Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: WRoN29pmpbNj28xxTCgFgTNBjiAdV/PDI0QlAMp0nD8=
Subject key identifier: 31:35:16:A0:C6:A4:C6:01:12:BA:9C:BF:E3:44:DD:75:73:E6:E9:E6
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 0198D54E36AE44D030A8399A92191B90E781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:09 +0000
Manifest this update: Sat 23 Aug 2025 05:02:09 +0000
Manifest next update: Sun 24 Aug 2025 05:02:09 +0000
Files and hashes: 1: 36Bb65z44MAsVTDbQRVeDeDmufQ.roa (hash: uPSc0dWD/LjqPKmpNOCLQpNBH6/TFH+CbImLmGpMPVg=)
2: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: BE6FQ+NsWUNzY17P27RD7+la/YmOhoU0O9woK+D6GT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:36:ae:44:d0:30:a8:39:9a:92:19:1b:90:e7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Aug 23 05:02:09 2025 GMT
Not After : Aug 24 05:02:09 2025 GMT
Subject: CN=313516a0c6a4c60112ba9cbfe344dd7573e6e9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:af:7f:e7:75:08:31:7f:05:6c:9a:82:19:
6e:a2:28:70:21:e3:ad:ec:3e:f1:fc:ff:92:c9:04:
f4:b7:d4:20:65:0a:ec:73:20:35:a1:eb:f9:92:ff:
14:35:fa:7e:5f:03:36:23:ad:4d:a3:37:76:65:47:
4c:ff:99:ca:f2:7b:c6:a0:4f:fd:17:e6:18:16:9e:
4b:2d:34:dd:d9:61:dd:23:bf:40:9c:04:86:22:6b:
1a:85:30:03:d9:ab:6c:a0:6e:87:66:05:1d:bb:c9:
14:95:7f:03:4e:86:b6:1a:3e:97:72:69:de:06:4f:
d2:63:bc:76:ad:6d:cc:19:45:d6:5b:14:9a:2b:5c:
8b:c9:89:f6:3e:82:3b:6f:ce:7c:d0:c7:ba:5c:ed:
f4:15:b4:b4:c0:38:84:ce:14:33:34:5a:0a:7d:75:
fe:fb:da:9a:e9:41:fe:14:fd:3a:15:f4:2c:df:78:
dd:30:6c:08:c5:40:1b:a5:39:15:53:ac:e5:48:ce:
0f:06:55:00:51:46:b1:3f:63:db:c2:88:02:a9:8c:
fb:00:0d:66:e0:d8:94:28:83:e4:b0:06:68:4d:8a:
a1:67:72:61:7b:59:5c:ca:1c:40:89:59:86:94:a7:
30:d3:7f:fd:c2:81:06:77:f8:45:d7:36:02:4e:74:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:35:16:A0:C6:A4:C6:01:12:BA:9C:BF:E3:44:DD:75:73:E6:E9:E6
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5c:1a:65:81:c1:35:21:43:d8:3e:ee:62:f4:03:f2:46:46:
e0:28:25:47:9e:d3:c7:e1:78:0a:ae:b3:0b:fc:e1:33:93:1f:
1c:a5:dd:19:e5:dd:be:1e:4c:31:6e:44:d4:fd:3f:f4:3e:75:
8d:a1:48:77:1b:5e:35:a1:35:05:ac:ab:50:01:7b:62:1a:74:
a2:fa:e7:ca:77:7c:7c:64:8e:f3:27:6c:e2:ce:71:55:48:29:
4e:4a:62:f0:3d:d2:74:af:ab:89:51:45:96:8f:91:39:e2:26:
d2:e9:17:1c:6b:3c:47:e2:de:cf:f9:b7:34:4c:7e:4e:b6:e5:
47:a6:59:58:09:09:25:61:c4:f2:12:46:aa:96:f6:a5:08:13:
1b:e3:15:31:ac:b7:bf:40:b4:ff:6a:a1:21:9f:43:cc:8a:43:
87:c4:c5:06:e8:e3:97:2a:3d:2e:e5:60:04:ac:f9:e4:e4:4a:
67:07:6a:8c:1a:ef:98:70:be:19:74:43:1f:c0:25:c6:86:bc:
8d:38:a1:b8:91:34:89:d4:d9:eb:84:d5:3c:26:28:a1:e6:52:
63:7a:3f:30:a6:f8:cc:bb:e1:2b:33:3d:31:03:40:8c:b8:3a:
f6:86:86:ec:e1:5c:30:21:80:be:a6:63:67:7c:1b:0f:7a:52:
cf:d8:be:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTjauRNAwqDmakhkbkOeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZGQ2MWJhY2Y2NTRlNjY1ZDkxMmE3NmRlOGY2M2I1MDA0
YzdlNDgwHhcNMjUwODIzMDUwMjA5WhcNMjUwODI0MDUwMjA5WjAzMTEwLwYDVQQD
EygzMTM1MTZhMGM2YTRjNjAxMTJiYTljYmZlMzQ0ZGQ3NTczZTZlOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM6vf+d1CDF/BWyaghluoihwIeOt
7D7x/P+SyQT0t9QgZQrscyA1oev5kv8UNfp+XwM2I61Nozd2ZUdM/5nK8nvGoE/9
F+YYFp5LLTTd2WHdI79AnASGImsahTAD2atsoG6HZgUdu8kUlX8DToa2Gj6Xcmne
Bk/SY7x2rW3MGUXWWxSaK1yLyYn2PoI7b8580Me6XO30FbS0wDiEzhQzNFoKfXX+
+9qa6UH+FP06FfQs33jdMGwIxUAbpTkVU6zlSM4PBlUAUUaxP2PbwogCqYz7AA1m
4NiUKIPksAZoTYqhZ3Jhe1lcyhxAiVmGlKcw03/9woEGd/hF1zYCTnQlRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDE1FqDGpMYBErqcv+NE3XVz5unmMB8GA1UdIwQY
MBaAFO3dYbrPZU5mXZEqdt6PY7UATH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wNDVhMzgtZTBiYS00ODdmLWI0NjEt
NzI2NmFmYzk4ZGJhLzEvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wNDVhMzgtZTBiYS00ODdmLWI0NjEtNzI2NmFmYzk4ZGJh
LzEvN2QxaHVzOWxUbVpka1NwMjNvOWp0UUJNZmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1waZYHB
NSFD2D7uYvQD8kZG4CglR57Tx+F4Cq6zC/zhM5MfHKXdGeXdvh5MMW5E1P0/9D51
jaFIdxteNaE1BayrUAF7Yhp0ovrnynd8fGSO8yds4s5xVUgpTkpi8D3SdK+riVFF
lo+ROeIm0ukXHGs8R+Lez/m3NEx+TrblR6ZZWAkJJWHE8hJGqpb2pQgTG+MVMay3
v0C0/2qhIZ9DzIpDh8TFBujjlyo9LuVgBKz55ORKZwdqjBrvmHC+GXRDH8Alxoa8
jTihuJE0idTZ64TVPCYooeZSY3o/MKb4zLvhKzM9MQNAjLg69oaG7OFcMCGAvqZj
Z3wbD3pSz9i+XA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:10 2025 by rpki-client