Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
File: SU0Or4AlCrgkiYm-caQDlxjWk1o.mft (raw, json)
Hash identifier: 4GPT3G2u1QD6G27tMZazmhfZj4cFRHymi5aP98pszd0=
Subject key identifier: C5:BC:A9:D1:12:2E:03:3A:D1:06:83:BB:70:48:97:63:B0:E2:BF:77
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 0198D473EC5909817BA7C8B1C4B2417B6FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:03:43 +0000
Manifest this update: Sat 23 Aug 2025 01:03:43 +0000
Manifest next update: Sun 24 Aug 2025 01:03:43 +0000
Files and hashes: 1: Ad7sRIt_14WqsoXSVJnhtt5pR6I.roa (hash: d1H2UkdaZjL8z/VCs5Y8T9oYvq5D7T8CQrV9qDD8uXE=)
2: SU0Or4AlCrgkiYm-caQDlxjWk1o.crl (hash: oFaFMm87khPTV8zlGAGdV4hIqaSATnKnTNIn1BJDAC4=)
3: fbnqy98yfE_Lzn_9R-s84dMZn3s.roa (hash: RB1a5+/ABy4Ucs2InLVoqKGALjdVGmuLcFN8wD1kPqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ec:59:09:81:7b:a7:c8:b1:c4:b2:41:7b:6f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: Aug 23 01:03:43 2025 GMT
Not After : Aug 24 01:03:43 2025 GMT
Subject: CN=c5bca9d1122e033ad10683bb70489763b0e2bf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:ec:3a:60:57:7b:2d:d3:4b:d3:d3:19:0d:
06:65:9a:b3:1c:c7:c5:b8:60:ea:42:b2:16:9a:b7:
a3:e0:d7:24:57:94:9f:7f:85:f1:89:fc:4f:06:a5:
fa:02:52:96:f9:09:7a:94:8b:07:dd:6a:66:e4:83:
a1:79:87:1f:9d:fc:7d:f4:00:ba:17:d8:07:28:ca:
a2:7f:d1:75:aa:84:bd:40:df:2b:4e:d2:2c:6f:e4:
c5:7a:82:95:ce:7d:a7:ed:7d:c6:d7:7f:99:13:57:
10:fa:75:f8:e0:26:c0:3c:18:f1:1a:e5:82:f8:d5:
e3:b8:66:6a:4c:25:81:d5:5a:c8:0d:d8:fc:51:35:
39:2c:ed:f2:4d:d3:61:e2:f6:35:34:5f:75:40:1b:
9c:5f:0b:dd:a6:04:43:b9:24:e2:5e:df:07:9a:e2:
0b:b1:ab:8e:91:8f:d3:e6:7b:ef:7c:bb:7d:ad:dc:
23:1f:57:69:16:d5:03:7a:d6:ee:f4:7a:40:39:34:
f1:de:2b:d0:cb:42:62:c3:ae:7c:db:dc:fe:7d:a4:
2e:bf:3c:9e:4a:62:f7:c1:51:7c:e9:35:2e:b1:8f:
21:41:13:6d:73:cd:9a:97:e7:4b:f5:8e:9d:5e:eb:
66:e7:4c:2f:30:a5:2e:4f:52:e7:a2:75:07:af:c7:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BC:A9:D1:12:2E:03:3A:D1:06:83:BB:70:48:97:63:B0:E2:BF:77
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:18:42:22:63:64:9f:7b:8a:27:17:8c:b5:15:ed:69:26:3a:
54:ff:21:6d:96:09:b7:69:d5:8c:4b:94:9d:5d:97:48:36:2d:
41:62:aa:07:6c:a6:f3:15:2c:80:43:08:eb:06:f7:bd:b2:e6:
98:0e:ec:ec:5f:a2:c0:26:6b:3b:bd:4d:d9:e1:5d:8b:74:ae:
