Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier: ZMaVswJEvqh6ClbrL70jKHjzqn8P6EBWDx3efrYxdJk=
Subject key identifier: 09:82:95:C5:BF:28:49:CF:11:53:BD:5C:31:05:35:3D:50:55:A7:66
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 0198D4A7C77EF620864B283DFA5296B1EC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 02:00:21 +0000
Manifest this update: Sat 23 Aug 2025 02:00:21 +0000
Manifest next update: Sun 24 Aug 2025 02:00:21 +0000
Files and hashes: 1: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: 4kPTYCa8blh8gflI1BeZE7j+gvxzaTYZAgo8pQzncB0=)
2: fXIhT7Ydqm5HytjfeB-NmrbrFRI.roa (hash: EsiKR1dMs1SsEJue6V9U6b9V/XFN9Zx4S62/KpEzEqg=)
3: kzy2fS8wPguMf8v9iXU1Xd6RCJE.roa (hash: T6hfblwKGrCK3Ap3pOGRw0serguSainDEw/sPRZW+uI=)
4: mprfUYWLFFvcoporgivp8S18oz0.roa (hash: uZGl5TRJLtjM+YCzDi4j+2EG/6oM3QIc/9AdR4GUda8=)
5: nqfgPZyBGUMJjXZ82ONF8M_wX2o.roa (hash: cAq2+4Plhv+25M/XxaCNm4UA7TT+v8QHyzJDH25TDn4=)
6: zShwLkkDPGWGSwVW1WaNYQqy4QY.roa (hash: cc7GaLAsHY9PJBKnUzOfoPoWS1viq2gLzvzxAmdtn+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c7:7e:f6:20:86:4b:28:3d:fa:52:96:b1:ec:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Aug 23 02:00:21 2025 GMT
Not After : Aug 24 02:00:21 2025 GMT
Subject: CN=098295c5bf2849cf1153bd5c3105353d5055a766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:71:0a:8e:7f:04:c8:47:0c:c8:55:87:66:
80:51:b8:73:9e:23:59:89:28:ef:bc:41:de:fd:1e:
04:bc:86:4c:b7:26:18:58:e1:cc:2d:8a:6b:20:73:
01:48:73:47:1c:e9:ac:08:e1:fe:4e:64:ac:8c:27:
b3:5f:75:b9:b1:55:25:b2:48:d9:0c:33:35:a1:d9:
09:04:c6:f0:c1:ba:9d:20:af:f7:7e:18:9f:6e:aa:
f0:52:5b:3f:58:5e:3f:4b:69:c6:61:08:bf:42:23:
d3:a6:f2:5b:a7:24:26:5d:50:e3:67:3a:dd:42:58:
be:1f:ef:a4:21:18:42:6a:bd:5d:38:c4:bd:45:e6:
e8:c5:87:e1:25:78:6e:29:b3:cb:7a:3a:94:d4:25:
20:4c:ae:72:48:51:48:af:a4:32:5e:1b:d6:fb:9c:
a3:90:4d:33:23:8c:a2:00:f1:54:cc:ff:d6:d9:c0:
ca:36:c1:03:8c:c7:65:d9:a2:f7:63:48:08:24:83:
17:29:35:86:bb:9a:9d:29:96:45:aa:58:4b:df:df:
1e:17:49:a6:59:e5:58:74:b6:ad:29:ea:6b:8c:ea:
14:c6:48:74:54:5d:69:72:e9:fc:11:27:df:ec:60:
40:9f:74:78:b6:df:90:c0:92:d9:35:7b:78:7f:47:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:82:95:C5:BF:28:49:CF:11:53:BD:5C:31:05:35:3D:50:55:A7:66
