Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
File: fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json)
Hash identifier: ovuMK9C34KxR0J0u3xsueddabiKyHkBYVsR/2xNkz28=
Subject key identifier: 29:93:31:40:10:22:C4:E9:04:8D:B9:6D:41:43:76:F6:AF:9E:C4:63
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 0198D4E02F6BA93CDDC15768308994E36943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: M3Ha07iuSnJt99v-sGLNUx8BBLI.roa (hash: IIpH3NsZ7PItLDv9GEILJ6qdrVTgVESMLfrKLW1hfuA=)
2: RP3f5WWvkrYQJc7jqMUs8Y1XTtU.roa (hash: hk9tzETRgkzSw8scjlpsIlP6fKBNwXAqFAfpPNKquL8=)
3: SinlQ5z34pUrW8vj7b8roBMhucc.roa (hash: l2JuiUg6/TaOO5OR8orwqynZnR5QYj967JWl5ck7FYw=)
4: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: FsIbHlm1MvCoRPTuMPpS2dsQLKZc97sNd0gzryGauZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2f:6b:a9:3c:dd:c1:57:68:30:89:94:e3:69:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=299331401022c4e9048db96d414376f6af9ec463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:65:88:09:d4:65:64:13:5d:90:ca:d7:a7:
c7:c3:93:5f:79:e2:de:97:82:1e:aa:4c:16:42:4a:
e6:95:ea:17:51:aa:8d:1c:57:8b:ef:c0:44:0a:58:
c2:cf:e4:68:69:5e:8a:2b:48:34:10:39:b9:d9:b2:
0a:20:44:dd:44:a0:d0:85:89:c0:8d:e3:05:4f:ad:
d5:e2:de:b8:45:4d:2a:e4:d3:11:d9:2d:89:5f:b3:
7b:8a:fa:f3:df:c0:30:19:7d:5e:73:7f:61:29:0b:
61:c8:6f:11:a3:26:14:dd:dc:47:76:82:7d:06:37:
c8:b5:82:02:2a:6c:bf:a6:fb:19:96:df:b6:c4:91:
90:04:61:59:fd:e6:1e:5a:9a:7a:e6:d8:00:e8:cb:
f8:d2:a6:99:c9:90:72:0c:bc:92:31:22:0f:d4:c6:
25:ec:a7:91:6f:f2:a3:c0:be:bc:06:d3:b5:95:ca:
33:c5:d2:d4:d6:45:cd:9d:dc:94:9c:92:88:d3:6f:
c4:25:e7:f6:bb:e6:62:a2:88:a7:2e:60:56:47:56:
09:e3:23:0e:c5:d3:91:68:9d:c0:84:78:13:fd:b7:
e0:fc:bc:3c:9b:93:f6:4d:2a:88:e1:f0:da:2f:d5:
ab:03:79:8a:8a:3e:33:26:88:61:58:5d:98:54:c4:
71:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:93:31:40:10:22:C4:E9:04:8D:B9:6D:41:43:76:F6:AF:9E:C4:63
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d0:b0:05:ac:ab:b5:11:b1:93:aa:4b:3c:36:b3:2c:ca:e9:
dc:cf:e6:d3:ba:6e:30:f6:43:26:37:91:d1:8a:b2:00:6a:83:
94:16:0f:51:b8:a2:26:89:cf:bd:04:51:75:5a:37:9e:c2:b4:
44:54:7f:e7:f2:73:63:af:fb:d2:97:71:c3:6d:31:ea:cc:06:
f1:3b:a4:0a:bf:58:cc:03:cb:17:46:db:fa:c9:14:ea:67:92:
32:9e:a4:43:fd:43:af:cc:f5:a2:69:f5:16:18:a0:23:b2:6a:
cd:5a:11:76:13:53:2b:36:94:a2:30:e9:5e:3e:ec:da:a3:e9:
59:53:07:46:43:1c:ac:89:07:e7:76:cd:bf:66:b6:6a:db:99:
39:d7:2a:69:be:7f:e0:f1:1f:12:a0:5c:cd:c6:f4:0a:51:d9:
aa:75:a7:8a:3f:b0:99:36:26:2d:44:36:25:d8:12:2a:57:d0:
cc:90:ca:db:c3:ec:92:46:4f:d6:dc:9c:80:3f:00:04:cd:e0:
20:cf:44:6f:b9:8c:16:36:d3:4d:e5:23:ce:c6:67:53:d7:87:
c8:8f:40:8f:77:1f:6e:39:50:34:a1:98:f1:ae:dc:07:3d:55:
cf:63:ae:c5:81:51:85:84:01:58:e2:20:c2:63:85:21:3d:6f:
d7:d3:07:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4C9rqTzdwVdoMImU42lDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmNiM2QwYTY0MTc2OWM3ODAxYzQ4MTYxMjAxNWMyY2Ni
M2I2NTUwHhcNMjUwODIzMDMwMTU4WhcNMjUwODI0MDMwMTU4WjAzMTEwLwYDVQQD
EygyOTkzMzE0MDEwMjJjNGU5MDQ4ZGI5NmQ0MTQzNzZmNmFmOWVjNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VZliAnUZWQTXZDK16fHw5NfeeLe
l4IeqkwWQkrmleoXUaqNHFeL78BECljCz+RoaV6KK0g0EDm52bIKIETdRKDQhYnA
jeMFT63V4t64RU0q5NMR2S2JX7N7ivrz38AwGX1ec39hKQthyG8RoyYU3dxHdoJ9
BjfItYICKmy/pvsZlt+2xJGQBGFZ/eYeWpp65tgA6Mv40qaZyZByDLySMSIP1MYl
7KeRb/KjwL68BtO1lcozxdLU1kXNndyUnJKI02/EJef2u+ZiooinLmBWR1YJ4yMO
xdORaJ3AhHgT/bfg/Lw8m5P2TSqI4fDaL9WrA3mKij4zJohhWF2YVMRxNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmTMUAQIsTpBI25bUFDdvavnsRjMB8GA1UdIwQY
MBaAFH4ss9CmQXaceAHEgWEgFcLMs7ZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUt
ZjViYjI4NDNjODllLzEvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUtZjViYjI4NDNjODll
LzEvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitCwBayr
tRGxk6pLPDazLMrp3M/m07puMPZDJjeR0YqyAGqDlBYPUbiiJonPvQRRdVo3nsK0
RFR/5/JzY6/70pdxw20x6swG8TukCr9YzAPLF0bb+skU6meSMp6kQ/1Dr8z1omn1
FhigI7JqzVoRdhNTKzaUojDpXj7s2qPpWVMHRkMcrIkH53bNv2a2atuZOdcqab5/
4PEfEqBczcb0ClHZqnWnij+wmTYmLUQ2JdgSKlfQzJDK28PskkZP1tycgD8ABM3g
IM9Eb7mMFjbTTeUjzsZnU9eHyI9Aj3cfbjlQNKGY8a7cBz1Vz2OuxYFRhYQBWOIg
wmOFIT1v19MHmw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:37 2025 by rpki-client