
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: gixZYO677l+kNQzt88EO98PTt34tpH1idyNaG7WZ7Fw=
Subject key identifier: 6B:C7:39:33:2C:36:DF:67:0A:6E:9E:32:F9:D9:3B:EB:84:07:A7:2F
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 019881D5907505CAB62D62DDC0247FFF3B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 00:01:53 +0000
Manifest this update: Thu 07 Aug 2025 00:01:53 +0000
Manifest next update: Fri 08 Aug 2025 00:01:53 +0000
Files and hashes: 1: 9Xk925SUUXfLnbw9FBp9N3qLdfo.roa (hash: Ly02I9+k8vuMGWxnQ136VFvx8sd3hejXT82bKGKV7BM=)
2: PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa (hash: sT+3KqlrpBwNw2te0UajmvKsMUapvIEs9YfpHeq4XGU=)
3: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: hPwJ6Y+FU6aH+YZCtNJSEMBhzbmo/HGPmVoQl1dQrDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:90:75:05:ca:b6:2d:62:dd:c0:24:7f:ff:3b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Aug 7 00:01:53 2025 GMT
Not After : Aug 8 00:01:53 2025 GMT
Subject: CN=6bc739332c36df670a6e9e32f9d93beb8407a72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f4:22:3d:e2:3e:a2:b1:28:c3:8d:28:82:af:
fa:47:78:b8:c5:d1:dd:d8:5e:e1:dc:bf:c7:2e:7a:
0f:75:b4:e6:aa:da:5b:eb:8a:04:b1:9d:24:37:32:
68:11:ae:d5:34:f6:17:b8:7e:9f:9c:82:59:03:0e:
ae:f3:8c:8c:f4:f6:a8:48:0e:c5:15:34:22:dd:0d:
70:15:4e:22:ce:75:ec:bc:fb:d3:f6:70:43:bd:63:
cb:af:82:70:b0:d0:8d:af:12:1f:33:76:cd:6d:25:
26:a2:2b:1f:6c:d2:b0:68:6d:0b:91:46:ae:36:2c:
61:53:ea:f6:28:a9:58:69:de:3e:66:33:96:eb:e0:
8f:1a:af:2b:d9:21:8f:04:3f:85:ae:68:46:f4:1d:
fe:9f:02:30:ef:c8:9f:61:08:db:8c:d3:08:16:10:
c2:fa:ff:24:35:26:fb:d0:67:8f:b1:1e:34:5f:0d:
fc:e6:81:ca:d9:a4:82:62:d2:c9:11:91:5d:9d:d8:
f8:63:ed:2b:6d:22:f4:97:0d:0b:b9:a8:cb:be:35:
0e:ae:29:31:da:6b:18:83:a8:63:9f:b9:8f:94:f2:
5e:b2:cf:46:05:47:f3:88:bf:c8:4c:20:12:92:06:
e8:4c:7b:e0:7a:f1:4b:cc:eb:5f:0c:af:30:d0:87:
f2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C7:39:33:2C:36:DF:67:0A:6E:9E:32:F9:D9:3B:EB:84:07:A7:2F
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d8:50:42:c9:b0:07:99:74:cb:3a:5f:b9:dc:e7:1d:55:bd:
6f:6a:55:ac:ec:4f:02:8e:7d:3d:67:08:3f:97:68:17:48:ff:
c1:53:91:b0:1e:f0:45:f9:1e:52:a6:38:76:57:9a:02:ba:3e:
c4:c1:2a:05:34:68:29:b6:76:e7:6f:79:a7:2a:89:fc:77:8c:
fe:f2:d5:33:15:a9:1e:9d:4b:83:bc:35:c3:8d:3b:b3:26:30:
79:cf:2d:f9:89:b9:af:e1:8f:8c:8e:4f:23:25:24:67:59:52:
a3:af:12:27:3a:01:86:74:58:a7:6c:de:07:7e:e6:76:5d:44:
d4:08:c1:83:74:f9:2d:28:a6:29:a3:57:73:28:71:8a:b4:23:
99:c0:45:0c:61:47:84:75:91:3d:5d:87:3c:62:22:16:12:59:
3d:81:df:13:d7:74:84:96:6e:c6:72:dd:d8:78:90:58:89:15:
21:70:d0:5d:b3:9d:be:23:b7:f2:d9:b7:58:e1:cd:e9:7e:cf:
4a:be:8d:38:a8:cc:59:bd:ab:28:3c:35:65:9f:0a:70:36:46:
8f:bd:ae:92:5a:29:77:e0:f4:06:8e:d8:bc:af:a2:2f:27:bb:
e6:5d:00:8a:94:aa:ad:53:c2:d3:d5:e9:40:87:04:90:0a:19:
e3:0d:bb:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiB1ZB1Bcq2LWLdwCR//zuaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5N2RhNjAwMWIxMjM4MzA2OGZlNzFhMzBmOGNmMjg1YzY2
ODMwZmUwHhcNMjUwODA3MDAwMTUzWhcNMjUwODA4MDAwMTUzWjAzMTEwLwYDVQQD
Eyg2YmM3MzkzMzJjMzZkZjY3MGE2ZTllMzJmOWQ5M2JlYjg0MDdhNzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPQiPeI+orEow40ogq/6R3i4xdHd
2F7h3L/HLnoPdbTmqtpb64oEsZ0kNzJoEa7VNPYXuH6fnIJZAw6u84yM9PaoSA7F
FTQi3Q1wFU4iznXsvPvT9nBDvWPLr4JwsNCNrxIfM3bNbSUmoisfbNKwaG0LkUau
NixhU+r2KKlYad4+ZjOW6+CPGq8r2SGPBD+FrmhG9B3+nwIw78ifYQjbjNMIFhDC
+v8kNSb70GePsR40Xw385oHK2aSCYtLJEZFdndj4Y+0rbSL0lw0LuajLvjUOrikx
2msYg6hjn7mPlPJess9GBUfziL/ITCASkgboTHvgevFLzOtfDK8w0Ify+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvHOTMsNt9nCm6eMvnZO+uEB6cvMB8GA1UdIwQY
MBaAFIl9pgAbEjgwaP5xow+M8oXGaDD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85NmRlYzgtNzcyMC00ZWZjLWJkMzkt
ODRmYWFmMTA1YTk3LzEvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85NmRlYzgtNzcyMC00ZWZjLWJkMzktODRmYWFmMTA1YTk3
LzEvaVgybUFCc1NPREJvX25HakQ0enloY1pvTVA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9hQQsmw
B5l0yzpfudznHVW9b2pVrOxPAo59PWcIP5doF0j/wVORsB7wRfkeUqY4dleaAro+
xMEqBTRoKbZ25295pyqJ/HeM/vLVMxWpHp1Lg7w1w407syYwec8t+Ym5r+GPjI5P
IyUkZ1lSo68SJzoBhnRYp2zeB37mdl1E1AjBg3T5LSimKaNXcyhxirQjmcBFDGFH
hHWRPV2HPGIiFhJZPYHfE9d0hJZuxnLd2HiQWIkVIXDQXbOdviO38tm3WOHN6X7P
Sr6NOKjMWb2rKDw1ZZ8KcDZGj72uklopd+D0Bo7YvK+iLye75l0AipSqrVPC09Xp
QIcEkAoZ4w27Ag==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:22:23 2025 by rpki-client