Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
File: rdbXV2zSgkXGefmvNXXANbiiLJ4.mft (raw, json)
Hash identifier: 2YD1Pwa6LRBe+7eLZlkGQ8yQDK7vA8tXR6NVb6PfVlw=
Subject key identifier: 2D:A8:63:05:A8:66:7B:A1:3F:F6:AC:CC:6A:D8:37:01:44:E6:84:DC
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 0198D47460E7FFA51CFDFDD01C2AB3062379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:04:13 +0000
Manifest this update: Sat 23 Aug 2025 01:04:13 +0000
Manifest next update: Sun 24 Aug 2025 01:04:13 +0000
Files and hashes: 1: l7t2iScMgw_Vqqdey3zojLvCFAo.roa (hash: GElb5qawLmwlWjlnnhanimj+W7edI5MOyhH1UzXbSog=)
2: rdbXV2zSgkXGefmvNXXANbiiLJ4.crl (hash: dPypI/7WGKGSaEN47k9XvvqCDkE5QTunXQkZt+Wqi0U=)
3: svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa (hash: hDRuttNUPmkUswD/PN5v7bjO2pBa9L/1t8q5gG/jwI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:60:e7:ff:a5:1c:fd:fd:d0:1c:2a:b3:06:23:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Aug 23 01:04:13 2025 GMT
Not After : Aug 24 01:04:13 2025 GMT
Subject: CN=2da86305a8667ba13ff6accc6ad8370144e684dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:43:43:4d:d3:37:20:33:3e:b1:9e:24:bc:
0e:2e:8e:a2:d6:bd:74:e0:ba:f2:0d:ac:ff:cb:b1:
6f:c4:72:8b:46:ed:fa:75:d6:27:06:13:11:61:18:
69:e9:37:6c:d9:56:fa:65:a3:09:9a:88:b3:04:97:
ac:9e:ec:88:56:3c:09:3c:e6:5d:e6:78:3f:21:ae:
12:19:e7:4b:d1:09:ef:a8:d3:b8:12:34:f2:28:64:
a8:1a:a3:fb:91:e5:91:25:71:61:ed:ce:ee:87:6c:
c9:27:74:49:73:44:b0:f7:1c:42:04:11:98:aa:38:
2f:95:ac:21:b6:2a:8a:d1:3b:03:04:10:82:3f:b0:
1f:99:d1:fb:6a:c1:83:e4:06:00:8f:0f:3f:eb:50:
ea:de:a7:fc:83:a5:e7:ef:24:9c:9a:61:d7:f0:cd:
3a:d2:f7:c9:db:14:41:5d:bf:f3:ad:23:d8:22:df:
08:f3:c3:86:ad:80:73:f4:5c:01:68:09:cc:95:aa:
c9:24:3a:93:c4:34:1b:1a:56:cb:ea:4f:48:6a:6d:
9a:04:a1:48:9b:2f:19:53:06:70:08:c4:f7:2c:ae:
e4:da:67:e7:f7:fc:2b:6c:91:63:0f:ee:cd:9c:fb:
c7:eb:0a:2f:7e:f7:8f:e9:16:1d:42:f3:f9:67:53:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A8:63:05:A8:66:7B:A1:3F:F6:AC:CC:6A:D8:37:01:44:E6:84:DC
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:51:76:b2:0f:4c:ae:49:05:ae:f1:8e:09:d5:55:f2:2c:05:
0f:3c:3e:33:44:65:4a:a2:d5:82:51:e4:58:5a:ff:74:c2:9d:
b1:11:ff:53:ec:c8:76:ea:ff:9c:70:7a:62:15:c2:96:1b:08:
