
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: mPSX+cTYoXWbsz7WJdjfMrBbRDVh5PQEIju9aAHCcVU=
Subject key identifier: 83:B5:B6:44:03:4C:A1:19:43:3B:B0:3D:BC:12:28:36:F6:58:3A:08
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 01984AE5908FAE24A064AAF4BCC440445FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 160A
Signing time: Sun 27 Jul 2025 08:00:15 +0000
Manifest this update: Sun 27 Jul 2025 08:00:15 +0000
Manifest next update: Mon 28 Jul 2025 08:00:15 +0000
Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: 8AfUa24c1IuQv9/2j8fcX6uu1yLCsGyCM5tVrF8CCts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:90:8f:ae:24:a0:64:aa:f4:bc:c4:40:44:5f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Jul 27 08:00:15 2025 GMT
Not After : Jul 28 08:00:15 2025 GMT
Subject: CN=83b5b644034ca119433bb03dbc122836f6583a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:14:dd:63:ec:a8:8c:fc:f2:0e:14:63:ac:
91:b6:3b:c7:67:49:3c:ab:82:10:3b:57:62:ac:eb:
70:62:be:7a:f3:9b:5c:46:f4:0a:92:26:5b:e5:ae:
03:42:21:45:c5:33:74:b7:ab:ad:4a:32:81:e1:96:
e1:e3:c6:5a:aa:66:a3:f5:76:50:6c:91:c6:ca:35:
b4:8c:91:04:a8:29:a2:3e:e1:aa:cb:64:e4:b0:7d:
bd:e7:2f:91:03:e1:c1:3e:7f:ad:a0:8d:45:6e:cc:
73:56:3e:69:73:00:09:2c:7f:12:a5:39:08:bb:b3:
fb:c0:5b:06:78:02:0a:dc:dd:61:db:8e:fa:ff:4a:
ce:37:d6:1b:ff:46:a0:b7:f7:5b:07:17:a2:c0:8d:
8f:11:05:b5:ba:7c:70:97:01:00:ff:58:9a:c2:9c:
78:82:4a:26:62:42:6d:58:31:be:b8:e6:bc:fc:ee:
aa:65:90:8a:61:6e:b9:36:0f:74:4d:4d:ef:e1:d9:
d1:39:c1:aa:10:bd:1f:7a:a1:02:90:40:9b:ae:b4:
18:1a:34:5a:df:a2:f1:70:ba:87:9a:c9:de:db:d0:
9e:a6:cf:f9:1d:c0:f3:cb:0e:70:4c:07:e8:00:3b:
0c:24:86:ee:83:3f:48:1f:56:b9:1c:fa:84:4f:dd:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B5:B6:44:03:4C:A1:19:43:3B:B0:3D:BC:12:28:36:F6:58:3A:08
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5e:b1:38:ff:2b:e3:e2:0c:ea:cb:3b:6c:6f:c4:aa:d4:f0:
a1:69:5e:94:9b:fd:81:e3:66:44:c5:77:cc:93:da:b8:4c:bd:
03:7f:5f:ba:e8:7a:fe:47:71:63:80:16:28:f2:21:b6:aa:fa:
81:e0:10:98:68:81:c0:a9:16:64:79:02:de:c8:3d:49:1e:72:
53:2f:b6:c8:06:0c:82:2f:ba:af:eb:60:e6:7a:5a:99:c2:42:
47:2d:a7:16:fd:9b:77:72:ff:ab:07:bb:ed:a0:93:ca:98:80:
a1:dc:a3:eb:fa:b9:7c:57:3b:a8:f3:2f:23:1a:9c:16:34:29:
63:2d:a9:75:90:64:9f:dc:1d:32:47:77:1c:cc:cc:23:3c:d4:
f8:c9:9d:48:c3:fc:88:37:7f:49:9c:21:52:b0:46:6f:c1:01:
3b:e2:c3:8f:43:89:2c:a8:73:70:de:d1:d5:ef:fe:d2:51:8c:
cb:fa:91:79:6b:46:00:02:b2:00:1f:cb:44:fd:ea:10:eb:c3:
8b:f4:db:a1:61:b1:d1:5c:da:37:db:7a:d9:e0:92:0a:6f:b1:
42:7d:5c:56:81:a5:79:bb:40:07:c5:90:86:bd:24:f3:fa:76:
d0:4f:32:1c:3e:e4:d1:4e:69:2a:c6:7c:93:08:36:89:05:40:
0f:42:58:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5ZCPriSgZKr0vMRARF+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYmE2ZDBmMGY5YjE5ZjdmNDNjZWI0M2U3MzU5YTNkODRl
OTlkOTkwHhcNMjUwNzI3MDgwMDE1WhcNMjUwNzI4MDgwMDE1WjAzMTEwLwYDVQQD
Eyg4M2I1YjY0NDAzNGNhMTE5NDMzYmIwM2RiYzEyMjgzNmY2NTgzYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEUU3WPsqIz88g4UY6yRtjvHZ0k8
q4IQO1dirOtwYr5685tcRvQKkiZb5a4DQiFFxTN0t6utSjKB4Zbh48Zaqmaj9XZQ
bJHGyjW0jJEEqCmiPuGqy2TksH295y+RA+HBPn+toI1FbsxzVj5pcwAJLH8SpTkI
u7P7wFsGeAIK3N1h2476/0rON9Yb/0agt/dbBxeiwI2PEQW1unxwlwEA/1iawpx4
gkomYkJtWDG+uOa8/O6qZZCKYW65Ng90TU3v4dnROcGqEL0feqECkECbrrQYGjRa
36LxcLqHmsne29Ceps/5HcDzyw5wTAfoADsMJIbugz9IH1a5HPqET913zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIO1tkQDTKEZQzuwPbwSKDb2WDoIMB8GA1UdIwQY
MBaAFGu6bQ8Pmxn39DzrQ+c1mj2E6Z2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MzJlODktODg0Mi00OGIxLTlkY2Yt
MmFlYWRiOTY2Yjc2LzEvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MzJlODktODg0Mi00OGIxLTlkY2YtMmFlYWRiOTY2Yjc2
LzEvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP16xOP8r
4+IM6ss7bG/EqtTwoWlelJv9geNmRMV3zJPauEy9A39fuuh6/kdxY4AWKPIhtqr6
geAQmGiBwKkWZHkC3sg9SR5yUy+2yAYMgi+6r+tg5npamcJCRy2nFv2bd3L/qwe7
7aCTypiAodyj6/q5fFc7qPMvIxqcFjQpYy2pdZBkn9wdMkd3HMzMIzzU+MmdSMP8
iDd/SZwhUrBGb8EBO+LDj0OJLKhzcN7R1e/+0lGMy/qReWtGAAKyAB/LRP3qEOvD
i/TboWGx0VzaN9t62eCSCm+xQn1cVoGlebtAB8WQhr0k8/p20E8yHD7k0U5pKsZ8
kwg2iQVAD0JYAA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 17:30:15 2025 by rpki-client