Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier: j9Ivdd26NyYAbVPmlKwjJMT9mWpe9VI+lI9rKijAFZI=
Subject key identifier: 07:F9:B8:2E:29:4C:E3:1E:D9:A4:B3:B2:94:4B:EB:FC:08:29:A9:32
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 0198D5BBB556CD93FAF41F07E121FDD2F851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:45 +0000
Manifest this update: Sat 23 Aug 2025 07:01:45 +0000
Manifest next update: Sun 24 Aug 2025 07:01:45 +0000
Files and hashes: 1: 8d7VpoBO27aN3dak4lAaxGgmHlY.roa (hash: nh1zP1FVrxhSUv/TNCc0ZubqPf+syGRj5kTxf6jPWNk=)
2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: 3q8C+vDyOuM7E+jkr233NIkYUxI8/OQ7edpTvM/7IL8=)
3: jr93hN4EhKSWYqIbECyoZXKfIBk.roa (hash: 73KNAqHLsWX0NkD2n0f2jQTbbkk8jmsVt6nVH9n8jm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b5:56:cd:93:fa:f4:1f:07:e1:21:fd:d2:f8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Aug 23 07:01:45 2025 GMT
Not After : Aug 24 07:01:45 2025 GMT
Subject: CN=07f9b82e294ce31ed9a4b3b2944bebfc0829a932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:60:d0:67:90:8a:bc:52:85:d1:23:26:b5:
81:72:e0:e7:0c:ad:73:73:75:85:62:10:56:7e:75:
f7:98:ab:e2:70:b7:47:5e:be:67:2d:8d:aa:af:bd:
67:fe:1e:2c:4e:dd:7c:da:87:c9:8c:ea:42:ba:b7:
62:ef:3a:e1:5a:85:58:e6:f3:b7:90:b1:73:3b:83:
c8:57:5f:db:0c:a4:d7:53:70:98:ec:2c:82:75:6d:
55:2c:ce:ac:2e:68:37:4d:d8:e0:dc:51:52:c7:6b:
66:6c:e9:f8:23:65:dd:44:f1:55:f0:92:b6:e1:76:
e3:0d:ba:c5:ec:0c:2b:70:3f:d2:e4:72:27:81:94:
84:47:9d:7b:8e:68:9c:85:f8:43:b1:01:11:44:eb:
4a:0b:d7:4d:98:86:37:d7:da:55:36:05:76:ed:c8:
97:10:2a:f9:26:3b:55:7d:82:a2:7a:68:58:fe:40:
f9:bb:40:4f:e8:16:39:86:c2:79:89:e5:3c:32:2f:
40:74:78:c3:21:7e:a1:8e:8e:72:35:f4:00:79:43:
7c:60:d3:22:91:ce:55:af:5e:b0:15:e6:45:6e:88:
ff:67:58:3a:24:31:99:50:ff:36:5b:eb:34:16:99:
82:73:f4:bb:3f:66:1a:c6:c3:14:c5:c2:86:48:45:
87:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:B8:2E:29:4C:E3:1E:D9:A4:B3:B2:94:4B:EB:FC:08:29:A9:32
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8b:31:d5:3d:63:01:30:25:d5:a5:e2:7f:3a:37:56:d8:f9:
a6:c3:9e:d6:61:e0:8f:76:2c:b4:4d:b3:57:b8:d4:9d:b3:96:
aa:84:f8:ae:e3:0a:41:e1:d7:b6:df:c9:1c:a9:15:3c:aa:f4:
b9:38:e0:5d:8c:b8:78:e8:1b:3e:ba:da:2b:90:3c:e4:06:0a:
24:2e:47:95:d6:d6:97:05:95:17:66:44:2c:12:47:b5:ae:f5:
d0:bb:e8:46:61:9e:f6:65:0b:e3:c2:16:fe:51:90:51:05:6b:
d2:10:6c:b2:f8:5b:87:5c:d4:c8:05:10:3f:6b:5d:1e:82:e6:
bb:1f:82:62:55:9a:6a:23:9a:20:21:da:cd:b0:7e:3b:f9:5e:
81:07:04:ca:22:33:f5:6f:d3:60:73:06:6a:1e:c7:92:d6:f3:
51:b1:c6:05:55:47:64:0b:9a:00:17:e1:d3:9d:7e:0e:04:4c:
65:54:71:15:2f:9a:be:41:27:79:bd:5b:41:32:47:22:ab:70:
d0:c4:2d:77:ec:8a:05:ba:45:13:a8:a8:b1:07:ad:39:10:14:
f6:96:48:50:59:e4:87:6f:49:2e:27:9d:5f:98:16:c9:76:17:
68:da:c4:7b:5d:7e:1a:93:46:78:ff:88:fb:f2:b1:f7:e7:1f:
d3:ae:13:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7VWzZP69B8H4SH90vhRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjEzNzk0OTI3MDUwYjIyNTI1YWI3MDA5MTgzNTQwOGVl
ZTRjNzkwHhcNMjUwODIzMDcwMTQ1WhcNMjUwODI0MDcwMTQ1WjAzMTEwLwYDVQQD
EygwN2Y5YjgyZTI5NGNlMzFlZDlhNGIzYjI5NDRiZWJmYzA4MjlhOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHNg0GeQirxShdEjJrWBcuDnDK1z
c3WFYhBWfnX3mKvicLdHXr5nLY2qr71n/h4sTt182ofJjOpCurdi7zrhWoVY5vO3
kLFzO4PIV1/bDKTXU3CY7CyCdW1VLM6sLmg3Tdjg3FFSx2tmbOn4I2XdRPFV8JK2
4XbjDbrF7AwrcD/S5HIngZSER517jmichfhDsQERROtKC9dNmIY319pVNgV27ciX
ECr5JjtVfYKiemhY/kD5u0BP6BY5hsJ5ieU8Mi9AdHjDIX6hjo5yNfQAeUN8YNMi
kc5Vr16wFeZFboj/Z1g6JDGZUP82W+s0FpmCc/S7P2YaxsMUxcKGSEWHLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAf5uC4pTOMe2aSzspRL6/wIKakyMB8GA1UdIwQY
MBaAFIthN5SScFCyJSWrcAkYNUCO7kx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xODEwM2ItYjI3OS00ZGU3LWJjM2Mt
ZWMwNWQwMTk1MDM2LzEvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8xODEwM2ItYjI3OS00ZGU3LWJjM2MtZWMwNWQwMTk1MDM2
LzEvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIsx1T1j
ATAl1aXifzo3Vtj5psOe1mHgj3YstE2zV7jUnbOWqoT4ruMKQeHXtt/JHKkVPKr0
uTjgXYy4eOgbPrraK5A85AYKJC5HldbWlwWVF2ZELBJHta710LvoRmGe9mUL48IW
/lGQUQVr0hBssvhbh1zUyAUQP2tdHoLmux+CYlWaaiOaICHazbB+O/legQcEyiIz
9W/TYHMGah7HktbzUbHGBVVHZAuaABfh051+DgRMZVRxFS+avkEneb1bQTJHIqtw
0MQtd+yKBbpFE6iosQetORAU9pZIUFnkh29JLiedX5gWyXYXaNrEe11+GpNGeP+I
+/Kx9+cf064Tmw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:20:44 2025 by rpki-client