Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
File: Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft (raw, json)
Hash identifier: CurIAINlOfv+OQqoisYswnBpN85RWHO9AX2ENp/DYas=
Subject key identifier: B3:13:2B:3C:57:3C:93:C7:9E:15:58:7B:12:AD:ED:60:E1:57:32:D9
Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Certificate issuer: /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Certificate serial: 0198D65FC3A766401115B1340D33204DC29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:56 +0000
Manifest this update: Sat 23 Aug 2025 10:00:56 +0000
Manifest next update: Sun 24 Aug 2025 10:00:56 +0000
Files and hashes: 1: Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl (hash: NssDfoR9GJGO9RZ/RjxXri99Z+eqv7P51uHjl754SBc=)
2: xAHFWshzCwZ9iWzPHD319yAWavE.roa (hash: LAjKykzMh8QraV6MgCdF6nP15mOVTD1M9V0STezqNjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c3:a7:66:40:11:15:b1:34:0d:33:20:4d:c2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Validity
Not Before: Aug 23 10:00:56 2025 GMT
Not After : Aug 24 10:00:56 2025 GMT
Subject: CN=b3132b3c573c93c79e15587b12aded60e15732d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:70:4b:91:dd:9c:4c:50:d3:ab:82:53:28:
e6:5f:8a:87:9a:5c:df:ab:40:cb:e6:7a:26:34:53:
9b:5b:a9:c2:b6:4c:b4:e8:39:de:8b:f8:b7:32:9b:
dc:43:c9:c4:5d:b6:e2:d1:2d:5d:e5:81:40:12:d5:
10:f6:9a:68:e5:1a:21:2b:50:d2:57:f1:80:80:73:
5b:58:fa:5b:03:ed:a8:32:05:d4:49:4e:06:2a:ce:
d8:27:f6:80:3e:fc:d0:6b:47:63:6e:ac:7c:c4:2a:
82:0d:b2:48:ab:90:c3:6b:42:5b:01:01:18:3f:39:
2f:09:76:f3:1b:78:34:ae:6b:c2:3f:c0:7b:b8:89:
94:ea:c4:fc:6c:03:86:25:33:d2:34:6d:58:93:9c:
ac:2f:d2:5c:70:cc:9a:36:17:55:51:79:83:90:09:
64:55:4a:8c:a3:7c:b7:03:c8:d8:69:67:fa:85:55:
c2:28:2e:d5:9d:db:26:a1:53:8a:3c:62:be:38:c9:
64:5e:2b:8d:ca:5d:c4:ff:cb:1e:79:f6:ff:aa:fd:
fe:16:3f:b6:87:41:84:7c:be:b4:57:ff:f8:e1:07:
a1:5b:80:db:10:76:26:78:db:1b:f6:41:a0:89:5f:
7f:8b:05:60:de:a2:f5:19:04:63:3d:f2:5c:62:8d:
db:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:13:2B:3C:57:3C:93:C7:9E:15:58:7B:12:AD:ED:60:E1:57:32:D9
X509v3 Authority Key Identifier:
keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:32:32:bf:62:29:1d:ad:ee:bb:41:30:e9:63:14:d9:26:0f:
57:6e:c8:fe:fc:8d:1b:11:b8:5a:73:25:f9:a5:91:88:05:b2:
d5:c5:62:8b:7d:ee:bc:f3:00:98:a5:dc:81:dd:b0:13:b2:d7:
d9:49:28:7f:b7:87:22:23:43:34:13:ee:56:88:2c:37:32:49:
5c:e8:6c:15:c7:43:10:8f:b4:ca:9d:33:a0:28:fb:38:b5:c9:
7a:98:0b:82:08:c6:42:07:36:76:2f:4c:b6:9c:0c:e1:32:1d:
e8:f0:00:92:db:ec:cf:32:2d:53:c8:96:65:5a:65:ff:9a:74:
ad:3f:2c:f1:c8:c8:17:52:92:3f:27:db:73:64:bf:5c:58:e1:
d1:99:99:50:ca:aa:39:b9:7a:4c:88:5a:39:c5:db:f8:c8:29:
6e:13:a9:28:f4:ac:d5:34:de:7e:ff:b5:56:af:de:21:00:c4:
bb:7a:61:f9:0b:bf:7f:55:71:83:63:23:2f:46:6e:29:0b:39:
fc:0c:7a:6d:a7:77:78:3d:fb:6e:5a:14:ba:cf:a2:28:db:87:
d5:ac:e1:8c:20:dd:51:a1:c4:00:1e:3f:a7:3b:6f:f4:9b:a0:
26:54:61:33:68:83:ec:60:29:0a:69:3d:5d:5e:cc:f3:f9:2b:
49:21:2f:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX8OnZkARFbE0DTMgTcKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Mzg3YzU2YjMzMWZmODRiYzEwZDhhYzkwZTFlMmMxNmYx
NzIzNDUwHhcNMjUwODIzMTAwMDU2WhcNMjUwODI0MTAwMDU2WjAzMTEwLwYDVQQD
EyhiMzEzMmIzYzU3M2M5M2M3OWUxNTU4N2IxMmFkZWQ2MGUxNTczMmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIpwS5HdnExQ06uCUyjmX4qHmlzf
q0DL5nomNFObW6nCtky06Dnei/i3MpvcQ8nEXbbi0S1d5YFAEtUQ9ppo5RohK1DS
V/GAgHNbWPpbA+2oMgXUSU4GKs7YJ/aAPvzQa0djbqx8xCqCDbJIq5DDa0JbAQEY
PzkvCXbzG3g0rmvCP8B7uImU6sT8bAOGJTPSNG1Yk5ysL9JccMyaNhdVUXmDkAlk
VUqMo3y3A8jYaWf6hVXCKC7VndsmoVOKPGK+OMlkXiuNyl3E/8seefb/qv3+Fj+2
h0GEfL60V//44QehW4DbEHYmeNsb9kGgiV9/iwVg3qL1GQRjPfJcYo3bHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMTKzxXPJPHnhVYexKt7WDhVzLZMB8GA1UdIwQY
MBaAFEY4fFazMf+EvBDYrJDh4sFvFyNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xYjQwZmYtYjFlMS00OTUxLTkxNjUt
MjNiYjM5YTgzNDgxLzEvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xYjQwZmYtYjFlMS00OTUxLTkxNjUtMjNiYjM5YTgzNDgx
LzEvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDIyv2Ip
Ha3uu0Ew6WMU2SYPV27I/vyNGxG4WnMl+aWRiAWy1cVii33uvPMAmKXcgd2wE7LX
2Ukof7eHIiNDNBPuVogsNzJJXOhsFcdDEI+0yp0zoCj7OLXJepgLggjGQgc2di9M
tpwM4TId6PAAktvszzItU8iWZVpl/5p0rT8s8cjIF1KSPyfbc2S/XFjh0ZmZUMqq
Obl6TIhaOcXb+MgpbhOpKPSs1TTefv+1Vq/eIQDEu3ph+Qu/f1Vxg2MjL0ZuKQs5
/Ax6bad3eD37bloUus+iKNuH1azhjCDdUaHEAB4/pztv9JugJlRhM2iD7GApCmk9
XV7M8/krSSEvJA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:18 2025 by rpki-client