcq5PrH0MB8GA1UdIwQY
MBaAFCOIV2YNx/pghG92W5TLaVdiVa22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEt
MGY4NzZhYmQxZTMwLzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEtMGY4NzZhYmQxZTMw
LzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHYbCAsI
BQ796dL+xnnfZR3B7jH2gwy4GkT+H6BSDsM8BHOW5nt0+dB107ssu/aqq+8/wjsD
YcKRMaxBxnxHAJBUgHBqw0vGN7y8W9EnNpfRmxB2hIPpDcRXzvbZ4SDIA1gc7xw/
ccupMrFkfcYGxUHiFm7eegHNGnJltnKYJl9WViciAA4ZKAiKWvdptIt1S1qiWnFo
yAZ91ta3Sn8T2djzakDM7MAS2QfJIsBeHwiUXLrP+tR6pIJ1n7zLigsK2BAEs+KU
N1T/9zZLMpAhLT0f9c3I7CSJtp1MH2DumG+kxCY6HT6fQHqjsuWTerBf4ad7b0Jt
17vqp7xAxGbSnQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:12 2025 by rpki-client