Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: hAUtJqxOAu/AV64wXKcfdPWJEUWbL7d0wVrX8KQZHmw=
Subject key identifier: D5:E7:E3:2C:1D:45:EF:A6:D2:39:EA:18:4D:F0:37:25:2B:3E:29:55
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 0198D583C575B7A88F005E94A22A38884ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:39 +0000
Manifest this update: Sat 23 Aug 2025 06:00:39 +0000
Manifest next update: Sun 24 Aug 2025 06:00:39 +0000
Files and hashes: 1: XlEutT53Peaefw9BWBX8iOxdk0o.roa (hash: 3n8+7Yj6dfwFUOHjwioNJb1p8k9ewBTtziMwK34FcCQ=)
2: _GNQSp_bGjydsnVDpRHY8XNNqhs.roa (hash: pDYhj1QM7SQ6UTwVMyRGZcrJ6AnEuDllBqLjotU+jDg=)
3: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: PcwlSW2bYQbIgnTfVf2B0/+1x5I6233v2op33LgK3iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c5:75:b7:a8:8f:00:5e:94:a2:2a:38:88:4a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Aug 23 06:00:39 2025 GMT
Not After : Aug 24 06:00:39 2025 GMT
Subject: CN=d5e7e32c1d45efa6d239ea184df037252b3e2955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:e5:e4:60:36:3d:cc:ad:4b:52:a3:83:b7:
56:2f:c3:af:a5:1e:8e:84:40:be:e2:ef:28:7e:eb:
c1:4c:03:d7:7d:a2:63:b3:3f:f8:05:6d:f2:b0:aa:
c9:59:ce:cb:aa:f8:3f:fc:e7:d6:d9:3d:88:a0:ce:
52:82:61:eb:43:62:62:14:3c:75:f6:80:61:ba:de:
c9:7f:19:f9:52:d5:42:00:e2:a0:4e:8d:c4:7d:56:
91:20:8c:f3:0b:64:b3:6f:66:39:93:43:a8:03:d0:
84:88:e7:c7:c8:07:b2:18:b1:47:f5:d2:79:ca:52:
92:0b:4e:e4:b6:98:e8:df:cc:5d:29:ba:75:4e:e7:
48:23:4e:f6:5e:ca:d8:18:de:a9:60:21:65:1d:b3:
e8:3e:3f:1a:57:ab:e1:e4:8b:3d:eb:52:8e:5d:86:
f0:39:3f:17:6e:c9:ef:6a:8c:f8:77:59:30:50:50:
bc:68:20:28:ef:0a:77:15:13:ae:56:dd:7c:82:77:
c7:9d:82:99:79:a5:33:45:82:a5:a0:8a:88:6b:98:
d9:c9:d6:2b:2d:00:23:44:41:d4:94:d8:87:a6:cd:
d6:e3:45:26:5b:de:cb:59:7d:75:f2:a1:e0:fa:37:
16:4e:16:73:01:40:ed:03:62:0d:77:49:cf:e4:2c:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E7:E3:2C:1D:45:EF:A6:D2:39:EA:18:4D:F0:37:25:2B:3E:29:55
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:48:3f:c1:68:d8:1b:23:7c:2a:41:a7:ec:ce:1e:29:3b:68:
7f:30:b7:f9:4e:95:8c:3e:a5:88:c6:db:7b:4d:ea:36:68:b5:
2f:8e:b5:60:38:a8:41:b7:cc:69:1d:11:83:a3:42:30:5d:3e:
a4:e0:92:44:40:3e:f4:31:24:ce:28:f9:34:b6:79:27:e9:be:
4e:26:c1:83:54:1f:26:79:72:2f:5b:b9:bd:aa:0d:88:d2:cd:
8d:2f:9a:68:f7:28:17:fa:eb:f8:8e:6a:75:4b:40:d7:fe:9b:
e8:c1:47:2d:cc:40:f1:69:98:30:1c:08:d9:00:97:eb:d8:19:
43:fe:8f:27:92:85:c4:7e:39:45:3c:e2:23:87:35:0f:8f:f8:
64:69:d3:5b:29:d5:e2:c4:f2:85:57:2d:65:fb:99:7b:81:11:
fa:c0:72:db:5e:01:3b:03:78:92:d2:5d:50:54:fc:4d:4d:b4:
21:6c:d7:3c:bc:3a:d7:53:bd:b4:a3:fc:bf:be:f3:c1:63:1e:
8a:06:e3:d5:fe:94:c1:9a:a9:f0:1f:2e:d1:37:1f:ba:4e:0d:
75:99:af:4a:63:00:d7:69:55:76:63:ac:7f:5e:41:6b:2d:67:
3e:91:06:7a:b7:04:43:16:31:55:0e:68:f6:1f:b9:59:cc:5c:
e7:ac:c6:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg8V1t6iPAF6Uoio4iErbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYjk1Y2ZjMmQxODdmNDA1MzBlZjA4M2JiZDEwYzg4YzQ5
NTZjMWQwHhcNMjUwODIzMDYwMDM5WhcNMjUwODI0MDYwMDM5WjAzMTEwLwYDVQQD
EyhkNWU3ZTMyYzFkNDVlZmE2ZDIzOWVhMTg0ZGYwMzcyNTJiM2UyOTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMbl5GA2PcytS1Kjg7dWL8OvpR6O
hEC+4u8ofuvBTAPXfaJjsz/4BW3ysKrJWc7Lqvg//OfW2T2IoM5SgmHrQ2JiFDx1
9oBhut7Jfxn5UtVCAOKgTo3EfVaRIIzzC2Szb2Y5k0OoA9CEiOfHyAeyGLFH9dJ5
ylKSC07ktpjo38xdKbp1TudII072XsrYGN6pYCFlHbPoPj8aV6vh5Is961KOXYbw
OT8Xbsnvaoz4d1kwUFC8aCAo7wp3FROuVt18gnfHnYKZeaUzRYKloIqIa5jZydYr
LQAjREHUlNiHps3W40UmW97LWX118qHg+jcWThZzAUDtA2INd0nP5CymOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXn4ywdRe+m0jnqGE3wNyUrPilVMB8GA1UdIwQY
MBaAFGu5XPwtGH9AUw7wg7vRDIjElWwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgt
NDY2MDEzNDM1MDc5LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgtNDY2MDEzNDM1MDc5
LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkg/wWjY
GyN8KkGn7M4eKTtofzC3+U6VjD6liMbbe03qNmi1L461YDioQbfMaR0Rg6NCMF0+
pOCSREA+9DEkzij5NLZ5J+m+TibBg1QfJnlyL1u5vaoNiNLNjS+aaPcoF/rr+I5q
dUtA1/6b6MFHLcxA8WmYMBwI2QCX69gZQ/6PJ5KFxH45RTziI4c1D4/4ZGnTWynV
4sTyhVctZfuZe4ER+sBy214BOwN4ktJdUFT8TU20IWzXPLw611O9tKP8v77zwWMe
igbj1f6UwZqp8B8u0Tcfuk4NdZmvSmMA12lVdmOsf15Bay1nPpEGercEQxYxVQ5o
9h+5Wcxc56zG6Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:38 2025 by rpki-client