Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
File: R88nFPKduANS6fMJ6i6MUoyUa9k.mft (raw, json)
Hash identifier: roq535QsMRIMzZAL5gbnvDG/J8kpH8gw6EGkjELrqTw=
Subject key identifier: 89:B3:D8:8B:1E:38:99:25:3D:E1:89:57:6C:B9:0C:19:3A:07:59:D3
Authority key identifier: 47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
Certificate issuer: /CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Certificate serial: 01991688344C56C58CB41FE275875AAB3ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
Manifest number: 162C
Signing time: Thu 04 Sep 2025 21:00:48 +0000
Manifest this update: Thu 04 Sep 2025 21:00:48 +0000
Manifest next update: Fri 05 Sep 2025 21:00:48 +0000
Files and hashes: 1: R88nFPKduANS6fMJ6i6MUoyUa9k.crl (hash: iEH0Y94nZcbFLVoKThl7PcTHOqYZG2g/4tBizCJA8mk=)
2: jHbOO-v3l--J7LgIxP9_M8wQbrA.roa (hash: FeF1DOYHjXY3CVPpoNeujItbqTAw7Wp1ChNuqHrFnss=)
3: zmA_4zxXMcTORxmCgPEyljXw27c.roa (hash: 566gwzLgN6mZch94CNNtXeQSmmj7Ao7jmOLhB0MgKkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:34:4c:56:c5:8c:b4:1f:e2:75:87:5a:ab:3e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cf2714f29db80352e9f309ea2e8c528c946bd9
Validity
Not Before: Sep 4 21:00:48 2025 GMT
Not After : Sep 5 21:00:48 2025 GMT
Subject: CN=89b3d88b1e3899253de189576cb90c193a0759d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:90:cb:ea:c8:f0:d9:ff:39:e7:90:4e:bf:
c0:8b:76:69:59:bc:22:3e:0a:04:9b:39:f4:e6:b0:
92:1f:8e:be:50:b6:4c:11:18:b9:f5:2f:28:b0:03:
ae:02:39:fd:80:96:89:7a:9e:6d:62:10:61:e6:b2:
43:63:6a:36:85:79:6e:da:57:29:c3:c8:63:42:2a:
4d:0d:52:4f:5b:e2:d4:51:08:94:6c:a4:c2:aa:46:
f3:f6:2c:5e:e1:a3:35:08:a0:4b:08:3c:a9:76:f9:
02:7a:9f:de:b9:ad:b5:b8:de:80:b1:e5:24:03:25:
22:e9:15:1f:75:67:a1:ec:ed:03:e7:c7:2d:0b:68:
17:ba:ab:f5:72:96:12:9c:e1:71:99:e4:61:24:c3:
3c:68:a4:54:9f:bd:e7:a5:eb:51:ce:0f:f6:cb:0b:
b8:5c:6f:a1:c0:65:73:fa:f1:c4:b1:31:61:e4:99:
01:86:e4:44:2e:55:26:62:1c:26:80:83:8d:da:3c:
53:5b:17:73:f5:c6:44:80:21:ae:a1:d1:08:7c:29:
e4:1b:99:89:1a:60:1c:17:fa:74:dd:34:20:49:db:
c4:9a:8f:ee:58:da:78:97:98:b0:32:ba:aa:47:84:
eb:10:8b:96:a7:43:6b:c0:41:e5:36:70:82:16:89:
67:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B3:D8:8B:1E:38:99:25:3D:E1:89:57:6C:B9:0C:19:3A:07:59:D3
X509v3 Authority Key Identifier:
