Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: diR4CogzPLeVEgRxGhMMS5Ka2xHMI1VwrMwmS2ZpKVo=
Subject key identifier: EF:F2:D3:E5:1B:19:54:F4:5C:BA:E5:45:25:13:27:F0:71:71:70:53
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 0198D4A7D36DC368D66E2868B3864B9B9BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 02:00:25 +0000
Manifest this update: Sat 23 Aug 2025 02:00:25 +0000
Manifest next update: Sun 24 Aug 2025 02:00:25 +0000
Files and hashes: 1: KV3y67WzUL1dd636tV-tGwBKS6Y.roa (hash: BJK7UzSsG4bIRgy/oUjNbXPmO5iJK9tZClLQ8IpL8JQ=)
2: X9Fijkz-_wqcxXki_ZgW942-ey4.roa (hash: 6GLvc6dX34tOpcs0+RseJCW6ZD873+Ny/2OET9fAl0I=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: ARd3GD7um3WG7J1lxl0Q4XjyS5xeT1vZlJiVD0SuA/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d3:6d:c3:68:d6:6e:28:68:b3:86:4b:9b:9b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Aug 23 02:00:25 2025 GMT
Not After : Aug 24 02:00:25 2025 GMT
Subject: CN=eff2d3e51b1954f45cbae545251327f071717053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:57:c4:3d:27:46:ce:bb:1f:23:6b:00:b9:
21:89:18:fb:ac:5c:16:f8:d1:10:74:45:0b:44:4e:
12:c1:d9:90:d0:3f:d2:22:42:c3:fb:8c:15:92:55:
14:26:9b:61:0f:63:a0:57:92:dc:ae:23:8f:29:b6:
ae:85:66:bb:42:42:62:56:9d:df:c8:dc:0e:f8:7d:
e8:3a:30:f3:16:29:f4:4a:a1:f9:91:af:4b:8d:9e:
98:96:5d:5f:3a:2e:ee:d9:5f:01:4b:b6:85:12:10:
99:46:c4:ad:fb:9e:60:d2:65:53:b5:bf:11:52:4b:
8a:c6:1e:54:e2:a4:0a:36:f9:ec:ec:55:66:3d:4e:
2d:c9:dd:ab:7d:e2:10:c8:a1:99:09:39:9d:67:6e:
f6:15:35:ad:65:8b:5b:fa:26:f4:a7:8c:65:66:0a:
c6:41:56:b0:ba:3f:1a:e4:c1:99:80:07:e8:cf:e9:
e3:25:73:7e:3c:38:3b:63:4e:51:b2:3a:eb:b8:45:
f5:7d:98:2d:ea:1b:04:81:72:71:51:c6:59:28:a3:
50:f1:bc:3a:a2:71:a6:af:49:f4:e6:4d:a6:53:cc:
73:c9:45:7a:dc:bf:a9:6e:e0:46:be:53:53:df:96:
e3:83:8a:5b:ac:50:d1:91:a3:49:49:3a:ce:46:e1:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F2:D3:E5:1B:19:54:F4:5C:BA:E5:45:25:13:27:F0:71:71:70:53
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:eb:21:36:fe:47:6e:ba:48:53:bd:d9:b7:c1:98:7e:6d:1e:
1a:a7:72:c6:69:ca:29:c6:5e:55:c9:d4:aa:02:84:aa:09:cf:
2b:45:d0:e8:c5:bc:42:b2:bd:d6:fe:23:36:cd:e9:ac:c8:19:
bd:d3:0e:13:bb:ab:a7:d3:ad:a2:e5:da:b8:df:ed:bc:fd:0f:
5d:b6:7a:28:67:6d:6a:8f:a4:0e:fc:50:1b:56:ba:8c:91:15:
29:0c:92:db:3f:13:47:e4:f3:e3:2b:2a:67:8a:82:90:37:79:
a1:85:5b:21:bb:71:aa:16:3c:a2:65:a2:10:1b:c4:14:e8:84:
0f:30:39:c8:8d:48:a9:fd:d2:87:13:33:fc:9b:f3:eb:b9:ce:
ac:20:a4:51:7d:31:86:1e:ce:a3:c2:df:57:e7:b8:86:8e:af:
c9:2c:08:1c:0b:3d:28:57:88:73:9d:8f:2d:96:1d:46:4a:50:
51:d5:71:14:6f:30:90:b7:90:c9:54:2d:d4:31:fc:1c:39:1c:
bb:20:77:af:af:b7:d5:33:b5:0a:10:14:6b:26:8a:a6:7c:65:
92:b8:0f:36:b6:cb:a8:65:4f:32:e4:36:0c:0b:1c:62:92:9e:
86:86:d1:6c:ba:52:06:ab:a6:84:e8:1f:68:7b:d9:ce:4e:18:
00:27:e2:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp9Ntw2jWbihos4ZLm5v/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MGRlMTZlZWU5NDdiMGE4Yzc1NzE0ZmM1ZGE2YTAyNTlj
YTFiOTAwHhcNMjUwODIzMDIwMDI1WhcNMjUwODI0MDIwMDI1WjAzMTEwLwYDVQQD
EyhlZmYyZDNlNTFiMTk1NGY0NWNiYWU1NDUyNTEzMjdmMDcxNzE3MDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLNXxD0nRs67HyNrALkhiRj7rFwW
+NEQdEULRE4SwdmQ0D/SIkLD+4wVklUUJpthD2OgV5LcriOPKbauhWa7QkJiVp3f
yNwO+H3oOjDzFin0SqH5ka9LjZ6Yll1fOi7u2V8BS7aFEhCZRsSt+55g0mVTtb8R
UkuKxh5U4qQKNvns7FVmPU4tyd2rfeIQyKGZCTmdZ272FTWtZYtb+ib0p4xlZgrG
QVawuj8a5MGZgAfoz+njJXN+PDg7Y05RsjrruEX1fZgt6hsEgXJxUcZZKKNQ8bw6
onGmr0n05k2mU8xzyUV63L+pbuBGvlNT35bjg4pbrFDRkaNJSTrORuE0GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/y0+UbGVT0XLrlRSUTJ/BxcXBTMB8GA1UdIwQY
MBaAFHgN4W7ulHsKjHVxT8XaagJZyhuQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUEzaGJ1NlVld3FNZFhGUHhkcHFBbG5LRzVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xMDcxOTUtY2M1MS00NzFiLThkYTIt
ZTAwNTU0M2YwMzc0LzEvZUEzaGJ1NlVld3FNZFhGUHhkcHFBbG5LRzVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xMDcxOTUtY2M1MS00NzFiLThkYTItZTAwNTU0M2YwMzc0
LzEvZUEzaGJ1NlVld3FNZFhGUHhkcHFBbG5LRzVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+shNv5H
brpIU73Zt8GYfm0eGqdyxmnKKcZeVcnUqgKEqgnPK0XQ6MW8QrK91v4jNs3prMgZ
vdMOE7urp9OtouXauN/tvP0PXbZ6KGdtao+kDvxQG1a6jJEVKQyS2z8TR+Tz4ysq
Z4qCkDd5oYVbIbtxqhY8omWiEBvEFOiEDzA5yI1Iqf3ShxMz/Jvz67nOrCCkUX0x
hh7Oo8LfV+e4ho6vySwIHAs9KFeIc52PLZYdRkpQUdVxFG8wkLeQyVQt1DH8HDkc
uyB3r6+31TO1ChAUayaKpnxlkrgPNrbLqGVPMuQ2DAscYpKehobRbLpSBqumhOgf
aHvZzk4YACfiIA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:31 2025 by rpki-client