Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
File: e-CvRatOV0VvWgpA36hPjYBhBmQ.mft (raw, json)
Hash identifier: rl2EpQvQlMww+qcG2ThXW4P6fbLqNi/+b8b1QysvMrk=
Subject key identifier: A3:9A:73:60:5E:51:BA:22:A4:A7:E7:CD:D3:61:AF:8A:E6:7E:83:17
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 0198D65F0A24C540B55D129E9D557F4E8CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:09 +0000
Manifest this update: Sat 23 Aug 2025 10:00:09 +0000
Manifest next update: Sun 24 Aug 2025 10:00:09 +0000
Files and hashes: 1: L3EzGRS_cQiiqxRcr6-IVlPq90c.roa (hash: WyhkbKAlOi0tYeIJPyH0sVoGZlIljn2uVDmX+5Mz2XM=)
2: d3-nUmhWPxilxJYRIxnkrR3tjhI.roa (hash: nCRP7GSY9Gpb6j6rYf+Ya74feBJgqnxBiBarST+uqyM=)
3: e-CvRatOV0VvWgpA36hPjYBhBmQ.crl (hash: 4BHGVfUY7WoHhup169yPA/JdXmXpFtYlVFtDCdCLG7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0a:24:c5:40:b5:5d:12:9e:9d:55:7f:4e:8c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Aug 23 10:00:09 2025 GMT
Not After : Aug 24 10:00:09 2025 GMT
Subject: CN=a39a73605e51ba22a4a7e7cdd361af8ae67e8317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:7c:75:a6:d5:cb:12:24:78:ea:28:52:a5:
c0:36:bf:ba:4d:95:88:ff:49:ae:84:bd:01:3b:b7:
30:00:42:61:c5:c3:ba:58:8b:3d:48:99:3c:d1:0a:
41:3f:19:52:51:f2:c9:df:54:d6:56:ec:a7:9f:e9:
26:4c:38:b4:a3:7f:19:2f:50:e6:1f:78:2d:70:dd:
cd:b7:75:ec:a0:17:f9:8d:07:da:98:72:3f:04:3c:
59:0b:38:21:66:ca:c7:b8:40:6f:e6:44:ca:57:86:
ad:cc:9e:2a:95:2c:93:f1:63:24:f9:c6:4f:fd:8a:
53:ff:d6:79:7a:9c:10:98:2e:1d:ed:2b:f1:dc:70:
78:a1:cd:79:bc:fd:59:29:7a:3c:ad:d5:f3:56:77:
b9:30:49:45:1f:38:ad:33:c8:1f:59:4f:f0:a8:39:
15:30:40:fd:b4:c4:36:81:ec:52:b4:f6:29:55:49:
d3:fa:4d:d0:6e:8f:6d:7a:bd:38:6d:95:a7:66:01:
f1:4c:4d:cd:2f:39:50:80:13:f7:23:7d:fd:bc:04:
88:7e:99:ec:c2:bc:10:54:a2:9b:60:ee:e6:fe:77:
68:6c:bd:89:f4:29:95:3e:8c:d1:3f:e6:75:78:91:
2b:1f:37:65:02:19:46:14:4e:d4:b1:04:8b:b2:83:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9A:73:60:5E:51:BA:22:A4:A7:E7:CD:D3:61:AF:8A:E6:7E:83:17
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:49:91:a9:08:e5:a0:70:a7:2a:c9:ed:f8:de:60:a3:19:8d:
c3:de:ad:37:46:1f:4d:43:8a:a9:a4:e4:4a:b4:91:8b:06:07:
3e:5b:15:bc:73:5f:d0:70:d6:cb:da:98:25:c9:ad:99:44:ae:
0e:22:ed:5a:b0:31:44:ad:7e:f5:06:a5:db:33:99:da:bb:85:
