Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: WAsnbT9RjZ4vEO6yp+tMk9CJ8dEyvka9wyqup47NTRo=
Subject key identifier: 9B:E1:63:8D:55:1D:85:C6:D9:37:1E:D1:32:3E:D3:1B:6D:1D:A2:E9
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 0198D583D91355A08EED9B3C553EEC431226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:44 +0000
Manifest this update: Sat 23 Aug 2025 06:00:44 +0000
Manifest next update: Sun 24 Aug 2025 06:00:44 +0000
Files and hashes: 1: 5dz9Tw4bpiGr43q4HQtTf_7BsP0.roa (hash: 0VcdjRI2LyeRRm3QIQdFN5UYWsj35tdfOvua8dhZWaw=)
2: C-j834veFsj1jsTX7J6_TWAlAyM.roa (hash: 1/vufO4pJcMpVCQ6/N50OfHCZoID4FXv7ykneVDspNU=)
3: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: 0EIzn1JaGNlw2AsjKyJKfVevohQCKCC/26+B/j97h9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d9:13:55:a0:8e:ed:9b:3c:55:3e:ec:43:12:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Aug 23 06:00:44 2025 GMT
Not After : Aug 24 06:00:44 2025 GMT
Subject: CN=9be1638d551d85c6d9371ed1323ed31b6d1da2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:89:ca:5e:2a:28:00:7d:aa:c8:02:b6:1b:
4d:6f:e3:ad:16:36:f7:39:81:c3:94:12:ce:6a:24:
49:20:ee:d2:03:52:7c:6a:25:6f:77:25:5e:ae:4e:
29:ca:32:79:2f:6d:d2:f2:8a:e6:25:36:8d:ab:5f:
98:cf:c1:99:82:25:a0:f8:89:09:69:b8:10:e2:93:
ac:ed:f3:4e:14:c8:37:55:af:41:c5:23:6c:49:d6:
09:88:3f:35:ed:db:94:f9:09:1e:99:b5:78:e2:89:
91:b2:95:49:ca:20:df:fb:e3:a4:da:ec:a7:85:72:
40:e0:b2:e3:ab:bb:3d:d3:79:78:f0:ea:4e:aa:24:
ea:24:47:db:34:cd:6c:10:58:db:00:4b:d4:0d:dc:
dc:fc:a6:46:15:0b:5b:6d:d1:34:95:b8:68:44:33:
61:c2:69:8b:77:c7:26:9c:39:74:87:09:ef:9c:ed:
79:2d:1e:2e:87:12:2c:8f:f0:a5:2b:4f:eb:52:a0:
b6:4c:9a:f0:1b:f2:31:10:a0:d0:f4:76:71:ff:08:
6e:04:b9:c8:04:eb:ff:fd:f5:28:4a:35:1d:b9:ae:
52:b2:ac:80:f3:4c:a7:2b:21:cb:c5:e3:be:44:49:
cf:4f:4c:43:97:f6:61:0f:e2:37:21:fb:e3:b1:2b:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E1:63:8D:55:1D:85:C6:D9:37:1E:D1:32:3E:D3:1B:6D:1D:A2:E9
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cb:5c:14:01:03:06:5c:b0:10:de:6a:98:6d:e6:76:cb:b2:
1f:ad:85:5a:11:cb:58:ec:aa:65:15:90:bf:a2:1b:3e:fd:89:
02:f0:0c:28:4f:97:20:c4:28:38:25:64:6e:84:f3:d6:04:ca:
77:cd:ec:05:ea:4f:48:9b:30:6b:41:ee:bd:c6:88:2f:fa:d3:
80:00:7d:d6:10:9e:1b:fd:16:8b:0b:ee:0f:97:a4:d7:ba:e6:
8b:4e:21:30:64:98:9c:38:84:88:c0:74:64:91:e1:1a:c7:d0:
c1:b3:75:03:b8:d2:6b:1c:24:c0:11:de:a0:35:39:d0:48:bf:
c9:3e:d2:f5:ca:dc:bc:59:e2:8e:ac:b7:17:12:c0:4e:e2:23:
93:7b:c2:19:07:7e:df:43:b4:f1:25:59:2a:24:3a:48:06:fe:
69:e2:3d:3c:f9:ac:fd:48:86:92:d5:43:37:29:2d:d5:ac:bf:
32:6f:77:8c:a0:99:35:c3:8b:d1:14:23:f0:77:2b:58:c3:d7:
45:39:f1:0d:18:6b:5f:2a:cb:e9:d5:87:c1:6a:67:3f:f5:d8:
2d:93:c1:2b:e1:34:0a:ab:07:1e:77:08:60:09:f9:c7:10:06:
c0:17:ef:64:4f:f1:0c:d5:61:83:7b:0e:22:c3:13:8a:90:cf:
cc:fa:52:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg9kTVaCO7Zs8VT7sQxImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OWM1ODFhZmYzZDBhOTAxNzhjZmFiNTY1YTM4OGNjZDli
YzAxY2UwHhcNMjUwODIzMDYwMDQ0WhcNMjUwODI0MDYwMDQ0WjAzMTEwLwYDVQQD
Eyg5YmUxNjM4ZDU1MWQ4NWM2ZDkzNzFlZDEzMjNlZDMxYjZkMWRhMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2CJyl4qKAB9qsgCthtNb+OtFjb3
OYHDlBLOaiRJIO7SA1J8aiVvdyVerk4pyjJ5L23S8ormJTaNq1+Yz8GZgiWg+IkJ
abgQ4pOs7fNOFMg3Va9BxSNsSdYJiD817duU+QkembV44omRspVJyiDf++Ok2uyn
hXJA4LLjq7s903l48OpOqiTqJEfbNM1sEFjbAEvUDdzc/KZGFQtbbdE0lbhoRDNh
wmmLd8cmnDl0hwnvnO15LR4uhxIsj/ClK0/rUqC2TJrwG/IxEKDQ9HZx/whuBLnI
BOv//fUoSjUdua5SsqyA80ynKyHLxeO+REnPT0xDl/ZhD+I3IfvjsSu96wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvhY41VHYXG2Tce0TI+0xttHaLpMB8GA1UdIwQY
MBaAFGmcWBr/PQqQF4z6tWWjiMzZvAHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUt
ZTVkZGQyYmI1MWM1LzEvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUtZTVkZGQyYmI1MWM1
LzEvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8tcFAED
BlywEN5qmG3mdsuyH62FWhHLWOyqZRWQv6IbPv2JAvAMKE+XIMQoOCVkboTz1gTK
d83sBepPSJswa0HuvcaIL/rTgAB91hCeG/0WiwvuD5ek17rmi04hMGSYnDiEiMB0
ZJHhGsfQwbN1A7jSaxwkwBHeoDU50Ei/yT7S9crcvFnijqy3FxLATuIjk3vCGQd+
30O08SVZKiQ6SAb+aeI9PPms/UiGktVDNykt1ay/Mm93jKCZNcOL0RQj8HcrWMPX
RTnxDRhrXyrL6dWHwWpnP/XYLZPBK+E0CqsHHncIYAn5xxAGwBfvZE/xDNVhg3sO
IsMTipDPzPpSgg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:31 2025 by rpki-client