Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: qV7CQTxlqiw4kefUqKV69ZeLxwA1nb/YYuhkvbIc90U=
Subject key identifier: 08:37:C0:A7:1B:0E:43:C8:41:6E:71:A6:3C:49:E1:9A:E4:B0:99:34
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 0198537B4C4794C71696508304F626D0E5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 00:00:45 +0000
Manifest this update: Tue 29 Jul 2025 00:00:45 +0000
Manifest next update: Wed 30 Jul 2025 00:00:45 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: +q+N3hyYvH0+ebOzMXcENa4cVcydy/p5LmL16JYrbv8=)
2: XHfhEGwfsHA5Cy6rVzKyCX0VS7I.roa (hash: r0CY6B9tn8PTb3kJeN+vQ/cBCfQUrTHL37aoDlJepRA=)
3: tcPEvHuX8bqS2YKyM4C5K4tHwxk.roa (hash: rKNoYxngd5L4bRt06ua2/XaA1SqXHMSPI/cKc0JvWoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:4c:47:94:c7:16:96:50:83:04:f6:26:d0:e5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Jul 29 00:00:45 2025 GMT
Not After : Jul 30 00:00:45 2025 GMT
Subject: CN=0837c0a71b0e43c8416e71a63c49e19ae4b09934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0c:cd:40:a5:53:0d:bb:7f:44:60:c5:c7:3a:
a0:c7:e0:6c:60:b5:d4:99:f8:ce:03:1c:09:be:d6:
15:a1:54:35:2c:4d:13:52:d0:fb:db:7e:1e:4d:52:
d8:0f:a5:b1:d0:c4:a2:71:f6:98:35:98:3e:f2:6f:
97:61:45:1e:2a:1c:32:11:37:c5:58:9b:70:ca:74:
4a:7f:77:19:7e:e7:f0:1d:04:14:22:79:82:aa:4a:
10:ce:48:80:8d:2e:24:a4:a0:bd:17:21:e7:c4:dd:
15:ce:51:50:29:76:df:fa:53:a1:e8:a1:c0:8a:11:
09:9a:a4:9a:b1:a5:75:fc:6a:56:80:64:38:c0:7b:
b2:a0:71:52:94:dc:62:77:e1:3f:05:81:b4:a4:f0:
97:81:fe:7b:04:f5:73:dd:a6:ea:03:0b:88:c6:c1:
93:dd:69:be:f3:d6:fa:d3:4a:9f:de:63:41:2b:c4:
97:59:93:bd:74:88:21:32:e0:ed:ba:d9:65:6a:66:
46:13:af:0e:4f:63:26:eb:4b:aa:91:ca:ef:7a:69:
08:f5:7a:02:77:a7:35:52:12:36:6a:0c:d4:1e:41:
d8:e0:c8:bb:e1:01:9e:a0:24:3b:54:32:ce:d2:95:
7c:e5:14:51:2a:8d:44:95:c9:c4:42:3d:54:5d:59:
bd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:37:C0:A7:1B:0E:43:C8:41:6E:71:A6:3C:49:E1:9A:E4:B0:99:34
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:07:f6:76:40:3f:95:c0:0d:c1:05:1a:65:10:3c:92:0a:3f:
ff:f7:3c:b7:0e:60:4d:e5:dd:86:fb:99:0c:38:df:29:b2:2a:
6e:ad:16:00:2a:5a:8a:ca:4d:56:5e:2f:50:26:60:be:36:92:
34:82:65:88:b8:51:1c:2f:17:cb:a3:a0:e1:34:b0:9b:9e:b6:
ed:92:40:70:d8:e4:59:25:8c:8e:83:cd:e1:d2:a2:40:8b:56:
d9:d1:87:89:ae:00:74:d6:fb:cf:33:fc:5b:7a:80:d3:ec:9b:
41:bf:21:cd:c6:43:17:6b:02:26:d3:79:85:c7:fc:99:4c:9f:
e4:06:45:2a:cc:c2:d1:a1:b9:50:3d:e0:5d:c0:d8:2d:54:02:
d2:01:a3:1f:21:06:f8:d9:ea:e5:89:4d:20:a6:cc:79:79:9d:
07:a9:f3:9b:4d:33:ad:38:20:27:98:5b:91:c3:ee:13:0e:27:
4e:cb:67:78:36:69:dd:16:92:99:e4:de:f2:18:ef:f0:06:a5:
81:ce:1b:7a:a7:03:67:34:d7:06:e3:42:97:f9:04:de:2c:0c:
8b:92:af:79:cd:27:f4:ac:bf:2f:c5:1f:40:00:71:1c:d7:ef:
fa:c3:b1:72:7f:c5:42:59:0e:9d:78:60:c9:f1:c3:4c:f7:9d:
1f:f5:68:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTe0xHlMcWllCDBPYm0OXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzODg1NzY2MGRjN2ZhNjA4NDZmNzY1Yjk0Y2I2OTU3NjI1
NWFkYjYwHhcNMjUwNzI5MDAwMDQ1WhcNMjUwNzMwMDAwMDQ1WjAzMTEwLwYDVQQD
EygwODM3YzBhNzFiMGU0M2M4NDE2ZTcxYTYzYzQ5ZTE5YWU0YjA5OTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QzNQKVTDbt/RGDFxzqgx+BsYLXU
mfjOAxwJvtYVoVQ1LE0TUtD7234eTVLYD6Wx0MSicfaYNZg+8m+XYUUeKhwyETfF
WJtwynRKf3cZfufwHQQUInmCqkoQzkiAjS4kpKC9FyHnxN0VzlFQKXbf+lOh6KHA
ihEJmqSasaV1/GpWgGQ4wHuyoHFSlNxid+E/BYG0pPCXgf57BPVz3abqAwuIxsGT
3Wm+89b600qf3mNBK8SXWZO9dIghMuDtutllamZGE68OT2Mm60uqkcrvemkI9XoC
d6c1UhI2agzUHkHY4Mi74QGeoCQ7VDLO0pV85RRRKo1ElcnEQj1UXVm9DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg3wKcbDkPIQW5xpjxJ4ZrksJk0MB8GA1UdIwQY
MBaAFCOIV2YNx/pghG92W5TLaVdiVa22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEt
MGY4NzZhYmQxZTMwLzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85NDkyN2YtN2UwOC00ZjIxLTliYmEtMGY4NzZhYmQxZTMw
LzEvSTRoWFpnM0gtbUNFYjNaYmxNdHBWMkpWcmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwf2dkA/
lcANwQUaZRA8kgo///c8tw5gTeXdhvuZDDjfKbIqbq0WACpaispNVl4vUCZgvjaS
NIJliLhRHC8Xy6Og4TSwm5627ZJAcNjkWSWMjoPN4dKiQItW2dGHia4AdNb7zzP8
W3qA0+ybQb8hzcZDF2sCJtN5hcf8mUyf5AZFKszC0aG5UD3gXcDYLVQC0gGjHyEG
+Nnq5YlNIKbMeXmdB6nzm00zrTggJ5hbkcPuEw4nTstneDZp3RaSmeTe8hjv8Aal
gc4beqcDZzTXBuNCl/kE3iwMi5Kvec0n9Ky/L8UfQABxHNfv+sOxcn/FQlkOnXhg
yfHDTPedH/VodA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:32:14 2025 by rpki-client