Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: q0UgycPGVVHmHSEswIfdo2iwyl33UaAtgUTN2LdWYxE=
Subject key identifier: 8C:32:5D:81:73:CE:83:8E:BB:8F:1F:52:C7:37:2E:02:E4:14:80:5E
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 0198D5BC2023610D4E8077C098FFE7652492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:02:12 +0000
Manifest this update: Sat 23 Aug 2025 07:02:12 +0000
Manifest next update: Sun 24 Aug 2025 07:02:12 +0000
Files and hashes: 1: 8ydVbA0sRc2KQJCu7PF_TgB9YOc.roa (hash: ldViVOYSsfn20bEs9Oqh1Yf20Me7yZtpfiOBMHbpOTM=)
2: F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa (hash: 8P5DrUp/opHUhrTa0qnhwTNZG/EzRMCLBAaUpNYWajY=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: giwx2AqwWj2mzw9/CO0eH2xYGnJKPHlkr3Xmrw1zZjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:20:23:61:0d:4e:80:77:c0:98:ff:e7:65:24:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Aug 23 07:02:12 2025 GMT
Not After : Aug 24 07:02:12 2025 GMT
Subject: CN=8c325d8173ce838ebb8f1f52c7372e02e414805e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:ff:53:98:0b:49:7c:26:02:57:08:cd:4a:
72:0c:16:63:c5:37:5e:00:39:81:77:15:80:f2:ee:
e3:4e:09:0b:35:10:42:1a:77:a2:ea:2b:d4:b6:20:
96:ca:cb:ba:9c:c3:70:c6:c3:93:ef:f0:0b:c1:97:
de:9a:ad:e7:f6:f6:67:6a:b1:0a:df:68:e0:d6:90:
e5:5e:e8:ec:e5:eb:6f:ce:9f:2f:33:62:c4:21:6d:
14:b4:ff:de:44:6d:b1:6b:27:7b:12:c0:d2:b9:52:
11:ea:f2:bd:a3:45:d2:cb:a0:a1:69:97:8c:5c:a5:
d3:89:c4:7b:e8:d4:44:fc:99:91:a6:fa:19:04:68:
67:21:e7:22:85:16:88:de:b6:0d:ec:7a:69:c7:86:
d1:ce:c1:b0:af:1d:3c:5a:0b:a3:88:ea:cc:a7:75:
9a:38:5a:b1:eb:e0:2d:64:70:b9:c0:0f:3d:6f:43:
5d:f6:9a:de:23:8d:dc:5d:cc:28:af:7d:40:8f:4a:
7f:d5:4a:a6:9f:9f:1d:97:a1:62:15:f3:ad:59:e8:
cc:7d:cc:32:c3:15:66:ac:95:7c:83:36:98:2c:2c:
43:68:5b:51:48:c4:8a:f4:ce:91:97:69:61:d1:7e:
93:66:8a:2c:ce:07:30:34:fe:76:a9:96:dd:50:db:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:32:5D:81:73:CE:83:8E:BB:8F:1F:52:C7:37:2E:02:E4:14:80:5E
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3d:05:e0:1c:21:8b:47:0c:71:fe:03:98:ce:ab:af:71:10:
a7:72:28:8f:6d:20:b3:e3:4a:ce:51:b4:b8:b0:4b:37:99:bb:
29:9d:e8:c8:1d:09:a5:06:77:4a:32:bd:7b:3c:cb:80:c7:8f:
26:8e:19:2b:57:24:0e:ae:cf:61:5b:c0:12:13:c7:88:8a:b1:
ab:f4:93:ba:76:2e:b2:99:e2:a7:0a:07:18:5c:2d:91:7a:f9:
46:ba:79:c6:93:bf:8e:a9:85:d7:4d:33:8b:54:30:76:6c:e2:
bf:8a:85:ef:4f:4e:1c:39:2f:7a:4f:fb:49:b6:d4:c5:76:d2:
1d:34:a2:12:c6:8d:19:bd:84:81:fe:23:ff:b8:8d:64:14:ee:
99:0a:11:b6:56:c3:0c:97:06:00:a5:f7:52:75:45:6a:dd:c3:
43:5d:ca:8f:79:6f:d8:67:f5:12:a0:34:c2:73:ca:eb:d0:16:
91:01:5a:b9:e3:ed:5d:58:3a:92:dd:32:3e:bf:54:ee:50:7c:
ef:4a:c6:56:a9:a6:bd:28:41:b3:07:76:01:f8:87:1f:3d:c2:
a1:d8:7b:2b:b5:62:fe:db:1e:03:7f:8b:be:b3:7c:7a:de:c9:
9c:22:ef:c2:dd:88:5b:96:3b:6b:2c:eb:8d:e6:ff:7a:58:3e:
36:f7:62:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvCAjYQ1OgHfAmP/nZSSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMzFkZGVmMjVkOTZjODRiMDAxYTJhYzUwNDdiMDRlMDYw
YTBhYzMwHhcNMjUwODIzMDcwMjEyWhcNMjUwODI0MDcwMjEyWjAzMTEwLwYDVQQD
Eyg4YzMyNWQ4MTczY2U4MzhlYmI4ZjFmNTJjNzM3MmUwMmU0MTQ4MDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhH/U5gLSXwmAlcIzUpyDBZjxTde
ADmBdxWA8u7jTgkLNRBCGnei6ivUtiCWysu6nMNwxsOT7/ALwZfemq3n9vZnarEK
32jg1pDlXujs5etvzp8vM2LEIW0UtP/eRG2xayd7EsDSuVIR6vK9o0XSy6ChaZeM
XKXTicR76NRE/JmRpvoZBGhnIecihRaI3rYN7Hppx4bRzsGwrx08WgujiOrMp3Wa
OFqx6+AtZHC5wA89b0Nd9preI43cXcwor31Aj0p/1Uqmn58dl6FiFfOtWejMfcwy
wxVmrJV8gzaYLCxDaFtRSMSK9M6Rl2lh0X6TZooszgcwNP52qZbdUNtbgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwyXYFzzoOOu48fUsc3LgLkFIBeMB8GA1UdIwQY
MBaAFP4x3e8l2WyEsAGirFBHsE4GCgrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUt
YjRkOGMyYjdhMTAzLzEvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUtYjRkOGMyYjdhMTAz
LzEvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASj0F4Bwh
i0cMcf4DmM6rr3EQp3Ioj20gs+NKzlG0uLBLN5m7KZ3oyB0JpQZ3SjK9ezzLgMeP
Jo4ZK1ckDq7PYVvAEhPHiIqxq/STunYuspnipwoHGFwtkXr5Rrp5xpO/jqmF100z
i1Qwdmziv4qF709OHDkvek/7SbbUxXbSHTSiEsaNGb2Egf4j/7iNZBTumQoRtlbD
DJcGAKX3UnVFat3DQ13Kj3lv2Gf1EqA0wnPK69AWkQFauePtXVg6kt0yPr9U7lB8
70rGVqmmvShBswd2AfiHHz3Codh7K7Vi/tseA3+LvrN8et7JnCLvwt2IW5Y7ayzr
jeb/elg+Nvdivg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:08 2025 by rpki-client