Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
File: S2HMijZcxAOCox2tVPbLcj9YdYo.mft (raw, json)
Hash identifier: j8dsdl8zKicfnEMB067eEuyuFNvX3OsdkuXpGZ1mlPo=
Subject key identifier: 62:3D:1F:01:C0:82:B6:96:42:CD:7E:82:FE:B8:A5:5B:F1:90:6C:30
Authority key identifier: 4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
Certificate issuer: /CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Certificate serial: 0198D4E01C1CC0D160587EAFE5AC57903656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:01:53 +0000
Manifest this update: Sat 23 Aug 2025 03:01:53 +0000
Manifest next update: Sun 24 Aug 2025 03:01:53 +0000
Files and hashes: 1: 5dOeHmReGHpglp9CPLficnPxbRA.roa (hash: u/adm8/lzLOzXE337fHeCi8QttPIgGUNVZ/GPwCUh0o=)
2: S2HMijZcxAOCox2tVPbLcj9YdYo.crl (hash: 8zAZ7MlDDjMIOWk9LbnFPZ45tGz1r115EvNU8KQDWa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1c:1c:c0:d1:60:58:7e:af:e5:ac:57:90:36:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Validity
Not Before: Aug 23 03:01:53 2025 GMT
Not After : Aug 24 03:01:53 2025 GMT
Subject: CN=623d1f01c082b69642cd7e82feb8a55bf1906c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:4b:45:ea:b5:97:6c:61:31:cd:89:9e:4f:
2e:4c:73:60:2e:c3:dc:a9:fb:75:f3:82:ca:d2:9a:
6e:cb:f9:a1:0a:66:29:3e:ce:9e:50:8a:73:a7:37:
8c:ce:4a:59:a0:c9:09:80:d0:37:1b:38:3b:b6:00:
35:12:d5:95:c9:f5:12:0e:02:e8:fa:ca:eb:86:64:
13:61:9b:a7:10:19:b0:26:7a:68:fe:b6:6e:90:87:
a1:83:67:46:71:80:69:d8:65:b6:af:2e:6c:2f:16:
62:ea:c8:ca:a0:ab:60:20:d6:50:47:71:e5:f2:db:
a6:d5:0a:30:e1:22:a9:6d:a4:6a:79:b6:33:40:4b:
c1:2b:8d:bb:d8:a1:8b:47:b9:86:4c:d9:d1:70:2a:
0e:d9:d9:3f:0a:7d:b2:76:36:c5:f5:0b:32:97:a3:
c0:d1:80:07:87:2e:c6:2b:88:ad:6b:8a:68:a8:27:
ef:d6:19:be:cd:b9:c1:e8:e0:89:c5:dd:80:5e:18:
d8:0f:36:95:ae:3f:01:06:7e:33:80:d1:ff:2a:73:
bc:38:74:a4:bd:ef:08:24:84:15:36:02:b2:bf:f7:
d1:bb:99:ae:4a:39:50:43:02:42:fb:d3:df:87:48:
ab:33:ee:fb:16:16:5c:dc:37:91:77:6f:4f:dd:46:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3D:1F:01:C0:82:B6:96:42:CD:7E:82:FE:B8:A5:5B:F1:90:6C:30
X509v3 Authority Key Identifier:
keyid:4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:eb:d5:0e:25:4f:c1:08:29:c4:b0:0c:88:52:37:0c:eb:ed:
b6:4b:83:47:47:89:18:25:cc:a9:51:18:05:fe:c3:91:e1:5d:
a4:06:88:23:c8:17:9f:19:75:0e:fd:75:f0:af:92:05:c0:2f:
