
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: wQgCdgUlFl6bvaGisQPE00Acbd+NKDqKhBoHfgO7MPU=
Subject key identifier: 08:02:C8:7E:12:91:87:42:BC:0B:F6:5B:70:47:F0:4C:D9:EB:B6:98
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 01986C965FB4F2F61F976EF5CF92570736D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 1616
Signing time: Sat 02 Aug 2025 21:00:50 +0000
Manifest this update: Sat 02 Aug 2025 21:00:50 +0000
Manifest next update: Sun 03 Aug 2025 21:00:50 +0000
Files and hashes: 1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=)
2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: F9/VHl7821xDhhB3zgtvB1bi7amktFgt24VBC3sFtxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 Aug 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6c:96:5f:b4:f2:f6:1f:97:6e:f5:cf:92:57:07:36:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Aug 2 21:00:50 2025 GMT
Not After : Aug 3 21:00:50 2025 GMT
Subject: CN=0802c87e12918742bc0bf65b7047f04cd9ebb698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:21:e2:25:b4:77:aa:1c:bf:f9:aa:ed:21:
6c:5b:b8:a8:5c:8a:6f:84:f7:82:43:9d:e0:57:a5:
36:8c:9a:94:0c:c2:f8:53:50:1b:21:86:25:0c:0f:
bc:a6:db:17:6c:3a:72:3f:06:08:c3:01:e7:a5:24:
8f:30:45:88:c8:0c:ff:f2:9c:11:b4:cc:99:39:de:
d1:fa:a0:af:23:60:72:9a:0b:1f:10:43:60:1d:f1:
c4:a4:4c:c2:74:d5:f1:ee:d1:f6:b5:22:33:c0:bb:
38:22:d2:93:60:40:0e:7c:ff:a9:41:d0:69:00:10:
dd:ff:05:a1:c1:fe:48:09:f9:e0:91:e5:54:81:2e:
2d:54:83:2e:d3:72:67:19:e5:95:d9:0d:1a:b9:d0:
63:a6:b9:b4:ab:5c:5c:7c:7d:79:d6:f9:3b:0d:ae:
92:80:1a:66:09:a0:23:f6:f6:2b:26:ce:4b:68:0c:
8b:79:22:df:63:29:18:d6:eb:7e:aa:64:ae:42:61:
c6:63:7d:a2:a1:c8:8e:f2:10:25:82:73:6d:66:b2:
10:57:88:81:d9:2e:2f:20:ec:a2:ce:24:3d:4c:30:
c3:d2:a4:e9:56:cb:22:be:69:fb:e9:50:8d:9a:bc:
55:db:00:7b:3a:05:42:3d:2d:f8:25:0e:13:53:c2:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:02:C8:7E:12:91:87:42:BC:0B:F6:5B:70:47:F0:4C:D9:EB:B6:98
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:52:77:ba:05:03:0e:f5:b4:75:8f:cd:b4:bd:89:78:fc:7d:
72:81:36:5e:28:ef:fc:8b:71:28:eb:c8:67:e8:7f:48:08:21:
23:2a:9e:eb:de:2a:86:33:fd:00:ef:e3:f9:5d:97:12:f8:88:
8f:a6:7e:47:e7:28:23:6b:51:1c:f9:0e:46:3d:e5:27:b7:f7:
5a:6c:ba:a5:2a:75:d9:c8:0c:de:6e:0b:28:0c:37:6b:76:30:
99:37:46:2e:33:3d:71:8e:86:94:6b:86:43:1a:96:31:3f:c1:
86:79:40:27:9b:33:99:05:5d:3f:fc:49:a6:f2:17:92:9d:32:
86:0c:6d:df:1d:19:ea:57:dd:e2:3f:37:08:7f:71:db:e4:88:
c2:7b:94:af:6e:6b:99:86:c7:45:32:36:55:e6:bd:6e:bd:5b:
59:a1:db:31:d8:73:df:8d:5a:c6:b6:9d:a0:ba:f9:ef:d8:99:
1c:a7:97:d6:87:c1:0f:3e:2e:81:48:ab:55:3e:10:a0:9d:67:
70:b4:9c:1f:04:b4:23:db:37:7e:fd:7c:ca:2e:42:a2:3c:ff:
d8:b2:41:dd:01:2b:7f:f6:a8:2a:66:3b:3e:b4:d0:b9:0c:b4:
fd:bb:d0:21:83:8b:0c:87:fb:c4:3d:b0:6d:9a:99:fa:3c:83:
30:cb:4a:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhsll+08vYfl271z5JXBzbVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OWViNGQ4YzY1ZjNhN2I0NTRjYTJhNWU1ZjY0MDk0ZTlk
ODhiZDMwHhcNMjUwODAyMjEwMDUwWhcNMjUwODAzMjEwMDUwWjAzMTEwLwYDVQQD
EygwODAyYzg3ZTEyOTE4NzQyYmMwYmY2NWI3MDQ3ZjA0Y2Q5ZWJiNjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshch4iW0d6ocv/mq7SFsW7ioXIpv
hPeCQ53gV6U2jJqUDML4U1AbIYYlDA+8ptsXbDpyPwYIwwHnpSSPMEWIyAz/8pwR
tMyZOd7R+qCvI2BymgsfEENgHfHEpEzCdNXx7tH2tSIzwLs4ItKTYEAOfP+pQdBp
ABDd/wWhwf5ICfngkeVUgS4tVIMu03JnGeWV2Q0audBjprm0q1xcfH151vk7Da6S
gBpmCaAj9vYrJs5LaAyLeSLfYykY1ut+qmSuQmHGY32iociO8hAlgnNtZrIQV4iB
2S4vIOyiziQ9TDDD0qTpVssivmn76VCNmrxV2wB7OgVCPS34JQ4TU8JJlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgCyH4SkYdCvAv2W3BH8EzZ67aYMB8GA1UdIwQY
MBaAFAeetNjGXzp7RUyipeX2QJTp2IvTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yZmMwMDctMzYxZC00ZjQ3LWFhZjct
NDg0ZDg0M2U2ZGUzLzEvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yZmMwMDctMzYxZC00ZjQ3LWFhZjctNDg0ZDg0M2U2ZGUz
LzEvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVJ3ugUD
DvW0dY/NtL2JePx9coE2Xijv/ItxKOvIZ+h/SAghIyqe694qhjP9AO/j+V2XEviI
j6Z+R+coI2tRHPkORj3lJ7f3Wmy6pSp12cgM3m4LKAw3a3YwmTdGLjM9cY6GlGuG
QxqWMT/BhnlAJ5szmQVdP/xJpvIXkp0yhgxt3x0Z6lfd4j83CH9x2+SIwnuUr25r
mYbHRTI2Vea9br1bWaHbMdhz341axradoLr579iZHKeX1ofBDz4ugUirVT4QoJ1n
cLScHwS0I9s3fv18yi5Cojz/2LJB3QErf/aoKmY7PrTQuQy0/bvQIYOLDIf7xD2w
bZqZ+jyDMMtKSw==
-----END CERTIFICATE-----
Generated at Sun Aug 3 00:43:17 2025 by rpki-client