Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: tut9bQ4Zc7/gpAwtyAo1cdMVEogXhQVv7rqigPwhONk=
Subject key identifier: 8B:EE:27:89:9E:B7:77:A1:F0:25:76:59:48:3C:61:00:EC:F6:49:2D
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 0198D8BD58B02733631D0B9C64C89D706DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 21:02:24 +0000
Manifest this update: Sat 23 Aug 2025 21:02:24 +0000
Manifest next update: Sun 24 Aug 2025 21:02:24 +0000
Files and hashes: 1: 42CIzWao25DIQH989gjkrV7OjrY.roa (hash: J1v5sJHZZ0GbntLAyFYLEEa5CiZuVx8YZ/XB+JD5wdg=)
2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: HA+4jpIyGknfugk5NWCSEfvzNrSZgu5GkBqfDVpsQpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:58:b0:27:33:63:1d:0b:9c:64:c8:9d:70:6d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Aug 23 21:02:24 2025 GMT
Not After : Aug 24 21:02:24 2025 GMT
Subject: CN=8bee27899eb777a1f0257659483c6100ecf6492d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c6:de:04:37:81:94:cc:5d:6b:91:b4:c1:b1:
df:c5:f1:75:5a:96:e1:65:9f:6e:b4:56:dc:e1:bc:
62:89:fb:be:b3:56:11:a3:7f:de:00:9c:47:5f:da:
17:5a:a2:a4:aa:d2:86:79:0b:04:1e:65:86:26:94:
f0:cd:de:a6:7b:97:35:dc:4e:a7:fc:a5:6e:56:18:
d5:a5:09:54:8b:d9:ea:b6:be:2d:aa:b2:15:0b:21:
3f:b6:96:b6:b5:ec:0c:34:5d:da:16:2d:89:d9:29:
e5:3f:d6:f7:fb:51:64:8d:70:be:c4:c4:0a:9f:46:
3a:c3:67:be:63:90:6e:64:b5:c7:c5:6f:a6:e3:bc:
61:ad:c2:ff:d6:15:38:d9:a3:eb:a5:c9:eb:d9:0b:
6d:1b:4d:9d:28:be:bf:b4:51:37:ec:96:0c:8f:32:
4c:29:08:f9:fc:f2:2e:86:15:37:94:f7:c3:2b:3d:
f0:41:11:a0:f7:54:f6:ca:e4:98:ca:72:e3:bd:53:
03:95:e0:48:22:6e:98:21:89:16:c8:d9:cb:eb:fc:
5f:b8:7c:bc:43:f1:2d:97:48:73:b2:f5:00:05:12:
f6:b4:9d:14:7c:e1:75:30:d7:1b:e8:3e:0d:a4:43:
1a:bd:3c:2c:32:23:92:66:98:36:f4:c7:ce:c0:4d:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EE:27:89:9E:B7:77:A1:F0:25:76:59:48:3C:61:00:EC:F6:49:2D
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7e:2e:87:50:98:13:cf:6b:a4:12:d0:fb:eb:0a:68:d0:92:
08:87:d9:35:85:6b:63:78:2b:56:0b:44:3f:87:fd:29:7e:79:
fe:7f:f8:ce:f4:32:7c:80:30:af:19:4d:a2:0f:c2:c8:86:a5:
08:9a:3d:aa:84:42:c3:74:17:71:ac:3a:60:1a:f6:0f:6a:10:
4e:06:a2:95:6c:fe:db:d0:17:db:6f:aa:25:81:87:6c:da:43:
5e:3b:2b:28:ea:a0:80:d6:83:c4:5f:04:86:04:a6:4b:8f:37:
92:7f:f3:7a:a1:ff:b2:cc:fb:d4:fe:36:b3:cd:59:dd:8b:a4:
41:ad:10:46:15:8b:a1:44:fa:82:60:f5:5e:ab:08:66:af:f5:
48:64:8d:fb:b7:aa:00:db:ca:51:4f:ca:70:1f:72:75:86:8b:
9a:48:78:35:05:0b:45:ad:15:b7:3e:63:8b:54:5b:e1:7d:75:
60:fd:04:f1:95:65:92:cc:d1:08:66:8b:f5:da:64:ef:0d:31:
e1:f1:05:a7:d2:d7:dc:f8:8d:eb:dd:23:0b:bc:a3:9b:86:c6:
97:76:b7:09:93:83:4c:6c:f7:70:55:68:d0:41:ef:c7:0a:cf:
73:3a:0a:98:0a:58:49:3d:b9:f0:50:05:26:e9:9e:62:f5:0a:
31:0d:d7:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvViwJzNjHQucZMidcG3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODBhYTYxNTA5MDRlMjBmODg0YTQ2M2M5YjY2YWU2ZDQx
NjFiOWIwHhcNMjUwODIzMjEwMjI0WhcNMjUwODI0MjEwMjI0WjAzMTEwLwYDVQQD
Eyg4YmVlMjc4OTllYjc3N2ExZjAyNTc2NTk0ODNjNjEwMGVjZjY0OTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sbeBDeBlMxda5G0wbHfxfF1Wpbh
ZZ9utFbc4bxiifu+s1YRo3/eAJxHX9oXWqKkqtKGeQsEHmWGJpTwzd6me5c13E6n
/KVuVhjVpQlUi9nqtr4tqrIVCyE/tpa2tewMNF3aFi2J2SnlP9b3+1FkjXC+xMQK
n0Y6w2e+Y5BuZLXHxW+m47xhrcL/1hU42aPrpcnr2QttG02dKL6/tFE37JYMjzJM
KQj5/PIuhhU3lPfDKz3wQRGg91T2yuSYynLjvVMDleBIIm6YIYkWyNnL6/xfuHy8
Q/Etl0hzsvUABRL2tJ0UfOF1MNcb6D4NpEMavTwsMiOSZpg29MfOwE0VeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvuJ4met3eh8CV2WUg8YQDs9kktMB8GA1UdIwQY
MBaAFJKAqmFQkE4g+ISkY8m2aubUFhubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kMDhiYmQtMDhiMC00YTIyLThiNTct
N2UwMTcxMTUwY2ZiLzEva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9kMDhiYmQtMDhiMC00YTIyLThiNTctN2UwMTcxMTUwY2Zi
LzEva29DcVlWQ1FUaUQ0aEtSanliWnE1dFFXRzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ34uh1CY
E89rpBLQ++sKaNCSCIfZNYVrY3grVgtEP4f9KX55/n/4zvQyfIAwrxlNog/CyIal
CJo9qoRCw3QXcaw6YBr2D2oQTgailWz+29AX22+qJYGHbNpDXjsrKOqggNaDxF8E
hgSmS483kn/zeqH/ssz71P42s81Z3YukQa0QRhWLoUT6gmD1XqsIZq/1SGSN+7eq
ANvKUU/KcB9ydYaLmkh4NQULRa0Vtz5ji1Rb4X11YP0E8ZVlkszRCGaL9dpk7w0x
4fEFp9LX3PiN690jC7yjm4bGl3a3CZODTGz3cFVo0EHvxwrPczoKmApYST258FAF
JumeYvUKMQ3XTQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:30:13 2025 by rpki-client