Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
File: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft (raw, json)
Hash identifier: bLgrKlv4yonTg0OybDPCddyZHO1jUMIEvhwv563rnqs=
Subject key identifier: E6:FD:A6:23:73:77:83:39:0B:50:AB:C4:48:9A:46:BC:61:4B:90:18
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial: 019882B0DD31831F13786AD10A885235A092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 04:01:25 +0000
Manifest this update: Thu 07 Aug 2025 04:01:25 +0000
Manifest next update: Fri 08 Aug 2025 04:01:25 +0000
Files and hashes: 1: Lhe1dIcaQ8uYC-tM4_HlulQzvCo.roa (hash: tTALYzIFh4izYkRayS1lcrRII4GdMnV6mKHpYnfWfmk=)
2: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl (hash: AvLecw9ZE8qx1hbkAXItxmryXN71uF0XsVAexAfVi1Y=)
3: xG6V-ZBOkUvyT-WvdOCbpNGBhno.roa (hash: Naq65ENl+tsrgyE3t3NO3AfPirgJokBnbdzMIvkSOwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:dd:31:83:1f:13:78:6a:d1:0a:88:52:35:a0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Validity
Not Before: Aug 7 04:01:25 2025 GMT
Not After : Aug 8 04:01:25 2025 GMT
Subject: CN=e6fda623737783390b50abc4489a46bc614b9018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:9a:65:22:90:6f:0b:f5:45:69:b9:54:e4:
30:9a:1b:8d:77:18:67:7a:5e:4e:8e:f6:9c:a6:7c:
96:8d:4e:2b:8c:fa:7e:f0:3c:71:b6:3f:4a:df:72:
e4:c5:79:e6:39:e2:6c:7c:1c:58:6d:47:55:18:df:
f3:50:0c:a4:dc:53:0c:9b:32:01:e4:b5:ee:cd:b2:
94:be:7f:3d:f3:03:8e:44:bd:44:e4:b7:fd:16:90:
63:e1:bc:ed:93:cd:6b:74:6d:82:f7:45:dc:c2:c8:
d6:29:97:95:1d:2f:e0:64:27:5c:42:73:94:dc:29:
c7:56:25:6d:bc:49:d3:e3:0d:2c:52:77:29:30:8d:
f5:d9:8d:d2:cf:6c:cd:e9:95:91:a3:b9:53:8d:e0:
0e:14:0b:da:0c:bd:1f:f8:ac:30:47:af:57:95:10:
51:cb:ff:59:71:d4:b1:9d:ce:bd:7c:08:28:f4:03:
0b:77:a1:f8:bd:9d:e3:82:49:f1:5b:f0:0a:d8:c9:
30:cf:32:1b:ea:e7:5d:39:41:48:ac:99:99:aa:a0:
af:f4:33:d2:38:7b:e9:cb:6a:da:95:43:f4:8e:17:
70:b5:8b:87:cf:77:3b:16:d0:d9:b0:f0:59:a2:51:
9d:48:91:b0:3e:17:d6:62:fa:d4:57:0c:16:63:4b:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FD:A6:23:73:77:83:39:0B:50:AB:C4:48:9A:46:BC:61:4B:90:18
X509v3 Authority Key Identifier:
keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:40:13:97:32:c3:da:e4:a4:cd:d8:cd:7b:f7:7b:f2:ed:45:
0f:ec:e9:ee:df:ae:85:f6:f6:96:cb:df:62:4c:78:53:60:98:
8b:31:6b:13:ba:70:57:ac:76:a5:eb:d8:61:87:b0:1d:02:3e:
