Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File: sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier: z/kPwD2GNYmtMBYeRGrCOS2KFkpL8ToCeCbsLtdiccw=
Subject key identifier: 80:B3:8B:6D:18:8C:95:2C:ED:DD:97:77:7C:B3:F6:21:1D:9F:CC:BF
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 0198D54E8D049BBCF5013F19239CBBAF412B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:02:31 +0000
Manifest this update: Sat 23 Aug 2025 05:02:31 +0000
Manifest next update: Sun 24 Aug 2025 05:02:31 +0000
Files and hashes: 1: 81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa (hash: WpRdHBqETycwQ96u5D62eZXgBmAeqYPLVw7BxsplSoc=)
2: YJ0hIC0g4jRwPT2ffsWDri3U1BY.roa (hash: aRSOvWay4BgtDjCfPmINM1fcXP7qlHTJkbgxSvqFhJc=)
3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: kJKuI50I1HwaLrsxp6UOyHJ0LN9QRhn4zDjilisoEdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8d:04:9b:bc:f5:01:3f:19:23:9c:bb:af:41:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: Aug 23 05:02:31 2025 GMT
Not After : Aug 24 05:02:31 2025 GMT
Subject: CN=80b38b6d188c952ceddd97777cb3f6211d9fccbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:9d:f6:08:62:85:b4:f7:1e:a2:93:cb:2a:
c7:ae:71:02:0e:4e:ce:c0:58:bc:c6:d1:3c:ce:24:
9d:33:ce:d5:1e:9b:e3:25:aa:c2:62:30:27:34:fd:
97:49:fa:0b:90:21:a5:91:3c:0f:0b:0e:6b:09:05:
aa:fc:2b:11:fd:29:45:a5:ec:6b:e0:37:cd:eb:53:
83:ca:ff:ae:c4:61:7f:b4:fc:1e:dc:2f:da:e9:4b:
75:ed:e8:ba:81:18:96:4b:eb:d0:bd:ad:17:07:15:
c5:21:e6:b5:e0:e7:c7:7d:2b:17:3d:5a:a7:e1:81:
c7:7f:6f:2e:c9:b3:01:38:33:2a:98:21:89:2a:4d:
c3:4b:86:b7:18:f5:db:2f:c8:e7:a7:56:90:43:1c:
1b:f0:af:a1:89:c4:ba:11:79:8e:d3:49:36:9d:a3:
21:8e:7d:9d:32:fc:3f:ca:ed:41:71:c0:10:50:93:
eb:d9:5f:2b:bb:4a:41:6c:cf:2f:a1:a9:03:a2:f5:
00:ea:d1:76:9a:8b:7a:82:3d:5b:a0:7c:33:51:a0:
3d:b4:5a:42:02:0a:d1:08:cf:64:a6:4e:f1:7c:e2:
79:bd:12:dd:2c:a2:de:d2:3b:c0:4a:d8:f5:60:5a:
df:16:7e:9a:da:a2:8c:22:23:e6:87:d8:87:88:e3:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B3:8B:6D:18:8C:95:2C:ED:DD:97:77:7C:B3:F6:21:1D:9F:CC:BF
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ef:6a:4a:65:ef:3f:13:0e:22:49:61:a3:e0:3e:e6:1d:16:
8d:1b:8e:dc:fb:88:48:49:99:da:30:a8:88:71:e2:4a:c4:30:
3c:95:fe:19:30:53:b1:ce:49:40:8c:96:3d:ee:ca:71:43:6d:
bb:f6:20:a8:91:eb:80:a9:19:01:f5:b9:22:14:93:a7:66:36:
05:9e:5c:60:18:47:91:0f:5f:27:13:49:a2:b5:dc:26:fd:93:
ea:42:a9:a7:e6:38:51:88:09:e0:fa:64:08:55:47:21:90:ee:
d5:39:80:10:e3:0f:62:4f:6e:28:84:fb:ee:5c:16:9e:f4:fd:
4a:1d:04:dd:a6:32:69:1d:15:e5:b0:85:7e:df:72:47:e0:2c:
03:fd:49:6c:7c:72:f2:09:36:52:a5:08:98:84:5e:62:19:3f:
ff:78:e0:fd:77:0f:f4:d1:82:b7:d5:48:20:e1:11:15:33:93:
89:53:18:5b:9a:86:89:bf:6b:97:09:de:ed:ec:b6:76:c6:98:
28:96:bf:5b:2d:0d:73:14:57:be:3a:a4:7e:ea:3c:c4:00:bd:
45:66:73:cf:d3:80:42:af:94:0b:43:ed:52:8b:92:31:53:65:
2e:92:ec:8f:d1:15:f7:aa:f7:ef:22:1b:f8:09:e3:fc:5b:c4:
57:e3:d2:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTo0Em7z1AT8ZI5y7r0ErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMzFlMmNhODI0Y2E4ZDU1NjI0MDZhNzAyMWFlM2MxM2Ex
NDI1ZDgwHhcNMjUwODIzMDUwMjMxWhcNMjUwODI0MDUwMjMxWjAzMTEwLwYDVQQD
Eyg4MGIzOGI2ZDE4OGM5NTJjZWRkZDk3Nzc3Y2IzZjYyMTFkOWZjY2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAyd9ghihbT3HqKTyyrHrnECDk7O
wFi8xtE8ziSdM87VHpvjJarCYjAnNP2XSfoLkCGlkTwPCw5rCQWq/CsR/SlFpexr
4DfN61ODyv+uxGF/tPwe3C/a6Ut17ei6gRiWS+vQva0XBxXFIea14OfHfSsXPVqn
4YHHf28uybMBODMqmCGJKk3DS4a3GPXbL8jnp1aQQxwb8K+hicS6EXmO00k2naMh
jn2dMvw/yu1BccAQUJPr2V8ru0pBbM8voakDovUA6tF2mot6gj1boHwzUaA9tFpC
AgrRCM9kpk7xfOJ5vRLdLKLe0jvAStj1YFrfFn6a2qKMIiPmh9iHiOPR0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICzi20YjJUs7d2Xd3yz9iEdn8y/MB8GA1UdIwQY
MBaAFLAx4sqCTKjVViQGpwIa48E6FCXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUt
MTMwZTRkYzAxNWFiLzEvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUtMTMwZTRkYzAxNWFi
LzEvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMu9qSmXv
PxMOIklho+A+5h0WjRuO3PuISEmZ2jCoiHHiSsQwPJX+GTBTsc5JQIyWPe7KcUNt
u/YgqJHrgKkZAfW5IhSTp2Y2BZ5cYBhHkQ9fJxNJorXcJv2T6kKpp+Y4UYgJ4Ppk
CFVHIZDu1TmAEOMPYk9uKIT77lwWnvT9Sh0E3aYyaR0V5bCFft9yR+AsA/1JbHxy
8gk2UqUImIReYhk//3jg/XcP9NGCt9VIIOERFTOTiVMYW5qGib9rlwne7ey2dsaY
KJa/Wy0NcxRXvjqkfuo8xAC9RWZzz9OAQq+UC0PtUouSMVNlLpLsj9EV96r37yIb
+Anj/FvEV+PSiA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:24 2025 by rpki-client