Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json)
Hash identifier: 6XNgWD2B/7ouA+jdUWzSudK41xBOsgrU6xD6wkf08Oo=
Subject key identifier: 15:6C:0B:35:C0:E9:12:C4:39:89:F1:C3:0A:99:CB:E7:56:70:D4:86
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 0198D65F3D5F1ED800946BFF66B2E55B8434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 10:00:22 +0000
Manifest this update: Sat 23 Aug 2025 10:00:22 +0000
Manifest next update: Sun 24 Aug 2025 10:00:22 +0000
Files and hashes: 1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: DFg0QmRAC3XeE4jGxP+4q+dOZk7g66BI/x6yjfaNUO4=)
2: SM900vRB7gei6pS6Q178I2UX-lU.roa (hash: EDUY4+JtCT9uXEY3z6PPpKcKtOUgL6hoTy+pDX+nuro=)
3: rE12S5_UCVz_qE96OpsYCotvRdo.roa (hash: HmY8gAlqRzAv6/rOzxQZtJmfpwofsJXd2sCI5/LnmTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3d:5f:1e:d8:00:94:6b:ff:66:b2:e5:5b:84:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Aug 23 10:00:22 2025 GMT
Not After : Aug 24 10:00:22 2025 GMT
Subject: CN=156c0b35c0e912c43989f1c30a99cbe75670d486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:4e:12:f1:ca:ce:0a:a5:1f:67:4c:ec:bb:
97:91:be:fd:53:7e:20:2b:35:56:6c:59:75:b3:6e:
d4:d0:0b:34:2b:4e:af:8a:66:9f:9b:8e:2f:05:41:
8d:d2:8f:46:57:2a:ff:87:2a:69:69:12:d6:28:94:
1d:86:b5:ba:bd:d0:9f:d7:0d:9c:8a:45:fe:40:85:
07:e6:39:ad:34:e0:ec:2d:14:1d:11:19:b4:5e:d9:
6b:c7:0c:0c:ac:02:33:c3:22:22:28:63:e7:56:17:
cd:46:e8:82:e5:f5:47:35:b2:ae:de:ee:18:e2:37:
63:f7:8d:25:a9:25:0c:8b:0e:a5:fe:bf:18:de:b3:
ee:52:55:bf:85:27:99:54:d6:02:aa:46:b1:08:74:
37:b6:31:6e:04:05:98:18:90:7e:47:b9:39:b2:e4:
8b:b4:9d:08:db:a6:ad:90:1b:39:85:0c:af:77:91:
b1:df:f6:f6:bd:4c:75:72:7a:44:0c:4b:d5:f7:cf:
35:43:0d:54:d3:b3:69:bf:38:af:77:6c:8a:d4:a8:
47:ef:3f:9e:95:e4:3d:1d:00:44:df:66:a4:f9:72:
0b:f8:ad:9a:fe:9c:2a:0d:98:be:7c:66:7e:1c:51:
6b:85:97:c9:0f:b0:3e:6f:ce:1a:98:50:dc:d8:06:
2d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6C:0B:35:C0:E9:12:C4:39:89:F1:C3:0A:99:CB:E7:56:70:D4:86
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4c:b0:f3:cf:9b:fe:8d:98:9b:73:45:af:fb:18:cd:d8:4d:
32:c5:dc:3f:4d:a3:c7:07:61:6a:e6:a4:eb:6f:51:d4:8d:c3:
9d:eb:67:c2:6c:28:a9:cf:ab:4b:46:75:66:64:f7:6a:9f:28:
7d:6f:25:f9:0b:f3:98:dd:fb:e2:61:e2:55:0a:5e:45:68:65:
a9:c4:9f:e2:8f:38:d4:63:3b:35:76:1b:7a:42:f0:e1:31:40:
66:98:38:c4:8b:b4:c4:b8:68:36:4b:7f:b0:95:be:9f:d5:d1:
c7:e7:be:bd:41:4d:4c:a0:2f:72:9d:43:6d:3b:24:a1:f4:7c:
a1:da:5e:b5:03:d7:3c:c2:50:96:8e:6c:01:12:99:77:c1:71:
ec:9d:7e:9a:9d:b1:b2:47:aa:2d:d2:f0:4a:12:cc:4b:26:a0:
13:fc:3c:44:72:93:2c:90:83:c1:fc:ea:8c:f8:f5:96:10:4d:
82:04:b8:0f:a2:f2:a6:c8:39:f8:86:67:09:72:bc:65:7d:60:
95:50:7c:57:c1:bb:5f:52:f0:b9:86:c8:5b:06:ef:2a:ff:bd:
f6:78:bc:1f:1e:4d:42:2d:e4:2e:84:7b:0d:e0:ef:1d:49:8b:
dc:eb:63:f5:94:95:75:83:55:96:2e:40:42:72:90:dc:23:fb:
30:50:88:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXz1fHtgAlGv/ZrLlW4Q0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZTUzZDE4ZjVmMjEyYWUwODAyYTE3ZWU1OTk0YzMzMzFh
NDM1MjQwHhcNMjUwODIzMTAwMDIyWhcNMjUwODI0MTAwMDIyWjAzMTEwLwYDVQQD
EygxNTZjMGIzNWMwZTkxMmM0Mzk4OWYxYzMwYTk5Y2JlNzU2NzBkNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4lOEvHKzgqlH2dM7LuXkb79U34g
KzVWbFl1s27U0As0K06vimafm44vBUGN0o9GVyr/hyppaRLWKJQdhrW6vdCf1w2c
ikX+QIUH5jmtNODsLRQdERm0XtlrxwwMrAIzwyIiKGPnVhfNRuiC5fVHNbKu3u4Y
4jdj940lqSUMiw6l/r8Y3rPuUlW/hSeZVNYCqkaxCHQ3tjFuBAWYGJB+R7k5suSL
tJ0I26atkBs5hQyvd5Gx3/b2vUx1cnpEDEvV9881Qw1U07Npvzivd2yK1KhH7z+e
leQ9HQBE32ak+XIL+K2a/pwqDZi+fGZ+HFFrhZfJD7A+b84amFDc2AYtXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVsCzXA6RLEOYnxwwqZy+dWcNSGMB8GA1UdIwQY
MBaAFAPlPRj18hKuCAKhfuWZTDMxpDUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2Qt
MDJiYWI5ZjZmOTU1LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2QtMDJiYWI5ZjZmOTU1
LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEyw88+b
/o2Ym3NFr/sYzdhNMsXcP02jxwdhauak629R1I3Dnetnwmwoqc+rS0Z1ZmT3ap8o
fW8l+QvzmN374mHiVQpeRWhlqcSf4o841GM7NXYbekLw4TFAZpg4xIu0xLhoNkt/
sJW+n9XRx+e+vUFNTKAvcp1DbTskofR8odpetQPXPMJQlo5sARKZd8Fx7J1+mp2x
skeqLdLwShLMSyagE/w8RHKTLJCDwfzqjPj1lhBNggS4D6Lypsg5+IZnCXK8ZX1g
lVB8V8G7X1LwuYbIWwbvKv+99ni8Hx5NQi3kLoR7DeDvHUmL3Otj9ZSVdYNVli5A
QnKQ3CP7MFCIRQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:56 2025 by rpki-client