00:f6:1e:5e:03:71:da:e7:cf:e9:06:a4:11:11:3f:d5:f0:c1:
e5:eb:ef:69:da:94:2a:2b:a3:80:1d:29:14:89:76:49:6f:2e:
46:d0:67:95:93:a3:4f:f3:94:62:60:11:2f:ba:08:b4:16:a9:
fe:63:11:7f:31:17:bd:e6:38:93:8b:c1:ac:2f:8e:89:43:79:
4f:f0:1a:7e:a7:44:96:a7:a8:cb:78:a6:15:d1:db:63:a4:2f:
4c:96:cf:8a:93:68:f6:5b:07:f8:0b:eb:82:9f:93:37:6b:85:
d8:eb:1e:c8:26:d3:76:4c:92:dd:8f:c4:64:23:ef:a7:fb:31:
48:05:cb:f3:2e:83:49:b9:61:ba:9a:a6:26:92:a4:99:93:4a:
8d:1b:3e:31:dc:ab:cc:80:65:2b:63:a3:91:e8:83:ad:1a:83:
c2:dc:13:31:95:86:46:fa:21:51:f4:13:e1:11:2c:a1:73:8b:
e7:9a:7a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc+xZCYF7p8ixxLJBe2/ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGQwZWFmODAyNTBhYjgyNDg5ODliZTcxYTQwMzk3MThk
NjkzNWEwHhcNMjUwODIzMDEwMzQzWhcNMjUwODI0MDEwMzQzWjAzMTEwLwYDVQQD
EyhjNWJjYTlkMTEyMmUwMzNhZDEwNjgzYmI3MDQ4OTc2M2IwZTJiZjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTvsOmBXey3TS9PTGQ0GZZqzHMfF
uGDqQrIWmrej4NckV5Sff4XxifxPBqX6AlKW+Ql6lIsH3Wpm5IOheYcfnfx99AC6
F9gHKMqif9F1qoS9QN8rTtIsb+TFeoKVzn2n7X3G13+ZE1cQ+nX44CbAPBjxGuWC
+NXjuGZqTCWB1VrIDdj8UTU5LO3yTdNh4vY1NF91QBucXwvdpgRDuSTiXt8HmuIL
sauOkY/T5nvvfLt9rdwjH1dpFtUDetbu9HpAOTTx3ivQy0Jiw65829z+faQuvzye
SmL3wVF86TUusY8hQRNtc82al+dL9Y6dXutm50wvMKUuT1LnonUHr8eoiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMW8qdESLgM60QaDu3BIl2Ow4r93MB8GA1UdIwQY
MBaAFElNDq+AJQq4JImJvnGkA5cY1pNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1UwT3I0QWxDcmdraVltLWNhUURseGpXazFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODg1NTUtYWJiNy00YjEwLWFiNjQt
MTljNTQyN2U0MTZmLzEvU1UwT3I0QWxDcmdraVltLWNhUURseGpXazFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jODg1NTUtYWJiNy00YjEwLWFiNjQtMTljNTQyN2U0MTZm
LzEvU1UwT3I0QWxDcmdraVltLWNhUURseGpXazFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxhCImNk
n3uKJxeMtRXtaSY6VP8hbZYJt2nVjEuUnV2XSDYtQWKqB2ym8xUsgEMI6wb3vbLm
mA7s7F+iwCZrO71N2eFdi3SuAPYeXgNx2ufP6QakERE/1fDB5evvadqUKiujgB0p
FIl2SW8uRtBnlZOjT/OUYmARL7oItBap/mMRfzEXveY4k4vBrC+OiUN5T/AafqdE
lqeoy3imFdHbY6QvTJbPipNo9lsH+Avrgp+TN2uF2OseyCbTdkyS3Y/EZCPvp/sx
SAXL8y6DSblhupqmJpKkmZNKjRs+MdyrzIBlK2OjkeiDrRqDwtwTMZWGRvohUfQT
4REsoXOL55p61Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:16 2025 by rpki-client