Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
File: bzipg89Dc6pJdJhasi1RTA9IHS4.mft (raw, json)
Hash identifier: s0+p9GvRsXgLCDoXQrqWiEQKDrQI9fY7Gs/5ePs8+1w=
Subject key identifier: 33:14:F1:9F:8B:9F:0F:BC:D3:AD:33:68:AE:23:63:BD:13:88:72:B7
Authority key identifier: 6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E
Certificate issuer: /CN=6f38a983cf4373aa4974985ab22d514c0f481d2e
Certificate serial: 0198D6604829958BCF197FBF015BBDA752E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
Manifest number: 0297
Signing time: Sat 23 Aug 2025 10:01:30 +0000
Manifest this update: Sat 23 Aug 2025 10:01:30 +0000
Manifest next update: Sun 24 Aug 2025 10:01:30 +0000
Files and hashes: 1: HZb4ypfyyLknrNflDGCKDQospm0.roa (hash: DJb41fbhgLGXN4Umv3DyaNZTQa8ZY7nKkJ22hR0xLS4=)
2: bzipg89Dc6pJdJhasi1RTA9IHS4.crl (hash: +u7UYMXmbqV71MURRgzRh9cQUcpwICHNlrY5fTW0V3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:48:29:95:8b:cf:19:7f:bf:01:5b:bd:a7:52:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f38a983cf4373aa4974985ab22d514c0f481d2e
Validity
Not Before: Aug 23 10:01:30 2025 GMT
Not After : Aug 24 10:01:30 2025 GMT
Subject: CN=3314f19f8b9f0fbcd3ad3368ae2363bd138872b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:eb:b6:e1:2e:ac:e1:4d:ed:17:f1:52:ab:
79:fe:a9:a3:89:47:39:28:34:cc:00:4d:9d:23:ae:
5b:2a:c6:da:5e:88:cd:95:e3:c4:f5:66:09:68:0b:
e9:78:5d:c4:90:19:b7:20:80:43:72:83:83:11:de:
47:f2:06:75:b9:af:30:fe:ba:f9:71:a0:73:95:87:
32:db:3a:78:dd:6e:da:5b:63:c7:8b:d4:ee:42:3f:
92:85:e3:08:70:6a:e4:a3:3c:c9:a1:4e:df:e3:0b:
c9:51:87:23:b1:07:48:21:aa:7d:17:ff:27:f3:59:
3d:b5:9e:ee:bd:ce:e1:7a:e0:db:66:08:e7:bd:6f:
35:52:87:c4:5f:00:a8:42:53:7f:a1:e8:2c:8f:bd:
6b:e6:07:f6:3a:af:95:00:9c:be:5e:dd:b7:dd:59:
8e:93:f2:65:5a:01:9e:da:9e:2b:79:ed:d5:bc:74:
68:10:5c:80:33:f7:b0:54:19:b3:f9:67:95:2e:e4:
cf:1c:66:a8:12:91:6b:71:a0:bd:fd:90:9a:41:62:
03:4a:24:61:6d:83:e9:b3:82:2c:03:02:23:3c:b7:
45:20:20:96:10:4b:32:8e:ba:ad:d7:f9:c1:c3:97:
22:53:d3:84:e7:3c:6a:99:3c:7f:58:d0:81:36:a1:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:14:F1:9F:8B:9F:0F:BC:D3:AD:33:68:AE:23:63:BD:13:88:72:B7
X509v3 Authority Key Identifier:
keyid:6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c9:f5:a7:cb:5e:53:a0:3e:78:cc:e8:92:22:f9:49:f3:ec:
64:00:b1:5f:56:b8:79:8b:71:f6:51:63:96:bd:87:05:fc:bd:
