Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
File: r6URZapQNqzaEf7gAg40_MQ57eY.mft (raw, json)
Hash identifier: BQuXgth7nHuneIwkb1UTuiRFI2B3bFeoSPpHHBDLxCY=
Subject key identifier: 98:19:DD:87:8C:79:79:24:16:E5:85:B9:93:C8:7D:BB:12:7E:C0:8D
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 0198D515E247C8BBCDE4F5F23F7CC476AF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 04:00:37 +0000
Manifest this update: Sat 23 Aug 2025 04:00:37 +0000
Manifest next update: Sun 24 Aug 2025 04:00:37 +0000
Files and hashes: 1: JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa (hash: YAf2/29DjA3Na+Hgt1fQsq3jSQYLqFSkMb1fHAx4RUM=)
2: r6URZapQNqzaEf7gAg40_MQ57eY.crl (hash: YKjQzUFa2BdTh5HW4/SQGJAnW1co1ZwrcIDwXMC0Tww=)
3: rJjHJUl0uD_7dHjW4bG3nCxQ5iY.roa (hash: nazoboMf2p4XX7ExK1xqcEEDrXTJmHzU9uxX+kIOchk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e2:47:c8:bb:cd:e4:f5:f2:3f:7c:c4:76:af:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Aug 23 04:00:37 2025 GMT
Not After : Aug 24 04:00:37 2025 GMT
Subject: CN=9819dd878c79792416e585b993c87dbb127ec08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:6c:c0:16:7b:9a:da:d5:94:19:eb:04:23:
ef:83:52:ee:b5:37:c4:25:f2:3a:40:6d:97:02:49:
f8:97:4d:37:ee:4b:59:7d:97:9a:cf:ed:90:3f:8b:
b4:40:f5:52:0e:ce:0b:50:1d:e0:e4:c8:db:09:71:
39:ee:c6:52:d1:18:15:de:2c:cb:22:35:88:33:9b:
72:0b:0b:77:8d:cd:67:33:47:2e:58:dc:fe:59:73:
24:91:ee:85:95:33:9c:13:e6:70:73:b0:18:4c:40:
60:9b:29:72:ef:34:35:f0:fd:71:6a:69:f2:40:0f:
dc:a8:81:f4:91:f3:08:db:2d:ba:96:31:35:e2:66:
e7:02:9a:bb:53:3e:28:aa:9e:b6:9f:cb:fc:65:af:
b5:1f:eb:21:6c:e2:7b:7b:45:6f:c7:e2:7e:d7:21:
36:65:58:18:fa:10:36:53:5d:47:ff:ff:df:cd:58:
e4:cb:21:7e:79:2e:8d:b6:38:e2:35:be:47:42:f3:
94:2c:aa:39:3d:ad:20:50:31:2b:87:68:19:c3:ec:
52:3c:ee:98:60:af:71:06:e5:c2:8e:23:e5:f2:22:
0e:c4:88:54:fc:87:d2:d6:b0:aa:fa:02:52:b0:f3:
88:63:66:38:ff:4c:12:ae:f4:79:55:60:a3:de:2b:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:19:DD:87:8C:79:79:24:16:E5:85:B9:93:C8:7D:BB:12:7E:C0:8D
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f6:2f:80:40:ae:f1:23:67:d5:8e:09:ef:f5:81:c8:44:ba:
c2:fd:92:58:c9:82:53:6e:07:6c:c3:b0:b4:8c:0e:93:cc:39:
94:7e:07:7d:b7:dd:5e:07:f9:c0:b9:a6:74:bf:0c:fa:d5:f1:
