Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json)
Hash identifier: perRgRHCqQItXN8AoZ/VyvifbyK1Qc99h4wzwRgax9M=
Subject key identifier: 93:36:DF:21:BD:B9:C2:14:21:B1:32:CD:E7:2E:86:C8:43:51:2F:81
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial: 0198D4A7E7192A6EF6D5882E57B4781A56F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 02:00:30 +0000
Manifest this update: Sat 23 Aug 2025 02:00:30 +0000
Manifest next update: Sun 24 Aug 2025 02:00:30 +0000
Files and hashes: 1: KuITA8F2JpisQKF630WYOsFc4wk.roa (hash: bB2rOvgz8hjIMe852Fv1qtbwAzNh+J9BjKdpPYjEPmg=)
2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: y5PwJ8NcvVk7ioOU61JMZ1/RPvftGBklpFrXXRDE870=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e7:19:2a:6e:f6:d5:88:2e:57:b4:78:1a:56:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Validity
Not Before: Aug 23 02:00:30 2025 GMT
Not After : Aug 24 02:00:30 2025 GMT
Subject: CN=9336df21bdb9c21421b132cde72e86c843512f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:34:3e:3d:3b:aa:d9:69:fb:0a:c1:11:a4:
c7:c2:53:66:69:a3:94:a1:2f:fd:69:2c:f4:28:a9:
d4:99:cd:a3:87:52:d0:20:6a:17:f5:70:ae:0f:d2:
bb:bd:a3:10:e8:ec:3e:e1:12:af:bb:da:48:21:76:
ef:6c:9d:e0:17:06:cc:95:bf:5e:5b:65:34:c6:8f:
ed:22:db:71:29:3e:01:57:f8:e1:fb:d6:66:a5:02:
49:ad:67:b5:32:2e:ca:6f:ef:be:b1:4d:cd:20:9e:
91:f3:22:ff:8a:de:37:64:fc:1e:ac:d0:86:5c:d0:
9e:44:09:0b:1d:73:37:4b:bc:a6:c9:b9:c8:f9:26:
1d:bd:b0:af:a6:a9:8f:76:23:46:61:5e:c3:9f:9b:
79:6a:b3:78:b6:00:89:44:0c:5c:ee:76:21:56:46:
8f:fc:9f:fb:26:d5:6c:59:a1:e5:eb:e2:67:2e:59:
31:07:9f:99:e5:76:16:71:2a:ee:2c:46:73:d7:4b:
ea:6a:5c:52:82:db:90:77:78:e6:72:c5:a7:c7:b3:
32:4d:5e:e8:47:50:54:a4:dd:0d:e7:25:9f:2e:33:
f8:c2:7e:e3:62:56:74:49:33:fe:72:40:14:13:f1:
05:0b:c9:7d:1c:17:4d:c3:ed:00:63:4f:6e:b6:f0:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:36:DF:21:BD:B9:C2:14:21:B1:32:CD:E7:2E:86:C8:43:51:2F:81
X509v3 Authority Key Identifier:
keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ae:f2:f6:5b:3d:af:a3:d3:c5:4a:03:13:01:77:fc:91:07:
59:04:f3:e2:4d:4a:86:36:36:03:bf:dd:73:08:8e:b9:14:79:
23:09:fd:56:e7:60:98:d6:41:9e:d8:e8:5c:bd:94:db:58:9a:
a5:e9:43:67:f9:32:46:a1:3c:77:86:32:08:2d:c9:9e:19:17:
7e:0c:1d:ce:1b:95:86:ab:87:7f:63:eb:b2:2d:79:13:c2:44:
46:1d:8d:27:71:62:19:87:57:a9:58:43:d7:3d:22:a1:d6:ed:
eb:69:04:09:31:b6:9d:84:3b:e6:e1:f3:97:fd:d9:55:48:fb:
6c:2c:86:63:fd:59:1e:6c:60:fa:4e:71:a1:9e:e9:55:4c:23:
05:ed:59:d0:5a:eb:27:24:34:a3:56:e5:68:3c:18:e0:e7:7f:
99:da:90:ba:02:6b:f3:9c:b9:6f:78:ce:3c:21:b0:4f:f1:68:
b8:8e:2c:30:e9:2e:67:89:95:dd:bd:8a:b6:19:51:68:ab:fd:
a7:db:fc:43:e0:93:e7:a8:ef:3d:e8:0b:c3:1c:d6:59:ac:e9:
a9:b9:10:df:1c:ca:8f:95:e3:19:26:7d:bc:8f:11:12:87:ec:
00:6c:18:f4:bd:b2:1e:94:4b:57:5a:a8:0b:4a:e5:2c:e9:ac:
cb:6d:7a:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp+cZKm721YguV7R4Glb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzFmZGJhZjlhYzBlNWFkZWVjNjBhMDkyM2M0ZGQ0YTAx
ZTkyZGMwHhcNMjUwODIzMDIwMDMwWhcNMjUwODI0MDIwMDMwWjAzMTEwLwYDVQQD
Eyg5MzM2ZGYyMWJkYjljMjE0MjFiMTMyY2RlNzJlODZjODQzNTEyZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvik0Pj07qtlp+wrBEaTHwlNmaaOU
oS/9aSz0KKnUmc2jh1LQIGoX9XCuD9K7vaMQ6Ow+4RKvu9pIIXbvbJ3gFwbMlb9e
W2U0xo/tIttxKT4BV/jh+9ZmpQJJrWe1Mi7Kb+++sU3NIJ6R8yL/it43ZPwerNCG
XNCeRAkLHXM3S7ymybnI+SYdvbCvpqmPdiNGYV7Dn5t5arN4tgCJRAxc7nYhVkaP
/J/7JtVsWaHl6+JnLlkxB5+Z5XYWcSruLEZz10vqalxSgtuQd3jmcsWnx7MyTV7o
R1BUpN0N5yWfLjP4wn7jYlZ0STP+ckAUE/EFC8l9HBdNw+0AY09utvBhrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJM23yG9ucIUIbEyzecuhshDUS+BMB8GA1UdIwQY
MBaAFMfB/br5rA5a3uxgoJI8TdSgHpLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjkt
ZjAwMjk4MTYwOTdlLzEveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjktZjAwMjk4MTYwOTdl
LzEveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKq7y9ls9
r6PTxUoDEwF3/JEHWQTz4k1KhjY2A7/dcwiOuRR5Iwn9VudgmNZBntjoXL2U21ia
pelDZ/kyRqE8d4YyCC3JnhkXfgwdzhuVhquHf2Prsi15E8JERh2NJ3FiGYdXqVhD
1z0iodbt62kECTG2nYQ75uHzl/3ZVUj7bCyGY/1ZHmxg+k5xoZ7pVUwjBe1Z0Frr
JyQ0o1blaDwY4Od/mdqQugJr85y5b3jOPCGwT/FouI4sMOkuZ4mV3b2KthlRaKv9
p9v8Q+CT56jvPegLwxzWWazpqbkQ3xzKj5XjGSZ9vI8REofsAGwY9L2yHpRLV1qo
C0rlLOmsy216MA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:25 2025 by rpki-client