Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: o4Gf6idmiyWzdlSK5ZTf1z43b+Tgzq4xAJdNDFLxsbY=
Subject key identifier: 98:DD:DB:AE:DA:5D:C0:97:B2:79:AA:E4:FF:16:A5:7E:36:23:AF:A2
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 0198D65FF4A1A0D8493479404930D13A2F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:01:09 +0000
Manifest this update: Sat 23 Aug 2025 10:01:09 +0000
Manifest next update: Sun 24 Aug 2025 10:01:09 +0000
Files and hashes: 1: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: kH+pJjDzSaG/Vw+vjtzQGuqy6xBp8bhCCGxWW4XMHG4=)
2: l-W1P1FXUZq5Rom6HiLNeHjPeZk.roa (hash: JZU81XbPivNOV4ANlQqRFiS9x8fNQ6LSZbTjlzXEnFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f4:a1:a0:d8:49:34:79:40:49:30:d1:3a:2f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Aug 23 10:01:09 2025 GMT
Not After : Aug 24 10:01:09 2025 GMT
Subject: CN=98dddbaeda5dc097b279aae4ff16a57e3623afa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:e2:d1:2b:1e:c2:99:6f:d6:9f:5d:49:35:
b1:2e:15:85:df:0b:94:9e:74:ad:07:1b:88:35:89:
49:b8:56:ea:cb:b4:5f:e7:43:7b:0b:d7:95:27:e8:
5a:24:a8:bf:bb:b6:68:10:ff:24:b3:01:35:db:31:
2f:43:d1:5c:1c:e4:3c:a6:a3:f3:ac:1d:81:c2:34:
17:e5:b8:28:73:73:43:3a:48:6e:76:e5:51:8f:fa:
04:78:33:82:61:bd:82:7d:23:d0:8e:31:8b:17:ed:
c7:cd:df:b0:10:ba:e2:a4:b2:24:30:07:e7:37:cf:
77:49:43:9d:5a:d1:2b:41:0d:f8:26:62:66:d7:04:
48:23:d8:9f:e9:87:f0:0f:e1:a6:05:99:3d:01:cd:
91:a4:72:07:72:25:f8:eb:1f:00:f1:58:ab:9f:ae:
c7:21:48:dd:09:a3:2c:01:3a:dd:0b:59:09:c6:ce:
33:9f:78:23:97:27:07:69:03:95:e1:4f:87:60:d7:
9c:ad:a6:01:9b:33:ef:b3:c7:c0:93:ad:77:41:bc:
8c:c9:8a:b7:33:10:ec:a2:bd:10:ec:a3:75:ef:0b:
ac:72:67:4f:36:ec:20:05:c9:f3:88:53:2d:e5:cd:
5a:8f:32:0b:99:2e:53:00:90:f9:ed:a3:cc:5a:58:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DD:DB:AE:DA:5D:C0:97:B2:79:AA:E4:FF:16:A5:7E:36:23:AF:A2
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1e:e8:69:dc:7a:ee:1e:18:b5:9f:ce:d2:20:c2:88:77:46:
3f:af:7d:65:55:82:43:f8:a9:e5:8d:f8:5d:9c:35:19:84:04:
c5:e3:ac:d9:74:c0:36:5b:37:86:9d:ce:4c:90:ee:7c:46:e1:
b3:ec:01:1f:67:47:e7:cc:86:a3:d1:85:a6:cb:af:80:eb:20:
1a:87:ed:38:2b:87:0f:43:07:78:37:86:9f:be:2f:9f:4c:22:
ba:30:4a:e8:d4:05:08:8a:6e:50:45:da:b1:ff:a0:11:f2:97:
79:f5:f8:aa:e7:f0:0f:9e:fa:b5:64:19:02:5d:31:b3:62:4e:
57:ea:b9:60:80:29:a3:00:15:7f:52:17:d5:5f:b0:8f:3b:cc:
69:84:8d:b5:32:6b:fd:2c:bd:aa:22:f2:20:1c:47:85:df:c4:
39:b9:c0:cc:99:de:bb:d0:2a:53:b5:66:53:c8:e8:e5:60:bd:
df:3e:27:22:10:fd:9c:d4:37:5e:05:24:1e:eb:44:cc:6b:75:
73:dd:da:22:12:c8:76:a2:8a:a1:10:f6:8b:c4:54:22:a2:ad:
f0:f8:6c:9f:3f:bf:0c:88:a7:b4:b8:bd:9b:e1:de:60:c5:20:
c4:94:cb:76:5f:0a:7d:4f:0d:4e:d5:dc:d8:2b:c0:96:76:0f:
90:9a:e8:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX/ShoNhJNHlASTDROi9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmM2VkM2Q0ZDQ3YjhlODI1ZmJmZDA3OTQ4MmY3YTBjMjFk
YzkxZWYwHhcNMjUwODIzMTAwMTA5WhcNMjUwODI0MTAwMTA5WjAzMTEwLwYDVQQD
Eyg5OGRkZGJhZWRhNWRjMDk3YjI3OWFhZTRmZjE2YTU3ZTM2MjNhZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqXi0Ssewplv1p9dSTWxLhWF3wuU
nnStBxuINYlJuFbqy7Rf50N7C9eVJ+haJKi/u7ZoEP8kswE12zEvQ9FcHOQ8pqPz
rB2BwjQX5bgoc3NDOkhuduVRj/oEeDOCYb2CfSPQjjGLF+3Hzd+wELripLIkMAfn
N893SUOdWtErQQ34JmJm1wRII9if6YfwD+GmBZk9Ac2RpHIHciX46x8A8Virn67H
IUjdCaMsATrdC1kJxs4zn3gjlycHaQOV4U+HYNecraYBmzPvs8fAk613QbyMyYq3
MxDsor0Q7KN17wuscmdPNuwgBcnziFMt5c1ajzILmS5TAJD57aPMWljA0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjd267aXcCXsnmq5P8WpX42I6+iMB8GA1UdIwQY
MBaAFP8+09TUe46CX7/QeUgvegwh3JHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2Mzct
NWIwOWE2NzQzMzc1LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2MzctNWIwOWE2NzQzMzc1
LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGh7oadx6
7h4YtZ/O0iDCiHdGP699ZVWCQ/ip5Y34XZw1GYQExeOs2XTANls3hp3OTJDufEbh
s+wBH2dH58yGo9GFpsuvgOsgGoftOCuHD0MHeDeGn74vn0wiujBK6NQFCIpuUEXa
sf+gEfKXefX4qufwD576tWQZAl0xs2JOV+q5YIApowAVf1IX1V+wjzvMaYSNtTJr
/Sy9qiLyIBxHhd/EObnAzJneu9AqU7VmU8jo5WC93z4nIhD9nNQ3XgUkHutEzGt1
c93aIhLIdqKKoRD2i8RUIqKt8Phsnz+/DIintLi9m+HeYMUgxJTLdl8KfU8NTtXc
2CvAlnYPkJro8g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:50:03 2025 by rpki-client