Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: oMQ9nbnv1lhyCykuY6oRdr1oVLRIO7LXmlG6pX7cL80=
Subject key identifier: B9:C1:77:A4:0B:4A:B4:E5:E9:E3:94:CC:E9:A9:FE:1B:8A:F3:65:97
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 0198D6983761AB9F709CF171E0CA0F0D62C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:36 +0000
Manifest this update: Sat 23 Aug 2025 11:02:36 +0000
Manifest next update: Sun 24 Aug 2025 11:02:36 +0000
Files and hashes: 1: 2OXGBjO85npyAkFnRouh_UBk1Hs.roa (hash: HbPy+YRVvuPyiRQMlka5FfjRj4FCj/zQuaXQr9znzdU=)
2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: DQZi9J541cCI6FqtlVa9DwNcVjLXYsYE4TcRbG8RzGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:37:61:ab:9f:70:9c:f1:71:e0:ca:0f:0d:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Aug 23 11:02:36 2025 GMT
Not After : Aug 24 11:02:36 2025 GMT
Subject: CN=b9c177a40b4ab4e5e9e394cce9a9fe1b8af36597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:8d:81:b3:4c:b7:53:39:47:85:3b:7c:c7:
f7:d7:72:e3:56:68:59:18:a4:5e:39:f1:40:55:e9:
18:38:97:fe:a1:39:bf:8e:c8:97:7a:c7:a9:ea:ab:
d7:30:a5:fb:a3:93:9a:be:b2:d5:42:62:ff:04:a2:
a1:1c:f3:94:c7:57:ec:99:65:32:4f:97:2a:47:2e:
14:7f:36:d3:1d:16:2e:29:4b:a5:68:07:02:92:f3:
82:5b:51:65:e8:4c:4a:2f:6a:d1:67:65:e8:a5:de:
9d:d8:68:18:df:a8:87:28:83:00:8e:cf:01:66:de:
c1:8d:2b:d8:65:c5:56:c7:a0:51:95:9d:50:90:5a:
3f:85:a5:a8:08:42:a2:74:25:60:71:6d:ce:4b:3c:
fb:a8:4c:da:40:12:3c:25:d2:76:75:f0:dd:9c:46:
3f:7f:32:ba:4f:22:b6:50:34:ff:29:17:6e:a9:20:
e9:be:ff:0d:2d:34:9a:9c:34:6c:8d:db:55:63:2a:
35:7f:c0:7c:aa:70:3a:a1:cd:76:ee:e8:57:93:74:
3e:62:67:65:db:6f:ce:dd:d7:32:cc:f9:2c:00:52:
d6:a7:cf:3f:d6:5a:84:5f:50:31:3b:47:50:e9:80:
ee:18:fd:98:56:1b:a7:5b:9b:6e:b2:e9:da:27:d5:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C1:77:A4:0B:4A:B4:E5:E9:E3:94:CC:E9:A9:FE:1B:8A:F3:65:97
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ba:5b:60:25:2e:c7:0a:94:4b:b1:16:41:40:6c:4d:39:11:
20:4d:70:60:02:e5:58:bc:94:6f:88:45:8f:d8:34:a6:12:92:
69:e5:f6:5a:99:6b:56:1d:f9:ac:07:91:25:97:91:7c:a3:09:
ff:78:84:20:e8:01:c3:87:59:67:52:4a:58:b0:a0:8f:9f:f6:
17:ff:7c:40:f9:4a:8e:4b:dc:61:fe:75:02:86:63:85:44:8a:
72:80:7f:69:83:c6:52:bd:a6:b6:7b:db:69:12:ce:c6:76:5a:
8b:72:d0:ea:88:20:60:60:de:d0:97:d4:0a:d7:be:8d:40:7e:
5e:b6:00:73:f5:9f:f1:75:00:0e:17:56:18:85:50:8d:6d:8c:
7b:ac:86:60:e4:08:13:a7:7a:e2:e2:11:20:46:20:53:4a:12:
19:d2:9d:18:9a:c6:5f:db:fb:84:d4:1a:ad:5c:91:75:ee:6e:
35:ef:c6:18:ac:b2:8c:cd:fd:95:91:29:5b:f4:78:ce:c9:d8:
0a:bf:c3:10:65:be:a4:d8:c3:cb:1f:00:b5:fe:d4:e8:9a:a9:
6a:d2:2a:f5:a0:09:df:49:40:a8:20:a0:a9:57:e7:f2:ec:2d:
a4:19:a5:e9:35:c8:ed:4e:50:37:e6:fc:c8:35:36:70:80:e8:
36:20:44:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmDdhq59wnPFx4MoPDWLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2YyODI4MjFkYTU3NWY2ODkxNzY0N2NmM2UxODk4Zjlk
MGE2MmEwHhcNMjUwODIzMTEwMjM2WhcNMjUwODI0MTEwMjM2WjAzMTEwLwYDVQQD
EyhiOWMxNzdhNDBiNGFiNGU1ZTllMzk0Y2NlOWE5ZmUxYjhhZjM2NTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKGNgbNMt1M5R4U7fMf313LjVmhZ
GKReOfFAVekYOJf+oTm/jsiXesep6qvXMKX7o5OavrLVQmL/BKKhHPOUx1fsmWUy
T5cqRy4UfzbTHRYuKUulaAcCkvOCW1Fl6ExKL2rRZ2Xopd6d2GgY36iHKIMAjs8B
Zt7BjSvYZcVWx6BRlZ1QkFo/haWoCEKidCVgcW3OSzz7qEzaQBI8JdJ2dfDdnEY/
fzK6TyK2UDT/KRduqSDpvv8NLTSanDRsjdtVYyo1f8B8qnA6oc127uhXk3Q+Ymdl
22/O3dcyzPksAFLWp88/1lqEX1AxO0dQ6YDuGP2YVhunW5tusunaJ9U+9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnBd6QLSrTl6eOUzOmp/huK82WXMB8GA1UdIwQY
MBaAFP7PKCgh2ldfaJF2R88+GJj50KYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yODg2MjgtMjAzOS00MDg1LWEwMDYt
MDYwY2Q5YzkyZjI2LzEvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yODg2MjgtMjAzOS00MDg1LWEwMDYtMDYwY2Q5YzkyZjI2
LzEvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLpbYCUu
xwqUS7EWQUBsTTkRIE1wYALlWLyUb4hFj9g0phKSaeX2WplrVh35rAeRJZeRfKMJ
/3iEIOgBw4dZZ1JKWLCgj5/2F/98QPlKjkvcYf51AoZjhUSKcoB/aYPGUr2mtnvb
aRLOxnZai3LQ6oggYGDe0JfUCte+jUB+XrYAc/Wf8XUADhdWGIVQjW2Me6yGYOQI
E6d64uIRIEYgU0oSGdKdGJrGX9v7hNQarVyRde5uNe/GGKyyjM39lZEpW/R4zsnY
Cr/DEGW+pNjDyx8Atf7U6JqpatIq9aAJ30lAqCCgqVfn8uwtpBml6TXI7U5QN+b8
yDU2cIDoNiBE0w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:01 2025 by rpki-client