Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File: V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier: i9q+9eBmlzCHN2y0ioZaB8oLQF+OQ471+zK47fd09ks=
Subject key identifier: F4:AA:D5:EA:D8:F6:0A:4C:6F:02:F5:AC:DF:07:A2:14:AA:60:DD:28
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial: 0198D6983D135E6B51524137E25F1295569B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 11:02:37 +0000
Manifest this update: Sat 23 Aug 2025 11:02:37 +0000
Manifest next update: Sun 24 Aug 2025 11:02:37 +0000
Files and hashes: 1: NG7h3MLl7rsjKfJWWMgCk14YKA8.roa (hash: TfduHN4QjBYJ2zJVMdkqYrJchaPgW7zgFk7X9cdWumk=)
2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: 40l2BZ43e9/GSo2HHzk9n1arTeUzkktet1qSEu6IUZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:3d:13:5e:6b:51:52:41:37:e2:5f:12:95:56:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
Validity
Not Before: Aug 23 11:02:37 2025 GMT
Not After : Aug 24 11:02:37 2025 GMT
Subject: CN=f4aad5ead8f60a4c6f02f5acdf07a214aa60dd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4a:1b:16:67:13:99:df:2f:41:24:fd:7a:e3:
15:1b:c1:71:70:f6:dc:92:a7:7b:1c:42:b7:7a:17:
08:83:19:89:c3:14:1d:ac:dd:e1:43:f7:e0:82:28:
4b:e5:4a:d6:db:c1:8e:fe:45:5f:71:d6:e2:13:df:
1d:05:2e:f2:e9:ca:b8:8c:f4:2b:9f:56:4f:c8:5d:
ed:fb:ca:a4:9e:d6:85:79:1c:30:8d:03:85:75:54:
a9:38:17:df:be:ba:9a:b1:5c:15:59:5f:db:5e:b1:
0b:7a:b3:da:f9:c6:62:4a:50:70:47:0d:1a:67:ab:
08:00:f2:a5:c3:38:41:a8:d8:d3:4e:04:65:e4:ab:
d7:8e:be:82:7f:bd:89:3f:19:a0:50:b0:57:4f:fc:
db:a4:39:23:ac:b4:06:d0:54:6b:33:4b:47:5c:8c:
96:f6:dd:bd:22:6c:72:f7:9d:24:65:ad:e1:ad:07:
45:90:cc:f1:da:62:22:ea:60:d1:e0:18:e2:23:c8:
ae:10:c1:f1:6c:51:56:09:5e:79:cf:11:28:d8:1c:
fd:7d:2e:3f:d1:89:a1:18:28:bc:b3:c3:b4:9e:a5:
19:a8:a6:08:ad:02:f5:8d:50:65:cc:88:ce:57:65:
23:43:f4:14:24:f5:0f:0f:f4:bb:f8:2b:f8:af:4a:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AA:D5:EA:D8:F6:0A:4C:6F:02:F5:AC:DF:07:A2:14:AA:60:DD:28
X509v3 Authority Key Identifier:
keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:70:85:7b:f1:0f:ad:23:ad:73:df:1a:f5:ca:1e:e4:c9:be:
43:d1:b6:1f:a5:53:5e:98:44:72:90:18:41:8d:60:8f:fb:be:
d9:28:fe:59:bb:b7:60:28:81:03:1a:4c:ef:5b:f7:05:4c:97:
b9:d1:ba:0c:0d:10:72:dd:25:ba:11:a6:ac:1b:05:4d:b5:57:
23:9b:e7:b0:37:5a:c1:67:db:67:6e:50:88:b9:13:1e:c4:97:
cb:39:a2:51:23:cf:64:dc:76:48:1d:88:88:07:8d:36:e3:e3:
6e:c7:c2:50:47:b5:40:7c:bc:10:b0:b2:db:a6:af:84:29:bc:
ae:84:75:28:0b:aa:90:83:c2:25:00:7b:3e:da:d3:e8:2c:cd:
61:75:4b:8d:4d:04:43:a3:30:4c:cf:46:5a:63:38:52:18:fa:
39:d2:5d:46:86:ca:b9:89:d2:3e:0b:3a:c0:f5:2c:6c:83:da:
3c:7c:93:1b:b3:f6:34:ba:e7:43:a6:6c:ef:48:f9:3b:01:74:
95:3a:00:94:8a:45:b2:2e:34:d1:ab:0b:01:36:86:3d:e5:1d:
58:95:18:ac:93:0f:d2:e1:f7:30:55:02:2d:b2:c5:2a:2a:11:
5b:b8:f9:ee:01:3d:33:43:96:fa:4f:f5:4c:d4:2c:72:61:ca:
b2:53:2c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmD0TXmtRUkE34l8SlVabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NDUzN2Q1NGYzNmYxNDIyMzFiYzgxNzAzODg3MmNiNjA3
YjIxZTcwHhcNMjUwODIzMTEwMjM3WhcNMjUwODI0MTEwMjM3WjAzMTEwLwYDVQQD
EyhmNGFhZDVlYWQ4ZjYwYTRjNmYwMmY1YWNkZjA3YTIxNGFhNjBkZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0obFmcTmd8vQST9euMVG8FxcPbc
kqd7HEK3ehcIgxmJwxQdrN3hQ/fggihL5UrW28GO/kVfcdbiE98dBS7y6cq4jPQr
n1ZPyF3t+8qkntaFeRwwjQOFdVSpOBffvrqasVwVWV/bXrELerPa+cZiSlBwRw0a
Z6sIAPKlwzhBqNjTTgRl5KvXjr6Cf72JPxmgULBXT/zbpDkjrLQG0FRrM0tHXIyW
9t29Imxy950kZa3hrQdFkMzx2mIi6mDR4BjiI8iuEMHxbFFWCV55zxEo2Bz9fS4/
0YmhGCi8s8O0nqUZqKYIrQL1jVBlzIjOV2UjQ/QUJPUPD/S7+Cv4r0pmYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSq1erY9gpMbwL1rN8HohSqYN0oMB8GA1UdIwQY
MBaAFFdFN9VPNvFCIxvIFwOIcstgeyHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQt
NGI4OWQzNzc4MDhlLzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQtNGI4OWQzNzc4MDhl
LzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHCFe/EP
rSOtc98a9coe5Mm+Q9G2H6VTXphEcpAYQY1gj/u+2Sj+Wbu3YCiBAxpM71v3BUyX
udG6DA0Qct0luhGmrBsFTbVXI5vnsDdawWfbZ25QiLkTHsSXyzmiUSPPZNx2SB2I
iAeNNuPjbsfCUEe1QHy8ELCy26avhCm8roR1KAuqkIPCJQB7PtrT6CzNYXVLjU0E
Q6MwTM9GWmM4Uhj6OdJdRobKuYnSPgs6wPUsbIPaPHyTG7P2NLrnQ6Zs70j5OwF0
lToAlIpFsi400asLATaGPeUdWJUYrJMP0uH3MFUCLbLFKioRW7j57gE9M0OW+k/1
TNQscmHKslMsow==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:46 2025 by rpki-client