Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: m+7cWbP+RSXl/UTUE4QSBd9NNiozPUTfRSh3kUP9dzg=
Subject key identifier: E8:F6:5E:54:3D:D0:20:4C:72:92:8D:7C:9D:B6:5C:C2:E5:0C:FC:E9
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 0198D6CD0A2EC6FD41E1B6E4E13E793C87A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:00:18 +0000
Manifest this update: Sat 23 Aug 2025 12:00:18 +0000
Manifest next update: Sun 24 Aug 2025 12:00:18 +0000
Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=)
2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: w4WuXRCJKJZvmrizPoONKqQYi6yKVgYDTzUJ0y0UVtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:0a:2e:c6:fd:41:e1:b6:e4:e1:3e:79:3c:87:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Aug 23 12:00:18 2025 GMT
Not After : Aug 24 12:00:18 2025 GMT
Subject: CN=e8f65e543dd0204c72928d7c9db65cc2e50cfce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:d7:c1:32:e5:1f:00:e1:58:e2:ca:5e:cf:6a:
22:21:ba:f8:d0:e7:01:e6:9e:a0:ad:a1:24:e2:0d:
3a:80:fe:18:67:fb:a8:a9:ca:f1:4a:86:43:28:ba:
43:88:b7:ee:34:d9:9b:15:12:72:52:3b:97:29:a3:
80:5f:d4:66:a1:68:37:0e:2b:a0:73:1a:e6:03:ce:
eb:dd:4a:cf:9c:db:50:4f:1c:e8:6b:81:a4:2a:c5:
7a:23:10:f7:c8:81:0d:d8:0e:39:79:d2:88:4d:d3:
62:16:b0:c7:e7:0c:c2:e9:a9:7c:15:f7:1a:3d:72:
3f:dd:7a:19:62:ac:ba:18:0f:33:0e:6f:70:17:b5:
d1:98:c9:1d:55:fa:3c:70:55:d9:13:e1:50:45:30:
36:40:7e:94:ae:be:5b:36:b9:c0:f7:59:6b:e0:41:
c9:de:f3:09:20:52:cd:04:91:80:f7:31:69:ec:a1:
e0:1e:8b:c1:fa:02:62:b9:0a:4b:52:a5:db:77:4f:
c5:b9:fa:b1:06:48:94:ce:ec:2f:5c:93:ad:8a:b8:
9c:41:df:d2:bd:c9:0f:db:b2:6a:c6:eb:97:ee:83:
04:4a:11:97:37:e2:23:96:47:5a:8c:8f:4d:37:c2:
e2:4d:6a:a5:3d:f8:13:fc:b3:97:4c:be:cd:55:e0:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F6:5E:54:3D:D0:20:4C:72:92:8D:7C:9D:B6:5C:C2:E5:0C:FC:E9
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:42:ab:54:ca:e9:9d:61:0d:d4:48:32:40:4a:55:0c:49:87:
7a:0b:9d:70:cc:58:45:6b:d9:3f:11:ce:da:97:43:af:65:c0:
ce:d5:04:6a:54:f6:31:2e:45:22:07:57:c7:8f:ef:05:fe:3b:
2d:6e:e8:e3:b2:bd:99:b7:34:23:b3:92:c5:a6:2c:8a:59:90:
11:2d:91:d0:16:2c:60:12:1a:55:70:e9:a1:47:a2:da:f1:61:
e0:83:69:3b:7e:bb:28:92:13:1d:3c:4c:6a:f8:42:af:76:d2:
05:0a:a0:80:9e:66:c9:15:97:ee:39:96:a6:7f:07:4a:0f:54:
ab:1a:ac:49:80:83:b0:69:ec:69:a5:d5:52:46:d4:7f:64:59:
be:4c:04:05:cd:88:9e:e3:d2:81:e9:64:d5:64:1e:bd:9a:76:
3f:64:a6:3b:36:0f:65:9c:76:e8:58:a9:cc:c3:f1:ce:f5:2e:
f8:99:3e:40:3f:13:5f:e2:50:b9:13:72:03:16:3c:c0:2c:77:
fa:37:4b:50:cf:44:3c:6a:e9:9a:0c:c3:1d:eb:05:a9:5a:58:
9d:d7:ba:a3:fc:a5:35:27:42:4b:9c:a1:a2:9e:2c:9b:0c:bf:
42:b1:fc:5a:31:91:8d:e6:b2:32:ba:61:33:7d:7c:85:63:55:
60:c1:fa:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzQouxv1B4bbk4T55PIejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNTNiMDI5NGQzYzhkYjE1MzA2YWIxMDlkNTA2ZGE3NGFl
NzA5NzkwHhcNMjUwODIzMTIwMDE4WhcNMjUwODI0MTIwMDE4WjAzMTEwLwYDVQQD
EyhlOGY2NWU1NDNkZDAyMDRjNzI5MjhkN2M5ZGI2NWNjMmU1MGNmY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/NfBMuUfAOFY4spez2oiIbr40OcB
5p6graEk4g06gP4YZ/uoqcrxSoZDKLpDiLfuNNmbFRJyUjuXKaOAX9RmoWg3Diug
cxrmA87r3UrPnNtQTxzoa4GkKsV6IxD3yIEN2A45edKITdNiFrDH5wzC6al8Ffca
PXI/3XoZYqy6GA8zDm9wF7XRmMkdVfo8cFXZE+FQRTA2QH6Urr5bNrnA91lr4EHJ
3vMJIFLNBJGA9zFp7KHgHovB+gJiuQpLUqXbd0/FufqxBkiUzuwvXJOtiricQd/S
vckP27JqxuuX7oMEShGXN+IjlkdajI9NN8LiTWqlPfgT/LOXTL7NVeAx2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOj2XlQ90CBMcpKNfJ22XMLlDPzpMB8GA1UdIwQY
MBaAFHFTsClNPI2xUwarEJ1QbadK5wl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjIt
MjI5NGNkZGE2YTQwLzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjItMjI5NGNkZGE2YTQw
LzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEKrVMrp
nWEN1EgyQEpVDEmHegudcMxYRWvZPxHO2pdDr2XAztUEalT2MS5FIgdXx4/vBf47
LW7o47K9mbc0I7OSxaYsilmQES2R0BYsYBIaVXDpoUei2vFh4INpO367KJITHTxM
avhCr3bSBQqggJ5myRWX7jmWpn8HSg9UqxqsSYCDsGnsaaXVUkbUf2RZvkwEBc2I
nuPSgelk1WQevZp2P2SmOzYPZZx26FipzMPxzvUu+Jk+QD8TX+JQuRNyAxY8wCx3
+jdLUM9EPGrpmgzDHesFqVpYnde6o/ylNSdCS5yhop4smwy/QrH8WjGRjeayMrph
M318hWNVYMH6Zw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:12 2025 by rpki-client