Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
File: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft (raw, json)
Hash identifier: bMcKRxLsw66DberDgO4MYr5Rt5tyZlH2t9Zib1sAW3M=
Subject key identifier: BA:0C:00:48:51:C5:78:E6:7A:47:0B:FC:74:0B:A4:5E:4F:6F:8E:C5
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial: 0198D5F15696A790FF2B8EED47FB6A07CEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:20 +0000
Manifest this update: Sat 23 Aug 2025 08:00:20 +0000
Manifest next update: Sun 24 Aug 2025 08:00:20 +0000
Files and hashes: 1: 83yHnqR55YpNJ6sDNSfeUwQPJSU.roa (hash: e+9U+VRAv+pY6TcOM+TtKl2lfx0rhjB5FDO+9Jovf1k=)
2: 9VNSF5UtFgYDcn-DHdVIflEkK2g.roa (hash: Bd8gptXnsyCaZSIm/0DdWBDRk8HDyH1Zijph4Kg4wIw=)
3: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl (hash: aENVg2d0Wa1SstL4I30sy9TSotww5yunnhbHl3Fs8PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:56:96:a7:90:ff:2b:8e:ed:47:fb:6a:07:ce:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Validity
Not Before: Aug 23 08:00:20 2025 GMT
Not After : Aug 24 08:00:20 2025 GMT
Subject: CN=ba0c004851c578e67a470bfc740ba45e4f6f8ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:f5:c6:1c:9b:ce:09:62:87:16:1c:fa:f7:
35:08:76:19:e7:32:cf:c3:d9:97:0a:4c:a0:01:71:
1f:0e:61:ce:9c:13:6b:f0:81:11:8e:d8:44:ce:c1:
40:df:61:16:de:41:3c:01:1a:bc:31:7f:55:93:47:
fb:5f:0a:ae:ba:69:50:58:01:33:97:59:fb:bc:c9:
06:cf:1e:70:c9:ca:79:db:5a:41:14:48:0d:e8:ea:
87:1e:53:77:16:d1:bd:7c:34:75:b8:e9:bd:01:b4:
31:81:ec:d9:7e:55:03:bc:ff:0a:e0:05:c4:99:03:
98:a4:cc:6b:7f:23:a4:be:d7:92:a7:72:72:44:62:
20:6d:95:2c:08:12:49:fc:76:6d:36:fe:15:0d:31:
92:4a:14:44:f1:26:86:a5:18:8a:69:a9:57:c9:8b:
77:22:75:ca:99:55:62:0d:0b:d1:48:2b:a8:17:fe:
1e:e3:d1:e1:12:af:1c:47:6b:56:5e:56:c1:d3:30:
9f:59:2f:6b:0a:65:6a:be:d0:29:76:f3:0c:2d:a2:
cd:06:48:b7:26:d0:5d:7f:78:9d:55:d1:64:21:89:
0a:4b:7a:03:5a:2a:9f:d8:4a:c8:c6:5c:5b:1a:98:
80:f2:fc:2e:f7:f2:74:e3:1a:d9:69:e8:18:55:3a:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0C:00:48:51:C5:78:E6:7A:47:0B:FC:74:0B:A4:5E:4F:6F:8E:C5
X509v3 Authority Key Identifier:
keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:38:b8:06:56:2e:b6:42:24:bb:9c:cd:17:26:7e:30:cf:d8:
8b:a1:a2:4e:f3:7c:09:87:98:1f:7c:ee:9a:47:8f:ef:b6:c7:
3a:fe:dd:93:a1:f4:4e:b5:c1:8b:dd:fa:c2:65:20:e9:95:05:
