Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
File: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft (raw, json)
Hash identifier: FPbegVlzmksJqZP7oPZDF9ISwSL8LzqdyffsSFLN3fg=
Subject key identifier: 96:CD:9D:68:47:6C:5F:6C:AB:2F:7E:46:F9:08:F0:59:12:64:D1:AE
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial: 0198D4E0CD474212B126919AE9865AB02A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:38 +0000
Manifest this update: Sat 23 Aug 2025 03:02:38 +0000
Manifest next update: Sun 24 Aug 2025 03:02:38 +0000
Files and hashes: 1: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl (hash: S8hgsOaFajyPsbg3Uouw5ZVjkqf5aZtWftMV5dsHbWo=)
2: T32ivR4pPT16GdJvEk3qcae9a-0.roa (hash: Ar4IuLNK/JbYrWnO/0jZmTGQAGYJO2SXqHxbBEnLR+A=)
3: uXJUN0yqzJ3TaQzP9cjAtVVx7hs.roa (hash: suoYCzad2UWOr/Nnpp8SMjjTemdQYZDDmDi97rBzGqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:cd:47:42:12:b1:26:91:9a:e9:86:5a:b0:2a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Validity
Not Before: Aug 23 03:02:38 2025 GMT
Not After : Aug 24 03:02:38 2025 GMT
Subject: CN=96cd9d68476c5f6cab2f7e46f908f0591264d1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:83:7d:2f:a5:db:fb:ea:50:16:7d:34:7b:
3d:0e:b3:ee:d1:79:de:8c:08:db:ea:18:da:c2:b0:
4a:b8:9f:5d:ba:e8:17:da:85:59:8c:d0:2b:aa:14:
cd:08:d5:e7:91:55:02:dc:e4:7e:0e:d9:d7:15:28:
d2:5d:ba:39:9a:08:8f:af:b4:94:a2:83:71:5c:f9:
3e:b7:39:e6:46:fb:00:cf:2b:dc:69:22:44:33:2a:
93:0e:8b:83:7e:8c:c6:f0:b9:99:85:f2:ed:53:02:
3d:83:9a:ed:7c:85:77:e2:00:42:48:f7:b2:f8:5f:
16:19:5f:36:f9:53:d6:8b:88:8d:b7:4a:80:20:1d:
c2:c3:c7:94:94:00:0b:22:4a:60:c6:e6:86:a5:5d:
12:ec:ec:94:30:d3:89:bd:6f:69:de:f8:80:9e:91:
7f:a0:8e:4e:58:f8:d9:d5:b7:68:aa:e7:3d:69:21:
6c:ac:b8:ef:32:81:a6:1c:d2:de:04:9f:68:9c:6d:
6f:ce:b3:57:26:3e:64:18:b6:af:7d:14:97:5f:e6:
c5:2d:8f:e1:28:0a:e2:6e:42:29:d4:74:9b:8d:94:
58:f7:c4:c8:06:32:e6:44:9e:f4:c8:b6:53:42:9e:
97:51:ec:57:19:90:fd:e4:c3:4d:ec:97:45:7b:99:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CD:9D:68:47:6C:5F:6C:AB:2F:7E:46:F9:08:F0:59:12:64:D1:AE
X509v3 Authority Key Identifier:
keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c1:cf:fc:96:1f:cc:72:e5:d0:e5:c8:86:13:05:c2:3d:46:
d9:f3:86:85:51:69:2d:88:b2:65:49:f6:08:69:10:06:fd:90:
eb:5e:6d:d7:30:b4:d7:f3:a8:b8:6f:7e:07:7e:bb:4d:f4:0e:
