Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
File: d2pYTSefAHBmo4tesPGOe-22FOs.mft (raw, json)
Hash identifier: H/68lkGm6Ibgy/UuuDEYa8STvm1xcmCHvrfQhRrk7iw=
Subject key identifier: 20:6A:48:5F:A1:5E:B7:35:9B:40:BB:B8:BA:24:98:99:29:6D:AC:9C
Authority key identifier: 77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
Certificate issuer: /CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Certificate serial: 0198D515989A16688DDC34DF0003A7EDD42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:00:18 +0000
Manifest this update: Sat 23 Aug 2025 04:00:18 +0000
Manifest next update: Sun 24 Aug 2025 04:00:18 +0000
Files and hashes: 1: WUTyK7BrRNi0uHZK_0QCE_Vt8SE.roa (hash: 4x8uT/6JZLvMnikfzpcnGLUs5znzoRWzxY13Odgg+MI=)
2: d2pYTSefAHBmo4tesPGOe-22FOs.crl (hash: sSLdnPPN96B3U6lUUsG78Zqne/Wg7XBeMQVEQFtHgz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:98:9a:16:68:8d:dc:34:df:00:03:a7:ed:d4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Validity
Not Before: Aug 23 04:00:18 2025 GMT
Not After : Aug 24 04:00:18 2025 GMT
Subject: CN=206a485fa15eb7359b40bbb8ba249899296dac9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:25:a2:b2:f5:3a:df:59:21:9d:9f:9f:3b:
a5:5c:ce:7a:2c:e9:70:4c:03:af:2d:67:7c:0c:82:
32:e2:9f:75:7f:1b:c8:e4:62:09:fe:c7:8b:c9:9b:
73:ab:8f:5e:50:54:aa:f3:2c:c2:50:1f:6d:c7:56:
ae:bc:f2:15:d6:21:9e:e6:b6:56:a7:5c:69:bf:79:
f5:00:3f:6a:3c:44:38:e5:49:9c:97:76:7d:b5:6d:
b7:37:04:0a:b4:40:fc:03:3d:50:f4:ac:ac:16:dd:
26:88:05:fd:6e:db:3c:f6:ba:bf:76:c3:07:a0:ea:
59:5b:98:39:75:b8:83:36:dd:7a:ad:f7:01:13:c3:
5a:73:91:ed:0d:10:8c:45:0b:cf:42:1c:e9:b8:01:
f6:25:72:29:2f:74:bc:13:1a:dc:75:20:1c:35:82:
57:0d:6a:4d:e1:66:97:fc:75:f2:98:ab:d0:b2:55:
21:36:52:74:44:e3:1d:26:78:13:04:da:a9:bb:77:
34:2b:bb:91:d4:1b:e3:a7:24:5c:26:36:ff:48:d5:
99:70:46:bc:93:56:c7:b4:62:09:6d:79:a7:e0:f4:
c1:08:50:42:93:b3:a3:cc:6f:41:06:7b:28:e6:a8:
9f:a1:22:b7:5a:cc:00:ad:c7:9c:af:bf:f1:06:e1:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6A:48:5F:A1:5E:B7:35:9B:40:BB:B8:BA:24:98:99:29:6D:AC:9C
X509v3 Authority Key Identifier:
keyid:77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:11:ef:a9:f8:ed:50:56:49:4b:63:c7:8a:df:8b:4f:d3:f3:
06:13:96:35:43:18:6d:8c:2f:3c:9c:08:f5:57:e1:68:c9:cf:
10:53:09:8d:b6:db:de:29:f6:75:a0:4c:05:bc:af:0e:2c:91:
