Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: 9qrMvfMMyF8e/pNdi5QeKmNoolkxBqWZvYeXBTovhLI=
Subject key identifier: F1:61:A4:95:CE:94:37:7E:2D:15:D5:4E:5C:CE:0F:0C:A5:7C:68:2C
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 0198D4729FE97D726C506B724C860C153421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 01:02:18 +0000
Manifest this update: Sat 23 Aug 2025 01:02:18 +0000
Manifest next update: Sun 24 Aug 2025 01:02:18 +0000
Files and hashes: 1: bXLXdbvFGFR0FszgHn84rVBOGio.roa (hash: nmNBpS+PbDPDefHKYKNVtxbPVQnu+QoIycRrjJFcsBw=)
2: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: tD2cHn1HZupmEXCT3ZZipwZJUliqKiuFlcwHVYsTs8k=)
3: hKQ8LLa9--B-K86xayaw0kpiYWg.roa (hash: d0JIaOsBs7E/BdBAQ915qmU5N9B7n1lC3k/0IYxFCFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:9f:e9:7d:72:6c:50:6b:72:4c:86:0c:15:34:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Aug 23 01:02:18 2025 GMT
Not After : Aug 24 01:02:18 2025 GMT
Subject: CN=f161a495ce94377e2d15d54e5cce0f0ca57c682c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bd:ac:0b:18:94:d8:c2:33:53:ca:0a:9f:71:
b2:0b:e3:f3:7c:88:8e:62:3d:2c:75:af:a6:52:81:
a8:2d:9d:0a:ee:fe:d7:8f:7d:73:44:a7:29:e2:37:
7f:0b:61:9d:2d:50:c0:8d:9f:3b:60:3a:0e:ce:25:
1d:7c:5b:2c:22:d6:47:6e:b9:d8:87:2c:4e:78:39:
9a:ec:e9:b2:ce:1a:db:01:62:fa:d1:43:3d:34:97:
32:ef:57:e9:2a:73:3f:8e:ce:30:65:f7:fc:0f:25:
fd:b7:14:87:61:30:3b:d8:b6:25:8a:3f:7e:74:32:
5e:66:1a:7b:e8:45:c6:a3:c7:a7:38:8c:11:95:85:
6a:22:ab:8c:0d:66:04:6b:a3:2b:26:57:c5:4c:a3:
84:ee:e5:ba:15:27:0f:09:a0:52:e7:df:32:a9:0f:
c0:8c:b2:f3:e4:13:de:c2:14:f1:f2:4b:ac:22:bb:
82:a0:d7:fa:ab:6d:35:b1:15:a9:7a:50:ed:d3:49:
58:9d:de:53:5f:4c:88:9b:44:54:db:61:a1:cc:43:
1d:fa:1f:55:06:cf:f6:a7:9c:d7:6f:8d:46:1f:72:
4d:62:cb:33:6a:2a:69:b0:0c:b7:1c:1f:f4:70:79:
b0:b1:63:36:28:c2:52:2a:e0:f5:e9:e8:47:82:21:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:61:A4:95:CE:94:37:7E:2D:15:D5:4E:5C:CE:0F:0C:A5:7C:68:2C
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2d:01:59:7d:89:99:41:c4:e5:e7:61:33:9d:57:f4:3b:ba:
9c:40:b4:41:48:ed:47:f3:22:36:bb:4e:cd:2a:10:6a:9d:1e:
c3:c5:4b:4a:b4:a1:d2:54:7d:f1:b9:76:14:0f:e1:30:b1:bc:
92:c9:07:9e:57:28:46:30:9d:03:0f:fd:55:48:5d:d3:3e:cf:
1f:aa:a5:82:17:50:ef:a6:74:90:90:90:75:20:11:dc:dc:84:
b8:dc:9f:82:fc:d0:8e:3d:31:7f:b1:fd:aa:c6:ab:2d:cc:54:
98:0e:57:08:9e:f8:25:f5:7c:19:9e:40:49:38:02:ae:90:63:
69:15:29:3c:3d:dd:32:ff:da:04:cc:87:c3:7b:33:e1:ea:28:
51:6f:f8:f3:db:5e:ee:87:85:1f:b7:f5:13:67:fe:a4:83:4a:
83:c6:1d:68:b4:98:be:11:f5:32:58:1c:35:bf:8c:64:11:7f:
c2:4d:b6:41:6c:b5:45:ba:ac:55:19:f4:5f:b7:6c:2c:53:3b:
c5:76:67:20:f7:cd:4e:1b:27:ee:94:b9:95:7c:70:4f:a2:73:
91:27:96:3d:de:54:92:32:f5:0e:43:1f:b2:bb:d9:3a:33:25:
21:20:93:9d:67:3a:21:bc:8d:d4:69:1d:c0:ee:de:f3:b1:30:
29:f4:8f:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcp/pfXJsUGtyTIYMFTQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1N2Y5ZmRlYTM1MGE3NjZiYjk4YzYwNGQzYjljMjc5MTY3
MzIyMDkwHhcNMjUwODIzMDEwMjE4WhcNMjUwODI0MDEwMjE4WjAzMTEwLwYDVQQD
EyhmMTYxYTQ5NWNlOTQzNzdlMmQxNWQ1NGU1Y2NlMGYwY2E1N2M2ODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir2sCxiU2MIzU8oKn3GyC+PzfIiO
Yj0sda+mUoGoLZ0K7v7Xj31zRKcp4jd/C2GdLVDAjZ87YDoOziUdfFssItZHbrnY
hyxOeDma7OmyzhrbAWL60UM9NJcy71fpKnM/js4wZff8DyX9txSHYTA72LYlij9+
dDJeZhp76EXGo8enOIwRlYVqIquMDWYEa6MrJlfFTKOE7uW6FScPCaBS598yqQ/A
jLLz5BPewhTx8kusIruCoNf6q201sRWpelDt00lYnd5TX0yIm0RU22GhzEMd+h9V
Bs/2p5zXb41GH3JNYsszaippsAy3HB/0cHmwsWM2KMJSKuD16ehHgiEuRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFhpJXOlDd+LRXVTlzODwylfGgsMB8GA1UdIwQY
MBaAFHV/n96jUKdmu5jGBNO5wnkWcyIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYt
YzI1YWJhNmI1NWFmLzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYtYzI1YWJhNmI1NWFm
LzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiy0BWX2J
mUHE5edhM51X9Du6nEC0QUjtR/MiNrtOzSoQap0ew8VLSrSh0lR98bl2FA/hMLG8
kskHnlcoRjCdAw/9VUhd0z7PH6qlghdQ76Z0kJCQdSAR3NyEuNyfgvzQjj0xf7H9
qsarLcxUmA5XCJ74JfV8GZ5ASTgCrpBjaRUpPD3dMv/aBMyHw3sz4eooUW/489te
7oeFH7f1E2f+pINKg8YdaLSYvhH1MlgcNb+MZBF/wk22QWy1RbqsVRn0X7dsLFM7
xXZnIPfNThsn7pS5lXxwT6JzkSeWPd5UkjL1DkMfsrvZOjMlISCTnWc6IbyN1Gkd
wO7e87EwKfSPKQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:07 2025 by rpki-client