Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
File: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft (raw, json)
Hash identifier: OskNgEQhcjpKFddj3IgGhvZxM4UdNDUw79Yy32/DchQ=
Subject key identifier: 4B:75:A1:B5:7D:2C:52:48:8D:04:2F:F2:05:1A:7B:4B:9B:10:4C:57
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 0198D7A8D8DD209A3D88B765BD888F83A355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
Manifest number: 167F
Signing time: Sat 23 Aug 2025 16:00:23 +0000
Manifest this update: Sat 23 Aug 2025 16:00:23 +0000
Manifest next update: Sun 24 Aug 2025 16:00:23 +0000
Files and hashes: 1: 4GFLNoudKsxo0lKJ1-DlrH13jnQ.roa (hash: HUsEZcDE4OcjX3j8qjU3YIB7IUQvhWtNObC5QxLBOjI=)
2: HABzsmEXoTX-9F80tlefBrIojpE.roa (hash: 52kUggTy9NYk2U3Bjz9hs7uyoLjfvw/NlnF/Z95I8C4=)
3: QePjCCFm1FINIQleulFli9B8Eok.roa (hash: /guHrTHyVfudxkCaMQP2S3B+Z/m09hjKdZNM8RCBhu8=)
4: RvvULY1y4xBfF8ZuGzWFY0OKEEg.roa (hash: NY71LOvBCM5qGOh91dHK/WKKwDoM07O+dhz3A0gNPUc=)
5: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl (hash: e3l01g3EoutSazDkaiqzUSJAVZvV04JEjLLSuNWz0Ck=)
6: gjLZ8xPb1tsKV2vJR4IOeOvDkLQ.roa (hash: xoIQZnhZzbbmusOiJUznTII6cc6W+LUSKGBLQbZkQx8=)
7: knMcRzeWn60PeEDKHh4T-DsD47k.roa (hash: 1cCi1oSzq4A+m9C1hgD9P9MQKYKGGXYQlanHWTpFJ5s=)
8: t8J6z3tO2f2jI-WXfX5Z7ghB42Y.roa (hash: CJg1Zg1dR2GxxLuD5y1ebgKx9+kGLch5/dW0dbkm29Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:d8:dd:20:9a:3d:88:b7:65:bd:88:8f:83:a3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Aug 23 16:00:23 2025 GMT
Not After : Aug 24 16:00:23 2025 GMT
Subject: CN=4b75a1b57d2c52488d042ff2051a7b4b9b104c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:66:b5:85:49:0a:ad:ef:dc:58:24:65:32:
d3:5a:f6:14:57:09:fa:76:b6:56:20:ec:06:59:28:
3e:23:34:c7:f3:28:0f:45:ae:9c:c1:ea:e0:d1:d0:
c9:32:16:58:04:58:1a:53:39:94:72:0b:82:83:0e:
38:57:1d:1f:41:8e:88:3f:01:a0:27:a9:db:1f:de:
59:40:8e:06:ac:f3:f7:dc:9c:fc:1c:86:a3:20:30:
f4:10:18:0b:a8:f2:5e:8d:9f:99:88:70:66:df:6f:
30:36:cd:ff:47:0e:dc:62:72:97:f5:9a:bb:f9:0a:
44:b2:51:6a:ed:73:86:ff:56:16:dc:8d:5c:79:c8:
f7:9c:85:85:4b:d2:1b:17:ae:dd:36:a3:51:73:19:
51:3b:4b:6b:cf:f7:d2:d2:d3:c7:7c:e6:56:db:fa:
bf:90:ac:ce:e2:18:d6:80:68:de:f3:d4:e1:d5:90:
f8:be:6b:3c:70:b9:c0:6d:6b:67:6d:e0:b6:4b:db:
31:c9:38:9e:dc:f3:5d:f8:3d:9d:dc:6f:e5:8a:f9:
77:36:89:95:02:cc:d1:99:aa:71:24:ca:5b:7c:9e:
ca:52:ce:42:23:94:67:93:4b:6d:fe:ab:ab:03:15:
e9:8d:05:b6:0c:55:20:3c:97:f4:d6:ab:7a:1d:20:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:75:A1:B5:7D:2C:52:48:8D:04:2F:F2:05:1A:7B:4B:9B:10:4C:57
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3b:ad:90:ce:86:3c:99:14:29:97:8c:ad:e7:42:63:bb:bb:
65:86:e1:e6:11:5c:a0:54:a3:73:bc:58:1f:5a:7e:1d:e7:a7:
d1:cd:0b:1c:c0:34:36:e1:16:06:98:02:ea:18:48:03:57:0a:
df:d1:51:e6:b2:2a:d6:6f:3b:a8:5a:64:15:51:29:76:77:f2:
5d:f7:b4:23:d5:0f:f7:d3:df:94:d7:ec:66:94:19:51:56:f1:
fe:4e:c2:c9:93:09:91:69:ed:ff:2f:8f:a9:23:42:5a:ce:55:
bc:6f:02:b5:07:bf:e6:27:d7:aa:6f:2c:c1:5d:3d:0e:77:3f:
85:8d:d1:01:11:a4:70:00:ff:9d:27:98:2d:00:3b:42:c7:b5:
10:91:5d:93:4a:4d:d1:65:db:11:3d:8d:57:64:5d:5a:f7:02:
28:26:84:8d:7b:20:4f:eb:a9:99:73:c0:ac:3a:2f:79:c9:0a:
07:a8:86:b4:74:24:6a:7f:18:eb:17:fb:55:17:b6:1d:f6:08:
b5:da:f8:cb:9e:31:e6:97:3e:29:c4:1d:f2:00:bc:2c:df:69:
eb:30:96:55:20:7c:de:dd:ce:a0:5d:06:ea:9c:8b:0c:69:04:
4d:e3:aa:f6:4e:ef:82:ea:1f:40:f0:5d:72:08:19:ac:6c:af:
40:09:a4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:23:47 2025 by rpki-client