Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
File: mf5n9L9N0mrjFbMae0cs5NXBrmo.mft (raw, json)
Hash identifier: zwLYnGx7FcyNzahzhspyrDFrbs8Jj/L+OHBmP5Z2Ivo=
Subject key identifier: E4:12:88:5B:84:B2:0A:B7:F3:11:AC:90:C7:53:9F:3D:14:DF:E1:46
Authority key identifier: 99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
Certificate issuer: /CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Certificate serial: 0198D5BC465705139D88D71FF5F284D141B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:02:22 +0000
Manifest this update: Sat 23 Aug 2025 07:02:22 +0000
Manifest next update: Sun 24 Aug 2025 07:02:22 +0000
Files and hashes: 1: DJ9c19i6-KdVhR4wxk4rl1TwOA4.roa (hash: 9EgmYxbySr7FvyMgHaLB4XxWt5JwrgMM/8o6In9Xr3E=)
2: mf5n9L9N0mrjFbMae0cs5NXBrmo.crl (hash: tqKx71QYrVqBQwSo5rRkxJ8oK4hOCO8HChyEQC81v1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:46:57:05:13:9d:88:d7:1f:f5:f2:84:d1:41:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Validity
Not Before: Aug 23 07:02:22 2025 GMT
Not After : Aug 24 07:02:22 2025 GMT
Subject: CN=e412885b84b20ab7f311ac90c7539f3d14dfe146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:8a:b9:36:b5:a4:4a:7e:a2:2d:cb:8f:c4:
d3:54:2b:fb:22:1f:1f:3a:af:ea:e7:73:c3:07:21:
4c:44:94:05:71:1b:87:21:94:15:d2:e1:a0:7e:5a:
5a:a7:d0:bc:16:ad:27:7b:0e:a3:8e:99:73:f2:40:
67:0a:ed:0e:e0:3c:c3:f1:7e:fc:02:c3:38:e5:66:
3e:42:ed:b0:ab:77:a7:39:23:59:2e:26:b6:30:11:
9e:c3:0e:88:c0:7b:ee:96:17:8c:8a:c5:3c:ed:58:
c7:e1:9b:42:d0:23:12:36:e3:24:a3:9a:c3:8a:3b:
34:77:c1:74:17:17:6c:14:88:26:1c:4b:15:6b:a7:
c4:40:00:40:8b:b2:7d:28:f3:0c:c0:83:1a:c9:30:
2d:f5:db:93:dc:3f:a3:ca:88:a8:d1:ce:04:a3:a8:
c6:3c:83:45:32:80:12:0c:ac:53:11:43:6e:11:3c:
a7:76:3c:c9:ec:80:e0:96:a8:bd:27:10:39:a3:76:
36:68:c5:da:cd:03:56:3b:26:3a:7e:3e:37:72:e0:
52:27:5b:bd:44:00:a7:ef:6b:3c:2c:24:00:b7:e7:
e0:4f:d3:f9:0e:91:fc:c7:0e:1f:f3:3a:b5:37:88:
24:98:6a:42:fd:ed:83:0f:72:3d:9e:bb:ad:96:d0:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:12:88:5B:84:B2:0A:B7:F3:11:AC:90:C7:53:9F:3D:14:DF:E1:46
X509v3 Authority Key Identifier:
keyid:99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4d:95:1b:fe:d6:c1:42:5f:a3:45:42:dd:14:0e:55:88:26:
a8:e5:46:66:b9:c0:fd:1e:d6:6b:f0:f8:f3:e8:16:d4:db:90:
35:9d:8b:d6:8b:59:ff:7f:fb:d4:f2:92:44:b8:bf:4c:e3:03:
