Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
File: j7YgpIOO9uIbzCatNRJi11ZusnU.mft (raw, json)
Hash identifier: 4G7By7Bbhj+wTYJoNSqdHsYjKgaOUulUuy/cX9Dbnw8=
Subject key identifier: C0:73:59:08:76:03:5B:7B:43:D2:C4:24:14:CF:74:25:21:B1:E9:B3
Authority key identifier: 8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
Certificate issuer: /CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Certificate serial: 0198D5BB95AC8EFA2927FFA652A236C52931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: eHCPsFGmisg7lRclzimiGG_V3JA.roa (hash: //Um4LhSOzAoBsOI7xMkiMxwqQTwKL5Npb082+X9U6M=)
2: j7YgpIOO9uIbzCatNRJi11ZusnU.crl (hash: MjbfS1a9TpNV1ByJ3xF8mhSNHg/HHVLAdUD+n0e5DQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:95:ac:8e:fa:29:27:ff:a6:52:a2:36:c5:29:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=c073590876035b7b43d2c42414cf742521b1e9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:21:49:44:1e:6a:e2:50:fe:be:02:b3:82:
e2:bb:4a:55:67:c9:d4:82:27:82:a2:41:db:dc:a5:
65:6f:81:2b:d6:86:3c:8d:bf:74:b7:b9:d9:57:d2:
fd:2a:aa:9f:49:5d:8e:88:ce:07:8d:33:be:7c:72:
bf:20:89:5b:af:a3:4a:84:88:6c:25:e0:74:96:22:
b0:96:ec:90:9f:82:af:5b:4a:4d:47:5c:52:1a:8b:
6b:07:07:fc:03:28:31:eb:07:d1:0d:0b:6c:5a:20:
25:98:28:c7:b3:75:08:d9:7a:94:84:1e:27:92:82:
d8:68:f2:bf:22:f1:0a:88:c8:bc:d2:25:af:ad:44:
ee:a4:62:3d:49:f6:83:d6:ee:5a:49:5b:2e:9e:72:
d5:7f:1d:98:65:34:e0:42:b8:53:5d:08:4b:e3:58:
e2:e1:00:9a:2d:b6:3c:15:95:4d:3c:ee:04:8f:aa:
32:8f:07:49:ad:99:75:d2:01:13:fd:18:49:30:f2:
62:b8:f2:11:0c:79:10:bd:33:0d:20:92:3a:aa:5f:
1f:6e:65:d0:b8:60:ab:5d:2e:95:b4:49:20:11:14:
b2:05:02:f0:f0:e4:1a:a7:15:60:fd:32:c0:29:de:
48:1a:ed:96:89:b4:56:18:71:74:f6:55:26:6f:b3:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:73:59:08:76:03:5B:7B:43:D2:C4:24:14:CF:74:25:21:B1:E9:B3
X509v3 Authority Key Identifier:
keyid:8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d6:a0:4b:95:b1:30:60:91:d2:33:79:b5:d0:88:02:f1:44:
22:ab:17:81:a0:69:e3:d0:0f:55:b3:e7:14:05:04:66:27:e1:
2e:2e:98:ac:7c:8a:39:ad:f5:7a:86:3b:d9:c8:bd:4e:37:b6:
37:2b:e7:39:eb:e9:cf:33:d4:7f:27:04:d3:f4:c2:b9:76:a4:
30:13:a4:eb:96:7c:67:07:4f:24:bf:19:d0:b3:f6:66:0d:c4:
8e:75:1c:36:e6:b6:4e:0e:a3:50:fb:c8:d1:fd:c1:26:f7:ef:
20:cf:1e:38:12:3d:15:43:1f:d5:c7:20:3c:d2:9a:3c:eb:53:
77:f6:cc:15:51:f0:07:4f:40:41:f7:61:ad:f3:f2:26:0d:85:
92:99:18:1a:fc:1a:b4:85:e3:f8:2b:d6:d6:c0:1b:eb:f2:f8:
c7:5c:98:a8:df:1c:e2:21:23:2e:94:48:58:bd:aa:97:6f:bb:
43:3a:bf:5c:e4:0f:76:57:20:51:c3:22:c4:9e:26:4c:15:58:
c7:89:6e:b5:0e:d7:dd:6d:a2:4a:c3:3c:c7:45:5b:37:34:a0:
af:2d:35:65:f4:95:07:87:42:ee:a2:72:77:f4:17:d8:92:cd:
a4:9f:72:d5:70:77:27:7a:04:cc:a3:d3:b3:5b:fc:95:47:90:
f8:8e:97:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu5WsjvopJ/+mUqI2xSkxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYjYyMGE0ODM4ZWY2ZTIxYmNjMjZhZDM1MTI2MmQ3NTY2
ZWIyNzUwHhcNMjUwODIzMDcwMTM3WhcNMjUwODI0MDcwMTM3WjAzMTEwLwYDVQQD
EyhjMDczNTkwODc2MDM1YjdiNDNkMmM0MjQxNGNmNzQyNTIxYjFlOWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPohSUQeauJQ/r4Cs4Liu0pVZ8nU
gieCokHb3KVlb4Er1oY8jb90t7nZV9L9KqqfSV2OiM4HjTO+fHK/IIlbr6NKhIhs
JeB0liKwluyQn4KvW0pNR1xSGotrBwf8Aygx6wfRDQtsWiAlmCjHs3UI2XqUhB4n
koLYaPK/IvEKiMi80iWvrUTupGI9SfaD1u5aSVsunnLVfx2YZTTgQrhTXQhL41ji
4QCaLbY8FZVNPO4Ej6oyjwdJrZl10gET/RhJMPJiuPIRDHkQvTMNIJI6ql8fbmXQ
uGCrXS6VtEkgERSyBQLw8OQapxVg/TLAKd5IGu2WibRWGHF09lUmb7NHvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBzWQh2A1t7Q9LEJBTPdCUhsemzMB8GA1UdIwQY
MBaAFI+2IKSDjvbiG8wmrTUSYtdWbrJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajdZZ3BJT085dUliekNhdE5SSmkxMVp1c25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lYzM1MTItNzFiYS00NDFlLWJmZTEt
ZGE3ZDQ1YjczMmZhLzEvajdZZ3BJT085dUliekNhdE5SSmkxMVp1c25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lYzM1MTItNzFiYS00NDFlLWJmZTEtZGE3ZDQ1YjczMmZh
LzEvajdZZ3BJT085dUliekNhdE5SSmkxMVp1c25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxtagS5Wx
MGCR0jN5tdCIAvFEIqsXgaBp49APVbPnFAUEZifhLi6YrHyKOa31eoY72ci9Tje2
NyvnOevpzzPUfycE0/TCuXakMBOk65Z8ZwdPJL8Z0LP2Zg3EjnUcNua2Tg6jUPvI
0f3BJvfvIM8eOBI9FUMf1ccgPNKaPOtTd/bMFVHwB09AQfdhrfPyJg2FkpkYGvwa
tIXj+CvW1sAb6/L4x1yYqN8c4iEjLpRIWL2ql2+7Qzq/XOQPdlcgUcMixJ4mTBVY
x4lutQ7X3W2iSsM8x0VbNzSgry01ZfSVB4dC7qJyd/QX2JLNpJ9y1XB3J3oEzKPT
s1v8lUeQ+I6XXA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:43 2025 by rpki-client