Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
File: RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json)
Hash identifier: sOOYK+Ylo3rTa/HXyP3BvnAoK8lTpaAE+0PMr4GQ88U=
Subject key identifier: FA:44:49:32:1B:FD:BC:4C:09:5B:43:85:09:28:EC:E3:75:2E:C2:B4
Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
Certificate issuer: /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Certificate serial: 01993313E473F0A4BEE198B07D6717ACB46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 10:02:45 +0000
Manifest this update: Wed 10 Sep 2025 10:02:45 +0000
Manifest next update: Thu 11 Sep 2025 10:02:45 +0000
Files and hashes: 1: IuxDHR_CV3eNS1S5clbvfJ1hK_k.roa (hash: Hz3aDArINU9rGaWmuAjDTNSRDFd5qodJqjOuXUvn7hM=)
2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: 1lDfiH8VUa3xj1zZ+6Hsr2i/tHMDboRfo2EMcsEFI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:e4:73:f0:a4:be:e1:98:b0:7d:67:17:ac:b4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Validity
Not Before: Sep 10 10:02:45 2025 GMT
Not After : Sep 11 10:02:45 2025 GMT
Subject: CN=fa4449321bfdbc4c095b43850928ece3752ec2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:99:48:e9:97:01:fa:1b:d4:8a:a0:89:11:
b5:2c:b6:ea:bc:92:bf:83:ad:97:88:d0:a9:51:35:
0f:dd:df:ee:ad:0e:d1:01:a5:df:e3:04:63:9d:6a:
16:a7:44:b3:3e:71:44:8a:10:32:46:a1:a4:1d:bb:
41:40:12:16:54:19:53:18:3d:b0:ec:fa:57:ed:8c:
e7:37:e8:dc:40:54:20:cb:84:ca:8d:ba:9f:6c:27:
35:74:9b:69:95:04:c3:a2:ef:5d:31:df:b3:a8:70:
e4:d9:83:45:46:47:6a:d0:17:0f:ae:86:f0:e6:7a:
ca:2c:c1:76:81:af:26:e0:89:09:13:4a:da:d7:78:
20:c1:a4:36:a8:a9:b7:9a:76:4d:61:25:2d:c2:89:
7a:bf:67:b2:7f:51:6b:6d:80:bd:d1:f3:53:59:56:
5f:15:23:d3:2c:52:8b:25:53:27:18:5a:68:68:69:
5d:77:37:09:d4:7f:ca:46:2d:b1:4b:a6:af:51:3e:
46:0e:5b:ba:5d:43:41:67:fd:27:69:dd:1b:c3:27:
ee:bc:85:02:7a:05:ea:74:b3:75:a8:09:f3:73:e4:
9f:5b:de:c0:b8:b5:2d:bc:09:f0:4e:3c:4c:94:83:
a5:19:13:7a:ff:7a:64:06:f3:66:c6:6b:cb:79:60:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:44:49:32:1B:FD:BC:4C:09:5B:43:85:09:28:EC:E3:75:2E:C2:B4
X509v3 Authority Key Identifier:
keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9a:ca:a7:25:6b:6e:38:b2:5d:3d:87:9f:40:6b:e1:38:02:
16:1f:ac:eb:0c:c1:61:45:4e:f3:12:36:b5:b8:0d:e2:60:9b:
9c:37:42:70:4d:0a:bc:c7:9a:9e:c1:2c:39:30:f8:d6:aa:4a:
e8:4e:40:3e:58:ba:6c:a5:2f:7a:ff:1b:5c:f6:9b:67:74:98:
1a:1c:f5:23:1a:65:56:31:27:4a:5e:70:ab:9b:8c:42:16:96:
9f:9b:0c:e7:0f:55:22:93:e0:e3:f6:7a:26:9b:a6:26:d0:4a:
56:11:6d:7c:1d:ea:38:aa:4c:b3:99:e5:55:c3:62:be:8b:3c:
7e:c0:c4:43:41:c3:08:c6:99:7a:5d:dd:b2:15:ed:17:1e:26:
c8:bb:b1:09:47:f4:b3:d2:1a:c3:91:b1:cd:8e:4d:b5:ff:7d:
5f:42:57:4a:ad:1a:f8:8d:73:fc:a9:18:4b:a7:dc:f6:81:e0:
10:17:3d:f3:6f:4a:d2:a1:1d:a2:b8:c5:c5:e3:82:d2:c2:10:
ba:29:6b:03:9c:00:70:4c:c8:50:b1:77:99:04:3d:bd:26:c3:
8f:2b:b5:b5:ee:e2:ed:3b:15:65:fa:fb:7b:ef:7d:75:71:a0:
0e:88:f9:cc:25:34:2b:97:78:d3:b9:d3:d5:f9:88:40:8c:c0:
3a:fc:b4:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzE+Rz8KS+4ZiwfWcXrLRuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0OWU0MjUyYmNiMjJlYTJjNmNmYjM5MjRjOGY4NGJkZGU3
YTc0NzEwHhcNMjUwOTEwMTAwMjQ1WhcNMjUwOTExMTAwMjQ1WjAzMTEwLwYDVQQD
EyhmYTQ0NDkzMjFiZmRiYzRjMDk1YjQzODUwOTI4ZWNlMzc1MmVjMmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGaZSOmXAfob1IqgiRG1LLbqvJK/
g62XiNCpUTUP3d/urQ7RAaXf4wRjnWoWp0SzPnFEihAyRqGkHbtBQBIWVBlTGD2w
7PpX7YznN+jcQFQgy4TKjbqfbCc1dJtplQTDou9dMd+zqHDk2YNFRkdq0BcProbw
5nrKLMF2ga8m4IkJE0ra13ggwaQ2qKm3mnZNYSUtwol6v2eyf1FrbYC90fNTWVZf
FSPTLFKLJVMnGFpoaGlddzcJ1H/KRi2xS6avUT5GDlu6XUNBZ/0nad0bwyfuvIUC
egXqdLN1qAnzc+SfW97AuLUtvAnwTjxMlIOlGRN6/3pkBvNmxmvLeWCcRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpESTIb/bxMCVtDhQko7ON1LsK0MB8GA1UdIwQY
MBaAFESeQlK8si6ixs+zkkyPhL3eenRxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZTk1NTktOGYzYy00NWQwLTg1MWMt
NjhmMjE3NGM3OWVlLzEvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZTk1NTktOGYzYy00NWQwLTg1MWMtNjhmMjE3NGM3OWVl
LzEvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXprKpyVr
bjiyXT2Hn0Br4TgCFh+s6wzBYUVO8xI2tbgN4mCbnDdCcE0KvMeansEsOTD41qpK
6E5APli6bKUvev8bXPabZ3SYGhz1IxplVjEnSl5wq5uMQhaWn5sM5w9VIpPg4/Z6
JpumJtBKVhFtfB3qOKpMs5nlVcNivos8fsDEQ0HDCMaZel3dshXtFx4myLuxCUf0
s9Iaw5GxzY5Ntf99X0JXSq0a+I1z/KkYS6fc9oHgEBc9829K0qEdorjFxeOC0sIQ
uilrA5wAcEzIULF3mQQ9vSbDjyu1te7i7TsVZfr7e+99dXGgDoj5zCU0K5d407nT
1fmIQIzAOvy0rg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 13:39:26 2025 by rpki-client