Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: In4nfeZGl9sHE74yTKLJCZ3TvjK1MaP/iOaNWIk2V9A=
Subject key identifier: E2:1D:9F:94:A5:96:AF:D3:EB:05:85:07:2D:8C:34:73:ED:3B:EE:42
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 0198D515E3E29DAF187B7E37D43E0A982255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:38 +0000
Manifest this update: Sat 23 Aug 2025 04:00:38 +0000
Manifest next update: Sun 24 Aug 2025 04:00:38 +0000
Files and hashes: 1: qMVh3MmBW-5x18q2N1wXFpopTgM.roa (hash: PQtT5tx/edekggmnvi46ZZ9KahB7EPBY+tQD/QXkwJY=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: in2l7SMQL0FTK4fuJnHYZF0UutwtZNepq7xrWW4UoLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e3:e2:9d:af:18:7b:7e:37:d4:3e:0a:98:22:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Aug 23 04:00:38 2025 GMT
Not After : Aug 24 04:00:38 2025 GMT
Subject: CN=e21d9f94a596afd3eb0585072d8c3473ed3bee42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:9e:cd:7d:4b:67:bc:e7:c3:cb:54:95:ce:
68:00:cb:ab:68:06:1a:b1:cc:3a:88:79:8d:51:4b:
c5:ac:d3:66:6c:e8:23:3b:3e:90:ae:05:23:bb:0d:
28:fe:f9:bd:7f:92:97:26:7d:da:02:b1:62:77:77:
7a:62:7a:71:b6:d9:f3:67:d4:12:75:5a:da:4a:ed:
e7:fc:c7:6d:f6:55:36:13:24:15:f6:1e:ad:2e:43:
ca:68:a3:0b:ff:eb:79:a7:ac:90:27:5d:e4:ca:9e:
91:f8:b4:63:c8:7f:9e:1b:74:f3:60:63:25:e9:de:
3a:56:b1:5b:63:fa:78:0d:71:35:a0:34:30:36:0c:
8f:5b:a5:96:1a:24:27:6f:34:4a:c2:75:b3:a3:72:
67:7d:97:ae:88:c1:e0:92:6e:2c:b9:36:be:98:f5:
c8:5f:53:fb:2d:3c:98:c1:cb:8a:4a:d2:df:4b:44:
39:a6:29:5a:ee:e0:58:5c:68:16:e7:07:ab:27:6b:
9d:e4:89:04:1d:34:9d:4b:90:60:5f:0d:44:20:02:
7f:8f:94:f2:7e:95:0f:cb:ac:42:a5:1a:ad:db:99:
37:9e:40:e8:08:1e:6a:83:20:0a:0f:2a:fd:0c:77:
d0:66:2e:14:3f:85:51:2d:03:61:65:a0:85:e3:f3:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1D:9F:94:A5:96:AF:D3:EB:05:85:07:2D:8C:34:73:ED:3B:EE:42
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:49:3e:2a:8c:47:4d:04:60:8e:5c:7e:6d:d0:68:c8:ef:49:
d0:a3:4e:dc:18:81:9e:d1:91:3f:2e:35:cb:ee:cd:4d:36:56:
f3:56:87:03:d1:4b:e2:6b:c3:d7:98:b0:ad:15:41:69:e0:14:
3c:d3:5e:f1:26:0c:b6:5d:bc:9e:44:8b:6f:2d:f3:87:73:0a:
a8:d7:f5:d6:d1:ea:8a:a1:cd:41:e4:62:f4:bc:19:01:87:82:
9c:95:f3:91:2f:a2:be:72:05:1a:bf:20:6e:3d:d7:ae:87:c4:
70:73:1b:c9:be:97:de:1a:03:b4:82:aa:5a:2b:22:28:15:22:
07:f3:66:a4:72:68:07:55:e1:0b:08:3a:ee:90:18:94:ae:ec:
66:26:7e:2d:7a:eb:32:b4:03:61:c3:a5:cf:84:e1:c1:4c:ce:
5e:48:4a:7e:a4:04:a4:d2:2f:ce:33:63:04:59:73:ce:8d:e8:
f1:df:18:17:fc:00:2e:b8:ef:02:eb:fa:a1:0d:3b:4a:da:a8:
95:58:f3:23:19:66:7f:37:50:da:6b:5b:92:df:a7:0c:ae:df:
39:cb:3c:1c:8c:ce:d3:17:31:90:e1:15:d8:65:f0:17:85:49:
22:ef:86:16:b1:45:4d:bd:2f:bc:c6:c8:4a:5a:61:56:13:1f:
fb:a9:e8:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFePina8Ye3431D4KmCJVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmY2U1NWQxNWViMTE5ZTUyZDZmYWZjZDM5NzNlMmY2ZDRm
MjIzZjIwHhcNMjUwODIzMDQwMDM4WhcNMjUwODI0MDQwMDM4WjAzMTEwLwYDVQQD
EyhlMjFkOWY5NGE1OTZhZmQzZWIwNTg1MDcyZDhjMzQ3M2VkM2JlZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueOezX1LZ7znw8tUlc5oAMuraAYa
scw6iHmNUUvFrNNmbOgjOz6QrgUjuw0o/vm9f5KXJn3aArFid3d6YnpxttnzZ9QS
dVraSu3n/Mdt9lU2EyQV9h6tLkPKaKML/+t5p6yQJ13kyp6R+LRjyH+eG3TzYGMl
6d46VrFbY/p4DXE1oDQwNgyPW6WWGiQnbzRKwnWzo3JnfZeuiMHgkm4suTa+mPXI
X1P7LTyYwcuKStLfS0Q5pila7uBYXGgW5werJ2ud5IkEHTSdS5BgXw1EIAJ/j5Ty
fpUPy6xCpRqt25k3nkDoCB5qgyAKDyr9DHfQZi4UP4VRLQNhZaCF4/M/SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIdn5Sllq/T6wWFBy2MNHPtO+5CMB8GA1UdIwQY
MBaAFL/OVdFesRnlLW+vzTlz4vbU8iPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTct
MDUyY2YwMWQyMDQ4LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTctMDUyY2YwMWQyMDQ4
LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUk+KoxH
TQRgjlx+bdBoyO9J0KNO3BiBntGRPy41y+7NTTZW81aHA9FL4mvD15iwrRVBaeAU
PNNe8SYMtl28nkSLby3zh3MKqNf11tHqiqHNQeRi9LwZAYeCnJXzkS+ivnIFGr8g
bj3XrofEcHMbyb6X3hoDtIKqWisiKBUiB/NmpHJoB1XhCwg67pAYlK7sZiZ+LXrr
MrQDYcOlz4ThwUzOXkhKfqQEpNIvzjNjBFlzzo3o8d8YF/wALrjvAuv6oQ07Stqo
lVjzIxlmfzdQ2mtbkt+nDK7fOcs8HIzO0xcxkOEV2GXwF4VJIu+GFrFFTb0vvMbI
SlphVhMf+6nokA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:20 2025 by rpki-client