Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: 3g9ElHRteOCpzggr9FEgNklsyytqgDkrOaorV33aLK0=
Subject key identifier: 91:52:41:DB:55:B6:55:C7:1B:4A:D2:A6:50:BC:D4:F9:09:68:49:3D
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 0198D6612FD35B46451A6D301A147FA64CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: veZ6HZJDXQ0lKfMWGSnEoP+j/Ub/YyFLkh49JMGKXs0=)
2: cBAS0GUhF4mz2fqaOHRlVgN3CFs.roa (hash: Lp1yFkf1vOWXjEEeUSdOv9NCeGF4SfR636ANc/ZvdMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2f:d3:5b:46:45:1a:6d:30:1a:14:7f:a6:4c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=915241db55b655c71b4ad2a650bcd4f90968493d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:fa:60:14:f3:e7:12:b1:db:98:22:0b:bc:
2c:94:07:86:c7:f2:1c:2b:51:e8:b9:99:7e:13:5c:
b9:80:19:67:6d:5f:bf:0b:17:4f:6b:2a:a6:5f:6f:
9a:56:04:1a:68:5b:88:cc:1d:e1:ff:65:c2:ba:44:
0b:1f:e9:54:a4:52:4a:cd:82:39:48:28:46:ce:7f:
69:b3:d1:ab:a1:1c:83:0b:c0:8b:d7:e0:c6:7f:a8:
6c:da:8d:74:66:7a:60:09:23:8d:28:ec:44:1a:a6:
b5:82:8f:28:2c:57:2b:1a:00:85:a5:1b:0e:02:e4:
e8:6e:59:27:27:ea:4d:58:91:8c:a2:8d:29:e6:1a:
86:3a:88:cd:ca:52:73:88:bc:cc:1f:51:18:02:e1:
44:f6:29:de:95:67:0e:c9:58:e1:00:60:e7:65:40:
e8:19:c3:e0:91:b4:03:80:4c:fb:f2:c1:d6:19:7a:
93:43:6a:58:33:f5:5b:2a:4a:0f:3e:de:fd:0b:2e:
88:70:b1:2a:8e:50:52:ce:1e:30:7a:41:31:18:51:
5a:87:b3:52:d4:25:09:ea:b6:27:f4:84:e2:c6:93:
45:f7:8d:5b:f8:8a:ae:b8:6a:09:06:d7:69:08:83:
60:a5:9d:a0:be:3d:fa:d2:66:db:46:c3:7d:01:69:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:52:41:DB:55:B6:55:C7:1B:4A:D2:A6:50:BC:D4:F9:09:68:49:3D
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:47:82:4f:89:4c:ff:24:d3:73:f5:4d:de:11:d6:38:4c:ec:
ae:49:e3:73:8d:ed:62:e6:09:6a:cd:ca:6b:94:cc:8b:e4:62:
85:42:5c:51:bd:a3:30:13:80:a5:91:f5:07:af:f3:6c:70:53:
64:08:6e:01:15:85:44:5b:8b:8e:3a:1f:00:b1:09:e5:3a:49:
fd:55:b1:63:af:03:27:82:9b:73:f2:22:8f:1d:6e:43:a6:06:
de:3c:5b:ba:24:43:56:b7:6c:9c:23:aa:63:68:38:f0:8b:ae:
cc:17:53:c7:49:cb:ca:33:02:8f:1a:f3:10:63:28:b3:32:8a:
b6:d3:63:7e:4d:00:a8:a7:fa:bd:75:74:f4:70:b9:0f:88:7b:
b8:84:53:1b:ae:20:57:8b:88:3d:5b:0d:6b:89:92:99:b1:d4:
2a:fa:b5:54:5e:e2:4f:ca:c3:fa:0e:d7:1b:d2:6d:00:0a:7a:
d1:88:3b:10:21:e3:d7:4b:4c:20:f8:bc:69:c0:1b:f9:3a:e2:
2b:52:7b:07:76:33:08:01:a1:4f:46:1b:c3:09:43:16:f4:57:
e7:a1:2a:62:82:97:32:ba:31:15:8d:03:1f:77:dc:47:d4:e7:
9c:e3:1b:00:b7:be:14:0b:7c:0f:49:af:50:1a:fc:8d:00:fd:
45:7a:80:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYS/TW0ZFGm0wGhR/pkzwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzIzMjVkMmQyMTk3NDY2OWM0ODhmOWViYWE2YmJiOTJj
ZDVmZWQwHhcNMjUwODIzMTAwMjI5WhcNMjUwODI0MTAwMjI5WjAzMTEwLwYDVQQD
Eyg5MTUyNDFkYjU1YjY1NWM3MWI0YWQyYTY1MGJjZDRmOTA5Njg0OTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbD6YBTz5xKx25giC7wslAeGx/Ic
K1HouZl+E1y5gBlnbV+/CxdPayqmX2+aVgQaaFuIzB3h/2XCukQLH+lUpFJKzYI5
SChGzn9ps9GroRyDC8CL1+DGf6hs2o10ZnpgCSONKOxEGqa1go8oLFcrGgCFpRsO
AuToblknJ+pNWJGMoo0p5hqGOojNylJziLzMH1EYAuFE9inelWcOyVjhAGDnZUDo
GcPgkbQDgEz78sHWGXqTQ2pYM/VbKkoPPt79Cy6IcLEqjlBSzh4wekExGFFah7NS
1CUJ6rYn9ITixpNF941b+IquuGoJBtdpCINgpZ2gvj360mbbRsN9AWkXgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFSQdtVtlXHG0rSplC81PkJaEk9MB8GA1UdIwQY
MBaAFPVyMl0tIZdGacSI+euqa7uSzV/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hYzAzODUtMjA5MC00NzA0LThlMDEt
M2U2MmU5ZTc4OTA2LzEvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hYzAzODUtMjA5MC00NzA0LThlMDEtM2U2MmU5ZTc4OTA2
LzEvOVhJeVhTMGhsMFpweElqNTY2cHJ1NUxOWC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0eCT4lM
/yTTc/VN3hHWOEzsrknjc43tYuYJas3Ka5TMi+RihUJcUb2jMBOApZH1B6/zbHBT
ZAhuARWFRFuLjjofALEJ5TpJ/VWxY68DJ4Kbc/Iijx1uQ6YG3jxbuiRDVrdsnCOq
Y2g48IuuzBdTx0nLyjMCjxrzEGMoszKKttNjfk0AqKf6vXV09HC5D4h7uIRTG64g
V4uIPVsNa4mSmbHUKvq1VF7iT8rD+g7XG9JtAAp60Yg7ECHj10tMIPi8acAb+Tri
K1J7B3YzCAGhT0YbwwlDFvRX56EqYoKXMroxFY0DH3fcR9TnnOMbALe+FAt8D0mv
UBr8jQD9RXqASQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:38:12 2025 by rpki-client