94:7f:a8:4f:f2:27:0c:13:ad:11:c7:a8:41:30:79:ea:f2:05:
20:66:bf:12:ee:a2:11:35:8c:d1:1a:3b:85:62:7a:1c:ed:35:
f5:91:e2:b3:4a:ba:e0:78:a3:28:35:84:88:3c:69:af:22:03:
b4:b6:5c:71:f2:64:1a:c1:b6:90:80:32:4c:a7:d4:a7:d9:50:
45:fb:74:5d:e4:04:db:db:12:94:d7:a0:81:a3:38:59:24:9b:
66:66:e7:22:6f:ca:c4:94:0b:1d:34:ba:24:9b:7c:11:e9:3f:
36:d8:94:43:5a:5e:00:b1:0a:ee:fa:f5:0a:2e:1b:88:32:ee:
08:d4:12:0b:63:05:da:a1:57:3c:6d:05:02:b2:86:4e:a9:10:
79:28:3e:bf:b7:4c:81:9e:86:82:b0:c5:f1:86:93:73:45:1d:
52:f0:46:ea:ce:10:0a:6a:5f:55:23:af:74:28:07:bc:1b:84:
33:a1:b0:2a:11:e5:bf:e4:5d:6a:31:c7:db:3d:f0:38:a6:3a:
15:23:5e:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFZiaFmiN3DTfAAOn7dQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NmE1ODRkMjc5ZjAwNzA2NmEzOGI1ZWIwZjE4ZTdiZWRi
NjE0ZWIwHhcNMjUwODIzMDQwMDE4WhcNMjUwODI0MDQwMDE4WjAzMTEwLwYDVQQD
EygyMDZhNDg1ZmExNWViNzM1OWI0MGJiYjhiYTI0OTg5OTI5NmRhYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbQlorL1Ot9ZIZ2fnzulXM56LOlw
TAOvLWd8DIIy4p91fxvI5GIJ/seLyZtzq49eUFSq8yzCUB9tx1auvPIV1iGe5rZW
p1xpv3n1AD9qPEQ45Umcl3Z9tW23NwQKtED8Az1Q9KysFt0miAX9bts89rq/dsMH
oOpZW5g5dbiDNt16rfcBE8Nac5HtDRCMRQvPQhzpuAH2JXIpL3S8ExrcdSAcNYJX
DWpN4WaX/HXymKvQslUhNlJ0ROMdJngTBNqpu3c0K7uR1BvjpyRcJjb/SNWZcEa8
k1bHtGIJbXmn4PTBCFBCk7OjzG9BBnso5qifoSK3WswArcecr7/xBuG5PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBqSF+hXrc1m0C7uLokmJkpbaycMB8GA1UdIwQY
MBaAFHdqWE0nnwBwZqOLXrDxjnvtthTrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJwWVRTZWZBSEJtbzR0ZXNQR09lLTIyRk9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83ZTg4NDgtMTA2NS00Mzg2LTgxNTYt
Mzg3YzZjNGQ4ZjAyLzEvZDJwWVRTZWZBSEJtbzR0ZXNQR09lLTIyRk9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny83ZTg4NDgtMTA2NS00Mzg2LTgxNTYtMzg3YzZjNGQ4ZjAy
LzEvZDJwWVRTZWZBSEJtbzR0ZXNQR09lLTIyRk9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRHvqfjt
UFZJS2PHit+LT9PzBhOWNUMYbYwvPJwI9VfhaMnPEFMJjbbb3in2daBMBbyvDiyR
lH+oT/InDBOtEceoQTB56vIFIGa/Eu6iETWM0Ro7hWJ6HO019ZHis0q64HijKDWE
iDxpryIDtLZccfJkGsG2kIAyTKfUp9lQRft0XeQE29sSlNeggaM4WSSbZmbnIm/K
xJQLHTS6JJt8Eek/NtiUQ1peALEK7vr1Ci4biDLuCNQSC2MF2qFXPG0FArKGTqkQ
eSg+v7dMgZ6GgrDF8YaTc0UdUvBG6s4QCmpfVSOvdCgHvBuEM6GwKhHlv+RdajHH
2z3wOKY6FSNemQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:51 2025 by rpki-client