24:c2:8c:c0:ab:d5:53:0a:bf:1a:7c:7e:5c:f7:a5:52:bc:d3:
ab:1c:c7:31:00:e4:db:d3:bd:b0:3f:2f:12:2f:9c:00:f4:f5:
ae:3c:01:2b:1e:f7:62:63:8d:12:31:da:64:e0:d3:d0:80:54:
e4:0a:8c:20:1b:ee:e4:8e:c3:29:7f:1d:c1:6e:8e:c2:75:cc:
34:ff:52:77:d1:df:e2:72:00:2e:96:c0:d1:06:0f:cd:0c:62:
c3:60:91:2b:d9:77:5f:ba:59:1f:c9:b4:fb:68:ff:e8:f4:1f:
dc:9b:a6:f2:b7:8e:29:0a:3a:10:9d:84:b6:38:68:4d:12:f2:
bb:cb:93:57:c3:b9:e7:bf:28:2d:7b:da:f2:e1:8a:2a:53:48:
fa:84:5d:b9:88:ad:b9:d4:43:a6:6b:59:5c:9b:a3:67:8b:75:
54:3b:fa:9c:25:3d:8f:94:8f:2a:28:5b:99:cc:ab:c8:b5:49:
a2:f9:92:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXwokxUC1XRKenVV/TozxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZTBhZjQ1YWI0ZTU3NDU2ZjVhMGE0MGRmYTg0ZjhkODA2
MTA2NjQwHhcNMjUwODIzMTAwMDA5WhcNMjUwODI0MTAwMDA5WjAzMTEwLwYDVQQD
EyhhMzlhNzM2MDVlNTFiYTIyYTRhN2U3Y2RkMzYxYWY4YWU2N2U4MzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIF8dabVyxIkeOooUqXANr+6TZWI
/0muhL0BO7cwAEJhxcO6WIs9SJk80QpBPxlSUfLJ31TWVuynn+kmTDi0o38ZL1Dm
H3gtcN3Nt3XsoBf5jQfamHI/BDxZCzghZsrHuEBv5kTKV4atzJ4qlSyT8WMk+cZP
/YpT/9Z5epwQmC4d7Svx3HB4oc15vP1ZKXo8rdXzVne5MElFHzitM8gfWU/wqDkV
MED9tMQ2gexStPYpVUnT+k3Qbo9ter04bZWnZgHxTE3NLzlQgBP3I339vASIfpns
wrwQVKKbYO7m/ndobL2J9CmVPozRP+Z1eJErHzdlAhlGFE7UsQSLsoOEnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOac2BeUboipKfnzdNhr4rmfoMXMB8GA1UdIwQY
MBaAFHvgr0WrTldFb1oKQN+oT42AYQZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS1DdlJhdE9WMFZ2V2dwQTM2aFBqWUJoQm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hYzFmYTktNGVjOC00MDE2LTlhZGQt
NGMzYmU5YTI4ZDkzLzEvZS1DdlJhdE9WMFZ2V2dwQTM2aFBqWUJoQm1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9hYzFmYTktNGVjOC00MDE2LTlhZGQtNGMzYmU5YTI4ZDkz
LzEvZS1DdlJhdE9WMFZ2V2dwQTM2aFBqWUJoQm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkmRqQjl
oHCnKsnt+N5goxmNw96tN0YfTUOKqaTkSrSRiwYHPlsVvHNf0HDWy9qYJcmtmUSu
DiLtWrAxRK1+9Qal2zOZ2ruFJMKMwKvVUwq/Gnx+XPelUrzTqxzHMQDk29O9sD8v
Ei+cAPT1rjwBKx73YmONEjHaZODT0IBU5AqMIBvu5I7DKX8dwW6OwnXMNP9Sd9Hf
4nIALpbA0QYPzQxiw2CRK9l3X7pZH8m0+2j/6PQf3Jum8reOKQo6EJ2EtjhoTRLy
u8uTV8O5578oLXva8uGKKlNI+oRduYitudRDpmtZXJujZ4t1VDv6nCU9j5SPKihb
mcyryLVJovmShw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:28 2025 by rpki-client