86:48:2c:ff:f8:14:91:f4:e0:58:30:fe:4e:f2:a7:28:a1:af:
d3:82:c0:20:7b:eb:bf:75:00:4f:5c:58:dd:47:84:20:0e:40:
53:6b:4f:3f:64:f3:f4:81:74:07:eb:84:78:61:35:46:55:65:
9d:d6:11:0b:d3:79:19:ed:35:2e:68:b4:bf:fc:15:f7:6a:3f:
73:b3:da:fb:16:79:3f:ff:3f:b3:32:01:a6:7b:28:39:3a:d7:
f7:2d:1d:98:92:3c:c7:c6:01:5c:d7:f2:7d:32:69:85:8c:81:
82:dd:b8:ee:66:61:a4:8b:74:a7:81:0a:96:0e:03:0a:30:e7:
2b:e1:6b:80:f3:67:a7:62:97:4d:b0:33:e1:5f:85:07:36:5e:
53:a9:93:61:c5:6e:22:d5:8c:a4:65:1d:ea:f2:5e:29:32:0f:
99:36:02:25:f5:66:a2:26:05:11:12:59:14:59:d9:46:93:7d:
72:8b:1c:cc:43:25:0b:22:74:66:74:24:f6:2d:aa:c1:56:9e:
d1:37:35:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFeJHyLvN5PXyP3zEdq+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYTUxMTY1YWE1MDM2YWNkYTExZmVlMDAyMGUzNGZjYzQz
OWVkZTYwHhcNMjUwODIzMDQwMDM3WhcNMjUwODI0MDQwMDM3WjAzMTEwLwYDVQQD
Eyg5ODE5ZGQ4NzhjNzk3OTI0MTZlNTg1Yjk5M2M4N2RiYjEyN2VjMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylBswBZ7mtrVlBnrBCPvg1LutTfE
JfI6QG2XAkn4l0037ktZfZeaz+2QP4u0QPVSDs4LUB3g5MjbCXE57sZS0RgV3izL
IjWIM5tyCwt3jc1nM0cuWNz+WXMkke6FlTOcE+Zwc7AYTEBgmyly7zQ18P1xamny
QA/cqIH0kfMI2y26ljE14mbnApq7Uz4oqp62n8v8Za+1H+shbOJ7e0Vvx+J+1yE2
ZVgY+hA2U11H///fzVjkyyF+eS6NtjjiNb5HQvOULKo5Pa0gUDErh2gZw+xSPO6Y
YK9xBuXCjiPl8iIOxIhU/IfS1rCq+gJSsPOIY2Y4/0wSrvR5VWCj3iu5BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgZ3YeMeXkkFuWFuZPIfbsSfsCNMB8GA1UdIwQY
MBaAFK+lEWWqUDas2hH+4AIONPzEOe3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZVUlphcFFOcXphRWY3Z0FnNDBfTVE1N2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yZGExZWMtYWE0Yi00ZDk0LTk4Y2It
YTc3NmU0YTYzZTZmLzEvcjZVUlphcFFOcXphRWY3Z0FnNDBfTVE1N2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yZGExZWMtYWE0Yi00ZDk0LTk4Y2ItYTc3NmU0YTYzZTZm
LzEvcjZVUlphcFFOcXphRWY3Z0FnNDBfTVE1N2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/YvgECu
8SNn1Y4J7/WByES6wv2SWMmCU24HbMOwtIwOk8w5lH4HfbfdXgf5wLmmdL8M+tXx
hkgs//gUkfTgWDD+TvKnKKGv04LAIHvrv3UAT1xY3UeEIA5AU2tPP2Tz9IF0B+uE
eGE1RlVlndYRC9N5Ge01Lmi0v/wV92o/c7Pa+xZ5P/8/szIBpnsoOTrX9y0dmJI8
x8YBXNfyfTJphYyBgt247mZhpIt0p4EKlg4DCjDnK+FrgPNnp2KXTbAz4V+FBzZe
U6mTYcVuItWMpGUd6vJeKTIPmTYCJfVmoiYFERJZFFnZRpN9cosczEMlCyJ0ZnQk
9i2qwVae0Tc10g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:27 2025 by rpki-client