Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
File: __RCr_uhz67zECyYHXVpUCzmUVw.mft (raw, json)
Hash identifier: H2lZspZ8Tq6zemUhKGKZOGQHjmNwd65kjNExRwIE8x8=
Subject key identifier: A0:18:02:4E:8C:25:D2:4A:DD:DE:95:05:EA:30:11:70:BE:68:71:B9
Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
Certificate issuer: /CN=fff442affba1cfaef3102c981d7569502ce6515c
Certificate serial: 0198D6609C930E137A069F7F19E2C6F88767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:52 +0000
Manifest this update: Sat 23 Aug 2025 10:01:52 +0000
Manifest next update: Sun 24 Aug 2025 10:01:52 +0000
Files and hashes: 1: __RCr_uhz67zECyYHXVpUCzmUVw.crl (hash: 0pGaH58GC5ydLACUduKSLEmuMttyXlilXgekhLTFXQE=)
2: cfHPpH74hHCJK1pLDEwyQ7AMZJY.roa (hash: Gmnr746njngjtdW+doOVMtWLzbG5WcOtPqH2dI9MOLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:9c:93:0e:13:7a:06:9f:7f:19:e2:c6:f8:87:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c
Validity
Not Before: Aug 23 10:01:52 2025 GMT
Not After : Aug 24 10:01:52 2025 GMT
Subject: CN=a018024e8c25d24addde9505ea301170be6871b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:7d:1a:c7:1d:ed:1a:13:ac:8b:43:ed:b3:
08:e7:e2:35:c5:d3:2b:c8:7d:a3:e6:4f:a0:d1:75:
66:ed:78:3e:3f:f0:05:c6:98:0f:e3:e3:b3:74:f7:
c8:6a:37:cf:96:33:7d:06:1e:e8:99:66:74:e1:01:
6d:2e:b2:9f:1f:0c:52:f1:de:63:73:9b:c2:e9:28:
51:48:e7:e8:26:75:f2:90:3e:4a:55:bd:46:74:cd:
fb:b5:05:8e:38:e4:c3:af:0c:63:63:2c:67:67:9c:
59:df:32:37:87:b9:ac:c9:94:6a:a3:ce:01:af:1e:
45:0f:61:fc:ed:d8:57:b0:3a:14:f1:9b:98:e0:3a:
93:ee:75:0d:b8:40:32:de:1e:a1:15:6e:4f:6a:52:
a0:a9:2a:33:1c:45:8e:b1:7a:67:10:d0:85:ab:87:
68:27:84:f9:8e:f7:25:99:fb:6c:8a:f5:20:b2:49:
73:dd:3e:ed:47:19:23:3a:a3:27:ee:67:8a:06:95:
d1:39:bc:dc:e1:a0:bc:23:82:8c:95:ba:11:0a:8c:
c4:89:95:a3:0e:9a:67:90:d7:9c:0a:a2:7a:d1:fd:
21:b8:62:62:df:61:ad:4b:cf:fc:78:f2:e0:09:c5:
0b:0b:72:cc:d4:8c:48:0e:b1:b9:0b:49:e2:6e:1d:
3c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:18:02:4E:8C:25:D2:4A:DD:DE:95:05:EA:30:11:70:BE:68:71:B9
X509v3 Authority Key Identifier:
keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:52:51:95:5b:52:bf:fa:6d:14:0d:d7:5f:ec:13:f3:02:14:
d1:4b:0c:c7:03:9d:94:ea:c4:4b:cd:4f:51:66:e1:b2:4f:bb:
6a:c8:4b:3a:75:ce:b3:e8:cf:f9:9a:3f:10:1a:ac:88:39:3e:
03:ab:42:31:20:3a:f2:83:e0:58:90:2f:f4:65:c5:c3:f9:a1:
e7:aa:12:30:cf:e8:1c:99:37:31:55:8d:c2:e9:78:10:3f:b0:
2a:bc:01:d0:2e:99:53:27:31:c6:a3:f4:41:57:f1:14:bf:03:
1e:16:21:8d:eb:b8:67:1a:04:06:2e:c9:82:30:02:b6:24:e5:
e6:80:19:61:e1:c4:d4:83:d0:5f:7c:c0:4a:cb:6b:77:c0:27:
fa:c6:ba:2a:63:20:b2:bb:84:be:0b:de:b9:5f:72:35:1a:3c:
ea:9b:cc:1d:21:59:8b:5c:66:0d:e3:3a:a2:7d:a7:d6:49:cc:
eb:16:ab:2a:c0:f1:6b:7d:a5:d2:7d:ab:80:86:26:78:f9:d0:
1f:69:ad:07:f3:41:e1:83:88:b0:f5:ec:99:f0:bf:23:da:74:
b5:ee:3a:97:47:85:37:67:54:4b:8b:6d:9f:aa:10:44:19:02:
bb:bc:45:5b:55:3e:f0:ce:51:b1:a6:a9:15:28:d3:1f:57:f7:
ab:15:da:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYJyTDhN6Bp9/GeLG+IdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZjQ0MmFmZmJhMWNmYWVmMzEwMmM5ODFkNzU2OTUwMmNl
NjUxNWMwHhcNMjUwODIzMTAwMTUyWhcNMjUwODI0MTAwMTUyWjAzMTEwLwYDVQQD
EyhhMDE4MDI0ZThjMjVkMjRhZGRkZTk1MDVlYTMwMTE3MGJlNjg3MWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocZ9Gscd7RoTrItD7bMI5+I1xdMr
yH2j5k+g0XVm7Xg+P/AFxpgP4+OzdPfIajfPljN9Bh7omWZ04QFtLrKfHwxS8d5j
c5vC6ShRSOfoJnXykD5KVb1GdM37tQWOOOTDrwxjYyxnZ5xZ3zI3h7msyZRqo84B
rx5FD2H87dhXsDoU8ZuY4DqT7nUNuEAy3h6hFW5PalKgqSozHEWOsXpnENCFq4do
J4T5jvclmftsivUgsklz3T7tRxkjOqMn7meKBpXRObzc4aC8I4KMlboRCozEiZWj
DppnkNecCqJ60f0huGJi32GtS8/8ePLgCcULC3LM1IxIDrG5C0nibh08cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAYAk6MJdJK3d6VBeowEXC+aHG5MB8GA1UdIwQY
MBaAFP/0Qq/7oc+u8xAsmB11aVAs5lFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85ZmVkZDAtNGVkNy00NDE5LThlNzMt
YjVjYTBhZGYyZjA4LzEvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85ZmVkZDAtNGVkNy00NDE5LThlNzMtYjVjYTBhZGYyZjA4
LzEvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVJRlVtS
v/ptFA3XX+wT8wIU0UsMxwOdlOrES81PUWbhsk+7ashLOnXOs+jP+Zo/EBqsiDk+
A6tCMSA68oPgWJAv9GXFw/mh56oSMM/oHJk3MVWNwul4ED+wKrwB0C6ZUycxxqP0
QVfxFL8DHhYhjeu4ZxoEBi7JgjACtiTl5oAZYeHE1IPQX3zASstrd8An+sa6KmMg
sruEvgveuV9yNRo86pvMHSFZi1xmDeM6on2n1knM6xarKsDxa32l0n2rgIYmePnQ
H2mtB/NB4YOIsPXsmfC/I9p0te46l0eFN2dUS4ttn6oQRBkCu7xFW1U+8M5Rsaap
FSjTH1f3qxXaEQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:08 2025 by rpki-client