Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: ito+jW4ljc2+OWFzetKwN36OAN4TmdAAOY7uQAl4cmI=
Subject key identifier: 47:BB:DF:A8:1A:23:F2:FD:CA:A1:54:54:30:69:64:94:AC:6E:7B:E6
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 0198D73BCB74D30D3D9D9800CD646AED0FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 14:01:16 +0000
Manifest this update: Sat 23 Aug 2025 14:01:16 +0000
Manifest next update: Sun 24 Aug 2025 14:01:16 +0000
Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: EtvWG62jQgBcJshbOcaM3vwaro38zRP15XdlTDMSyWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:cb:74:d3:0d:3d:9d:98:00:cd:64:6a:ed:0f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Aug 23 14:01:16 2025 GMT
Not After : Aug 24 14:01:16 2025 GMT
Subject: CN=47bbdfa81a23f2fdcaa1545430696494ac6e7be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:ac:bf:56:84:42:7e:c8:e7:ea:fc:6c:d6:
19:ec:9e:34:88:4b:4d:44:9a:21:1b:24:5f:cb:ce:
e5:f9:e5:78:b8:ea:ed:c5:6a:b2:a8:f4:1b:21:ba:
11:72:4b:26:71:fd:e6:24:b5:e5:a5:bc:f2:0e:f7:
62:a3:53:fa:5f:89:d4:82:cb:11:e3:8a:10:b9:73:
f8:29:11:7a:da:c5:2a:69:76:51:be:93:d8:c7:be:
66:8a:63:ee:fb:4d:57:23:da:63:10:fe:be:b6:94:
ba:36:30:fc:cd:9b:81:0c:54:ba:1d:de:92:21:cf:
ba:e8:c8:85:cd:fd:62:9f:87:4e:d2:a0:79:25:67:
f7:ac:fe:64:a5:a5:81:56:69:a0:58:76:be:a7:01:
61:15:f1:c4:c7:f6:c5:b0:37:44:eb:3d:b3:d0:62:
25:80:75:0a:63:e5:98:e8:fd:e9:a3:87:c2:fe:75:
c9:00:52:6f:99:1d:12:bc:77:98:6c:a4:61:08:77:
15:6c:e0:72:9b:ee:ab:71:4f:72:db:c2:11:fb:ce:
39:5f:a1:0d:d2:e5:9e:cf:3f:fd:4c:7d:c6:65:20:
d2:61:a7:29:32:67:b7:b2:03:9e:a6:be:8d:14:15:
57:7e:5e:1f:a6:be:8e:ab:e5:bc:f1:b0:8a:d7:49:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:DF:A8:1A:23:F2:FD:CA:A1:54:54:30:69:64:94:AC:6E:7B:E6
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:06:0f:0a:c5:c0:a5:04:6e:d3:33:2c:5a:d9:76:ac:7c:13:
cd:55:87:52:9b:51:bd:23:d0:fe:aa:0a:ce:b8:ee:13:38:b9:
3d:6a:32:9a:15:8c:be:c5:c6:74:02:1f:07:42:29:d7:64:b5:
40:cb:a8:36:4e:4a:cf:3e:7f:f8:03:4e:65:33:33:ca:cc:df:
7f:b6:34:37:48:7d:c5:49:cd:90:01:5f:93:63:be:ab:1b:a1:
75:86:43:fb:18:ca:65:f0:4f:73:04:37:9c:a3:a0:ca:cd:26:
6e:ec:4c:bc:fb:b6:3c:f3:09:fc:f8:97:87:6c:58:f7:63:23:
1f:1a:10:b0:74:6b:51:96:18:91:f5:91:5e:d5:ce:f5:d4:92:
c8:c7:9d:cd:76:16:e0:14:87:2e:7d:17:4e:61:37:cf:cb:8d:
f3:1b:8b:20:b0:2a:63:72:a8:be:6e:aa:84:4b:af:4f:a2:16:
fb:97:7e:1c:9d:21:c0:65:6d:8a:4d:1c:43:af:ac:11:da:88:
92:62:82:99:31:b7:65:c6:49:d9:16:43:86:b8:2a:e8:a4:a3:
9c:a6:3b:0e:72:9e:27:6b:73:ab:dc:e2:a6:e3:17:bd:97:26:
b5:df:2d:4e:02:e5:de:80:44:d2:f4:dd:92:e0:8f:69:dc:2b:
25:ae:1a:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO8t00w09nZgAzWRq7Q/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MDdjN2I4OTY1NmRkMzM5Y2I5OGZiN2MyYjAzNzFjNTky
NmE2NDEwHhcNMjUwODIzMTQwMTE2WhcNMjUwODI0MTQwMTE2WjAzMTEwLwYDVQQD
Eyg0N2JiZGZhODFhMjNmMmZkY2FhMTU0NTQzMDY5NjQ5NGFjNmU3YmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5esv1aEQn7I5+r8bNYZ7J40iEtN
RJohGyRfy87l+eV4uOrtxWqyqPQbIboRcksmcf3mJLXlpbzyDvdio1P6X4nUgssR
44oQuXP4KRF62sUqaXZRvpPYx75mimPu+01XI9pjEP6+tpS6NjD8zZuBDFS6Hd6S
Ic+66MiFzf1in4dO0qB5JWf3rP5kpaWBVmmgWHa+pwFhFfHEx/bFsDdE6z2z0GIl
gHUKY+WY6P3po4fC/nXJAFJvmR0SvHeYbKRhCHcVbOBym+6rcU9y28IR+845X6EN
0uWezz/9TH3GZSDSYacpMme3sgOepr6NFBVXfl4fpr6Oq+W88bCK10locQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe736gaI/L9yqFUVDBpZJSsbnvmMB8GA1UdIwQY
MBaAFJkHx7iWVt0znLmPt8KwNxxZJqZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZGQyODktNmNiNS00MzcxLTg0NmMt
OTNkZWM3MzVmNzE3LzEvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83ZGQyODktNmNiNS00MzcxLTg0NmMtOTNkZWM3MzVmNzE3
LzEvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwYPCsXA
pQRu0zMsWtl2rHwTzVWHUptRvSPQ/qoKzrjuEzi5PWoymhWMvsXGdAIfB0Ip12S1
QMuoNk5Kzz5/+ANOZTMzyszff7Y0N0h9xUnNkAFfk2O+qxuhdYZD+xjKZfBPcwQ3
nKOgys0mbuxMvPu2PPMJ/PiXh2xY92MjHxoQsHRrUZYYkfWRXtXO9dSSyMedzXYW
4BSHLn0XTmE3z8uN8xuLILAqY3Kovm6qhEuvT6IW+5d+HJ0hwGVtik0cQ6+sEdqI
kmKCmTG3ZcZJ2RZDhrgq6KSjnKY7DnKeJ2tzq9zipuMXvZcmtd8tTgLl3oBE0vTd
kuCPadwrJa4aXw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:34 2025 by rpki-client