Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: ruOKYFkJ+a+GizEnvNOr7RcX7iizWJNUrVNpGqo+k94=
Subject key identifier: 80:65:2B:97:FC:D1:00:70:0D:EB:C0:D3:07:74:4F:CD:69:14:C0:CF
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 019847AD98CC55027AB62F27B52E14C52278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 17:00:15 +0000
Manifest this update: Sat 26 Jul 2025 17:00:15 +0000
Manifest next update: Sun 27 Jul 2025 17:00:15 +0000
Files and hashes: 1: WxyFMVLPaoedm2KunMSjCPtRmII.roa (hash: Ungr4kPsfNHZcdD5CyaeCkdVZRH3x9Cj4Xb6OMIiqY0=)
2: ekd0T-pWjR2fdJhmt79rFrJVVFk.roa (hash: SlYmHx07GpRwdPchZU3v+4uB8eJO2LbmRdoWgdkR9QQ=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: j10TBayOk8KG3SehMQRJW6jkgA/ALDyb1ntLN0pk8zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:98:cc:55:02:7a:b6:2f:27:b5:2e:14:c5:22:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Jul 26 17:00:15 2025 GMT
Not After : Jul 27 17:00:15 2025 GMT
Subject: CN=80652b97fcd100700debc0d307744fcd6914c0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:d8:fd:48:83:c7:9e:19:3e:c8:69:1b:4c:
67:b3:38:55:6f:bf:10:c0:29:d4:8c:75:fa:0c:99:
00:fa:3a:fe:df:b1:f6:70:c5:06:80:63:bc:57:4d:
7c:2f:b8:65:14:93:48:e6:10:35:f3:e9:f4:8e:11:
0c:f0:33:62:73:80:ea:53:95:8e:63:de:28:10:69:
47:48:64:99:56:7c:15:e5:e0:15:78:29:bd:0b:fd:
7e:40:72:60:0d:23:44:e6:26:ae:89:cd:7c:41:97:
8c:6b:56:c2:26:74:f0:27:d3:c0:48:e5:fc:8d:ae:
05:80:cb:45:db:31:6c:e4:a1:51:a5:14:91:11:9c:
8f:8a:cc:22:c0:1a:9b:84:60:68:dc:5b:f0:ca:4d:
9f:f9:30:22:5e:3f:1b:2d:62:7e:9c:37:fa:39:72:
59:36:24:91:95:25:1b:6b:3c:dd:1e:63:ac:d6:14:
b8:2c:26:37:aa:ab:50:83:fa:75:4c:1e:db:56:83:
22:9f:5b:cb:b8:e0:0b:9c:57:54:aa:90:b8:32:34:
f4:8b:63:87:38:92:cf:51:95:3a:6d:45:4e:4f:06:
af:b5:35:b9:de:64:0e:9a:91:18:ac:a0:f1:8c:6d:
16:58:36:05:44:0c:2f:ec:78:1e:a7:42:90:a1:47:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:65:2B:97:FC:D1:00:70:0D:EB:C0:D3:07:74:4F:CD:69:14:C0:CF
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9b:79:f5:6a:4d:0a:ad:5a:6f:c1:e6:53:e9:f4:3c:f0:bf:
ea:1d:4d:a1:13:d5:24:ad:4d:ac:d7:a0:6f:16:1a:53:24:75:
38:e7:11:31:22:f8:0f:6e:7a:a8:43:ce:9d:b2:67:79:9d:8e:
4a:8d:19:b4:da:dc:af:54:9d:e3:76:95:31:2b:cf:dd:45:27:
bd:dd:44:64:31:f1:0b:29:39:33:85:c6:be:c8:13:29:c1:da:
41:52:45:46:6f:8d:0e:64:2e:d5:17:67:89:81:d6:ed:f3:87:
9f:6f:68:d4:bb:1b:1f:05:ba:06:56:6b:6e:f4:16:de:84:a9:
7d:3d:16:ad:7c:4c:70:e7:5e:f7:7f:9f:3f:14:94:a4:11:c4:
a6:3e:ea:ed:4d:3a:12:80:96:b9:d7:c0:ee:2c:d1:50:52:d3:
0d:c2:8c:36:20:bf:da:91:4b:03:33:d0:0e:dd:e6:84:f7:8b:
7c:92:70:9d:7c:d7:51:1b:27:cc:fa:7a:37:09:ea:21:dc:cc:
d6:21:04:c0:4a:03:26:be:1a:96:7d:6b:e6:a9:b0:41:a5:c2:
9c:5e:66:13:f4:fa:c6:e5:d4:ec:0c:a8:08:35:42:93:bb:9f:
97:54:ba:57:83:73:44:67:0e:11:78:b6:5b:16:42:62:53:87:
2a:d6:87:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrZjMVQJ6ti8ntS4UxSJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOThlODE3MDk1OWI1ZTYwMThmNjAyYjNhNzQ4N2IyZDgw
MjgxMDYwHhcNMjUwNzI2MTcwMDE1WhcNMjUwNzI3MTcwMDE1WjAzMTEwLwYDVQQD
Eyg4MDY1MmI5N2ZjZDEwMDcwMGRlYmMwZDMwNzc0NGZjZDY5MTRjMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6vY/UiDx54ZPshpG0xnszhVb78Q
wCnUjHX6DJkA+jr+37H2cMUGgGO8V018L7hlFJNI5hA18+n0jhEM8DNic4DqU5WO
Y94oEGlHSGSZVnwV5eAVeCm9C/1+QHJgDSNE5iauic18QZeMa1bCJnTwJ9PASOX8
ja4FgMtF2zFs5KFRpRSREZyPiswiwBqbhGBo3Fvwyk2f+TAiXj8bLWJ+nDf6OXJZ
NiSRlSUbazzdHmOs1hS4LCY3qqtQg/p1TB7bVoMin1vLuOALnFdUqpC4MjT0i2OH
OJLPUZU6bUVOTwavtTW53mQOmpEYrKDxjG0WWDYFRAwv7Hgep0KQoUcRvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBlK5f80QBwDevA0wd0T81pFMDPMB8GA1UdIwQY
MBaAFL+Y6BcJWbXmAY9gKzp0h7LYAoEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yM2ZiMWEtYTc5MS00MDBjLWE0MWEt
NDhjZWVkNWU0MzhlLzEvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yM2ZiMWEtYTc5MS00MDBjLWE0MWEtNDhjZWVkNWU0Mzhl
LzEvdjVqb0Z3bFp0ZVlCajJBck9uU0hzdGdDZ1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZt59WpN
Cq1ab8HmU+n0PPC/6h1NoRPVJK1NrNegbxYaUyR1OOcRMSL4D256qEPOnbJneZ2O
So0ZtNrcr1Sd43aVMSvP3UUnvd1EZDHxCyk5M4XGvsgTKcHaQVJFRm+NDmQu1Rdn
iYHW7fOHn29o1LsbHwW6BlZrbvQW3oSpfT0WrXxMcOde93+fPxSUpBHEpj7q7U06
EoCWudfA7izRUFLTDcKMNiC/2pFLAzPQDt3mhPeLfJJwnXzXURsnzPp6NwnqIdzM
1iEEwEoDJr4aln1r5qmwQaXCnF5mE/T6xuXU7AyoCDVCk7ufl1S6V4NzRGcOEXi2
WxZCYlOHKtaH/g==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:01:00 2025 by rpki-client