Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
File: 83Uc-MOi02yXRMllGYmZRaxgeCA.mft (raw, json)
Hash identifier: uOhiXY/KCn2i98amVRl2DBqGNaPqtpaDbgWBXbTbGwc=
Subject key identifier: 31:C2:CF:3E:E6:63:76:CC:36:96:2A:64:31:B6:C1:C5:0F:F3:56:CE
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Certificate issuer: /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial: 01987C0A09738D408C75520B07E77BB955A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 21:01:29 +0000
Manifest this update: Tue 05 Aug 2025 21:01:29 +0000
Manifest next update: Wed 06 Aug 2025 21:01:29 +0000
Files and hashes: 1: 83Uc-MOi02yXRMllGYmZRaxgeCA.crl (hash: Sn6S5v/VBQG1yLgxta0uftwulIfnnuB4j1IlQoJYZYw=)
2: RQIIwfPKKX5p7u0Y-C_D5Y-bKBI.roa (hash: KiLJtwlRDmcGob+kpYuioRY1Q/RLPjcl0rdsa4MFnrs=)
3: xelQwmSnZUsP7vwyXYG-OjnLzks.roa (hash: VANd7e1T8sboSWcnlJJpwtTBZNkVD3ZVwPQJ+ivjoHw=)
4: ycYE11LlQ1a-t4T_yP1coVz5lU0.roa (hash: aqEuNcxSiCWBJQINtSpWdlIDutYbO4J8N5pMivaTnAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:09:73:8d:40:8c:75:52:0b:07:e7:7b:b9:55:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
Validity
Not Before: Aug 5 21:01:29 2025 GMT
Not After : Aug 6 21:01:29 2025 GMT
Subject: CN=31c2cf3ee66376cc36962a6431b6c1c50ff356ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:57:23:54:27:44:15:c8:bb:4e:44:7c:a0:
54:b0:69:5b:37:ec:37:0e:c6:55:8b:24:ee:96:72:
f5:c3:28:3b:bd:f2:60:23:b9:a1:3b:48:e1:ca:a6:
64:27:2b:8f:02:fe:47:e0:bd:c2:09:88:b4:99:7d:
4a:8c:a0:e3:6a:14:99:21:0c:d9:87:97:8f:94:1c:
6d:fd:0b:6f:1d:1f:ff:1c:4d:3b:6a:77:3e:1d:49:
c3:59:bd:28:70:17:3a:56:01:f2:ff:08:e7:6d:94:
f0:0e:f3:81:63:f9:52:c6:44:81:e5:97:9d:b9:6b:
3b:f6:8a:d2:69:2b:01:b0:85:cb:46:3c:d1:34:c7:
c8:3f:28:e3:7d:09:19:18:2e:f8:a8:c6:c6:b2:35:
3b:64:cc:a7:4d:b2:6b:03:0f:6a:c4:af:c8:c2:18:
3a:77:cc:c4:10:56:5c:c7:78:1f:68:71:ef:0d:fa:
c9:d5:2d:2f:3c:75:5f:ac:24:56:09:8c:f1:dc:4c:
d1:16:0f:6d:4c:16:e2:70:f3:70:92:83:fc:67:27:
53:10:47:17:8d:8b:a8:d0:3c:9c:b5:2a:18:e1:06:
c2:0f:5f:18:10:72:90:45:f1:39:d9:dc:cc:d0:59:
27:f5:38:45:63:91:5d:25:21:d9:e8:9a:ea:37:2d:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C2:CF:3E:E6:63:76:CC:36:96:2A:64:31:B6:C1:C5:0F:F3:56:CE
X509v3 Authority Key Identifier:
keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:28:df:0f:b5:bc:d8:e5:3c:c2:7c:19:32:43:98:2d:79:01:
