Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier: x4QyhQCQZ5TFOWobNNGEj3p6EwZVCF58rb4rn6jvOyc=
Subject key identifier: AD:2C:7B:5B:F0:DB:DC:34:5B:36:B1:7F:39:5E:D2:93:5B:80:2B:53
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 0198D5F1C3109FF6E26B8384C49443B02FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:47 +0000
Manifest this update: Sat 23 Aug 2025 08:00:47 +0000
Manifest next update: Sun 24 Aug 2025 08:00:47 +0000
Files and hashes: 1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: VQ6rD+rTfgFTnJPMLhf9fK7IHp0qzOETr0A38rwfamM=)
2: eEvrSYjLUGg5GhW7JvZI3HWYfcI.roa (hash: GMSu0KMyD4SKyVpe+o1Z3AHIVpLBmKGk+5TuUmweIis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c3:10:9f:f6:e2:6b:83:84:c4:94:43:b0:2f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: Aug 23 08:00:47 2025 GMT
Not After : Aug 24 08:00:47 2025 GMT
Subject: CN=ad2c7b5bf0dbdc345b36b17f395ed2935b802b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:5b:5a:7f:ad:76:cb:5d:59:9a:94:b0:61:
04:88:aa:03:4e:cd:7b:c4:b3:50:8c:6a:db:6e:b4:
49:be:c9:f0:89:f8:1e:8a:ef:0f:3e:9d:34:25:a2:
01:8f:15:cf:86:d8:4e:50:d0:00:01:42:dd:9b:c1:
4f:08:83:87:b5:19:32:80:de:3a:65:db:38:74:45:
d5:d5:4a:c0:65:da:0e:19:45:e7:2d:47:3f:51:e2:
88:64:cc:6b:f8:68:18:b8:6d:63:7c:73:40:79:79:
1f:b1:24:ab:6c:e0:97:1c:b1:80:1c:95:c0:d7:6e:
f4:57:4f:91:41:a1:3a:7e:5c:3e:87:ea:16:63:ba:
03:02:0b:12:6d:8e:70:4a:45:e6:85:f9:bf:1e:b1:
33:b2:9d:d6:5c:d2:4f:30:c9:2f:bb:e5:b7:b3:dc:
79:8c:55:78:81:d6:ba:24:3d:00:68:6f:1b:75:8f:
1f:c4:b5:eb:3c:90:32:07:c9:4d:5d:c0:75:28:24:
d7:dd:a1:ba:43:0c:28:66:c8:24:c5:32:26:fd:f0:
cc:22:5e:58:90:7a:31:a6:67:a7:cb:1e:b8:ef:b5:
23:2b:8e:ff:02:90:da:af:b1:ea:30:9b:17:47:ee:
fe:1d:0e:fb:b7:46:c8:a1:27:b3:f3:5a:9d:69:90:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:7B:5B:F0:DB:DC:34:5B:36:B1:7F:39:5E:D2:93:5B:80:2B:53
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3e:10:2c:95:6b:6c:38:95:b7:b0:e6:76:5b:ec:01:ae:68:
1e:29:df:62:fb:18:4c:69:fc:1a:0b:b1:15:10:f8:fc:be:b2:
2b:33:5c:fa:14:06:1a:a4:a2:fd:ac:89:bb:1b:68:41:62:69:
75:86:00:b5:cb:e5:a8:2e:98:76:cb:82:e8:f3:64:60:e8:c4:
fd:f7:23:08:00:9a:cd:63:c2:7f:bd:32:d0:04:1e:06:82:7c:
75:51:05:85:aa:00:07:69:28:07:d6:37:9d:23:06:06:8a:5e:
d1:6a:2d:3d:e9:2d:b5:6a:7e:e3:71:4d:9d:58:c9:32:a2:5d:
4c:2e:2a:da:42:dc:69:a7:eb:80:cc:20:2e:ba:61:bb:93:48:
fb:93:da:5d:9b:40:8c:3c:30:af:47:de:49:c3:02:a6:24:54:
45:56:a5:d9:30:e2:94:3b:51:d3:75:1f:69:2c:5a:a7:16:da:
0c:6d:09:e4:b6:7b:e9:f5:61:d3:c4:ad:8a:8c:db:01:a9:c9:
f7:a3:f5:cf:43:59:9d:41:ea:05:b5:8c:19:1f:4b:bb:f9:6e:
55:0a:9d:36:0c:4f:87:f3:38:70:51:cc:b4:20:db:b3:22:6f:
a5:f6:12:64:fc:95:e2:ee:43:76:60:81:a1:39:aa:cd:54:3f:
8b:4b:61:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8cMQn/bia4OExJRDsC/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOTFkN2Q1ZjVjZTU3OTI2YzkwMzk3M2VjYmYxMTJiZmFl
MTUzMGQwHhcNMjUwODIzMDgwMDQ3WhcNMjUwODI0MDgwMDQ3WjAzMTEwLwYDVQQD
EyhhZDJjN2I1YmYwZGJkYzM0NWIzNmIxN2YzOTVlZDI5MzViODAyYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotRbWn+tdstdWZqUsGEEiKoDTs17
xLNQjGrbbrRJvsnwifgeiu8PPp00JaIBjxXPhthOUNAAAULdm8FPCIOHtRkygN46
Zds4dEXV1UrAZdoOGUXnLUc/UeKIZMxr+GgYuG1jfHNAeXkfsSSrbOCXHLGAHJXA
1270V0+RQaE6flw+h+oWY7oDAgsSbY5wSkXmhfm/HrEzsp3WXNJPMMkvu+W3s9x5
jFV4gda6JD0AaG8bdY8fxLXrPJAyB8lNXcB1KCTX3aG6QwwoZsgkxTIm/fDMIl5Y
kHoxpmenyx6477UjK47/ApDar7HqMJsXR+7+HQ77t0bIoSez81qdaZAkcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0se1vw29w0Wzaxfzle0pNbgCtTMB8GA1UdIwQY
MBaAFGyR19X1zleSbJA5c+y/ESv64VMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZDNmYzgtNDdkYy00YTM2LTg3MzQt
NDVkODRkYTM5ODc0LzEvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kZDNmYzgtNDdkYy00YTM2LTg3MzQtNDVkODRkYTM5ODc0
LzEvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbz4QLJVr
bDiVt7DmdlvsAa5oHinfYvsYTGn8GguxFRD4/L6yKzNc+hQGGqSi/ayJuxtoQWJp
dYYAtcvlqC6YdsuC6PNkYOjE/fcjCACazWPCf70y0AQeBoJ8dVEFhaoAB2koB9Y3
nSMGBope0WotPekttWp+43FNnVjJMqJdTC4q2kLcaafrgMwgLrphu5NI+5PaXZtA
jDwwr0feScMCpiRURVal2TDilDtR03UfaSxapxbaDG0J5LZ76fVh08StiozbAanJ
96P1z0NZnUHqBbWMGR9Lu/luVQqdNgxPh/M4cFHMtCDbsyJvpfYSZPyV4u5DdmCB
oTmqzVQ/i0thYg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:32 2025 by rpki-client