Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier: GVG9qz7AgWDE7xom0GuFwRU0TdYWSLu4Mxkg74ISRWg=
Subject key identifier: 82:4B:2C:FE:0E:85:81:FF:E7:43:FE:96:02:B8:16:64:00:0D:72:F4
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 0198857A8D49E8B6CE0182C080F89B376353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number: 1664
Signing time: Thu 07 Aug 2025 17:00:57 +0000
Manifest this update: Thu 07 Aug 2025 17:00:57 +0000
Manifest next update: Fri 08 Aug 2025 17:00:57 +0000
Files and hashes: 1: 3vEPBG1oI2P7D_OfeL-L-zO3dlY.roa (hash: tN3ytiGRqjapeYsvwHwSYsXkP2Hw2Lot2BTQS7jncsI=)
2: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: V98bBe+uhfLVbRnyfZlG6s5N0Y2D/E16HIbZBC0EwVU=)
3: jN3YKyZr7fLBbaM-ys_51VKLM4I.roa (hash: /Z7rTH+6bXmxYBkfBLPrrW+aXm6fTfnVD3Lj/2mMT08=)
4: pdxIZLkn44c6LSjDy38wqVYD4hk.roa (hash: A+cdWFoJP8yj76UKSIBetM0GWfZ4/vk5vohLKBXTmGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:7a:8d:49:e8:b6:ce:01:82:c0:80:f8:9b:37:63:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Aug 7 17:00:57 2025 GMT
Not After : Aug 8 17:00:57 2025 GMT
Subject: CN=824b2cfe0e8581ffe743fe9602b81664000d72f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:39:a6:d7:d9:b9:57:47:ac:1a:01:b7:62:81:
e7:58:79:a3:61:15:c6:31:bd:cc:14:86:6a:b5:f5:
18:07:ad:d3:d1:3c:26:3b:a6:b0:e5:49:99:04:96:
5f:63:fa:93:01:14:96:7b:e0:e5:7c:cd:23:59:2f:
90:82:3b:6c:e7:f8:c5:a9:0f:7f:14:e9:cb:02:e3:
3b:30:a0:d8:d7:5b:2d:e9:25:6b:3c:93:b7:fc:1b:
4e:0c:5f:9a:aa:65:ca:61:df:0c:44:92:bf:a8:03:
11:df:be:2e:ed:d2:1e:4f:02:da:49:86:eb:fe:f2:
6e:18:27:db:48:c6:21:78:57:78:f7:8e:f7:e8:6e:
00:46:36:11:57:d4:11:4a:c1:09:cc:b4:6e:de:ee:
f4:e2:5a:d4:a2:b9:ae:ac:fa:49:14:4b:b0:d1:2d:
da:5b:d6:8f:f9:c3:2d:44:b5:fc:f6:ea:fe:0e:5f:
7a:d7:35:50:3b:d5:ae:93:8a:ff:b7:0c:5f:5e:9d:
36:84:78:62:1a:cf:68:62:ca:a3:5d:95:7a:39:38:
a4:97:96:5a:21:2e:cb:09:02:ce:07:a6:38:a1:20:
c2:15:98:a3:a8:d9:fc:e4:b7:dd:c4:f6:67:ec:49:
54:3e:69:87:7c:76:1f:65:34:ea:1a:e7:1e:c8:5b:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4B:2C:FE:0E:85:81:FF:E7:43:FE:96:02:B8:16:64:00:0D:72:F4
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e7:21:a3:f7:0f:23:16:66:8b:f2:3c:ab:6e:fc:86:39:97:
d5:82:da:35:3d:84:10:78:f3:75:14:a2:b9:51:4c:49:e1:5e:
d5:f4:70:32:35:f6:25:82:c6:14:a4:a1:e4:58:09:a9:ff:2a:
c2:09:0e:68:bd:b0:d5:4d:d3:39:b9:ae:8f:cb:49:4d:18:a9:
58:70:ab:92:54:81:af:55:a3:0f:06:e3:cd:ac:12:63:9a:49:
70:ea:7f:12:bd:6c:89:53:96:09:b6:d7:17:c6:a1:39:6b:e2:
60:a7:ee:aa:d1:c4:2c:22:28:9c:4c:e5:fe:1f:0c:af:62:34:
22:01:e8:35:10:84:10:e1:0b:14:34:07:95:b2:d3:2a:9e:39:
f4:15:5e:99:11:4c:33:07:0d:a8:7d:ea:33:c3:16:2a:91:89:
d0:23:f9:15:7d:51:f9:57:e6:51:ca:2f:97:c5:0b:71:32:f8:
16:fa:f8:d0:82:6e:85:ea:d3:0a:4f:5a:b9:9e:ee:a7:09:32:
54:61:a3:46:5e:e7:01:04:b8:7c:c9:a7:75:7e:54:08:d3:88:
8c:8f:c9:ef:5a:03:e8:da:49:26:ea:e4:99:5a:ae:4d:90:86:
72:6a:20:11:12:08:8a:c2:4c:c0:a3:c0:98:95:6d:4b:03:60:
44:ae:67:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFeo1J6LbOAYLAgPibN2NTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjUwODA3MTcwMDU3WhcNMjUwODA4MTcwMDU3WjAzMTEwLwYDVQQD
Eyg4MjRiMmNmZTBlODU4MWZmZTc0M2ZlOTYwMmI4MTY2NDAwMGQ3MmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Dmm19m5V0esGgG3YoHnWHmjYRXG
Mb3MFIZqtfUYB63T0TwmO6aw5UmZBJZfY/qTARSWe+DlfM0jWS+Qgjts5/jFqQ9/
FOnLAuM7MKDY11st6SVrPJO3/BtODF+aqmXKYd8MRJK/qAMR374u7dIeTwLaSYbr
/vJuGCfbSMYheFd494736G4ARjYRV9QRSsEJzLRu3u704lrUormurPpJFEuw0S3a
W9aP+cMtRLX89ur+Dl961zVQO9Wuk4r/twxfXp02hHhiGs9oYsqjXZV6OTikl5Za
IS7LCQLOB6Y4oSDCFZijqNn85LfdxPZn7ElUPmmHfHYfZTTqGuceyFuiTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJLLP4OhYH/50P+lgK4FmQADXL0MB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbecho/cP
IxZmi/I8q278hjmX1YLaNT2EEHjzdRSiuVFMSeFe1fRwMjX2JYLGFKSh5FgJqf8q
wgkOaL2w1U3TObmuj8tJTRipWHCrklSBr1WjDwbjzawSY5pJcOp/Er1siVOWCbbX
F8ahOWviYKfuqtHELCIonEzl/h8Mr2I0IgHoNRCEEOELFDQHlbLTKp459BVemRFM
MwcNqH3qM8MWKpGJ0CP5FX1R+VfmUcovl8ULcTL4Fvr40IJuherTCk9auZ7upwky
VGGjRl7nAQS4fMmndX5UCNOIjI/J71oD6NpJJurkmVquTZCGcmogERIIisJMwKPA
mJVtSwNgRK5njg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:34:16 2025 by rpki-client