Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: mROQmGRy94Aq+FLP4Lzwr2FuapfSfoZfJeo9d3mLUVQ=
Subject key identifier: 3A:D3:98:44:AD:F0:77:68:C3:E4:91:5F:85:34:D1:09:D5:B7:A3:35
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 0198D6603C805829A2E54315649BAA8FC1B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:27 +0000
Manifest this update: Sat 23 Aug 2025 10:01:27 +0000
Manifest next update: Sun 24 Aug 2025 10:01:27 +0000
Files and hashes: 1: V6I7xtb-s540gCh7ELkbFAWWNm8.roa (hash: 4XfEuv+JUU8dRovsqOYBux0Sp8hqu4SxoGQivq4ciLk=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: LkwPlWNiPCt/Br53d2Aqz6OMIC5J7047AoQYDcWnZa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:3c:80:58:29:a2:e5:43:15:64:9b:aa:8f:c1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Aug 23 10:01:27 2025 GMT
Not After : Aug 24 10:01:27 2025 GMT
Subject: CN=3ad39844adf07768c3e4915f8534d109d5b7a335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:04:11:df:bd:16:12:a1:f5:32:48:5d:a4:
4a:84:5e:13:0a:99:38:90:2b:42:b6:63:1c:6c:9f:
f2:d8:de:d0:65:1d:70:c5:77:58:d3:cd:9c:b5:67:
1f:3f:24:70:7e:68:91:fe:6d:d0:e2:8c:e8:8d:c8:
ad:30:e4:d5:70:e7:2d:10:cf:09:e2:71:dd:9e:3e:
b3:06:66:e3:d4:54:3b:6f:76:b7:6d:94:70:7d:57:
5e:8e:9d:4c:a3:ef:4d:f3:8f:ae:fa:5f:43:e3:94:
29:72:41:d2:5f:86:0c:d5:7e:45:f8:56:bb:5b:af:
7a:bf:d5:b3:7e:1b:ec:53:62:ab:a0:53:c2:35:64:
09:b2:11:54:14:c4:45:fc:ee:31:e9:11:ee:2a:d8:
5a:d6:ed:31:3e:c2:86:a9:30:4a:91:3a:a4:fd:84:
41:67:4c:48:02:2c:20:7d:15:b3:ef:03:f6:c1:81:
5a:71:7b:89:fa:65:5b:f3:c4:b8:14:d3:6b:1d:fa:
fb:36:45:4a:50:a1:d0:39:7f:5f:1a:dd:78:72:13:
e9:d9:73:bb:a4:f9:1f:3d:4c:fc:37:33:31:56:56:
12:76:b7:86:eb:dc:58:95:d7:c6:fc:19:e5:4a:0f:
42:01:fa:21:32:0d:33:ba:82:b6:92:b9:ba:18:a0:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D3:98:44:AD:F0:77:68:C3:E4:91:5F:85:34:D1:09:D5:B7:A3:35
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:35:17:18:1c:41:31:36:a2:f2:18:a2:f5:f1:77:75:98:af:
cc:b0:04:cf:e5:34:a4:ba:a6:9a:23:b5:c2:43:0e:0f:b9:bc:
2c:1c:53:25:7d:7d:e2:59:c2:6b:bb:13:99:85:03:07:b6:f1:
e0:87:0c:09:f4:59:1d:1a:b4:24:d8:9f:38:0e:47:89:fe:7e:
7f:b5:2d:5b:8c:24:0f:a9:68:a7:71:89:4b:6c:1e:f2:48:b9:
72:33:ee:bb:6b:09:35:68:a7:0f:3a:1f:ca:6e:0e:30:22:95:
41:fe:ae:7d:0b:c6:f8:d3:15:ea:3a:08:f9:64:4b:40:06:0f:
15:3d:75:d3:3e:a0:72:5d:a1:ee:2c:f4:e0:95:95:a9:02:73:
c3:ef:1b:86:60:ea:b9:25:30:8e:0f:5a:e5:da:cb:db:f8:ac:
00:cb:20:f0:36:22:95:a4:e5:32:5f:0b:9a:4e:27:a2:aa:71:
43:99:e9:26:24:52:21:e6:d5:19:42:94:b8:5c:16:b1:71:79:
b5:c4:51:58:99:07:11:b8:7a:e4:ca:6a:24:57:da:4b:00:9a:
92:47:7c:a9:09:73:95:7e:24:7a:82:ef:dc:a2:f2:a2:08:dd:
82:29:87:02:af:3f:aa:93:8a:3a:e2:9b:1b:05:f8:58:0c:5f:
0c:e3:0c:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYDyAWCmi5UMVZJuqj8G0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODhjOGJkMmRhOGJlMjc5YzE3NzJhMTExMGFhMzg4ZjBl
ZjExMDIwHhcNMjUwODIzMTAwMTI3WhcNMjUwODI0MTAwMTI3WjAzMTEwLwYDVQQD
EygzYWQzOTg0NGFkZjA3NzY4YzNlNDkxNWY4NTM0ZDEwOWQ1YjdhMzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjwEEd+9FhKh9TJIXaRKhF4TCpk4
kCtCtmMcbJ/y2N7QZR1wxXdY082ctWcfPyRwfmiR/m3Q4ozojcitMOTVcOctEM8J
4nHdnj6zBmbj1FQ7b3a3bZRwfVdejp1Mo+9N84+u+l9D45QpckHSX4YM1X5F+Fa7
W696v9WzfhvsU2KroFPCNWQJshFUFMRF/O4x6RHuKtha1u0xPsKGqTBKkTqk/YRB
Z0xIAiwgfRWz7wP2wYFacXuJ+mVb88S4FNNrHfr7NkVKUKHQOX9fGt14chPp2XO7
pPkfPUz8NzMxVlYSdreG69xYldfG/BnlSg9CAfohMg0zuoK2krm6GKCaXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrTmESt8Hdow+SRX4U00QnVt6M1MB8GA1UdIwQY
MBaAFK+IyL0tqL4nnBdyoREKo4jw7xECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEt
YmM3NmNhZjA3ODYwLzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEtYmM3NmNhZjA3ODYw
LzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDUXGBxB
MTai8hii9fF3dZivzLAEz+U0pLqmmiO1wkMOD7m8LBxTJX194lnCa7sTmYUDB7bx
4IcMCfRZHRq0JNifOA5Hif5+f7UtW4wkD6lop3GJS2we8ki5cjPuu2sJNWinDzof
ym4OMCKVQf6ufQvG+NMV6joI+WRLQAYPFT110z6gcl2h7iz04JWVqQJzw+8bhmDq
uSUwjg9a5drL2/isAMsg8DYilaTlMl8Lmk4noqpxQ5npJiRSIebVGUKUuFwWsXF5
tcRRWJkHEbh65MpqJFfaSwCakkd8qQlzlX4keoLv3KLyogjdgimHAq8/qpOKOuKb
GwX4WAxfDOMM+Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:50 2025 by rpki-client