Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json)
Hash identifier: kg/CJLFmhcgCH49cxA7XzIwOzu+AmB/XdHR99wQkTTQ=
Subject key identifier: 8F:51:84:A6:98:FE:BC:D6:14:2C:5A:19:1A:F5:BB:0C:25:F2:72:78
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 019873E1F7BC2A73AF817A7D3121F6158FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 07:00:45 +0000
Manifest this update: Mon 04 Aug 2025 07:00:45 +0000
Manifest next update: Tue 05 Aug 2025 07:00:45 +0000
Files and hashes: 1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: SBHqurX2B4BHr0F9HJbjy0QvpYzoM3cJ6JlQQita/sA=)
2: SM900vRB7gei6pS6Q178I2UX-lU.roa (hash: EDUY4+JtCT9uXEY3z6PPpKcKtOUgL6hoTy+pDX+nuro=)
3: rE12S5_UCVz_qE96OpsYCotvRdo.roa (hash: HmY8gAlqRzAv6/rOzxQZtJmfpwofsJXd2sCI5/LnmTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f7:bc:2a:73:af:81:7a:7d:31:21:f6:15:8f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Aug 4 07:00:45 2025 GMT
Not After : Aug 5 07:00:45 2025 GMT
Subject: CN=8f5184a698febcd6142c5a191af5bb0c25f27278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:38:91:33:5e:a2:da:62:be:d6:c7:16:db:
ba:0e:b4:b8:9b:8d:ab:a4:c9:95:98:b6:70:35:45:
b4:a7:9a:b0:1a:6f:e6:a1:81:fc:b4:f1:89:94:cd:
e2:28:a4:2d:f2:98:99:7a:ec:f1:ed:a3:cc:08:74:
13:ed:39:84:d4:7c:00:79:80:b0:87:ce:87:4c:39:
4a:f8:e1:9e:5b:ff:5a:93:b3:6e:1e:fc:dd:2b:79:
b6:83:aa:7b:6e:91:33:f9:e3:5d:8f:c5:c1:65:36:
68:7e:e4:10:ab:ed:cc:2c:29:eb:1d:a8:0a:70:37:
04:05:f9:50:5b:0d:b5:73:b8:f8:c5:7d:39:55:64:
5b:f5:bf:bc:bf:a8:dc:26:c0:71:60:1e:a1:85:89:
44:d7:22:8e:1e:24:d8:c1:13:ab:04:48:be:4c:e8:
d2:e6:76:4e:45:de:13:4c:35:ff:d2:92:8b:50:b7:
ce:2c:06:df:41:a7:68:bb:47:cf:f0:7b:b1:26:a0:
bb:11:27:91:fa:2b:40:42:44:0f:75:44:11:9f:9c:
01:5d:fb:11:00:c3:f8:3b:fd:b4:40:94:6c:f7:9c:
ed:15:44:21:11:b0:0f:2d:2b:7d:8a:f6:7f:3b:d8:
cd:07:fd:cf:d5:be:03:4f:cc:09:bf:e7:b4:db:25:
d4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:51:84:A6:98:FE:BC:D6:14:2C:5A:19:1A:F5:BB:0C:25:F2:72:78
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ae:0e:b3:15:c8:17:19:ae:e8:f8:5b:2c:65:40:75:f4:5f:
50:63:9b:ba:03:2a:8c:64:3e:b1:be:13:b5:bf:85:2e:b1:f6:
24:0b:8c:d7:4a:8c:69:f1:49:9d:b8:71:43:91:a3:c3:eb:96:
45:5b:0d:97:e1:f0:46:7f:31:46:9e:a7:0b:72:06:ee:b5:b7:
d6:e5:92:00:36:26:cd:bb:c0:7a:92:75:25:a0:7c:f4:8e:09:
70:59:ed:45:06:3b:2e:03:20:2b:eb:78:39:c0:59:4c:da:73:
8e:db:0f:d7:93:7a:ed:25:13:96:51:d9:77:23:99:4e:89:f8:
b2:63:81:07:f0:51:bd:43:8e:4e:e5:99:95:f5:6d:fd:17:e2:
1f:6a:1a:fb:9e:08:36:0a:b0:25:95:38:d7:3c:84:0c:65:cd:
c2:3e:85:08:ad:d8:96:3a:2f:ff:4c:9a:31:c1:1c:28:e2:e0:
3e:3b:52:26:82:86:5c:82:a2:bf:91:42:c5:a2:f1:db:ef:c0:
50:ef:06:a9:04:9d:25:0e:c5:8c:99:e4:3c:e0:73:93:8f:38:
c8:ae:b0:45:84:3f:45:e6:5c:5c:f1:4e:61:b2:fd:5e:19:c9:
14:a4:dc:96:13:41:06:09:b4:2f:43:d5:16:09:54:96:f1:8d:
85:8d:e2:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4fe8KnOvgXp9MSH2FY+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZTUzZDE4ZjVmMjEyYWUwODAyYTE3ZWU1OTk0YzMzMzFh
NDM1MjQwHhcNMjUwODA0MDcwMDQ1WhcNMjUwODA1MDcwMDQ1WjAzMTEwLwYDVQQD
Eyg4ZjUxODRhNjk4ZmViY2Q2MTQyYzVhMTkxYWY1YmIwYzI1ZjI3Mjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxA4kTNeotpivtbHFtu6DrS4m42r
pMmVmLZwNUW0p5qwGm/moYH8tPGJlM3iKKQt8piZeuzx7aPMCHQT7TmE1HwAeYCw
h86HTDlK+OGeW/9ak7NuHvzdK3m2g6p7bpEz+eNdj8XBZTZofuQQq+3MLCnrHagK
cDcEBflQWw21c7j4xX05VWRb9b+8v6jcJsBxYB6hhYlE1yKOHiTYwROrBEi+TOjS
5nZORd4TTDX/0pKLULfOLAbfQadou0fP8HuxJqC7ESeR+itAQkQPdUQRn5wBXfsR
AMP4O/20QJRs95ztFUQhEbAPLSt9ivZ/O9jNB/3P1b4DT8wJv+e02yXULwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9RhKaY/rzWFCxaGRr1uwwl8nJ4MB8GA1UdIwQY
MBaAFAPlPRj18hKuCAKhfuWZTDMxpDUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2Qt
MDJiYWI5ZjZmOTU1LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kZGQ5ZjEtMGYyZS00ZDVmLTg1N2QtMDJiYWI5ZjZmOTU1
LzEvQS1VOUdQWHlFcTRJQXFGLTVabE1NekdrTlNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ64OsxXI
Fxmu6PhbLGVAdfRfUGObugMqjGQ+sb4Ttb+FLrH2JAuM10qMafFJnbhxQ5Gjw+uW
RVsNl+HwRn8xRp6nC3IG7rW31uWSADYmzbvAepJ1JaB89I4JcFntRQY7LgMgK+t4
OcBZTNpzjtsP15N67SUTllHZdyOZTon4smOBB/BRvUOOTuWZlfVt/RfiH2oa+54I
NgqwJZU41zyEDGXNwj6FCK3Yljov/0yaMcEcKOLgPjtSJoKGXIKiv5FCxaLx2+/A
UO8GqQSdJQ7FjJnkPOBzk484yK6wRYQ/ReZcXPFOYbL9XhnJFKTclhNBBgm0L0PV
FglUlvGNhY3inA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:28 2025 by rpki-client