24:f0:2e:13:8a:45:4e:df:f0:a9:9c:81:09:ac:e4:46:ab:6d:
27:7d:db:a5:be:61:9d:74:ad:4e:ba:27:76:f2:a8:14:aa:e1:
84:4f:fd:9c:63:83:a5:33:85:e9:e6:aa:3b:73:a5:5f:03:5d:
8d:bd:0b:77:ec:3a:38:5d:6e:04:63:4a:98:88:b9:9a:03:75:
53:b0:0c:7b:f1:08:79:c5:b4:db:f2:04:ca:07:91:b2:49:af:
34:d3:34:73:eb:99:d8:b0:6c:00:ec:db:de:ef:2b:e0:a3:be:
07:15:6c:2c:b3:5b:0f:12:59:3c:ca:5c:83:57:a1:d9:76:c1:
8d:4c:a0:a4:85:e4:0d:24:ca:11:2f:3a:d9:35:9a:08:0e:49:
08:eb:e9:21:21:7d:78:61:74:4c:d2:23:fe:5d:07:3d:f8:04:
54:e9:38:83:00:70:2d:d2:af:a4:10:eb:7b:7c:c4:46:d0:69:
63:8e:7e:1b:52:01:ae:18:8f:6b:06:e3:e1:6c:7c:c2:d0:67:
41:46:9e:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCsN0xgx8TeGrRCohSNaCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNjFkZjcxZjk3NDYxYzZiM2I0NTQ4ZmRjZmVjZDc3YjY3
OTAzMGYwHhcNMjUwODA3MDQwMTI1WhcNMjUwODA4MDQwMTI1WjAzMTEwLwYDVQQD
EyhlNmZkYTYyMzczNzc4MzM5MGI1MGFiYzQ0ODlhNDZiYzYxNGI5MDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR6aZSKQbwv1RWm5VOQwmhuNdxhn
el5OjvacpnyWjU4rjPp+8Dxxtj9K33LkxXnmOeJsfBxYbUdVGN/zUAyk3FMMmzIB
5LXuzbKUvn898wOORL1E5Lf9FpBj4bztk81rdG2C90XcwsjWKZeVHS/gZCdcQnOU
3CnHViVtvEnT4w0sUncpMI312Y3Sz2zN6ZWRo7lTjeAOFAvaDL0f+KwwR69XlRBR
y/9ZcdSxnc69fAgo9AMLd6H4vZ3jgknxW/AK2MkwzzIb6uddOUFIrJmZqqCv9DPS
OHvpy2ralUP0jhdwtYuHz3c7FtDZsPBZolGdSJGwPhfWYvrUVwwWY0s30QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOb9piNzd4M5C1CrxEiaRrxhS5AYMB8GA1UdIwQY
MBaAFLth33H5dGHGs7RUj9z+zXe2eQMPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTJIZmNmbDBZY2F6dEZTUDNQN05kN1o1QXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mNTJjZWEtM2Y0MS00ODJiLThjZTgt
MmUyNTQ4MzEwZGYzLzEvdTJIZmNmbDBZY2F6dEZTUDNQN05kN1o1QXc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mNTJjZWEtM2Y0MS00ODJiLThjZTgtMmUyNTQ4MzEwZGYz
LzEvdTJIZmNmbDBZY2F6dEZTUDNQN05kN1o1QXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEATlzLD
2uSkzdjNe/d78u1FD+zp7t+uhfb2lsvfYkx4U2CYizFrE7pwV6x2pevYYYewHQI+
JPAuE4pFTt/wqZyBCazkRqttJ33bpb5hnXStTrondvKoFKrhhE/9nGODpTOF6eaq
O3OlXwNdjb0Ld+w6OF1uBGNKmIi5mgN1U7AMe/EIecW02/IEygeRskmvNNM0c+uZ
2LBsAOzb3u8r4KO+BxVsLLNbDxJZPMpcg1eh2XbBjUygpIXkDSTKES862TWaCA5J
COvpISF9eGF0TNIj/l0HPfgEVOk4gwBwLdKvpBDre3zERtBpY45+G1IBrhiPawbj
4Wx8wtBnQUaeig==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:12:28 2025 by rpki-client