Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: VDgyam7zn2J4MXq06Kt/ZclpwYnImR4RSV3Oh7OrUUU=
Subject key identifier: 8B:B7:DE:88:2C:88:48:87:52:49:DB:8E:18:5A:77:09:AA:47:D9:55
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 0199183FD297AD61A7CD0C7E895AFC0F4373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 166A
Signing time: Fri 05 Sep 2025 05:00:59 +0000
Manifest this update: Fri 05 Sep 2025 05:00:59 +0000
Manifest next update: Sat 06 Sep 2025 05:00:59 +0000
Files and hashes: 1: 1Z0qsk9StCFAQktZcYQaKAQv6Eo.roa (hash: 7ZoC6UA8RmSyn6UoUQLfpDC2951iCi7ws/lgZfO/s3U=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: iy1gp86WejE4qKmjv37AdhgeTWJ0JpZ0Zz4/kJioWoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:d2:97:ad:61:a7:cd:0c:7e:89:5a:fc:0f:43:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Sep 5 05:00:59 2025 GMT
Not After : Sep 6 05:00:59 2025 GMT
Subject: CN=8bb7de882c8848875249db8e185a7709aa47d955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:55:7d:9c:89:4c:a1:a2:ec:4d:7d:e0:d0:
c9:ae:95:d3:70:16:b8:1d:7c:86:7a:f5:ac:a3:1d:
cf:5c:d4:93:8f:f1:44:a6:16:54:6e:04:53:9e:db:
a4:e8:1c:d2:d7:98:48:f6:cb:9b:f1:ce:bb:2a:9f:
ef:63:ae:78:dd:10:37:69:31:1d:05:61:bd:f2:c8:
d8:57:cb:e4:04:e1:a8:07:64:e4:cf:b6:03:cb:c2:
b2:d4:ad:2b:7c:57:74:ac:36:88:88:e1:1a:c7:15:
b5:cf:8e:b9:bf:d3:89:a1:87:8e:30:3a:2b:59:45:
56:bf:22:e4:8c:10:ed:7b:1c:66:94:88:e5:26:11:
c6:10:6c:71:e1:c9:96:9c:be:2c:59:1f:1f:17:cd:
dc:0e:1d:ec:38:33:0e:d0:a7:2b:bb:9a:05:2a:42:
0c:9b:19:b6:53:01:4f:c7:21:d4:f7:14:b7:3f:84:
50:21:3f:d1:b4:1f:cd:b1:8e:fb:88:8a:f2:91:49:
3b:34:76:23:39:d7:b4:b0:7a:e4:1d:3c:d8:55:7c:
c5:dd:26:c7:4f:9d:2b:84:e6:09:2c:93:35:20:15:
5d:a6:2a:22:29:db:7d:f2:14:7f:c6:f1:9a:5d:06:
9f:8a:88:c7:eb:05:60:b6:05:b8:69:6d:fd:37:83:
b5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B7:DE:88:2C:88:48:87:52:49:DB:8E:18:5A:77:09:AA:47:D9:55
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5a:65:7e:27:43:d3:d3:6f:4e:ef:30:7c:83:0e:80:90:67:
e9:1b:83:f8:4b:ca:3b:d5:a0:f3:73:88:72:36:85:2a:00:7f:
bb:cc:69:37:c5:ea:19:6e:e9:fd:c8:92:c5:30:0f:f8:6a:2a:
57:97:d8:0b:00:35:15:d8:91:69:1a:e3:36:4f:f3:d8:fb:a2:
45:01:f8:7d:5c:c2:0a:75:23:69:13:1b:04:05:31:40:40:19:
4a:c4:81:53:42:56:a9:4f:f2:99:f2:3f:0d:88:a1:6f:a3:13:
4f:57:f5:74:f8:2f:bb:09:54:0d:5c:00:34:46:99:20:54:7d:
0d:16:6c:b0:a0:ae:eb:89:39:fb:78:15:e5:ad:47:43:89:1a:
9d:c9:68:10:85:27:ea:20:7d:5c:94:94:79:7b:b6:11:a4:e8:
ac:6f:16:82:13:63:35:8a:ad:b9:d7:e4:1b:43:5b:ac:00:e6:
93:b8:e0:c3:66:72:0f:f8:20:3d:9f:f9:77:78:55:a5:7e:0f:
57:09:de:38:1a:a1:00:d7:8e:40:01:0e:df:9e:3b:cf:e4:94:
5c:2b:9d:93:19:25:6f:d7:c8:79:71:71:53:f8:92:47:99:d0:
3f:20:fd:20:d6:8e:e0:83:e6:fc:ce:4c:b9:70:71:94:2d:40:
34:e4:5f:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYP9KXrWGnzQx+iVr8D0NzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNzkxMGRhMWYzYTQzZjk2YjU4ZjIxOTA1ZWI1OGY2NDNk
MDI2N2UwHhcNMjUwOTA1MDUwMDU5WhcNMjUwOTA2MDUwMDU5WjAzMTEwLwYDVQQD
Eyg4YmI3ZGU4ODJjODg0ODg3NTI0OWRiOGUxODVhNzcwOWFhNDdkOTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx19VfZyJTKGi7E194NDJrpXTcBa4
HXyGevWsox3PXNSTj/FEphZUbgRTntuk6BzS15hI9sub8c67Kp/vY6543RA3aTEd
BWG98sjYV8vkBOGoB2Tkz7YDy8Ky1K0rfFd0rDaIiOEaxxW1z465v9OJoYeOMDor
WUVWvyLkjBDtexxmlIjlJhHGEGxx4cmWnL4sWR8fF83cDh3sODMO0Kcru5oFKkIM
mxm2UwFPxyHU9xS3P4RQIT/RtB/NsY77iIrykUk7NHYjOde0sHrkHTzYVXzF3SbH
T50rhOYJLJM1IBVdpioiKdt98hR/xvGaXQafiojH6wVgtgW4aW39N4O1SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIu33ogsiEiHUknbjhhadwmqR9lVMB8GA1UdIwQY
MBaAFLN5ENofOkP5a1jyGQXrWPZD0CZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczNrUTJoODZRX2xyV1BJWkJldFk5a1BRSm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81ZmM4MGUtYTA5NS00YzIwLTkwZTQt
MmMwZjk4YTc0OTY2LzEvczNrUTJoODZRX2xyV1BJWkJldFk5a1BRSm40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81ZmM4MGUtYTA5NS00YzIwLTkwZTQtMmMwZjk4YTc0OTY2
LzEvczNrUTJoODZRX2xyV1BJWkJldFk5a1BRSm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFplfidD
09NvTu8wfIMOgJBn6RuD+EvKO9Wg83OIcjaFKgB/u8xpN8XqGW7p/ciSxTAP+Goq
V5fYCwA1FdiRaRrjNk/z2PuiRQH4fVzCCnUjaRMbBAUxQEAZSsSBU0JWqU/ymfI/
DYihb6MTT1f1dPgvuwlUDVwANEaZIFR9DRZssKCu64k5+3gV5a1HQ4kancloEIUn
6iB9XJSUeXu2EaTorG8WghNjNYqtudfkG0NbrADmk7jgw2ZyD/ggPZ/5d3hVpX4P
VwneOBqhANeOQAEO3547z+SUXCudkxklb9fIeXFxU/iSR5nQPyD9INaO4IPm/M5M
uXBxlC1ANORfEw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:29:40 2025 by rpki-client