Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: bjnNg3+WRwiYtZS2xLg9pUwXb/WBE6AMTwrx01J3mLI=
Subject key identifier: 5D:75:B0:0A:61:52:4D:96:0B:4D:0A:41:1E:ED:11:A8:F0:9A:12:5F
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 0198D5158EFDC001265CE9D5979824710B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 04:00:16 +0000
Manifest this update: Sat 23 Aug 2025 04:00:16 +0000
Manifest next update: Sun 24 Aug 2025 04:00:16 +0000
Files and hashes: 1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=)
2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: xkw7X4qGwYGUAsY88jY9D8LOam/7R7cKUcE1fOXRK7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8e:fd:c0:01:26:5c:e9:d5:97:98:24:71:0b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Aug 23 04:00:16 2025 GMT
Not After : Aug 24 04:00:16 2025 GMT
Subject: CN=5d75b00a61524d960b4d0a411eed11a8f09a125f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:12:12:82:86:a8:00:bb:dc:ff:3a:d4:b7:
22:7f:52:5d:4d:ff:ce:59:8c:6d:90:cc:64:24:ab:
e7:cd:33:6e:9b:9f:0e:2a:23:a7:4a:d4:50:9c:aa:
e3:c5:57:76:25:20:06:94:6e:18:f1:6d:58:76:36:
7e:88:c2:86:bc:f9:2a:c4:ed:e2:6d:87:27:a9:42:
08:c4:11:b1:77:45:e6:0b:b2:09:f2:62:7e:85:4d:
be:61:c7:a7:26:85:bc:7a:6d:36:88:48:9f:b2:22:
60:b6:0b:db:60:d2:a1:2e:30:0b:fd:4a:ea:96:ed:
f9:b4:4d:84:cd:56:d3:7a:94:3a:ab:68:c3:e2:9c:
c4:5d:57:9d:30:35:ed:0a:fd:39:e4:62:36:62:bf:
42:8d:8c:a7:1f:58:60:1c:55:af:4b:18:88:dc:76:
7d:90:25:dc:ce:61:04:e4:30:6f:af:bf:2f:d9:0f:
cd:fc:e2:30:9f:ac:5e:db:9f:79:6f:2a:49:ed:e6:
45:34:9b:0e:6e:94:e9:0f:9c:d7:63:6f:70:2f:88:
53:ae:bc:45:25:e5:7a:f4:24:e1:7f:09:60:83:0f:
b1:5d:55:d6:68:bd:a5:10:48:5f:cf:3c:95:86:93:
9e:d9:9b:2d:d9:27:87:4b:16:68:7f:6e:99:68:d2:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:75:B0:0A:61:52:4D:96:0B:4D:0A:41:1E:ED:11:A8:F0:9A:12:5F
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1c:b3:9a:76:3b:60:26:b1:ac:3c:f9:fc:f8:e7:76:53:4a:
70:ad:38:6e:33:69:3f:d6:f3:18:37:b5:eb:13:bd:1f:6b:e1:
be:c3:21:75:e9:e4:fe:b9:bf:67:8a:f7:34:22:42:0d:c9:9c:
2b:95:85:7f:de:6e:89:5e:96:1e:8e:29:82:1a:32:3a:0a:7b:
25:ee:05:8a:12:03:15:2b:26:da:2a:02:b4:46:36:4c:60:f2:
c4:06:e5:b6:06:95:42:9e:35:fa:d0:84:32:78:e5:26:c5:ca:
66:33:7b:95:43:3b:29:0f:a8:e7:86:0e:7b:32:35:66:01:70:
f0:6f:55:d9:74:aa:e6:62:94:02:a9:cd:a3:73:98:51:31:2b:
bf:5c:2b:49:ea:72:a1:79:0a:b8:2b:25:85:44:a9:41:da:80:
d2:96:57:c2:61:fc:78:bf:03:b0:e6:c8:3e:60:5b:a3:3f:43:
19:a2:f9:74:3c:78:e4:f1:f0:81:92:c0:eb:1b:1b:6f:05:d8:
ca:f3:6c:e5:c9:05:3c:07:99:c9:17:91:41:c0:71:b2:66:00:
27:21:c6:a0:4b:6f:ad:aa:6b:79:3c:f8:a5:c3:ba:7d:5c:80:
a5:92:2b:87:02:4d:5d:8e:11:45:8f:77:ec:0d:4b:61:29:71:
68:3e:e8:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFY79wAEmXOnVl5gkcQsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZDQ5NGI4YjI3MWFmYjdjNjJmMTM5N2Y3MTJjZjJkY2Qz
NjQxODUwHhcNMjUwODIzMDQwMDE2WhcNMjUwODI0MDQwMDE2WjAzMTEwLwYDVQQD
Eyg1ZDc1YjAwYTYxNTI0ZDk2MGI0ZDBhNDExZWVkMTFhOGYwOWExMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzYSEoKGqAC73P861Lcif1JdTf/O
WYxtkMxkJKvnzTNum58OKiOnStRQnKrjxVd2JSAGlG4Y8W1YdjZ+iMKGvPkqxO3i
bYcnqUIIxBGxd0XmC7IJ8mJ+hU2+YcenJoW8em02iEifsiJgtgvbYNKhLjAL/Urq
lu35tE2EzVbTepQ6q2jD4pzEXVedMDXtCv055GI2Yr9CjYynH1hgHFWvSxiI3HZ9
kCXczmEE5DBvr78v2Q/N/OIwn6xe2595bypJ7eZFNJsObpTpD5zXY29wL4hTrrxF
JeV69CThfwlggw+xXVXWaL2lEEhfzzyVhpOe2Zst2SeHSxZof26ZaNJFGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF11sAphUk2WC00KQR7tEajwmhJfMB8GA1UdIwQY
MBaAFPPUlLiyca+3xi8Tl/cSzy3NNkGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2Mt
Zjc5YWQ4MTIyZWY1LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2MtZjc5YWQ4MTIyZWY1
LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMByzmnY7
YCaxrDz5/PjndlNKcK04bjNpP9bzGDe16xO9H2vhvsMhdenk/rm/Z4r3NCJCDcmc
K5WFf95uiV6WHo4pghoyOgp7Je4FihIDFSsm2ioCtEY2TGDyxAbltgaVQp41+tCE
MnjlJsXKZjN7lUM7KQ+o54YOezI1ZgFw8G9V2XSq5mKUAqnNo3OYUTErv1wrSepy
oXkKuCslhUSpQdqA0pZXwmH8eL8DsObIPmBboz9DGaL5dDx45PHwgZLA6xsbbwXY
yvNs5ckFPAeZyReRQcBxsmYAJyHGoEtvrapreTz4pcO6fVyApZIrhwJNXY4RRY93
7A1LYSlxaD7oOw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:47 2025 by rpki-client