Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: FkSTLXpGT6nPcmzjMizCk/KOc/EHGKpvrVY/5kFLPS8=
Subject key identifier: C3:0B:71:40:41:25:7C:71:42:F1:CF:A4:96:9E:AE:D8:2E:7B:92:90
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 0198D4E0976FA92566E377BACE123259C779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:25 +0000
Manifest this update: Sat 23 Aug 2025 03:02:25 +0000
Manifest next update: Sun 24 Aug 2025 03:02:25 +0000
Files and hashes: 1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: uj3FxlUZHLBWL3pmYB9dNyoADclxR0id1H7PmMmmcQo=)
2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=)
3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:97:6f:a9:25:66:e3:77:ba:ce:12:32:59:c7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Aug 23 03:02:25 2025 GMT
Not After : Aug 24 03:02:25 2025 GMT
Subject: CN=c30b714041257c7142f1cfa4969eaed82e7b9290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:fb:b4:1f:42:be:59:77:9b:a5:7c:21:e7:
10:9c:49:7c:7d:2f:30:f8:8d:fd:66:28:a6:b9:d1:
b9:5e:c4:1f:2a:10:41:38:fa:de:4a:d9:71:a4:b6:
c3:db:a8:37:c3:23:43:19:a2:94:aa:50:d5:ee:2f:
29:f1:67:7a:64:e6:a7:22:5c:b2:03:3d:85:86:0c:
6c:56:9e:71:a2:d8:99:b5:3e:82:83:e6:e0:30:cf:
9e:7c:e3:63:6c:47:15:af:85:b0:a9:8d:b7:29:49:
4c:83:d6:06:d1:45:d6:8c:8c:32:e9:c4:0d:fa:73:
90:2a:67:68:69:47:8b:7f:50:1e:6f:a1:6a:ba:cc:
5a:f0:9b:3c:4d:c6:57:38:3a:14:d0:79:55:73:06:
7e:d0:3f:37:d6:fc:68:a1:7b:be:b3:99:dd:fe:ad:
53:ed:d5:c9:aa:97:ef:ff:a6:32:e9:5a:eb:0b:86:
0c:95:67:52:6b:0d:ec:37:da:56:22:f9:07:ab:0b:
e6:e4:61:61:12:36:af:d7:1b:3b:95:70:92:7e:50:
bf:c4:53:24:7e:6a:35:cb:37:e6:76:3e:d8:29:c1:
8b:1d:32:e5:6c:8c:ad:de:cb:52:0e:92:2a:32:f1:
89:8b:f8:94:7d:68:0b:75:62:94:d4:bf:34:68:6e:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0B:71:40:41:25:7C:71:42:F1:CF:A4:96:9E:AE:D8:2E:7B:92:90
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7e:5b:0e:d7:66:63:f4:84:00:7a:9f:77:4e:34:ae:99:54:
10:b8:12:7d:f0:39:7c:4b:e6:85:1a:ce:1e:e2:e6:2a:cc:b5:
69:09:35:11:bc:ee:38:94:f7:21:57:27:58:57:64:10:ee:70:
13:b9:db:eb:8d:ff:c2:f3:fb:78:5e:d3:dc:01:92:01:9a:d4:
8a:1e:3f:5e:b1:39:3e:9c:05:da:14:2a:c4:7d:44:5e:40:30:
0d:fe:94:ec:be:e0:6b:53:8f:0d:42:c2:45:fc:a9:ca:7f:bd:
4c:a8:05:28:ac:48:25:af:3d:6a:01:42:9b:96:a3:aa:cc:07:
1d:7d:bf:1e:32:89:8f:f9:30:43:ed:33:19:c7:ba:e4:ff:f1:
e3:8e:c0:e1:ae:84:c1:ee:40:74:c1:0a:9c:cc:d9:30:67:39:
3a:b6:f8:ca:65:b1:c7:b5:4a:c0:0c:dc:51:39:b4:09:7e:f0:
f2:ab:08:50:12:01:9b:2a:14:68:33:59:de:e4:80:a4:a8:dd:
c3:6e:ef:58:b6:09:dd:1e:59:9f:0d:0d:0c:f4:8c:34:34:81:
06:10:0e:ec:68:67:33:75:3e:14:19:5a:83:72:e9:89:ff:3e:
c1:c9:7a:1e:24:eb:b6:a5:82:48:bd:9e:28:e6:67:52:63:f5:
66:0f:ae:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4JdvqSVm43e6zhIyWcd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODVhNGQ1NjQyODNhN2ZkZGY2MzQ1Njk3ZDZiYzMzNzNh
MzIyNDYwHhcNMjUwODIzMDMwMjI1WhcNMjUwODI0MDMwMjI1WjAzMTEwLwYDVQQD
EyhjMzBiNzE0MDQxMjU3YzcxNDJmMWNmYTQ5NjllYWVkODJlN2I5MjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVT7tB9Cvll3m6V8IecQnEl8fS8w
+I39ZiimudG5XsQfKhBBOPreStlxpLbD26g3wyNDGaKUqlDV7i8p8Wd6ZOanIlyy
Az2FhgxsVp5xotiZtT6Cg+bgMM+efONjbEcVr4WwqY23KUlMg9YG0UXWjIwy6cQN
+nOQKmdoaUeLf1Aeb6Fqusxa8Js8TcZXODoU0HlVcwZ+0D831vxooXu+s5nd/q1T
7dXJqpfv/6Yy6VrrC4YMlWdSaw3sN9pWIvkHqwvm5GFhEjav1xs7lXCSflC/xFMk
fmo1yzfmdj7YKcGLHTLlbIyt3stSDpIqMvGJi/iUfWgLdWKU1L80aG7EOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMLcUBBJXxxQvHPpJaertgue5KQMB8GA1UdIwQY
MBaAFG+FpNVkKDp/3fY0VpfWvDNzoyJGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQt
MDYxZmMxYWViMTU4LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQtMDYxZmMxYWViMTU4
LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJn5bDtdm
Y/SEAHqfd040rplUELgSffA5fEvmhRrOHuLmKsy1aQk1EbzuOJT3IVcnWFdkEO5w
E7nb643/wvP7eF7T3AGSAZrUih4/XrE5PpwF2hQqxH1EXkAwDf6U7L7ga1OPDULC
Rfypyn+9TKgFKKxIJa89agFCm5ajqswHHX2/HjKJj/kwQ+0zGce65P/x447A4a6E
we5AdMEKnMzZMGc5Orb4ymWxx7VKwAzcUTm0CX7w8qsIUBIBmyoUaDNZ3uSApKjd
w27vWLYJ3R5Znw0NDPSMNDSBBhAO7GhnM3U+FBlag3Lpif8+wcl6HiTrtqWCSL2e
KOZnUmP1Zg+uyQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:59 2025 by rpki-client