58:c9:d8:71:64:25:79:5b:57:02:e7:fc:a4:f1:84:4a:02:99:
dc:26:be:cc:38:01:f1:a7:93:6f:3d:de:e9:b2:6c:1b:f6:73:
a1:57:73:2f:df:27:fa:13:5e:54:3e:9a:1b:5e:6b:26:30:bc:
48:25:f0:a8:92:fb:78:24:99:98:3f:d6:be:a5:38:6f:00:36:
11:16:51:64:4d:4f:dc:6d:18:ae:11:7c:43:d0:0c:b8:23:52:
dc:d9:4c:8d:85:ad:80:19:30:d7:a3:2d:04:e9:f7:dc:8b:17:
9c:1a:1b:bc:e6:ee:b7:18:9d:6a:7e:9d:91:d7:a0:84:63:68:
74:f2:c4:f9:bd:42:6c:56:a0:dc:f6:3c:ba:57:6d:c6:ab:cf:
87:b1:7d:e0:a2:df:95:a2:5d:76:bb:72:07:83:db:d4:d5:ce:
0f:5e:a1:28:fe:1f:cb:dc:93:e5:e6:e1:d2:6a:e6:37:1c:2b:
a1:6e:ea:be:4f:28:c5:ca:bd:f9:ab:c3:c6:8c:5b:90:7e:43:
4e:3a:5d:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdGDn/6Uc/f3QHCqzBiN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZDZkNzU3NmNkMjgyNDVjNjc5ZjlhZjM1NzVjMDM1Yjhh
MjJjOWUwHhcNMjUwODIzMDEwNDEzWhcNMjUwODI0MDEwNDEzWjAzMTEwLwYDVQQD
EygyZGE4NjMwNWE4NjY3YmExM2ZmNmFjY2M2YWQ4MzcwMTQ0ZTY4NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4pDQ03TNyAzPrGeJLwOLo6i1r10
4LryDaz/y7FvxHKLRu36ddYnBhMRYRhp6Tds2Vb6ZaMJmoizBJesnuyIVjwJPOZd
5ng/Ia4SGedL0QnvqNO4EjTyKGSoGqP7keWRJXFh7c7uh2zJJ3RJc0Sw9xxCBBGY
qjgvlawhtiqK0TsDBBCCP7AfmdH7asGD5AYAjw8/61Dq3qf8g6Xn7yScmmHX8M06
0vfJ2xRBXb/zrSPYIt8I88OGrYBz9FwBaAnMlarJJDqTxDQbGlbL6k9Iam2aBKFI
my8ZUwZwCMT3LK7k2mfn9/wrbJFjD+7NnPvH6wovfveP6RYdQvP5Z1Nq2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2oYwWoZnuhP/aszGrYNwFE5oTcMB8GA1UdIwQY
MBaAFK3W11ds0oJFxnn5rzV1wDW4oiyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmRiWFYyelNna1hHZWZtdk5YWEFOYmlpTEo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wM2MwYWEtN2Y5NC00MGMxLTk3NDIt
ZGRiMDQ4NGE2ZGEyLzEvcmRiWFYyelNna1hHZWZtdk5YWEFOYmlpTEo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wM2MwYWEtN2Y5NC00MGMxLTk3NDItZGRiMDQ4NGE2ZGEy
LzEvcmRiWFYyelNna1hHZWZtdk5YWEFOYmlpTEo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVF2sg9M
rkkFrvGOCdVV8iwFDzw+M0RlSqLVglHkWFr/dMKdsRH/U+zIdur/nHB6YhXClhsI
WMnYcWQleVtXAuf8pPGESgKZ3Ca+zDgB8aeTbz3e6bJsG/ZzoVdzL98n+hNeVD6a
G15rJjC8SCXwqJL7eCSZmD/WvqU4bwA2ERZRZE1P3G0YrhF8Q9AMuCNS3NlMjYWt
gBkw16MtBOn33IsXnBobvObutxidan6dkdeghGNodPLE+b1CbFag3PY8uldtxqvP
h7F94KLflaJddrtyB4Pb1NXOD16hKP4fy9yT5ebh0mrmNxwroW7qvk8oxcq9+avD
xoxbkH5DTjpd9w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:09 2025 by rpki-client