2c:8b:5a:8a:35:87:7a:07:90:f1:ec:3c:81:4b:78:d2:87:91:
d5:11:bd:c7:f3:ea:fb:af:5e:a4:78:0b:67:a8:78:7b:5e:11:
7a:7c:03:d7:b4:5c:00:93:ba:bc:f8:17:3f:15:03:53:00:62:
70:dc:57:6b:51:23:ff:c8:cd:4c:0d:d4:6d:9e:3d:18:98:b7:
ff:b0:21:91:2c:89:8d:28:d6:1d:a2:45:b5:2a:58:6c:16:06:
9e:03:cf:49:fc:5c:f5:0a:35:ee:f7:48:c6:d7:ec:d8:d3:7c:
14:b3:c9:6a:16:e5:51:df:bb:a6:69:84:c6:b4:9f:f4:98:61:
a2:d1:ab:9c:42:b6:d2:5f:6b:98:2f:72:2f:f1:f7:3f:9a:66:
fb:c1:f9:8a:3b:2d:f4:67:b3:b2:3a:59:5f:01:e0:16:c6:e0:
1d:5b:24:5f:e1:2d:fe:9c:b4:aa:29:fa:98:dd:b2:c9:b6:58:
4b:86:0c:31:c0:b9:38:3f:c5:45:66:5a:0d:e1:d7:55:13:8f:
27:0e:74:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4M1HQhKxJpGa6YZasCpBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOTQ3YzRmZDIzOTZkOWVkYjhiYzQ1NDQwNWU1NzU1OGQ4
Yjk1MDIwHhcNMjUwODIzMDMwMjM4WhcNMjUwODI0MDMwMjM4WjAzMTEwLwYDVQQD
Eyg5NmNkOWQ2ODQ3NmM1ZjZjYWIyZjdlNDZmOTA4ZjA1OTEyNjRkMWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi6DfS+l2/vqUBZ9NHs9DrPu0Xne
jAjb6hjawrBKuJ9duugX2oVZjNArqhTNCNXnkVUC3OR+DtnXFSjSXbo5mgiPr7SU
ooNxXPk+tznmRvsAzyvcaSJEMyqTDouDfozG8LmZhfLtUwI9g5rtfIV34gBCSPey
+F8WGV82+VPWi4iNt0qAIB3Cw8eUlAALIkpgxuaGpV0S7OyUMNOJvW9p3viAnpF/
oI5OWPjZ1bdoquc9aSFsrLjvMoGmHNLeBJ9onG1vzrNXJj5kGLavfRSXX+bFLY/h
KAribkIp1HSbjZRY98TIBjLmRJ70yLZTQp6XUexXGZD95MNN7JdFe5lESwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbNnWhHbF9sqy9+RvkI8FkSZNGuMB8GA1UdIwQY
MBaAFD+UfE/SOW2e24vEVEBeV1WNi5UCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVSOFQ5STViWjdiaThSVVFGNVhWWTJMbFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOWI0NTAtNzI5ZC00OGRlLWFiOGYt
Y2VjNDBlNDI1MjY0LzEvUDVSOFQ5STViWjdiaThSVVFGNVhWWTJMbFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kOWI0NTAtNzI5ZC00OGRlLWFiOGYtY2VjNDBlNDI1MjY0
LzEvUDVSOFQ5STViWjdiaThSVVFGNVhWWTJMbFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8HP/JYf
zHLl0OXIhhMFwj1G2fOGhVFpLYiyZUn2CGkQBv2Q615t1zC01/OouG9+B367TfQO
LItaijWHegeQ8ew8gUt40oeR1RG9x/Pq+69epHgLZ6h4e14RenwD17RcAJO6vPgX
PxUDUwBicNxXa1Ej/8jNTA3UbZ49GJi3/7AhkSyJjSjWHaJFtSpYbBYGngPPSfxc
9Qo17vdIxtfs2NN8FLPJahblUd+7pmmExrSf9JhhotGrnEK20l9rmC9yL/H3P5pm
+8H5ijst9GezsjpZXwHgFsbgHVskX+Et/py0qin6mN2yybZYS4YMMcC5OD/FRWZa
DeHXVROPJw50RA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:31 2025 by rpki-client