eb:7e:d2:58:dc:7a:09:bb:f2:0d:5a:2a:87:a5:4f:bd:b4:88:
5c:48:8e:1a:c6:4a:7c:eb:e2:7a:c6:48:68:87:c0:be:8b:50:
1a:4e:00:7f:4f:4a:fd:12:9c:cd:27:66:ee:74:8d:9b:6b:a4:
cd:06:75:08:3a:e2:fa:01:5f:55:cd:30:a5:40:ba:a8:9a:d9:
0c:24:82:ef:af:12:4f:f5:2b:3d:a6:c3:2e:e8:01:7c:5e:98:
f2:c6:8e:fe:9b:5d:79:c5:38:a9:08:c0:f4:16:74:cf:14:c5:
58:56:be:d7:37:90:d1:72:83:8f:70:e9:f6:82:1a:65:a7:b6:
99:3d:4e:d1:8b:fa:06:e2:95:b8:b8:97:80:e4:f1:62:c2:ea:
79:da:3a:44:e2:97:cc:f2:c9:5b:f1:8e:fd:ed:3d:8d:17:91:
14:79:1a:d4:9d:3b:87:f7:84:4a:f1:c1:8a:49:be:6c:20:43:
82:39:6c:a6:13:f2:77:98:fe:95:0a:07:96:fe:c6:49:b4:d0:
e6:c4:6d:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4BwcwNFgWH6v5axXkDZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNjFjYzhhMzY1Y2M0MDM4MmEzMWRhZDU0ZjZjYjcyM2Y1
ODc1OGEwHhcNMjUwODIzMDMwMTUzWhcNMjUwODI0MDMwMTUzWjAzMTEwLwYDVQQD
Eyg2MjNkMWYwMWMwODJiNjk2NDJjZDdlODJmZWI4YTU1YmYxOTA2YzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuElLReq1l2xhMc2Jnk8uTHNgLsPc
qft184LK0ppuy/mhCmYpPs6eUIpzpzeMzkpZoMkJgNA3Gzg7tgA1EtWVyfUSDgLo
+srrhmQTYZunEBmwJnpo/rZukIehg2dGcYBp2GW2ry5sLxZi6sjKoKtgINZQR3Hl
8tum1Qow4SKpbaRqebYzQEvBK4272KGLR7mGTNnRcCoO2dk/Cn2ydjbF9Qsyl6PA
0YAHhy7GK4ita4poqCfv1hm+zbnB6OCJxd2AXhjYDzaVrj8BBn4zgNH/KnO8OHSk
ve8IJIQVNgKyv/fRu5muSjlQQwJC+9Pfh0irM+77FhZc3DeRd29P3Uai2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGI9HwHAgraWQs1+gv64pVvxkGwwMB8GA1UdIwQY
MBaAFEthzIo2XMQDgqMdrVT2y3I/WHWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzJITWlqWmN4QU9Db3gydFZQYkxjajlZZFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82YjllYzAtOWIxMC00NDQzLWI1ZTYt
YzRmZDUzZWJlYjY3LzEvUzJITWlqWmN4QU9Db3gydFZQYkxjajlZZFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82YjllYzAtOWIxMC00NDQzLWI1ZTYtYzRmZDUzZWJlYjY3
LzEvUzJITWlqWmN4QU9Db3gydFZQYkxjajlZZFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtuvVDiVP
wQgpxLAMiFI3DOvttkuDR0eJGCXMqVEYBf7DkeFdpAaII8gXnxl1Dv118K+SBcAv
637SWNx6CbvyDVoqh6VPvbSIXEiOGsZKfOviesZIaIfAvotQGk4Af09K/RKczSdm
7nSNm2ukzQZ1CDri+gFfVc0wpUC6qJrZDCSC768ST/UrPabDLugBfF6Y8saO/ptd
ecU4qQjA9BZ0zxTFWFa+1zeQ0XKDj3Dp9oIaZae2mT1O0Yv6BuKVuLiXgOTxYsLq
edo6ROKXzPLJW/GO/e09jReRFHka1J07h/eESvHBikm+bCBDgjlsphPyd5j+lQoH
lv7GSbTQ5sRtLw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:12 2025 by rpki-client