Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier: ZwpScD1yu/4wqgjHtwVh69WySb0ur9lm1TWXl8sIh+s=
Subject key identifier: A6:50:CB:76:76:E9:FE:08:0D:22:AD:39:4E:B2:91:EE:84:EE:0E:68
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial: 0198D4044559D64898835E7F143AAC86F008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number: 164B
Signing time: Fri 22 Aug 2025 23:01:46 +0000
Manifest this update: Fri 22 Aug 2025 23:01:46 +0000
Manifest next update: Sat 23 Aug 2025 23:01:46 +0000
Files and hashes: 1: qBn6ockm6JSiEH-8udw_bpsms9g.roa (hash: nCADL7lFGk+Q6O3ajQCgcYhE2O5JRszPFiBp0Ov4f98=)
2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: g4c3raYBC+AAGvo48jOOaKsPSG5od2Mlmi1RB1wOPO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:45:59:d6:48:98:83:5e:7f:14:3a:ac:86:f0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Validity
Not Before: Aug 22 23:01:46 2025 GMT
Not After : Aug 23 23:01:46 2025 GMT
Subject: CN=a650cb7676e9fe080d22ad394eb291ee84ee0e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:4a:15:fa:07:f4:a0:1e:c6:68:a3:cd:c2:
b3:9a:42:22:ac:ba:f6:4c:b4:61:36:66:90:be:4e:
87:6c:73:b2:4c:b1:57:9d:86:5f:00:bf:57:9f:04:
51:04:20:40:99:34:6f:bd:8a:7b:63:d8:5f:32:8e:
81:51:ad:2f:dd:10:f9:24:5a:ea:b4:b7:ff:0b:f1:
92:2b:b0:ab:a7:5a:49:1d:68:f3:61:9a:72:b6:0a:
bd:5b:ef:c3:dc:3b:11:01:aa:1f:9c:90:df:39:bb:
f2:06:18:ee:31:a8:ff:bd:49:d5:be:7c:30:21:2a:
f8:7b:b3:53:29:99:b7:bf:f4:26:00:ba:44:53:1d:
89:5c:42:ed:e1:e4:ee:2b:fc:ae:75:a7:39:5d:17:
ee:d3:84:64:61:1a:dd:23:84:23:a9:ac:ea:fa:f1:
62:ee:2a:5d:0b:97:0a:c8:8f:f9:7c:3b:ae:7d:78:
26:9b:ec:6c:75:b9:e2:f5:7d:61:a4:e8:6a:86:c8:
72:0b:2a:06:5d:ad:a5:99:3c:0c:cd:cc:26:26:fe:
f0:2d:b3:14:8b:e8:c8:5c:0c:65:9f:d6:2a:08:ed:
ca:de:14:0d:1b:d4:4f:fa:e9:d8:db:79:e9:54:6d:
5f:eb:b1:cc:7c:4d:80:2e:2e:81:18:3a:32:bf:40:
30:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:CB:76:76:E9:FE:08:0D:22:AD:39:4E:B2:91:EE:84:EE:0E:68
X509v3 Authority Key Identifier:
keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5d:50:9d:40:7d:46:b5:c5:cd:3d:b9:12:fd:38:af:3d:ce:
ec:33:f3:b4:15:b8:48:2f:00:87:e6:9d:c0:1f:c9:73:45:12:
c3:44:b5:cc:dc:2e:af:93:fd:17:84:63:83:68:12:64:b8:36:
7e:5b:d5:1a:cd:a3:20:f6:9f:6e:db:54:fc:6d:d9:ff:e0:11:
61:e1:01:c4:e2:6b:91:3e:a6:6b:1a:8a:bd:ef:fc:db:7b:17:
22:47:db:37:94:8e:db:f2:57:58:c4:99:2b:b1:08:d8:de:73:
20:7b:38:53:09:47:11:eb:2b:53:6c:a9:59:27:41:af:d3:55:
5a:38:04:1d:bc:4a:4a:b1:8a:bf:28:ed:58:c3:03:69:f5:b7:
d8:4d:ea:68:dd:cd:70:28:4b:ea:aa:0e:58:99:dc:3c:df:d7:
c9:0b:e4:da:f5:cf:1d:d2:c9:bd:c6:00:56:8f:97:bd:b3:db:
7b:bb:da:bc:17:17:1d:e3:98:95:d6:26:7e:11:a5:d8:5b:88:
35:27:c9:3e:5c:94:3b:bb:3f:89:e0:37:14:ad:fb:d8:9a:67:
5c:6a:16:21:19:d5:79:76:35:7c:bc:80:6b:ee:65:94:ca:d5:
67:45:e3:6b:e4:aa:5f:27:6e:7e:4c:18:9d:62:c3:9e:01:28:
f0:7c:bb:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBEVZ1kiYg15/FDqshvAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMmVlZmE3YzYwNDhlNmEwYTVhNjVjMDdlM2UyNTUzNDFl
MTQzYmIwHhcNMjUwODIyMjMwMTQ2WhcNMjUwODIzMjMwMTQ2WjAzMTEwLwYDVQQD
EyhhNjUwY2I3Njc2ZTlmZTA4MGQyMmFkMzk0ZWIyOTFlZTg0ZWUwZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnRKFfoH9KAexmijzcKzmkIirLr2
TLRhNmaQvk6HbHOyTLFXnYZfAL9XnwRRBCBAmTRvvYp7Y9hfMo6BUa0v3RD5JFrq
tLf/C/GSK7Crp1pJHWjzYZpytgq9W+/D3DsRAaofnJDfObvyBhjuMaj/vUnVvnww
ISr4e7NTKZm3v/QmALpEUx2JXELt4eTuK/yudac5XRfu04RkYRrdI4Qjqazq+vFi
7ipdC5cKyI/5fDuufXgmm+xsdbni9X1hpOhqhshyCyoGXa2lmTwMzcwmJv7wLbMU
i+jIXAxln9YqCO3K3hQNG9RP+unY23npVG1f67HMfE2ALi6BGDoyv0AwewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZQy3Z26f4IDSKtOU6yke6E7g5oMB8GA1UdIwQY
MBaAFL8u76fGBI5qClplwH4+JVNB4UO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgt
MjFlYzY1NjVjOWJlLzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgtMjFlYzY1NjVjOWJl
LzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMl1QnUB9
RrXFzT25Ev04rz3O7DPztBW4SC8Ah+adwB/Jc0USw0S1zNwur5P9F4Rjg2gSZLg2
flvVGs2jIPafbttU/G3Z/+ARYeEBxOJrkT6maxqKve/823sXIkfbN5SO2/JXWMSZ
K7EI2N5zIHs4UwlHEesrU2ypWSdBr9NVWjgEHbxKSrGKvyjtWMMDafW32E3qaN3N
cChL6qoOWJncPN/XyQvk2vXPHdLJvcYAVo+XvbPbe7vavBcXHeOYldYmfhGl2FuI
NSfJPlyUO7s/ieA3FK372JpnXGoWIRnVeXY1fLyAa+5llMrVZ0Xja+SqXydufkwY
nWLDngEo8Hy74g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:46 2025 by rpki-client