Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: D7oFgDGt+96pvi+PTqXI1ms1DYyqhG9Rl/KDlZsU590=
Subject key identifier: FD:9D:F0:CA:E1:30:28:58:A6:6B:3B:49:05:15:9B:50:41:8E:33:4D
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 0198D6612728C1AEF86F1183BE00A78C8DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:02:27 +0000
Manifest this update: Sat 23 Aug 2025 10:02:27 +0000
Manifest next update: Sun 24 Aug 2025 10:02:27 +0000
Files and hashes: 1: JjwEZWBFYdro1bclN7oB-fRyAwA.roa (hash: k4IvqBYPxW6gaMsyO55esYb4IVeV/xHT6lju64eLGfA=)
2: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: q7Q5pIRJPb3NLkMviBc0KUJ3O7Utji3jtyhE3SQeb/Q=)
3: a9wio39nY7HA5Emvyn8dQazuTJQ.roa (hash: NmO/lOJq3pD1F19fAJROTywj9iP7yhDSrwvmQCnkS38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:27:28:c1:ae:f8:6f:11:83:be:00:a7:8c:8d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Aug 23 10:02:27 2025 GMT
Not After : Aug 24 10:02:27 2025 GMT
Subject: CN=fd9df0cae1302858a66b3b4905159b50418e334d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:39:08:1a:ce:fe:8d:e4:24:84:ae:2a:20:
ce:0a:91:65:ac:2e:30:66:26:90:0e:a8:74:08:79:
14:db:38:67:98:3a:dd:94:a8:14:d6:3b:28:fb:20:
53:10:a5:15:bd:2c:06:33:fb:6c:e0:fa:56:ab:94:
7c:07:1c:76:17:b7:90:99:04:9d:0a:da:82:8e:da:
3d:16:ae:7c:ac:df:8d:e6:0f:3f:2a:67:fd:7d:19:
b7:46:74:57:a1:ad:9f:d2:ab:d9:a1:52:cb:1e:f6:
51:b5:24:fb:b9:63:b1:93:8f:1d:4c:39:ff:9c:8e:
0b:7d:41:eb:a4:7a:1a:1b:eb:b4:17:98:29:37:b6:
67:45:5e:5e:57:fb:71:eb:3e:01:bf:dd:71:65:c5:
70:21:cf:72:25:98:c2:50:48:fe:28:52:f0:5c:af:
04:b4:a3:84:6b:03:d2:c0:d3:8b:1d:71:e6:65:59:
73:9e:d5:da:a5:f2:cb:ea:2c:03:04:7d:d2:d3:b6:
27:09:c5:55:46:4b:82:29:39:a6:2d:9e:df:e9:37:
2f:65:00:31:ae:c6:2f:9f:67:56:55:f0:82:3c:01:
29:a8:5b:79:6c:e1:10:e0:cb:e7:d2:e5:d1:ae:a4:
39:b2:0f:f7:ba:5c:29:d7:8d:c4:8a:25:9c:c8:47:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9D:F0:CA:E1:30:28:58:A6:6B:3B:49:05:15:9B:50:41:8E:33:4D
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5d:aa:d0:5d:84:d0:77:0a:86:85:8a:84:04:40:b3:e6:10:
86:85:45:cf:13:b8:be:65:25:3c:14:92:b4:1f:cb:0b:9c:c4:
78:a3:c7:68:bd:25:ee:24:ff:96:2d:09:cf:c3:65:0c:7d:c1:
d6:5e:b4:ad:ed:a6:f2:a7:ee:3f:2c:43:a4:94:ab:10:97:07:
b6:13:63:14:94:14:85:1e:c3:dc:2e:34:41:56:98:3f:8a:0c:
1e:80:94:0b:e4:da:70:47:ff:e5:61:a1:6b:f5:59:8c:91:fd:
37:cd:37:01:03:e9:da:57:c9:a2:76:0c:d7:b0:37:a2:a1:92:
8e:65:c1:05:84:7e:67:d0:f3:60:76:bd:20:67:31:3d:63:ad:
66:c5:2c:f9:9c:3d:52:c6:d9:f7:15:a9:ea:0f:09:c2:cd:46:
8b:d1:d9:e1:25:bb:8e:42:f8:8a:49:94:a0:b1:be:a0:07:e6:
6a:f1:b8:8e:99:d3:37:f9:6f:0d:9b:54:22:de:cc:6f:5e:c7:
c1:ed:c8:18:48:c6:23:d7:d4:6d:95:97:b7:5c:c8:74:c7:7d:
a7:df:2a:e6:f8:ea:67:92:97:79:3c:a5:cf:77:6e:8e:76:03:
16:0d:d2:b9:df:14:95:43:c8:4b:59:42:3b:fe:04:42:13:40:
4c:14:cd:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYScowa74bxGDvgCnjI2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOGE3ODg2NjYyMjU0YmUzOWVhMWFkZDcyNzI4ZTAwMGVi
MmMyNWEwHhcNMjUwODIzMTAwMjI3WhcNMjUwODI0MTAwMjI3WjAzMTEwLwYDVQQD
EyhmZDlkZjBjYWUxMzAyODU4YTY2YjNiNDkwNTE1OWI1MDQxOGUzMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7c5CBrO/o3kJISuKiDOCpFlrC4w
ZiaQDqh0CHkU2zhnmDrdlKgU1jso+yBTEKUVvSwGM/ts4PpWq5R8Bxx2F7eQmQSd
CtqCjto9Fq58rN+N5g8/Kmf9fRm3RnRXoa2f0qvZoVLLHvZRtST7uWOxk48dTDn/
nI4LfUHrpHoaG+u0F5gpN7ZnRV5eV/tx6z4Bv91xZcVwIc9yJZjCUEj+KFLwXK8E
tKOEawPSwNOLHXHmZVlzntXapfLL6iwDBH3S07YnCcVVRkuCKTmmLZ7f6TcvZQAx
rsYvn2dWVfCCPAEpqFt5bOEQ4Mvn0uXRrqQ5sg/3ulwp143EiiWcyEfd8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2d8MrhMChYpms7SQUVm1BBjjNNMB8GA1UdIwQY
MBaAFEyKeIZmIlS+Oeoa3XJyjgAOssJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2Mt
ZWMwM2ViZDE5MDAwLzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2MtZWMwM2ViZDE5MDAw
LzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ12q0F2E
0HcKhoWKhARAs+YQhoVFzxO4vmUlPBSStB/LC5zEeKPHaL0l7iT/li0Jz8NlDH3B
1l60re2m8qfuPyxDpJSrEJcHthNjFJQUhR7D3C40QVaYP4oMHoCUC+TacEf/5WGh
a/VZjJH9N803AQPp2lfJonYM17A3oqGSjmXBBYR+Z9DzYHa9IGcxPWOtZsUs+Zw9
UsbZ9xWp6g8Jws1Gi9HZ4SW7jkL4ikmUoLG+oAfmavG4jpnTN/lvDZtUIt7Mb17H
we3IGEjGI9fUbZWXt1zIdMd9p98q5vjqZ5KXeTylz3dujnYDFg3Sud8UlUPIS1lC
O/4EQhNATBTNNQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:58 2025 by rpki-client