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cb:88:41:87:06:06:d6:72:28:00:42:02:60:4d:ae:4f:db:
cd:6f:80:b4:c3:dc:35:e2:f5:94:bc:a7:53:91:f0:2d:72:de:
c8:f8:ef:6a:88:1f:b8:7e:59:1c:71:f5:58:3d:59:5e:e6:05:
2b:35:ca:43:01:9d:71:90:fb:bc:3a:5b:f0:a4:1a:ca:c8:f4:
1e:84:86:fb:57:e3:1e:06:09:45:80:68:7c:4d:0f:0f:a1:f9:
a8:eb:bc:37:2a:fe:de:1e:f6:24:74:1e:4c:49:0d:2f:72:ea:
48:a4:7d:8c:88:61:89:71:87:5e:cf:23:30:32:82:b6:26:07:
32:b8:be:0b:5a:3e:13:c2:69:99:af:80:b2:3f:c7:89:24:73:
8b:93:1d:e8:72:3e:60:40:5e:c5:cd:98:75:b6:3c:3c:a7:b5:
cd:e2:b3:b8:de:dc:31:a9:55:5d:cc:44:a8:bf:e9:4b:52:31:
4e:c8:ae:a1:32:6b:de:e5:34:1e:c2:f9:30:d0:ea:46:96:3d:
ca:46:80:51:46:7c:53:d4:27:d8:77:64:f4:a4:05:ad:93:c2:
99:45:0b:09:60:5a:11:b6:77:51:24:0f:c9:3d:3d:c5:61:44:
a5:9d:e1:57:00:91:1a:93:8a:a0:6b:24:6a:97:09:f4:69:7d:
1a:bb:42:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp8d+9iCGSyg9+lKWsex6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmY5Y2IzYzI5OGIxNTBiZWI3OTA4MDM3NmY3NGJkZWFj
NDM4YWMwHhcNMjUwODIzMDIwMDIxWhcNMjUwODI0MDIwMDIxWjAzMTEwLwYDVQQD
EygwOTgyOTVjNWJmMjg0OWNmMTE1M2JkNWMzMTA1MzUzZDUwNTVhNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTNxCo5/BMhHDMhVh2aAUbhzniNZ
iSjvvEHe/R4EvIZMtyYYWOHMLYprIHMBSHNHHOmsCOH+TmSsjCezX3W5sVUlskjZ
DDM1odkJBMbwwbqdIK/3fhifbqrwUls/WF4/S2nGYQi/QiPTpvJbpyQmXVDjZzrd
Qli+H++kIRhCar1dOMS9ReboxYfhJXhuKbPLejqU1CUgTK5ySFFIr6QyXhvW+5yj
kE0zI4yiAPFUzP/W2cDKNsEDjMdl2aL3Y0gIJIMXKTWGu5qdKZZFqlhL398eF0mm
WeVYdLatKeprjOoUxkh0VF1pcun8ESff7GBAn3R4tt+QwJLZNXt4f0fWXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmClcW/KEnPEVO9XDEFNT1QVadmMB8GA1UdIwQY
MBaAFHEvnLPCmLFQvreQgDdvdL3qxDisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEt
OTg3ZGE0MzkyMDU2LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEtOTg3ZGE0MzkyMDU2
LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMuIQYcG
BtZyKABCAmBNrk/bzW+AtMPcNeL1lLynU5HwLXLeyPjvaogfuH5ZHHH1WD1ZXuYF
KzXKQwGdcZD7vDpb8KQaysj0HoSG+1fjHgYJRYBofE0PD6H5qOu8Nyr+3h72JHQe
TEkNL3LqSKR9jIhhiXGHXs8jMDKCtiYHMri+C1o+E8Jpma+Asj/HiSRzi5Md6HI+
YEBexc2YdbY8PKe1zeKzuN7cMalVXcxEqL/pS1IxTsiuoTJr3uU0HsL5MNDqRpY9
ykaAUUZ8U9Qn2Hdk9KQFrZPCmUULCWBaEbZ3USQPyT09xWFEpZ3hVwCRGpOKoGsk
apcJ9Gl9GrtCeQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:38 2025 by rpki-client