Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
File: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json)
Hash identifier: vRVeOTPk0NrB8RWpphEitEzqiogtENwt6OuP0aDXpVk=
Subject key identifier: D7:01:08:1E:58:C9:24:E3:E4:D0:12:F0:85:CD:10:BB:1E:FE:41:31
Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
Certificate issuer: /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Certificate serial: 0198D404DDB4FC655A0C95113080C00187D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
Manifest number: 164A
Signing time: Fri 22 Aug 2025 23:02:25 +0000
Manifest this update: Fri 22 Aug 2025 23:02:25 +0000
Manifest next update: Sat 23 Aug 2025 23:02:25 +0000
Files and hashes: 1: QdWm_iYTkmRwOlae6fa_m0n_xoY.roa (hash: GAwdxYROZcqJfJWKya6QGN1+Dp1F3FkjXyRiudeAVk4=)
2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: CKh0pbRS/3dSGwDr4Pw1M2U1fWAD7hcbPxK6dG2xr+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:dd:b4:fc:65:5a:0c:95:11:30:80:c0:01:87:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Validity
Not Before: Aug 22 23:02:25 2025 GMT
Not After : Aug 23 23:02:25 2025 GMT
Subject: CN=d701081e58c924e3e4d012f085cd10bb1efe4131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:2f:c7:b3:c6:5d:ac:c8:db:25:80:ab:fe:
92:09:db:15:ad:8a:59:a1:33:c6:e2:23:69:24:ca:
65:de:a8:a6:37:ad:8a:06:46:3f:e0:a4:e9:40:9c:
bf:c7:c3:9e:00:84:60:83:3b:3d:b4:9c:23:c7:09:
69:9d:18:be:a8:90:97:44:d8:88:88:6b:2d:a2:ca:
41:ee:31:e6:97:3c:fd:35:2e:4e:e5:d8:b3:2d:be:
71:e7:bf:0f:43:3e:5a:99:c4:0a:f5:d7:65:fe:f0:
98:1c:07:d7:ae:12:79:e5:e3:db:4e:60:eb:f2:dd:
d3:5f:72:ba:37:67:fa:e4:53:c6:cb:5d:4e:17:0d:
2c:fb:64:88:00:14:8a:41:fb:bb:ac:08:6f:0e:5b:
ab:5b:f8:e2:c0:a5:39:39:2b:4d:69:4f:0a:82:37:
9b:5e:9b:10:6c:6e:91:da:be:21:f4:fd:e6:f8:7c:
01:4e:49:ce:3f:47:4f:9b:ec:e8:ab:b2:c3:db:99:
f8:d6:5e:a8:25:74:6b:59:78:0b:b9:fd:d4:dc:73:
78:94:1a:aa:c8:ac:9b:c1:24:8d:de:37:86:b3:96:
ac:c4:0e:cb:b4:c5:78:f3:88:02:a9:2b:d8:4b:65:
92:53:9e:59:1e:94:9b:72:ce:65:83:88:71:ae:dc:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:01:08:1E:58:C9:24:E3:E4:D0:12:F0:85:CD:10:BB:1E:FE:41:31
X509v3 Authority Key Identifier:
keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b3:b1:c2:02:d6:db:b2:5b:a0:96:69:9a:ee:18:0f:41:56:
29:91:64:7e:c3:f4:78:65:43:8b:1d:82:45:e4:d8:39:2e:61:
eb:6f:7a:22:78:db:ba:ef:f6:03:2d:ba:55:e9:c3:ae:b3:eb:
57:7c:95:00:c4:79:87:73:b7:a8:d6:66:52:9a:79:fd:04:c8:
cc:1d:94:d6:78:bb:9b:a8:ca:48:19:3d:f9:d1:aa:1d:aa:fa:
72:84:10:69:de:36:8a:eb:ce:f9:4a:b3:85:c5:5a:67:22:39:
de:4b:2f:10:25:e2:60:cf:25:24:e4:5e:eb:d3:5e:3b:a7:bd:
e1:7f:c8:9e:2a:a0:e5:c6:7c:18:ff:80:92:c3:f2:60:d9:ef:
8a:10:40:ae:b2:34:5a:1b:ef:ab:03:31:1f:42:d4:7f:d6:50:
86:eb:0f:de:26:bf:86:85:9b:7e:51:fc:90:f2:ea:bb:23:ad:
0e:60:55:b3:79:26:8b:7a:d9:42:fc:96:29:ec:40:ca:1d:1f:
7a:ec:f2:c0:8f:cd:45:83:3b:da:99:bf:69:60:b3:85:f0:5b:
77:1d:ec:75:04:54:66:30:fe:f0:0e:1b:09:14:90:e4:45:a5:
28:e5:c8:d8:5e:94:71:dc:5c:5f:bd:bc:b0:be:32:dc:82:10:
16:cd:aa:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBN20/GVaDJURMIDAAYfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MWVjNGU1OGJkNDRlYmFjNzg5NTQ4ZjMxOWU2OWNjOWE1
MzIxMWYwHhcNMjUwODIyMjMwMjI1WhcNMjUwODIzMjMwMjI1WjAzMTEwLwYDVQQD
EyhkNzAxMDgxZTU4YzkyNGUzZTRkMDEyZjA4NWNkMTBiYjFlZmU0MTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUovx7PGXazI2yWAq/6SCdsVrYpZ
oTPG4iNpJMpl3qimN62KBkY/4KTpQJy/x8OeAIRggzs9tJwjxwlpnRi+qJCXRNiI
iGstospB7jHmlzz9NS5O5dizLb5x578PQz5amcQK9ddl/vCYHAfXrhJ55ePbTmDr
8t3TX3K6N2f65FPGy11OFw0s+2SIABSKQfu7rAhvDlurW/jiwKU5OStNaU8Kgjeb
XpsQbG6R2r4h9P3m+HwBTknOP0dPm+zoq7LD25n41l6oJXRrWXgLuf3U3HN4lBqq
yKybwSSN3jeGs5asxA7LtMV484gCqSvYS2WSU55ZHpSbcs5lg4hxrtxZlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcBCB5YySTj5NAS8IXNELse/kExMB8GA1UdIwQY
MBaAFLUexOWL1E66x4lUjzGeacyaUyEfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFI3RTVZdlVUcnJIaVZTUE1aNXB6SnBUSVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jYjg5MzAtYzA2My00MWUyLTgwNWQt
YTdlNGJiNDE1Y2ZlLzEvdFI3RTVZdlVUcnJIaVZTUE1aNXB6SnBUSVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jYjg5MzAtYzA2My00MWUyLTgwNWQtYTdlNGJiNDE1Y2Zl
LzEvdFI3RTVZdlVUcnJIaVZTUE1aNXB6SnBUSVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7OxwgLW
27JboJZpmu4YD0FWKZFkfsP0eGVDix2CReTYOS5h6296Injbuu/2Ay26VenDrrPr
V3yVAMR5h3O3qNZmUpp5/QTIzB2U1ni7m6jKSBk9+dGqHar6coQQad42iuvO+Uqz
hcVaZyI53ksvECXiYM8lJORe69NeO6e94X/Iniqg5cZ8GP+AksPyYNnvihBArrI0
WhvvqwMxH0LUf9ZQhusP3ia/hoWbflH8kPLquyOtDmBVs3kmi3rZQvyWKexAyh0f
euzywI/NRYM72pm/aWCzhfBbdx3sdQRUZjD+8A4bCRSQ5EWlKOXI2F6UcdxcX728
sL4y3IIQFs2qPA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:49 2025 by rpki-client