Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: ONTVDfOsMsO6eUmryZUd7U1KFazwidXEp3Slri2UKQo=
Subject key identifier: 07:8C:2A:37:20:CC:D6:62:C9:9D:93:3E:B5:7D:7D:13:FB:FE:75:64
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 0198D4DFD047A9E3FC332587A95077F71319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:01:34 +0000
Manifest this update: Sat 23 Aug 2025 03:01:34 +0000
Manifest next update: Sun 24 Aug 2025 03:01:34 +0000
Files and hashes: 1: 1-OVd2lrgp3V2rXsCVF3GooeWhcE.roa (hash: KipoSrKFnoRi0oHmHkcFIq8GeOt3ELUBmEPs2x8pv/4=)
2: KR7i1VGMfp6wOUHzM68qa6NoxyE.roa (hash: ndyzcu48CDHqz3NgyXeDet5mZyI1DmpInGav6pQo5SI=)
3: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: hJ+WOB6XZXioSztH+ltFHMnFclcuxcbjbGrRltzeqSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d0:47:a9:e3:fc:33:25:87:a9:50:77:f7:13:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Aug 23 03:01:34 2025 GMT
Not After : Aug 24 03:01:34 2025 GMT
Subject: CN=078c2a3720ccd662c99d933eb57d7d13fbfe7564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:34:e1:57:53:9c:3d:01:82:32:1a:42:ad:
c9:ed:01:1a:47:13:1f:0d:3c:ff:96:70:b9:6c:32:
88:9e:ca:4b:e2:38:c4:52:c2:7b:a9:04:d0:fc:81:
8a:96:7f:04:01:9b:94:2c:b7:31:2f:72:83:63:9f:
db:44:5e:29:c5:e9:2c:b4:2d:eb:34:13:62:f8:ff:
37:b4:01:13:73:1a:cd:3a:02:c2:ab:f0:b9:3e:4d:
77:0c:2c:f7:20:65:e7:77:b5:04:fa:ab:a3:fd:77:
58:b3:97:7f:25:a0:43:f6:44:e1:8e:47:2a:0f:a0:
6b:91:dc:f2:33:ca:12:87:54:28:31:5c:c2:a8:35:
7f:38:88:72:43:d8:48:2a:2b:fa:5e:84:a3:f9:1c:
06:19:40:f0:66:8c:28:0b:bf:dc:c6:ae:25:9f:cd:
d7:a3:56:fa:65:8e:63:48:6a:20:bb:08:e0:2c:50:
16:b5:a8:3f:07:7d:ed:b7:9d:82:7f:f9:21:b5:e1:
c2:bb:40:61:4c:1c:c4:66:78:74:a2:7a:10:22:2b:
3d:64:4e:2f:b5:d6:ec:30:8a:1e:14:66:7b:48:f6:
6c:6f:bb:69:2f:a7:e7:78:84:5e:c2:2c:41:52:8b:
e6:dc:1c:55:02:7f:72:21:b3:6b:ca:b7:9e:7b:5d:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8C:2A:37:20:CC:D6:62:C9:9D:93:3E:B5:7D:7D:13:FB:FE:75:64
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fe:31:43:1b:06:92:a7:74:62:f6:53:74:68:47:e4:1b:ce:
e3:a1:ac:97:bd:33:d9:a2:4e:0a:6d:27:c4:b3:34:8b:da:32:
2f:c6:f2:b7:f1:f3:9f:62:03:5e:ee:00:13:84:01:aa:01:3c:
ba:b0:ce:f2:3c:cd:69:19:fe:d7:7b:ca:4e:48:66:28:1c:ce:
f3:f0:c7:c4:c1:65:2d:3d:35:de:88:86:bf:83:46:8e:84:3e:
47:3f:38:a5:2d:98:91:27:e3:ee:6e:fa:5c:7d:40:54:19:c2:
4a:bf:41:f7:a2:20:40:b1:3a:cc:cc:c7:46:56:46:c1:41:bd:
65:ba:e2:79:21:de:90:76:01:8e:14:03:77:31:3b:b3:12:38:
72:fd:0f:27:ae:06:a6:50:5b:cb:35:f9:10:6d:51:2c:89:c3:
c3:07:f7:07:ae:0c:b1:46:20:40:55:8d:68:80:df:af:eb:61:
c2:8e:70:b3:6b:d9:9e:86:eb:c2:ca:aa:f4:1d:32:10:6d:e6:
3e:60:f7:c1:ef:06:03:54:7e:fe:fd:cb:d2:f7:8f:ce:fc:01:
28:00:c7:64:b1:bf:fd:23:b2:57:0c:3c:e3:e8:ac:79:b2:8a:
ba:12:8a:14:91:85:cd:bc:e5:13:bf:fb:69:f5:f8:73:7b:1c:
27:5b:0d:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU39BHqeP8MyWHqVB39xMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMGIyZjQ2YmE1NzBhMTY3N2JmZDU4NGM3MjgyMmFkOWQ5
ZmU1YjAwHhcNMjUwODIzMDMwMTM0WhcNMjUwODI0MDMwMTM0WjAzMTEwLwYDVQQD
EygwNzhjMmEzNzIwY2NkNjYyYzk5ZDkzM2ViNTdkN2QxM2ZiZmU3NTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCQ04VdTnD0BgjIaQq3J7QEaRxMf
DTz/lnC5bDKInspL4jjEUsJ7qQTQ/IGKln8EAZuULLcxL3KDY5/bRF4pxekstC3r
NBNi+P83tAETcxrNOgLCq/C5Pk13DCz3IGXnd7UE+quj/XdYs5d/JaBD9kThjkcq
D6BrkdzyM8oSh1QoMVzCqDV/OIhyQ9hIKiv6XoSj+RwGGUDwZowoC7/cxq4ln83X
o1b6ZY5jSGoguwjgLFAWtag/B33tt52Cf/khteHCu0BhTBzEZnh0onoQIis9ZE4v
tdbsMIoeFGZ7SPZsb7tpL6fneIRewixBUovm3BxVAn9yIbNryreee120XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeMKjcgzNZiyZ2TPrV9fRP7/nVkMB8GA1UdIwQY
MBaAFDALL0a6VwoWd7/VhMcoIq2dn+WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmIt
OTgwNzI5MzZjNTE4LzEvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmItOTgwNzI5MzZjNTE4
LzEvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/4xQxsG
kqd0YvZTdGhH5BvO46Gsl70z2aJOCm0nxLM0i9oyL8byt/Hzn2IDXu4AE4QBqgE8
urDO8jzNaRn+13vKTkhmKBzO8/DHxMFlLT013oiGv4NGjoQ+Rz84pS2YkSfj7m76
XH1AVBnCSr9B96IgQLE6zMzHRlZGwUG9ZbrieSHekHYBjhQDdzE7sxI4cv0PJ64G
plBbyzX5EG1RLInDwwf3B64MsUYgQFWNaIDfr+thwo5ws2vZnobrwsqq9B0yEG3m
PmD3we8GA1R+/v3L0vePzvwBKADHZLG//SOyVww84+isebKKuhKKFJGFzbzlE7/7
afX4c3scJ1sN5A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:34 2025 by rpki-client