97:64:b2:65:35:13:37:6d:a8:74:ee:b0:63:c5:66:23:8f:8c:
26:6a:0b:66:11:28:43:1c:a8:e3:4c:18:ad:e3:da:94:4d:94:
93:44:30:b6:1c:32:7c:4e:54:c5:78:8b:a2:83:68:1f:40:19:
66:54:5a:be:e9:aa:d1:8f:9f:e3:c7:5c:51:ac:ab:b1:1d:9e:
5e:b6:21:fb:c9:bd:8b:8e:94:47:38:43:0f:37:cd:30:3c:a5:
e4:36:35:29:0e:72:e9:60:6c:34:84:cf:cf:a3:55:ff:04:52:
de:73:9e:7c:dd:ac:66:46:0d:ef:3b:f5:0b:e2:cf:2d:a2:95:
6c:0d:1a:a7:83:58:0c:d3:60:b3:44:d1:c6:38:cb:f8:80:ce:
e5:0e:6f:e9:65:39:5c:39:d8:15:e7:2a:19:db:57:a4:47:90:
53:b9:29:e6:63:6b:8e:c4:cf:4e:da:0e:a4:f4:ee:5f:76:c8:
da:de:05:f2:17:bf:17:4d:af:ac:47:3d:e0:92:10:57:6d:14:
ce:fd:15:51:21:bc:f8:88:fa:7c:2f:71:4f:f0:4f:17:d7:3e:
cd:8d:03:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYEgplYvPGX+/AVu9p1LkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzhhOTgzY2Y0MzczYWE0OTc0OTg1YWIyMmQ1MTRjMGY0
ODFkMmUwHhcNMjUwODIzMTAwMTMwWhcNMjUwODI0MTAwMTMwWjAzMTEwLwYDVQQD
EygzMzE0ZjE5ZjhiOWYwZmJjZDNhZDMzNjhhZTIzNjNiZDEzODg3MmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvbrtuEurOFN7RfxUqt5/qmjiUc5
KDTMAE2dI65bKsbaXojNlePE9WYJaAvpeF3EkBm3IIBDcoODEd5H8gZ1ua8w/rr5
caBzlYcy2zp43W7aW2PHi9TuQj+SheMIcGrkozzJoU7f4wvJUYcjsQdIIap9F/8n
81k9tZ7uvc7heuDbZgjnvW81UofEXwCoQlN/oegsj71r5gf2Oq+VAJy+Xt233VmO
k/JlWgGe2p4ree3VvHRoEFyAM/ewVBmz+WeVLuTPHGaoEpFrcaC9/ZCaQWIDSiRh
bYPps4IsAwIjPLdFICCWEEsyjrqt1/nBw5ciU9OE5zxqmTx/WNCBNqEu3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMU8Z+Lnw+8060zaK4jY70TiHK3MB8GA1UdIwQY
MBaAFG84qYPPQ3OqSXSYWrItUUwPSB0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnppcGc4OURjNnBKZEpoYXNpMVJUQTlJSFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NDMzN2ItZjk4ZS00ZTMxLTkwMDQt
YWY1YTU2NzczMmVmLzEvYnppcGc4OURjNnBKZEpoYXNpMVJUQTlJSFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS83NDMzN2ItZjk4ZS00ZTMxLTkwMDQtYWY1YTU2NzczMmVm
LzEvYnppcGc4OURjNnBKZEpoYXNpMVJUQTlJSFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsn1p8te
U6A+eMzokiL5SfPsZACxX1a4eYtx9lFjlr2HBfy9l2SyZTUTN22odO6wY8VmI4+M
JmoLZhEoQxyo40wYrePalE2Uk0QwthwyfE5UxXiLooNoH0AZZlRavumq0Y+f48dc
UayrsR2eXrYh+8m9i46URzhDDzfNMDyl5DY1KQ5y6WBsNITPz6NV/wRS3nOefN2s
ZkYN7zv1C+LPLaKVbA0ap4NYDNNgs0TRxjjL+IDO5Q5v6WU5XDnYFecqGdtXpEeQ
U7kp5mNrjsTPTtoOpPTuX3bI2t4F8he/F02vrEc94JIQV20Uzv0VUSG8+Ij6fC9x
T/BPF9c+zY0D4Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:40 2025 by rpki-client