Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: qEnvuu+w6Erw+G5e/I11mHOMOXhVo8qxQL8oVg/tYAc=
Subject key identifier: EC:B5:AA:56:FB:5F:41:21:CE:3D:65:F2:4E:13:71:BF:C6:2C:FF:6C
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 0198D4A7F1568A7DA61AED21E4C66EE0CF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:32 +0000
Manifest this update: Sat 23 Aug 2025 02:00:32 +0000
Manifest next update: Sun 24 Aug 2025 02:00:32 +0000
Files and hashes: 1: Jo8Y435n3Pd_3zXxNtedYgjItDk.roa (hash: s59FKEp30KDhXVkiZy91uysMmddt+n0/jacR5LsK5DU=)
2: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: PeLxaccto3UAUzGROH0JuQBu25fbDow8DgTNQPvah/Y=)
3: fvocZOR5mjQw63-hlnTV0AYJ-n0.roa (hash: EDtt1bNtketuScVPOmt7fRRKZDdXsTL+CjwO3mYdaKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f1:56:8a:7d:a6:1a:ed:21:e4:c6:6e:e0:cf:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Aug 23 02:00:32 2025 GMT
Not After : Aug 24 02:00:32 2025 GMT
Subject: CN=ecb5aa56fb5f4121ce3d65f24e1371bfc62cff6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:b0:0d:21:55:47:80:9d:a0:65:5e:fb:98:
9d:c7:85:59:78:fd:9c:2f:56:a8:80:c9:81:fa:7c:
22:ca:14:4d:ea:6f:de:0e:39:21:13:7a:b4:f7:17:
45:2f:31:87:a5:c2:2d:a1:e0:b0:c9:b2:a9:d6:fe:
ca:65:77:8d:0b:96:92:ef:2f:78:7c:87:a2:4b:a1:
1f:d8:f6:aa:68:0a:75:52:f0:58:43:9f:c4:30:e8:
b0:5e:4c:e9:88:1a:3e:db:e1:03:9b:6b:86:99:93:
48:b3:c6:e8:d2:6e:65:6e:04:d5:8a:7b:77:19:dd:
e1:47:d4:e6:dd:0a:54:ad:67:37:ec:4a:fd:97:3c:
71:6c:3f:95:00:14:4a:ef:59:89:95:a1:14:ee:ab:
bc:7e:2f:68:d4:f8:b0:31:de:29:62:ec:49:9c:d6:
1b:d9:19:77:3e:cd:47:92:b8:e8:d1:cc:38:30:79:
44:17:1d:f5:e3:84:e7:f2:e9:47:1f:df:8a:e3:f3:
d0:e5:a0:ce:ca:b5:48:d7:e5:55:df:d1:f1:c0:13:
aa:cd:ea:41:95:89:b1:68:5c:55:32:65:f9:bc:82:
99:48:1c:10:19:53:8e:61:c1:a9:0c:a9:36:bd:f4:
5a:15:0d:5f:76:48:c8:18:d4:95:34:3b:4a:a4:aa:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B5:AA:56:FB:5F:41:21:CE:3D:65:F2:4E:13:71:BF:C6:2C:FF:6C
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:95:33:ca:30:bb:b8:0a:e9:0e:d7:62:38:43:d1:a0:a7:d3:
06:c5:44:7e:b4:bb:31:f8:e9:40:4b:74:d7:1d:72:d0:43:95:
aa:2e:5a:1d:a0:1c:1e:46:a2:bb:41:c2:59:af:0d:87:a2:1b:
26:b3:d8:0f:a6:40:4a:e5:68:87:53:66:16:3b:38:d9:25:f6:
9e:8a:ed:2f:bd:03:19:fa:a1:d5:47:df:55:a6:76:f6:8b:f8:
20:58:b2:b8:a3:20:5f:50:37:c7:88:19:9a:5f:90:1f:ff:d5:
06:12:e4:57:e5:e7:f5:9a:cf:67:18:18:07:6d:cc:4f:f6:7b:
7e:c2:a3:25:be:19:04:3e:53:0d:15:0e:73:ad:64:10:e2:48:
96:6a:00:fa:61:97:a2:bc:65:85:7a:88:c6:4e:72:ed:35:d3:
05:cb:5a:ad:6c:78:ad:9d:51:9d:c3:b2:a1:7f:84:ba:1e:cc:
96:83:06:25:e2:fb:96:2e:e7:d0:4d:c6:9b:22:3f:21:2c:d1:
44:0c:de:41:be:5d:7c:f7:89:11:ef:16:93:17:cd:c2:6f:cf:
58:62:ea:af:28:8d:0d:16:8a:b3:ad:b1:96:36:5e:8c:0d:9d:
1c:13:9d:e5:1e:17:a0:74:e9:0d:ce:c6:42:b8:73:ae:f0:a5:
e9:9f:3a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp/FWin2mGu0h5MZu4M9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZGU3MDdkNmMwMTAwNmIyYWNhNjg3ZWFhYjI5Y2I0NzM2
Yjc2NjgwHhcNMjUwODIzMDIwMDMyWhcNMjUwODI0MDIwMDMyWjAzMTEwLwYDVQQD
EyhlY2I1YWE1NmZiNWY0MTIxY2UzZDY1ZjI0ZTEzNzFiZmM2MmNmZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSqwDSFVR4CdoGVe+5idx4VZeP2c
L1aogMmB+nwiyhRN6m/eDjkhE3q09xdFLzGHpcItoeCwybKp1v7KZXeNC5aS7y94
fIeiS6Ef2PaqaAp1UvBYQ5/EMOiwXkzpiBo+2+EDm2uGmZNIs8bo0m5lbgTVint3
Gd3hR9Tm3QpUrWc37Er9lzxxbD+VABRK71mJlaEU7qu8fi9o1PiwMd4pYuxJnNYb
2Rl3Ps1Hkrjo0cw4MHlEFx3144Tn8ulHH9+K4/PQ5aDOyrVI1+VV39HxwBOqzepB
lYmxaFxVMmX5vIKZSBwQGVOOYcGpDKk2vfRaFQ1fdkjIGNSVNDtKpKqexQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOy1qlb7X0Ehzj1l8k4Tcb/GLP9sMB8GA1UdIwQY
MBaAFHDecH1sAQBrKspofqqynLRza3ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQt
MThlNWM1MzdkNTFkLzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQtMThlNWM1MzdkNTFk
LzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppUzyjC7
uArpDtdiOEPRoKfTBsVEfrS7MfjpQEt01x1y0EOVqi5aHaAcHkaiu0HCWa8Nh6Ib
JrPYD6ZASuVoh1NmFjs42SX2nortL70DGfqh1UffVaZ29ov4IFiyuKMgX1A3x4gZ
ml+QH//VBhLkV+Xn9ZrPZxgYB23MT/Z7fsKjJb4ZBD5TDRUOc61kEOJIlmoA+mGX
orxlhXqIxk5y7TXTBctarWx4rZ1RncOyoX+Euh7MloMGJeL7li7n0E3GmyI/ISzR
RAzeQb5dfPeJEe8WkxfNwm/PWGLqryiNDRaKs62xljZejA2dHBOd5R4XoHTpDc7G
QrhzrvCl6Z86Dg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:20 2025 by rpki-client