5a:11:17:80:77:10:16:82:82:97:9f:cb:46:c0:f8:48:c6:7a:
94:ad:40:fb:5a:2d:60:10:b8:9f:75:81:95:f4:9e:e7:b1:cc:
8e:6b:29:fb:4e:8e:75:ff:34:ae:0c:aa:7f:93:ea:51:d8:ee:
cf:b1:b0:92:29:95:a8:f9:a2:c0:a0:45:f8:e0:e7:ee:9c:b9:
96:38:93:b0:49:73:53:f7:db:5f:ad:2e:80:16:28:5e:4e:9f:
24:bb:b2:c8:fc:d2:67:9d:3b:8d:fa:17:8c:cd:09:bf:e6:4a:
93:df:da:08:77:e9:06:9d:31:ad:6c:de:d3:6f:17:65:1d:26:
a9:5d:8c:a2:ee:e9:f3:fb:a6:7c:37:ba:ce:9f:31:28:c3:b8:
4a:b1:45:53:5a:46:55:8f:35:94:97:54:42:14:e3:27:16:97:
80:c7:1d:43:35:07:75:01:d9:60:6f:d3:c5:50:5a:2f:8c:69:
7f:ad:6e:27:c6:f5:04:86:df:c7:55:11:98:44:e3:f3:dc:0c:
69:cb:9e:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8VaWp5D/K47tR/tqB87aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGJiZDMzNDU4MWRkY2RkOTM1YmNlZjQ3ZDlhMDRjYmNl
NWZkZWQwHhcNMjUwODIzMDgwMDIwWhcNMjUwODI0MDgwMDIwWjAzMTEwLwYDVQQD
EyhiYTBjMDA0ODUxYzU3OGU2N2E0NzBiZmM3NDBiYTQ1ZTRmNmY4ZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAL1xhybzglihxYc+vc1CHYZ5zLP
w9mXCkygAXEfDmHOnBNr8IERjthEzsFA32EW3kE8ARq8MX9Vk0f7XwquumlQWAEz
l1n7vMkGzx5wycp521pBFEgN6OqHHlN3FtG9fDR1uOm9AbQxgezZflUDvP8K4AXE
mQOYpMxrfyOkvteSp3JyRGIgbZUsCBJJ/HZtNv4VDTGSShRE8SaGpRiKaalXyYt3
InXKmVViDQvRSCuoF/4e49HhEq8cR2tWXlbB0zCfWS9rCmVqvtApdvMMLaLNBki3
JtBdf3idVdFkIYkKS3oDWiqf2ErIxlxbGpiA8vwu9/J04xrZaegYVTqgLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoMAEhRxXjmekcL/HQLpF5Pb47FMB8GA1UdIwQY
MBaAFLtLvTNFgd3N2TW870fZoEy85f3tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTB1OU0wV0IzYzNaTmJ6dlI5bWdUTHpsX2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YTdjZTYtMDZhNi00MWQzLWI1ZmEt
OTcxNzRhOTZlODE1LzEvdTB1OU0wV0IzYzNaTmJ6dlI5bWdUTHpsX2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83YTdjZTYtMDZhNi00MWQzLWI1ZmEtOTcxNzRhOTZlODE1
LzEvdTB1OU0wV0IzYzNaTmJ6dlI5bWdUTHpsX2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizi4BlYu
tkIku5zNFyZ+MM/Yi6GiTvN8CYeYH3zumkeP77bHOv7dk6H0TrXBi936wmUg6ZUF
WhEXgHcQFoKCl5/LRsD4SMZ6lK1A+1otYBC4n3WBlfSe57HMjmsp+06Odf80rgyq
f5PqUdjuz7GwkimVqPmiwKBF+ODn7py5ljiTsElzU/fbX60ugBYoXk6fJLuyyPzS
Z507jfoXjM0Jv+ZKk9/aCHfpBp0xrWze028XZR0mqV2Mou7p8/umfDe6zp8xKMO4
SrFFU1pGVY81lJdUQhTjJxaXgMcdQzUHdQHZYG/TxVBaL4xpf61uJ8b1BIbfx1UR
mETj89wMacue3w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:02 2025 by rpki-client