Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: dgSlplyxGtI6NdYYLFJ6Awo74KP4tOYGn8Q46oQbSOA=
Subject key identifier: 17:D6:E1:78:EB:61:F1:36:C6:E0:FD:66:55:3D:AC:8A:0B:C0:A1:B8
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 0198D65F0095A265A8EF1DCBA8DEFD6CF5B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:06 +0000
Manifest this update: Sat 23 Aug 2025 10:00:06 +0000
Manifest next update: Sun 24 Aug 2025 10:00:06 +0000
Files and hashes: 1: 2137GkYhKriIsKTcyKMgkP9brCg.roa (hash: /7cteLANHoZOiqVgusN3Dqohbx1yk5x8PXrJnu2i8Fs=)
2: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: XSKVTEQ9m+6N9OqnZlmF2/czOfMPc90z/CgZaOuHU2o=)
3: hBvLKP5ixrQ0yB2qI1fJnI3xUfo.roa (hash: i0IaWEblK+pRuW5nqjbRL2Vkq0LREWGYkXklug1G2BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:00:95:a2:65:a8:ef:1d:cb:a8:de:fd:6c:f5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: Aug 23 10:00:06 2025 GMT
Not After : Aug 24 10:00:06 2025 GMT
Subject: CN=17d6e178eb61f136c6e0fd66553dac8a0bc0a1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:c1:e0:7d:f3:30:ee:a5:fe:89:7d:cb:5b:
fb:30:bc:66:53:78:71:61:d6:f4:ae:8e:81:23:04:
1a:16:9c:95:bc:a4:45:b8:f2:0b:0b:a9:ab:00:91:
47:73:ff:79:6b:e9:72:2e:13:f7:8f:2b:19:2b:ff:
8c:50:33:8d:2f:71:1a:d3:6a:b9:0d:54:f6:b3:4b:
25:a4:df:39:ec:83:f0:da:65:1e:e6:c9:b6:b3:27:
f7:a9:12:4b:e6:3b:d6:1c:ae:fa:9a:85:e8:c8:9e:
d7:1c:e9:64:ae:96:3e:93:84:51:0d:a7:02:3c:0d:
06:f7:82:b9:5e:3a:89:3a:37:72:5c:76:37:fa:71:
b3:fa:fe:0c:17:31:53:62:86:cc:22:8d:fc:a3:ce:
3a:56:9b:a2:8b:1d:50:b3:6c:bb:82:76:60:6a:30:
c3:11:a9:48:6f:2a:19:08:7b:5b:c6:b1:ca:f7:05:
ab:44:33:08:d9:cb:96:16:b1:45:39:64:63:ca:cf:
ce:a1:78:a1:56:49:b8:87:9a:17:db:4b:6d:a6:ab:
09:21:26:3a:20:0d:72:21:5e:3c:90:a8:5a:5f:05:
72:2d:af:f0:89:82:8d:79:ff:e2:92:ed:75:ac:a4:
f1:0e:d1:dd:b7:de:43:74:d9:6d:9b:ba:e7:d1:01:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D6:E1:78:EB:61:F1:36:C6:E0:FD:66:55:3D:AC:8A:0B:C0:A1:B8
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3a:45:c3:76:12:6d:02:37:00:1e:bb:a8:9e:4b:df:c7:39:
75:74:ca:cb:9d:bd:0f:3d:6b:b5:8e:2c:56:3f:2c:f4:ed:94:
d3:ff:69:31:59:17:d1:1d:02:d7:64:61:d6:13:6c:0e:3a:ab:
00:9d:22:23:ce:15:2f:32:09:27:c6:a5:5f:37:b5:42:65:21:
2f:52:df:ae:e1:67:2b:17:68:f0:6d:8a:ec:ac:88:76:29:2f:
4f:d0:10:60:f3:6d:36:30:fa:36:88:84:38:57:a0:a7:39:1d:
21:f0:48:34:d4:a0:79:80:b2:c6:25:5b:6b:85:e0:ae:e8:49:
2e:67:7c:85:2c:6f:a0:6b:ff:f4:c9:f6:0a:c0:cf:92:28:99:
52:c2:3d:d0:e6:c7:69:68:72:b0:91:16:8d:63:d4:44:16:cc:
66:d5:86:d5:ef:cb:1e:77:df:84:83:56:e8:2d:ac:dc:bf:e7:
39:04:d3:0f:0e:9d:4c:60:d2:39:ab:cd:06:7b:0c:57:06:cf:
37:cc:bd:38:3f:8d:0e:00:03:b4:7c:11:d2:2d:f7:6e:6d:c8:
cf:49:91:58:de:86:61:d6:ed:42:83:c0:33:6a:42:3b:6e:48:
be:af:83:8f:dc:a0:6c:74:eb:28:82:6e:12:56:4f:59:aa:2c:
59:e4:3b:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXwCVomWo7x3LqN79bPW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NmUyOTNiYTM4MGRjYzc1ZjAwMTA2NDQzNjY4ZjUxMDAy
NTU1YjcwHhcNMjUwODIzMTAwMDA2WhcNMjUwODI0MTAwMDA2WjAzMTEwLwYDVQQD
EygxN2Q2ZTE3OGViNjFmMTM2YzZlMGZkNjY1NTNkYWM4YTBiYzBhMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSjB4H3zMO6l/ol9y1v7MLxmU3hx
Ydb0ro6BIwQaFpyVvKRFuPILC6mrAJFHc/95a+lyLhP3jysZK/+MUDONL3Ea02q5
DVT2s0slpN857IPw2mUe5sm2syf3qRJL5jvWHK76moXoyJ7XHOlkrpY+k4RRDacC
PA0G94K5XjqJOjdyXHY3+nGz+v4MFzFTYobMIo38o846Vpuiix1Qs2y7gnZgajDD
EalIbyoZCHtbxrHK9wWrRDMI2cuWFrFFOWRjys/OoXihVkm4h5oX20ttpqsJISY6
IA1yIV48kKhaXwVyLa/wiYKNef/iku11rKTxDtHdt95DdNltm7rn0QHlWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfW4XjrYfE2xuD9ZlU9rIoLwKG4MB8GA1UdIwQY
MBaAFAluKTujgNzHXwAQZENmj1EAJVW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGIt
ZGYwNWQ0ODlkYTE3LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGItZGYwNWQ0ODlkYTE3
LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjpFw3YS
bQI3AB67qJ5L38c5dXTKy529Dz1rtY4sVj8s9O2U0/9pMVkX0R0C12Rh1hNsDjqr
AJ0iI84VLzIJJ8alXze1QmUhL1LfruFnKxdo8G2K7KyIdikvT9AQYPNtNjD6NoiE
OFegpzkdIfBINNSgeYCyxiVba4XgruhJLmd8hSxvoGv/9Mn2CsDPkiiZUsI90ObH
aWhysJEWjWPURBbMZtWG1e/LHnffhINW6C2s3L/nOQTTDw6dTGDSOavNBnsMVwbP
N8y9OD+NDgADtHwR0i33bm3Iz0mRWN6GYdbtQoPAM2pCO25Ivq+Dj9ygbHTrKIJu
ElZPWaosWeQ7tg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:16:56 2025 by rpki-client