Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: mY8sFNXphH6CWD7cIC5voTgtAmn46yNv66Je/XdoVNU=
Subject key identifier: 47:0D:E7:4E:1B:68:24:3A:B5:DE:40:CC:46:FD:1E:38:82:73:50:60
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 0198D65F15FC6359B1D1E81666D1FCEB9547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:12 +0000
Manifest this update: Sat 23 Aug 2025 10:00:12 +0000
Manifest next update: Sun 24 Aug 2025 10:00:12 +0000
Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=)
2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: b2PEZndAdJeARSp1KF43P++E/u0DY+Miig0uBSYQp9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:15:fc:63:59:b1:d1:e8:16:66:d1:fc:eb:95:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Aug 23 10:00:12 2025 GMT
Not After : Aug 24 10:00:12 2025 GMT
Subject: CN=470de74e1b68243ab5de40cc46fd1e3882735060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:d1:a5:0c:df:46:3b:09:ee:d7:66:6d:94:
a9:0f:f2:81:3d:af:f0:3b:5f:9a:f5:e6:4f:ac:9b:
6a:ab:50:5c:f7:2f:12:a6:c7:27:3e:46:c3:37:ec:
d5:e2:db:f0:d8:a0:a7:76:36:1a:d8:00:63:7f:2f:
e7:2d:77:11:64:38:52:7e:e1:93:a2:97:7d:c3:4a:
2f:92:64:eb:51:f0:89:79:61:f6:c5:48:36:d3:d1:
a3:3a:f5:08:7e:97:c3:57:84:9d:98:3d:92:a1:9a:
10:8d:19:ff:43:c9:53:01:be:87:cb:53:4c:f9:1a:
8b:e3:3e:97:29:54:c0:37:3c:48:bb:c4:55:54:91:
cb:ab:de:e6:9f:c2:46:96:71:d5:2e:dc:cf:87:01:
1b:8e:50:bb:d9:c7:e5:e4:9d:97:61:81:bb:48:4e:
9b:9f:a5:99:6a:fd:a5:cf:d7:b5:94:04:40:4a:a8:
7e:c1:0e:75:14:32:aa:ce:16:42:9b:a8:5a:f7:e4:
00:ba:3d:86:38:1a:12:26:aa:9c:3a:10:55:cf:96:
87:45:32:bb:12:69:18:d1:02:03:18:fa:57:13:47:
21:39:06:c2:e9:b3:17:b0:d4:32:ea:3c:eb:3f:96:
d3:06:e8:cc:1a:30:e9:45:c8:22:26:c8:d3:b1:9b:
af:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0D:E7:4E:1B:68:24:3A:B5:DE:40:CC:46:FD:1E:38:82:73:50:60
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2f:1a:17:49:9d:e8:8a:ff:03:de:29:6a:6f:55:28:7f:f8:
9a:2d:7b:92:de:59:af:28:9c:cd:63:e2:33:e6:d7:74:8e:f8:
de:7a:00:dc:ec:f8:3a:66:a2:49:c7:c6:07:0b:87:06:61:b7:
5d:24:01:c4:1a:a4:aa:8f:5a:d4:ec:90:cc:84:87:1b:e3:e5:
66:87:3d:4f:1c:13:d3:b5:c9:e8:44:14:88:ed:38:d8:06:64:
8a:a1:0c:d6:69:d1:2f:89:1c:67:dd:e9:ef:5c:b9:97:3f:5f:
be:4f:b9:c2:c3:07:9c:ac:f1:80:57:c2:31:82:9f:c2:07:e7:
39:a3:b1:54:b0:01:ad:9c:ce:70:6b:be:6c:e0:d1:de:fc:4b:
48:94:f7:f2:47:8e:c7:a8:d8:a5:33:20:21:63:73:a2:d0:87:
f9:f4:c2:94:8f:cb:62:5b:f3:c4:bf:e9:c0:52:4c:ba:52:06:
45:79:e1:32:0e:40:2c:1b:7c:a7:09:45:9f:9b:9c:08:05:84:
75:7f:05:34:b2:04:98:f2:7f:04:4d:14:aa:b0:a0:5f:c4:95:
ac:c0:e0:7e:c5:bd:5b:e2:36:da:95:3e:e2:7a:c1:ec:98:15:
4f:d8:08:28:15:03:12:13:5f:d3:ad:e2:86:f3:e8:b3:93:d6:
a5:7f:bb:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXxX8Y1mx0egWZtH865VHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWU0YjE3OWUwOTUzYjllY2M1ODVhZDk4NTlhMDBiZTM1
NjgwMDEwHhcNMjUwODIzMTAwMDEyWhcNMjUwODI0MTAwMDEyWjAzMTEwLwYDVQQD
Eyg0NzBkZTc0ZTFiNjgyNDNhYjVkZTQwY2M0NmZkMWUzODgyNzM1MDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9vRpQzfRjsJ7tdmbZSpD/KBPa/w
O1+a9eZPrJtqq1Bc9y8SpscnPkbDN+zV4tvw2KCndjYa2ABjfy/nLXcRZDhSfuGT
opd9w0ovkmTrUfCJeWH2xUg209GjOvUIfpfDV4SdmD2SoZoQjRn/Q8lTAb6Hy1NM
+RqL4z6XKVTANzxIu8RVVJHLq97mn8JGlnHVLtzPhwEbjlC72cfl5J2XYYG7SE6b
n6WZav2lz9e1lARASqh+wQ51FDKqzhZCm6ha9+QAuj2GOBoSJqqcOhBVz5aHRTK7
EmkY0QIDGPpXE0chOQbC6bMXsNQy6jzrP5bTBujMGjDpRcgiJsjTsZuvbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcN504baCQ6td5AzEb9HjiCc1BgMB8GA1UdIwQY
MBaAFJkeSxeeCVO57MWFrZhZoAvjVoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYt
ZWY5Yzk1Mjc2OTMyLzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYtZWY5Yzk1Mjc2OTMy
LzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy8aF0md
6Ir/A94pam9VKH/4mi17kt5ZryiczWPiM+bXdI743noA3Oz4OmaiScfGBwuHBmG3
XSQBxBqkqo9a1OyQzISHG+PlZoc9TxwT07XJ6EQUiO042AZkiqEM1mnRL4kcZ93p
71y5lz9fvk+5wsMHnKzxgFfCMYKfwgfnOaOxVLABrZzOcGu+bODR3vxLSJT38keO
x6jYpTMgIWNzotCH+fTClI/LYlvzxL/pwFJMulIGRXnhMg5ALBt8pwlFn5ucCAWE
dX8FNLIEmPJ/BE0UqrCgX8SVrMDgfsW9W+I22pU+4nrB7JgVT9gIKBUDEhNf063i
hvPos5PWpX+7sg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:18 2025 by rpki-client