a8:f8:0a:64:af:07:69:6d:20:7c:8d:b5:d3:d5:e3:26:55:bc:
50:8c:80:c6:f1:68:69:73:dd:82:fc:56:15:06:b4:44:cf:20:
69:7d:0f:c9:76:e1:42:2a:7d:52:41:b9:f7:01:b3:4e:3a:b2:
cd:a9:b6:fc:fb:84:46:57:ce:be:67:a5:ba:7d:e5:73:b9:8a:
4d:0b:80:64:10:d9:cc:53:13:4c:9f:17:99:6d:1a:7c:d6:fa:
0c:6c:30:97:43:cf:c9:37:04:0c:6b:b2:14:72:3e:12:41:0f:
7d:48:9d:8c:11:f5:3e:61:47:02:21:e8:a9:e2:06:60:11:90:
8d:bd:6e:95:ab:b0:40:98:94:f8:62:39:32:68:0b:55:0d:06:
7c:04:2c:70:b7:c2:4d:d8:c0:33:77:19:de:b5:2f:5f:7c:02:
54:73:42:65:45:06:12:49:57:e0:8a:62:35:7d:f8:7e:e1:00:
c0:c0:bc:54:e8:9f:f8:58:e2:32:b3:70:98:2a:d5:16:e7:1e:
c7:35:fc:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvEZXBROdiNcf9fKE0UG3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmU2N2Y0YmY0ZGQyNmFlMzE1YjMxYTdiNDcyY2U0ZDVj
MWFlNmEwHhcNMjUwODIzMDcwMjIyWhcNMjUwODI0MDcwMjIyWjAzMTEwLwYDVQQD
EyhlNDEyODg1Yjg0YjIwYWI3ZjMxMWFjOTBjNzUzOWYzZDE0ZGZlMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkaKuTa1pEp+oi3Lj8TTVCv7Ih8f
Oq/q53PDByFMRJQFcRuHIZQV0uGgflpap9C8Fq0new6jjplz8kBnCu0O4DzD8X78
AsM45WY+Qu2wq3enOSNZLia2MBGeww6IwHvulheMisU87VjH4ZtC0CMSNuMko5rD
ijs0d8F0FxdsFIgmHEsVa6fEQABAi7J9KPMMwIMayTAt9duT3D+jyoio0c4Eo6jG
PINFMoASDKxTEUNuETyndjzJ7IDglqi9JxA5o3Y2aMXazQNWOyY6fj43cuBSJ1u9
RACn72s8LCQAt+fgT9P5DpH8xw4f8zq1N4gkmGpC/e2DD3I9nrutltDvcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQSiFuEsgq38xGskMdTnz0U3+FGMB8GA1UdIwQY
MBaAFJn+Z/S/TdJq4xWzGntHLOTVwa5qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWY1bjlMOU4wbXJqRmJNYWUwY3M1TlhCcm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yN2ZiNDgtZDA2Ni00MmQ5LTk0MzIt
YTA1YmQyMjgzMzdjLzEvbWY1bjlMOU4wbXJqRmJNYWUwY3M1TlhCcm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yN2ZiNDgtZDA2Ni00MmQ5LTk0MzItYTA1YmQyMjgzMzdj
LzEvbWY1bjlMOU4wbXJqRmJNYWUwY3M1TlhCcm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnk2VG/7W
wUJfo0VC3RQOVYgmqOVGZrnA/R7Wa/D48+gW1NuQNZ2L1otZ/3/71PKSRLi/TOMD
qPgKZK8HaW0gfI2109XjJlW8UIyAxvFoaXPdgvxWFQa0RM8gaX0PyXbhQip9UkG5
9wGzTjqyzam2/PuERlfOvmelun3lc7mKTQuAZBDZzFMTTJ8XmW0afNb6DGwwl0PP
yTcEDGuyFHI+EkEPfUidjBH1PmFHAiHoqeIGYBGQjb1ulauwQJiU+GI5MmgLVQ0G
fAQscLfCTdjAM3cZ3rUvX3wCVHNCZUUGEklX4IpiNX34fuEAwMC8VOif+FjiMrNw
mCrVFucexzX8RA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:28 2025 by rpki-client