Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File: mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier: IZEZDuYA5cfmqVo96JZZFYQHJ7qAEKeCrCJi71SHsrM=
Subject key identifier: BB:89:78:BB:9C:D0:DD:91:EE:F3:46:A5:3F:6C:A5:7F:F6:F5:C4:E7
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial: 0198D472C4B26BCB4816E065B95C0A5A1D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:02:27 +0000
Manifest this update: Sat 23 Aug 2025 01:02:27 +0000
Manifest next update: Sun 24 Aug 2025 01:02:27 +0000
Files and hashes: 1: QDRodL1Ij0kvPV6RatQCpAs4M7Q.roa (hash: 8yQMKLh2R6BvydYUR3v0EXrX6Bu8MKleBRx4SEEyIAM=)
2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: qns6TH/NwCOoEsk36+5Ba5QzCNPkUKyMpvOw/2bM+cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:c4:b2:6b:cb:48:16:e0:65:b9:5c:0a:5a:1d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Validity
Not Before: Aug 23 01:02:27 2025 GMT
Not After : Aug 24 01:02:27 2025 GMT
Subject: CN=bb8978bb9cd0dd91eef346a53f6ca57ff6f5c4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:2c:3c:3b:e8:35:9e:2c:4d:a1:3b:24:8d:
df:10:52:a9:09:c6:6a:33:15:b1:0b:89:1f:84:51:
e8:94:fe:50:d2:07:1e:97:52:d1:ce:03:d5:16:69:
a1:d5:5e:b3:e6:46:93:dd:fa:dd:59:77:c3:bf:bc:
fc:30:de:fc:46:da:c3:93:d9:39:10:2b:de:65:d8:
84:bb:7c:38:7d:94:35:1d:7c:a4:36:ff:ec:f4:f1:
b3:bb:26:ea:5a:0d:29:18:7e:1c:4d:49:e2:d3:72:
3a:91:4b:dd:42:1e:d4:9f:e6:9c:3c:f7:33:ea:c7:
17:c4:2b:a4:5e:fb:cc:b9:ca:b0:f6:e1:47:31:8b:
70:ce:31:4d:da:4e:37:72:e8:53:82:6a:28:ca:00:
58:d4:8a:f2:43:5d:62:ee:40:a4:71:fd:1e:4d:b7:
cd:9e:16:14:45:c1:59:fa:a3:81:73:97:8a:0d:4b:
cd:0c:6b:f5:be:e7:60:ad:4f:3b:e7:18:34:42:7a:
c2:e4:34:f3:ac:74:30:8b:11:ea:da:94:a7:8b:79:
bb:46:07:26:65:ab:0a:6c:46:6a:c4:ce:58:20:53:
e9:ea:80:3f:65:93:6a:55:88:12:66:02:22:e7:e7:
76:4f:33:fc:ad:c9:75:af:bf:0e:fe:ac:e2:7b:2c:
a8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:89:78:BB:9C:D0:DD:91:EE:F3:46:A5:3F:6C:A5:7F:F6:F5:C4:E7
X509v3 Authority Key Identifier:
keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b3:4d:ce:17:aa:3a:57:19:7f:be:5f:fb:93:4b:10:56:2e:
f0:ca:c7:c5:a7:4f:10:55:f2:97:75:75:95:af:b0:f0:e9:19:
bd:05:8a:62:26:f8:81:80:9d:6e:f5:ff:de:b8:9b:50:7d:b3:
1a:ae:9f:6a:aa:ae:6a:9b:0a:11:8c:08:fe:a5:11:c6:e2:a9:
e6:b7:be:2d:fc:ed:58:df:7f:d1:e7:8c:ae:bf:76:4c:56:79:
35:79:ab:ee:d5:18:de:f9:28:32:e1:eb:f7:2e:79:db:29:cf:
3b:81:c5:7e:56:d8:9e:0b:71:27:c7:0c:3d:e7:5a:4e:42:81:
c3:0b:8c:d7:63:1a:1a:7d:14:d8:f9:8f:5c:38:c6:a6:f5:17:
52:98:a0:e5:e7:14:ac:e1:dc:13:cb:f8:f8:25:a7:c2:a2:3d:
bb:a2:1d:c7:e3:e8:e1:44:4a:7d:2d:81:e0:89:e3:ec:bc:a5:
e2:a2:49:95:e3:de:4f:3a:cf:97:cd:0d:bd:22:86:6b:b8:a0:
19:77:c5:d9:bc:4c:b5:54:66:06:5d:1b:19:cd:14:7b:db:0d:
c6:41:d6:bb:03:b4:24:e4:04:ff:70:5a:d3:a6:85:90:8d:af:
6c:6d:23:a5:81:0b:4a:b9:ae:cd:4e:24:c5:a5:ec:bf:bb:c0:
c4:97:c1:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcsSya8tIFuBluVwKWh01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MzdjN2Y1NWI4Y2YwZTc0YTVkZTA5MDMyOWFkOWI3Mjhj
NmFkNzcwHhcNMjUwODIzMDEwMjI3WhcNMjUwODI0MDEwMjI3WjAzMTEwLwYDVQQD
EyhiYjg5NzhiYjljZDBkZDkxZWVmMzQ2YTUzZjZjYTU3ZmY2ZjVjNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqacsPDvoNZ4sTaE7JI3fEFKpCcZq
MxWxC4kfhFHolP5Q0gcel1LRzgPVFmmh1V6z5kaT3frdWXfDv7z8MN78RtrDk9k5
ECveZdiEu3w4fZQ1HXykNv/s9PGzuybqWg0pGH4cTUni03I6kUvdQh7Un+acPPcz
6scXxCukXvvMucqw9uFHMYtwzjFN2k43cuhTgmooygBY1IryQ11i7kCkcf0eTbfN
nhYURcFZ+qOBc5eKDUvNDGv1vudgrU875xg0QnrC5DTzrHQwixHq2pSni3m7Rgcm
ZasKbEZqxM5YIFPp6oA/ZZNqVYgSZgIi5+d2TzP8rcl1r78O/qzieyyoGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuJeLuc0N2R7vNGpT9spX/29cTnMB8GA1UdIwQY
MBaAFJk3x/VbjPDnSl3gkDKa2bcoxq13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYt
Yjc1ZWY1NjM3MjBjLzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYtYjc1ZWY1NjM3MjBj
LzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlbNNzheq
OlcZf75f+5NLEFYu8MrHxadPEFXyl3V1la+w8OkZvQWKYib4gYCdbvX/3ribUH2z
Gq6faqquapsKEYwI/qURxuKp5re+LfztWN9/0eeMrr92TFZ5NXmr7tUY3vkoMuHr
9y552ynPO4HFflbYngtxJ8cMPedaTkKBwwuM12MaGn0U2PmPXDjGpvUXUpig5ecU
rOHcE8v4+CWnwqI9u6Idx+Po4URKfS2B4Inj7Lyl4qJJlePeTzrPl80NvSKGa7ig
GXfF2bxMtVRmBl0bGc0Ue9sNxkHWuwO0JOQE/3Ba06aFkI2vbG0jpYELSrmuzU4k
xaXsv7vAxJfB4w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:45 2025 by rpki-client