Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier: 4MH8w+lmXk3S26eyrDxDf14Yf2P+9D3VfyPWJd/CosU=
Subject key identifier: 9B:13:7A:94:89:0E:09:09:32:DB:1E:8F:EF:3E:5A:B3:B4:AC:22:43
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial: 0198D54E014072786E80379266889825CE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:01:55 +0000
Manifest this update: Sat 23 Aug 2025 05:01:55 +0000
Manifest next update: Sun 24 Aug 2025 05:01:55 +0000
Files and hashes: 1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: yD5VRYELAzZR0skwerzEnbHMZzAlNOB5ea/ynm23gzk=)
2: v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa (hash: ncGnxGmhlyRE3Vp5tuC1OddbegBnGSDwDfQcrYZJehw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:01:40:72:78:6e:80:37:92:66:88:98:25:ce:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
Validity
Not Before: Aug 23 05:01:55 2025 GMT
Not After : Aug 24 05:01:55 2025 GMT
Subject: CN=9b137a94890e090932db1e8fef3e5ab3b4ac2243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:77:59:36:a9:f8:0d:87:55:86:d9:70:05:
69:4f:c6:4a:ab:3d:23:28:14:e3:67:04:5f:78:4b:
26:e8:14:24:33:fb:ca:ae:a9:c2:65:2a:7e:cb:59:
9b:44:75:7b:d8:f7:66:b1:9f:ea:3c:fe:0a:2d:4c:
df:c3:e0:82:f2:a5:37:96:45:ff:22:c0:a1:f1:33:
c4:86:22:50:74:d7:7f:4e:2d:3b:19:40:c6:21:1b:
6c:9e:59:02:b3:5a:b8:02:11:57:06:31:36:0c:04:
29:2f:a6:33:24:f3:cd:e1:e5:fb:91:b7:d1:f2:6f:
06:82:fc:07:90:d9:05:1f:0e:9b:d9:f6:82:28:c9:
b2:5d:51:8f:91:da:a7:d1:61:48:f5:c3:75:09:07:
cd:f0:d8:a2:f0:a1:42:1e:a5:63:69:6b:83:63:f4:
dc:7f:0e:4a:0a:dc:85:8b:d0:57:bd:b8:2a:e9:d3:
8c:d2:73:ca:27:02:e8:a1:a8:76:14:3c:26:83:9c:
de:64:a9:8e:e9:17:84:c4:df:83:46:95:ce:a7:79:
9b:34:a2:a8:ad:ac:ff:1b:86:90:3b:96:17:48:09:
e9:95:58:81:f5:c4:b8:c4:78:7b:ac:16:be:5a:bf:
de:77:f1:92:2e:66:5a:3f:91:d7:6f:43:7b:31:ad:
cc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:7A:94:89:0E:09:09:32:DB:1E:8F:EF:3E:5A:B3:B4:AC:22:43
X509v3 Authority Key Identifier:
keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c7:ba:c0:36:d9:b1:a5:9b:6a:99:e5:13:f2:ba:de:5d:4b:
69:bd:a7:22:f8:1a:d8:bf:1a:07:87:3f:fd:22:49:e8:d3:02:
64:d8:0c:70:5b:48:ce:91:fe:74:5e:39:ca:7b:7f:ae:40:c2:
74:32:0b:91:c7:74:57:1b:2a:88:17:83:7f:92:7f:ad:f8:8f:
14:a0:05:2b:8d:f9:07:fb:9f:da:b0:38:d8:a0:b5:0c:3d:d2:
c3:59:93:98:ee:a9:ad:7f:3c:b3:c1:77:8c:72:c8:31:33:61:
db:a8:d6:88:26:8e:ef:dd:a1:a1:60:c2:b4:88:22:03:bd:4f:
05:22:97:6c:d1:88:70:e2:76:19:f9:3d:b4:95:be:83:45:5b:
53:46:bc:ba:30:92:80:b6:cc:be:5b:13:66:e6:44:37:31:5e:
be:87:38:e6:00:53:56:37:dc:86:be:4e:cb:f9:94:c2:f0:b7:
35:4b:bc:98:85:12:91:0b:e5:cb:72:f8:86:ad:22:a3:2c:1e:
b8:59:53:63:29:45:8c:e6:45:cd:e8:31:9d:c0:cd:7a:cf:6a:
16:26:0d:6a:93:a5:c6:77:3d:8b:d0:f6:fa:6c:f0:a4:d6:88:
f9:fe:db:3c:2c:36:52:ac:e3:02:ba:ce:2a:f6:f5:9b:b9:c0:
05:77:94:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTgFAcnhugDeSZoiYJc4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODk0NWQxZmM3YjQ3MGU2ODczNjU1Zjc1NTkzMDBlMDk3
YTY1ZTgwHhcNMjUwODIzMDUwMTU1WhcNMjUwODI0MDUwMTU1WjAzMTEwLwYDVQQD
Eyg5YjEzN2E5NDg5MGUwOTA5MzJkYjFlOGZlZjNlNWFiM2I0YWMyMjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzp3WTap+A2HVYbZcAVpT8ZKqz0j
KBTjZwRfeEsm6BQkM/vKrqnCZSp+y1mbRHV72PdmsZ/qPP4KLUzfw+CC8qU3lkX/
IsCh8TPEhiJQdNd/Ti07GUDGIRtsnlkCs1q4AhFXBjE2DAQpL6YzJPPN4eX7kbfR
8m8GgvwHkNkFHw6b2faCKMmyXVGPkdqn0WFI9cN1CQfN8Nii8KFCHqVjaWuDY/Tc
fw5KCtyFi9BXvbgq6dOM0nPKJwLooah2FDwmg5zeZKmO6ReExN+DRpXOp3mbNKKo
raz/G4aQO5YXSAnplViB9cS4xHh7rBa+Wr/ed/GSLmZaP5HXb0N7Ma3M5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsTepSJDgkJMtsej+8+WrO0rCJDMB8GA1UdIwQY
MBaAFOCJRdH8e0cOaHNlX3VZMA4JemXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQt
MjhlNzczZGI5MWMyLzEvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQtMjhlNzczZGI5MWMy
LzEvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8e6wDbZ
saWbapnlE/K63l1Lab2nIvga2L8aB4c//SJJ6NMCZNgMcFtIzpH+dF45ynt/rkDC
dDILkcd0VxsqiBeDf5J/rfiPFKAFK435B/uf2rA42KC1DD3Sw1mTmO6prX88s8F3
jHLIMTNh26jWiCaO792hoWDCtIgiA71PBSKXbNGIcOJ2Gfk9tJW+g0VbU0a8ujCS
gLbMvlsTZuZENzFevoc45gBTVjfchr5Oy/mUwvC3NUu8mIUSkQvly3L4hq0ioywe
uFlTYylFjOZFzegxncDNes9qFiYNapOlxnc9i9D2+mzwpNaI+f7bPCw2UqzjArrO
Kvb1m7nABXeUiw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:46 2025 by rpki-client