Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
File: _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json)
Hash identifier: eF+8MYIQQNUTraBu1iHUSaZKmACYZX3mGaILispFSns=
Subject key identifier: B4:BD:29:3D:FA:8D:0D:35:52:C5:6A:EE:56:F2:95:CA:98:78:1B:58
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial: 0198D5F169013A9D40C392817B6C56D0DB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
Manifest number: 160A
Signing time: Sat 23 Aug 2025 08:00:24 +0000
Manifest this update: Sat 23 Aug 2025 08:00:24 +0000
Manifest next update: Sun 24 Aug 2025 08:00:24 +0000
Files and hashes: 1: FasPE0L4fE1899bsu_j-7tmu6ok.roa (hash: Qhda7nOss3uAhstVaL86g/VtZIZV1OO3A8B7YvZv5Tg=)
2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: l5mZTIPRtdn53a38n/6OPWPXJH55qGVOU0V6zpreNXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:69:01:3a:9d:40:c3:92:81:7b:6c:56:d0:db:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Validity
Not Before: Aug 23 08:00:24 2025 GMT
Not After : Aug 24 08:00:24 2025 GMT
Subject: CN=b4bd293dfa8d0d3552c56aee56f295ca98781b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:43:df:85:e2:b1:98:1c:02:56:56:9a:16:c9:
d9:30:91:e2:bf:d2:e1:3d:d9:44:c0:fb:41:8b:f9:
78:86:6a:17:9b:91:c6:78:fa:a7:7b:77:f4:8d:75:
41:8a:c0:ce:27:2a:3d:19:ee:36:44:7d:80:87:ed:
f8:a7:dc:aa:5b:a7:af:cc:0f:be:16:2d:5f:eb:67:
b3:18:00:89:1b:9a:64:70:f4:4e:0b:62:34:3c:03:
97:f9:d1:f9:99:21:f3:06:11:dd:d7:97:7e:ca:3b:
5f:65:e4:9d:fd:e5:54:56:1e:47:20:4f:e3:42:b9:
0b:57:4d:06:17:ab:81:03:4b:7e:36:88:ae:46:21:
a0:c7:23:45:fb:41:a0:a4:e7:1f:4c:cf:bc:10:ab:
60:24:bd:64:8b:c1:6b:3b:00:e9:8a:b0:07:16:3a:
62:71:e5:a3:0b:bf:9b:66:22:59:f2:e5:84:71:a4:
91:33:ee:8d:e9:a3:f7:0f:41:1f:c4:49:41:ef:e7:
ac:7f:0f:e6:7a:a0:6e:13:fa:08:14:04:fb:79:b1:
5c:12:c9:dc:33:c7:9e:ac:de:0e:5e:1e:6e:8c:b7:
1d:1b:76:20:cf:6d:1a:0b:48:c5:02:4a:4f:03:45:
19:e7:62:cf:c5:d4:8d:aa:37:8f:f2:77:fb:ec:32:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BD:29:3D:FA:8D:0D:35:52:C5:6A:EE:56:F2:95:CA:98:78:1B:58
X509v3 Authority Key Identifier:
keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:38:86:b7:1e:b2:b0:e8:21:55:c5:0b:ee:14:5e:b9:89:73:
03:b3:cc:22:1c:44:6c:6d:99:be:1a:09:30:64:59:2c:8d:ad:
22:29:58:80:65:aa:ce:88:05:69:28:e6:0d:e0:99:50:ca:aa:
14:5b:27:3d:bd:29:39:66:83:61:4e:9d:ab:5a:f1:37:a8:01:
7d:23:d7:2b:36:29:b5:52:f4:45:c8:0c:34:d1:71:82:28:a1:
ac:cf:ef:d1:02:47:d7:c5:3d:f8:2b:85:a6:db:e3:24:28:bc:
c3:01:df:82:84:43:cc:fa:61:76:f3:85:ae:47:9a:db:08:c8:
78:fb:ed:d8:0f:91:e3:30:02:b2:a4:f0:1b:da:b5:8e:9b:c8:
59:0f:5a:73:7b:ff:f3:28:95:c8:7a:a0:64:07:61:90:7e:9f:
e7:3b:6b:e1:f3:e1:ed:91:b7:11:f7:7e:df:cc:22:83:67:02:
bd:27:71:2a:2e:5b:fd:42:b5:a2:bc:83:56:5b:62:64:ec:4c:
03:1e:9f:9c:2d:2f:00:25:be:82:30:46:16:5c:dc:2d:84:61:
78:37:38:06:86:01:26:1a:95:d1:0f:f1:9d:a9:8c:bc:3a:7e:
1a:66:cd:cd:15:aa:b0:38:cd:06:06:c0:38:b7:2f:5a:22:4c:
aa:90:72:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8WkBOp1Aw5KBe2xW0NtUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOWJlYjAxOTJkMGQzNDZhNWU2ODU4YWE3NDRiMDQzNGZl
ZDMxODkwHhcNMjUwODIzMDgwMDI0WhcNMjUwODI0MDgwMDI0WjAzMTEwLwYDVQQD
EyhiNGJkMjkzZGZhOGQwZDM1NTJjNTZhZWU1NmYyOTVjYTk4NzgxYjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kPfheKxmBwCVlaaFsnZMJHiv9Lh
PdlEwPtBi/l4hmoXm5HGePqne3f0jXVBisDOJyo9Ge42RH2Ah+34p9yqW6evzA++
Fi1f62ezGACJG5pkcPROC2I0PAOX+dH5mSHzBhHd15d+yjtfZeSd/eVUVh5HIE/j
QrkLV00GF6uBA0t+NoiuRiGgxyNF+0GgpOcfTM+8EKtgJL1ki8FrOwDpirAHFjpi
ceWjC7+bZiJZ8uWEcaSRM+6N6aP3D0EfxElB7+esfw/meqBuE/oIFAT7ebFcEsnc
M8eerN4OXh5ujLcdG3Ygz20aC0jFAkpPA0UZ52LPxdSNqjeP8nf77DKqFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS9KT36jQ01UsVq7lbylcqYeBtYMB8GA1UdIwQY
MBaAFPyb6wGS0NNGpeaFiqdEsENP7TGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yMTVkZTYtNDE3Ni00MmQyLThkYTIt
NmI3MDE2OWNkYTFiLzEvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yMTVkZTYtNDE3Ni00MmQyLThkYTItNmI3MDE2OWNkYTFi
LzEvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWziGtx6y
sOghVcUL7hReuYlzA7PMIhxEbG2ZvhoJMGRZLI2tIilYgGWqzogFaSjmDeCZUMqq
FFsnPb0pOWaDYU6dq1rxN6gBfSPXKzYptVL0RcgMNNFxgiihrM/v0QJH18U9+CuF
ptvjJCi8wwHfgoRDzPphdvOFrkea2wjIePvt2A+R4zACsqTwG9q1jpvIWQ9ac3v/
8yiVyHqgZAdhkH6f5ztr4fPh7ZG3Efd+38wig2cCvSdxKi5b/UK1oryDVltiZOxM
Ax6fnC0vACW+gjBGFlzcLYRheDc4BoYBJhqV0Q/xnamMvDp+GmbNzRWqsDjNBgbA
OLcvWiJMqpByDg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:31 2025 by rpki-client