a4:84:c8:e8:6e:90:24:a0:d3:2b:2c:de:81:18:4c:98:65:df:
04:40:8d:a2:bd:16:12:35:15:d4:19:e6:e0:3d:d2:20:0a:2e:
d7:ee:c1:c8:18:26:3f:34:86:8a:f0:0f:37:92:b6:0c:43:18:
b3:e0:91:ae:56:38:b7:8d:0b:7f:f7:09:eb:44:77:0e:d2:7f:
62:5a:c8:34:c1:b2:51:17:af:fd:21:c2:9b:0c:35:da:0c:ce:
9f:d9:5b:e4:e0:85:4f:dd:1a:23:68:14:45:d1:9a:f2:a8:d5:
d5:f8:7c:28:2e:6f:0d:e3:69:0a:bc:69:ed:88:30:70:5f:bc:
8b:e8:73:74:cc:a8:b7:45:b1:50:90:1a:85:7c:65:f0:4c:bc:
da:a3:87:1f:48:09:b8:f8:00:c5:8a:84:f4:e2:9b:e0:93:d7:
3e:66:78:f2:f5:b8:34:ef:90:8b:8e:a7:22:f8:df:93:33:b1:
92:b3:cb:39:51:01:9e:e0:be:75:a4:33:b9:41:72:47:c0:a6:
c2:59:09:59:6d:cd:0e:91:66:b8:cb:e8:0d:63:c9:00:a7:73:
90:8e:d0:97:52:22:db:dd:d2:c0:31:62:38:36:82:50:f8:4a:
bb:1a:77:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8CglzjUCMdVILB+d7uVWjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNzUxY2Y4YzNhMmQzNmM5NzQ0Yzk2NTE5ODk5OTQ1YWM2
MDc4MjAwHhcNMjUwODA1MjEwMTI5WhcNMjUwODA2MjEwMTI5WjAzMTEwLwYDVQQD
EygzMWMyY2YzZWU2NjM3NmNjMzY5NjJhNjQzMWI2YzFjNTBmZjM1NmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3tXI1QnRBXIu05EfKBUsGlbN+w3
DsZViyTulnL1wyg7vfJgI7mhO0jhyqZkJyuPAv5H4L3CCYi0mX1KjKDjahSZIQzZ
h5ePlBxt/QtvHR//HE07anc+HUnDWb0ocBc6VgHy/wjnbZTwDvOBY/lSxkSB5Zed
uWs79orSaSsBsIXLRjzRNMfIPyjjfQkZGC74qMbGsjU7ZMynTbJrAw9qxK/Iwhg6
d8zEEFZcx3gfaHHvDfrJ1S0vPHVfrCRWCYzx3EzRFg9tTBbicPNwkoP8ZydTEEcX
jYuo0DyctSoY4QbCD18YEHKQRfE52dzM0Fkn9ThFY5FdJSHZ6JrqNy3WoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHCzz7mY3bMNpYqZDG2wcUP81bOMB8GA1UdIwQY
MBaAFPN1HPjDotNsl0TJZRmJmUWsYHggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wOGY5YjQtMTE1Yy00NDg4LWI1Njct
NWNmN2MwNjIxMDY1LzEvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wOGY5YjQtMTE1Yy00NDg4LWI1NjctNWNmN2MwNjIxMDY1
LzEvODNVYy1NT2kwMnlYUk1sbEdZbVpSYXhnZUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwSjfD7W8
2OU8wnwZMkOYLXkBpITI6G6QJKDTKyzegRhMmGXfBECNor0WEjUV1Bnm4D3SIAou
1+7ByBgmPzSGivAPN5K2DEMYs+CRrlY4t40Lf/cJ60R3DtJ/YlrINMGyURev/SHC
mww12gzOn9lb5OCFT90aI2gURdGa8qjV1fh8KC5vDeNpCrxp7YgwcF+8i+hzdMyo
t0WxUJAahXxl8Ey82qOHH0gJuPgAxYqE9OKb4JPXPmZ48vW4NO+Qi46nIvjfkzOx
krPLOVEBnuC+daQzuUFyR8CmwlkJWW3NDpFmuMvoDWPJAKdzkI7Ql1Ii293SwDFi
ODaCUPhKuxp3TQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:14 2025 by rpki-client