keyid:47:CF:27:14:F2:9D:B8:03:52:E9:F3:09:EA:2E:8C:52:8C:94:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R88nFPKduANS6fMJ6i6MUoyUa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b192f-6cee-47fa-8395-58adf78d8278/1/R88nFPKduANS6fMJ6i6MUoyUa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ee:f8:14:c2:5c:ab:24:28:1d:53:5c:a1:22:3f:30:92:9b:
33:2d:91:dd:f2:b8:90:d3:a7:be:18:4c:37:b6:c5:ab:fd:d0:
c0:e8:7a:2b:58:f0:ef:8d:69:49:c0:58:d3:02:ce:2e:b7:0d:
20:2a:0c:11:07:6e:14:c3:91:ac:26:65:da:4f:f2:17:78:64:
f7:8d:4a:4e:70:e6:2c:59:19:94:b9:4a:84:7b:83:3f:6b:0b:
7e:48:5a:3b:04:32:b4:f9:ef:0d:0f:89:a3:24:c7:ce:40:d9:
2c:dc:07:ac:1a:2c:9a:ed:28:43:ba:4f:4a:4f:10:4d:41:b1:
92:d2:aa:4b:1c:2e:67:e8:75:56:fc:aa:59:68:e9:73:df:fa:
a7:62:ce:e3:8c:1a:41:4f:37:87:4e:fd:b7:b0:5b:be:9f:04:
25:18:b0:2e:b6:2b:ba:a5:cb:1b:b5:68:a5:64:58:03:b2:38:
f7:72:23:e8:e5:9f:55:bc:15:00:49:e5:25:14:f5:15:56:f3:
3a:61:53:50:80:a1:11:b6:18:55:61:f2:12:30:76:10:cc:74:
97:83:b3:1f:de:2b:aa:0d:d2:35:78:a7:79:86:40:52:c4:c4:
d9:2a:9c:22:21:54:48:1e:57:fa:66:c1:9d:11:b9:c3:ce:e3:
8c:18:db:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWiDRMVsWMtB/idYdaqz7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Y2YyNzE0ZjI5ZGI4MDM1MmU5ZjMwOWVhMmU4YzUyOGM5
NDZiZDkwHhcNMjUwOTA0MjEwMDQ4WhcNMjUwOTA1MjEwMDQ4WjAzMTEwLwYDVQQD
Eyg4OWIzZDg4YjFlMzg5OTI1M2RlMTg5NTc2Y2I5MGMxOTNhMDc1OWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03KQy+rI8Nn/OeeQTr/Ai3ZpWbwi
PgoEmzn05rCSH46+ULZMERi59S8osAOuAjn9gJaJep5tYhBh5rJDY2o2hXlu2lcp
w8hjQipNDVJPW+LUUQiUbKTCqkbz9ixe4aM1CKBLCDypdvkCep/eua21uN6AseUk
AyUi6RUfdWeh7O0D58ctC2gXuqv1cpYSnOFxmeRhJMM8aKRUn73npetRzg/2ywu4
XG+hwGVz+vHEsTFh5JkBhuRELlUmYhwmgION2jxTWxdz9cZEgCGuodEIfCnkG5mJ
GmAcF/p03TQgSdvEmo/uWNp4l5iwMrqqR4TrEIuWp0NrwEHlNnCCFolnzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImz2IseOJklPeGJV2y5DBk6B1nTMB8GA1UdIwQY
MBaAFEfPJxTynbgDUunzCeoujFKMlGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUt
NThhZGY3OGQ4Mjc4LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yYjE5MmYtNmNlZS00N2ZhLTgzOTUtNThhZGY3OGQ4Mjc4
LzEvUjg4bkZQS2R1QU5TNmZNSjZpNk1Vb3lVYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANO74FMJc
qyQoHVNcoSI/MJKbMy2R3fK4kNOnvhhMN7bFq/3QwOh6K1jw741pScBY0wLOLrcN
ICoMEQduFMORrCZl2k/yF3hk941KTnDmLFkZlLlKhHuDP2sLfkhaOwQytPnvDQ+J
oyTHzkDZLNwHrBosmu0oQ7pPSk8QTUGxktKqSxwuZ+h1VvyqWWjpc9/6p2LO44wa
QU83h079t7Bbvp8EJRiwLrYruqXLG7VopWRYA7I493Ij6OWfVbwVAEnlJRT1FVbz
OmFTUIChEbYYVWHyEjB2EMx0l4OzH94rqg3SNXineYZAUsTE2SqcIiFUSB5X+mbB
nRG5w87jjBjbyg==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:29:36 2025 by rpki-client