Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: EUl6P2uI+QzYYh1Po6Urqezibli/YphA8mmCyY9mOkM=
Subject key identifier: A9:BD:EE:BF:09:A8:EE:B3:BB:C1:E7:5B:E5:42:24:11:22:3B:9F:44
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 0198D5BBD9B6E4F9BCA0F6A8A161E685F518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 166B
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (hash: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=)
2: AqjmEKa_KPT9IwoGnFjP0jiJ6oM.roa (hash: XfS/oUTMWeZlyIQCw2CHPz1Yz8M9tUiaYOFg7dyhr+A=)
3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: uIOSFqCPFMqjyFf/Ul70PthwxOfjyDZJD13nGy4FM0s=)
4: ecf817WnJwsGfmatFeQyUhb3Llc.roa (hash: OXDEPH7uN3GYyUlwskriOcVgXTD3tnLi2wfgN52n2YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d9:b6:e4:f9:bc:a0:f6:a8:a1:61:e6:85:f5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=a9bdeebf09a8eeb3bbc1e75be5422411223b9f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:33:00:1c:a5:7e:d9:ff:45:14:5e:af:c9:
b5:2f:f3:5f:5d:08:a6:d3:87:7c:3b:38:fc:d7:94:
8c:5c:a7:a1:ff:17:c9:77:14:9a:fa:6d:c8:11:79:
dc:b8:b2:37:c3:b3:9f:72:c0:85:75:49:02:ea:2f:
02:07:94:74:09:ad:14:aa:92:e0:a8:0f:5c:70:09:
23:6e:b1:68:80:64:bd:cc:7f:b8:2e:f3:00:74:02:
4f:3b:bc:14:99:1d:18:6b:57:a6:99:85:c2:ee:53:
5e:bd:15:1b:18:b2:0b:85:be:90:14:58:fe:5f:20:
10:84:6a:44:eb:ab:93:47:fb:5f:4d:4b:5e:73:70:
d5:01:d1:cf:ec:26:d9:b3:c7:00:d4:2f:28:38:a4:
6a:89:15:67:b1:ac:db:0c:06:9d:f1:7f:da:2e:31:
3a:fd:38:90:ca:8d:9b:70:b0:d0:c7:8e:51:21:3e:
15:6c:13:a8:16:65:92:8c:16:46:5b:47:dd:6a:fe:
36:72:44:14:d4:b1:83:f0:d5:cb:43:0b:1f:f7:0a:
48:86:b0:61:ae:57:32:b4:b0:62:53:bb:40:7c:22:
27:62:41:de:55:4a:88:1c:c6:aa:e9:af:00:ba:86:
1d:5e:1e:96:08:99:e0:25:ad:01:0d:9e:e1:c0:ef:
34:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BD:EE:BF:09:A8:EE:B3:BB:C1:E7:5B:E5:42:24:11:22:3B:9F:44
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:63:75:1e:1b:5d:93:bb:2a:f2:11:df:94:9f:59:ad:9a:b1:
bf:68:5a:ee:95:dc:c4:e0:ea:5d:59:d9:7b:f5:e4:3c:ea:71:
30:70:25:41:80:54:d8:b9:e6:9c:f4:a0:b0:f1:2e:d4:ac:ad:
74:d3:d3:f6:c0:f1:fd:98:0d:fe:48:03:bf:60:4b:f7:f5:93:
95:9d:41:f1:e7:3e:a8:7a:d7:f1:03:00:3c:37:83:b0:9b:c3:
02:49:8f:0c:d7:de:2f:20:8c:18:7d:f2:a1:04:16:da:e5:cf:
bd:1f:d7:ad:09:5b:22:5c:2c:31:15:e9:ac:15:29:4c:ac:78:
e6:fc:53:7d:8b:ef:7e:e6:1a:04:d7:85:6d:c6:8f:27:2a:81:
39:41:d1:ca:cb:90:0e:49:46:2f:33:c2:6f:fb:e8:6a:5d:e0:
91:3f:ee:70:72:48:cf:fd:92:53:eb:99:ef:fe:e7:52:98:1d:
9b:60:a8:25:ac:b4:4c:c7:7d:bd:53:27:3c:ee:57:f0:c1:d9:
2a:27:68:45:22:cd:0a:86:ab:7f:ed:8f:71:af:66:e9:c9:18:
ab:c6:bb:3c:b3:8e:cf:e4:38:f5:38:e0:c5:c3:80:4a:f9:ff:
9f:fa:a4:75:39:36:01:8c:fa:da:68:ee:9f:94:a4:89:ae:51:
83:f5:29:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu9m25Pm8oPaooWHmhfUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOTQ5YjQ3ZGYzMTNjYmFiOTQ1MmRhOThmY2M2Mzc2MDhh
OTA5YmQwHhcNMjUwODIzMDcwMTU0WhcNMjUwODI0MDcwMTU0WjAzMTEwLwYDVQQD
EyhhOWJkZWViZjA5YThlZWIzYmJjMWU3NWJlNTQyMjQxMTIyM2I5ZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLszABylftn/RRRer8m1L/NfXQim
04d8Ozj815SMXKeh/xfJdxSa+m3IEXncuLI3w7OfcsCFdUkC6i8CB5R0Ca0UqpLg
qA9ccAkjbrFogGS9zH+4LvMAdAJPO7wUmR0Ya1emmYXC7lNevRUbGLILhb6QFFj+
XyAQhGpE66uTR/tfTUtec3DVAdHP7CbZs8cA1C8oOKRqiRVnsazbDAad8X/aLjE6
/TiQyo2bcLDQx45RIT4VbBOoFmWSjBZGW0fdav42ckQU1LGD8NXLQwsf9wpIhrBh
rlcytLBiU7tAfCInYkHeVUqIHMaq6a8AuoYdXh6WCJngJa0BDZ7hwO80WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKm97r8JqO6zu8HnW+VCJBEiO59EMB8GA1UdIwQY
MBaAFHGUm0ffMTy6uUUtqY/MY3YIqQm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgt
MDA2NmY1NDFmYWVhLzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgtMDA2NmY1NDFmYWVh
LzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWN1Hhtd
k7sq8hHflJ9ZrZqxv2ha7pXcxODqXVnZe/XkPOpxMHAlQYBU2LnmnPSgsPEu1Kyt
dNPT9sDx/ZgN/kgDv2BL9/WTlZ1B8ec+qHrX8QMAPDeDsJvDAkmPDNfeLyCMGH3y
oQQW2uXPvR/XrQlbIlwsMRXprBUpTKx45vxTfYvvfuYaBNeFbcaPJyqBOUHRysuQ
DklGLzPCb/voal3gkT/ucHJIz/2SU+uZ7/7nUpgdm2CoJay0TMd9vVMnPO5X8MHZ
KidoRSLNCoarf+2Pca9m6ckYq8a7PLOOz+Q49TjgxcOASvn/n/qkdTk2AYz62mju
n5Skia5Rg/UpVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:55 2025 by rpki-client