Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: IS2WNoraJBKlbfHh0bBBIiHAEjAPUyIu408UenuhAWE=
Subject key identifier: 98:66:6C:E9:8A:50:F9:FA:BF:24:56:CB:9F:A3:FA:36:F1:96:7D:49
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 0198D54DEA1FA935B844DA4ECADAE1D770A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:01:49 +0000
Manifest this update: Sat 23 Aug 2025 05:01:49 +0000
Manifest next update: Sun 24 Aug 2025 05:01:49 +0000
Files and hashes: 1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: JZ+vn6eYvzqUkWXAs+vyCCK+wx5EyrtmfQrmZTcVW8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ea:1f:a9:35:b8:44:da:4e:ca:da:e1:d7:70:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Aug 23 05:01:49 2025 GMT
Not After : Aug 24 05:01:49 2025 GMT
Subject: CN=98666ce98a50f9fabf2456cb9fa3fa36f1967d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:57:b2:df:34:e4:e4:1e:84:3e:5c:1c:ec:
6f:a0:eb:82:6f:22:ea:4c:f4:b4:02:b7:32:a1:fa:
fc:66:29:30:2e:05:2b:fa:eb:c1:14:7e:81:6e:ff:
35:db:53:00:26:8c:95:16:f0:31:36:ee:7d:96:7f:
54:3f:ed:a4:56:11:59:f6:0c:da:c8:30:53:50:ab:
05:59:64:65:c5:d8:5b:e8:17:7c:69:a9:16:c9:85:
4c:97:6f:1a:a6:89:eb:60:81:22:e9:08:e2:6c:3f:
2b:90:c5:ad:7c:a4:be:28:84:d8:50:86:b4:e3:63:
1e:43:f5:ba:e6:c2:bc:37:0e:1e:b6:88:d4:a4:9c:
c4:20:be:6d:7a:57:cf:a5:49:a6:be:89:d1:9f:92:
f5:2c:85:0f:29:58:05:d7:9f:bb:f8:10:46:e7:c1:
5d:b0:70:b2:80:72:ee:32:ed:52:c7:6a:f1:df:af:
4f:15:41:7d:ff:41:75:9f:ac:fb:92:90:cd:ec:16:
7f:90:d1:01:f6:fd:c5:8a:ed:ea:f8:97:7d:40:e8:
b8:65:92:bc:5c:62:af:46:68:d6:fa:87:db:5f:ef:
86:8d:6b:08:aa:df:8c:22:30:bb:55:de:05:a1:be:
3c:94:17:4b:82:21:9a:b3:45:a3:91:7d:4a:a4:fb:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:66:6C:E9:8A:50:F9:FA:BF:24:56:CB:9F:A3:FA:36:F1:96:7D:49
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e5:08:08:90:0a:55:17:f7:b8:f9:bc:6e:ef:4d:ed:99:31:
7e:b6:e3:cb:f5:55:b7:4b:16:51:df:e3:46:69:67:af:d3:ef:
31:05:e9:46:06:14:1f:24:fd:a9:9b:73:c1:35:6a:69:75:07:
ac:a0:3a:e2:78:4c:65:28:2d:f7:69:32:45:bd:1d:3c:5c:27:
88:a3:d4:6d:1b:75:b1:f9:92:36:9f:d1:5a:5e:bf:2f:ab:df:
2b:02:61:7c:b6:fc:38:d6:c7:85:cf:ae:68:9a:ea:1f:84:55:
89:ac:0a:27:32:8f:73:89:b0:46:21:01:76:e1:69:55:cf:a4:
24:6b:2a:09:79:1a:44:09:46:38:3e:b7:b4:0e:8c:2e:e9:2f:
4e:38:ec:0d:c4:96:3f:27:b5:c3:86:75:a2:f6:7d:da:72:b6:
41:f5:26:d0:6f:1c:5d:59:8f:87:af:e0:71:92:52:6f:7f:4e:
41:b5:01:40:2b:a1:af:e0:3d:eb:1a:c8:3b:68:00:86:ef:31:
44:2c:a4:47:5b:95:a0:f0:8a:1b:0d:8d:84:6d:c6:e2:cd:0c:
2f:87:88:4e:7f:48:20:91:35:1e:f3:57:76:1a:86:d5:c7:8c:
05:04:59:95:ac:94:57:af:d1:e5:b6:43:13:ba:56:ef:70:90:
80:24:f7:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTeofqTW4RNpOytrh13CjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGVmNGE4ZWQzNzExYjZhY2Q2OGMwZjQ4ZjYyMTgzMWZk
NWFhYWUwHhcNMjUwODIzMDUwMTQ5WhcNMjUwODI0MDUwMTQ5WjAzMTEwLwYDVQQD
Eyg5ODY2NmNlOThhNTBmOWZhYmYyNDU2Y2I5ZmEzZmEzNmYxOTY3ZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7dXst805OQehD5cHOxvoOuCbyLq
TPS0Arcyofr8ZikwLgUr+uvBFH6Bbv8121MAJoyVFvAxNu59ln9UP+2kVhFZ9gza
yDBTUKsFWWRlxdhb6Bd8aakWyYVMl28aponrYIEi6QjibD8rkMWtfKS+KITYUIa0
42MeQ/W65sK8Nw4etojUpJzEIL5telfPpUmmvonRn5L1LIUPKVgF15+7+BBG58Fd
sHCygHLuMu1Sx2rx369PFUF9/0F1n6z7kpDN7BZ/kNEB9v3Fiu3q+Jd9QOi4ZZK8
XGKvRmjW+ofbX++GjWsIqt+MIjC7Vd4Fob48lBdLgiGas0WjkX1KpPtO8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhmbOmKUPn6vyRWy5+j+jbxln1JMB8GA1UdIwQY
MBaAFK9O9KjtNxG2rNaMD0j2IYMf1aquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDkt
Y2I5YzU4ZjUxMGNiLzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDktY2I5YzU4ZjUxMGNi
LzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOUICJAK
VRf3uPm8bu9N7Zkxfrbjy/VVt0sWUd/jRmlnr9PvMQXpRgYUHyT9qZtzwTVqaXUH
rKA64nhMZSgt92kyRb0dPFwniKPUbRt1sfmSNp/RWl6/L6vfKwJhfLb8ONbHhc+u
aJrqH4RViawKJzKPc4mwRiEBduFpVc+kJGsqCXkaRAlGOD63tA6MLukvTjjsDcSW
Pye1w4Z1ovZ92nK2QfUm0G8cXVmPh6/gcZJSb39OQbUBQCuhr+A96xrIO2gAhu8x
RCykR1uVoPCKGw2NhG3G4s0ML4eITn9IIJE1HvNXdhqG1ceMBQRZlayUV6/R5bZD
E7pW73CQgCT3jA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:00 2025 by rpki-client