Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File: jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier: CYFkpDthRW+GwRLtMAy2a3n/mxq5NMHy4cv6OUxwfmo=
Subject key identifier: D7:A4:9A:C0:15:9A:0C:E3:07:D5:8B:E4:82:26:76:79:46:33:C8:00
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 01989CDDB096546BC7FCAA0C8B0D3C2A5E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number: 162D
Signing time: Tue 12 Aug 2025 06:00:30 +0000
Manifest this update: Tue 12 Aug 2025 06:00:30 +0000
Manifest next update: Wed 13 Aug 2025 06:00:30 +0000
Files and hashes: 1: Zwk791BjXFiWW_GWZuipoheVevk.roa (hash: 98bTEWSKCgsr9ScLAh15mZ7s1p9cPoDYzZZ0PPizWyo=)
2: ebKQop9j6C8Jd62F7ue25JuDgWs.roa (hash: FqOT4Eu6V5AfcUcuw2gXk+K+VJY6kHg+9mF4TAN1HTA=)
3: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: KNEP6cWVHBYtK1uQmXaJ8lFzJHCVUwZU5Rp75PmjcS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:dd:b0:96:54:6b:c7:fc:aa:0c:8b:0d:3c:2a:5e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: Aug 12 06:00:30 2025 GMT
Not After : Aug 13 06:00:30 2025 GMT
Subject: CN=d7a49ac0159a0ce307d58be4822676794633c800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:1e:08:35:eb:fc:31:eb:2c:17:13:a8:a2:
1c:39:dd:54:06:df:ce:c5:ed:1e:88:e0:4a:f6:f2:
71:93:3d:3a:9e:ec:5c:3a:dd:4e:1e:47:83:17:90:
2e:71:9f:a3:10:e7:14:97:f2:69:de:49:ec:02:27:
7d:b5:25:5c:3b:e3:6e:21:12:4f:f8:c3:b8:5a:81:
ad:ce:1b:03:b6:f1:77:e8:6c:e0:34:96:0a:f9:c6:
31:59:ed:f4:47:3e:77:42:a0:c8:32:86:ca:bb:80:
4e:8e:2d:88:a4:bc:58:93:73:e9:10:ba:d3:94:f7:
bb:a0:da:85:20:ac:a8:95:4b:b2:83:5e:9d:f5:ca:
5a:01:cf:77:ca:87:4c:95:0e:2f:20:3c:4e:d8:0f:
e6:84:29:d7:71:13:f8:37:c7:fb:9c:7e:e3:59:f4:
e2:c7:60:e8:84:a9:3e:5a:de:9c:71:92:ee:cd:08:
32:e0:9a:12:85:fd:fd:92:6f:e9:21:38:38:17:7b:
0c:bb:69:de:f1:f9:4e:f9:75:10:dc:ba:4c:8a:8f:
27:a8:07:80:4f:80:ac:ee:fe:37:52:8f:86:66:1e:
35:88:7a:41:16:0d:9c:c4:e0:28:ab:f9:d8:a3:c1:
89:84:38:0d:10:31:8e:6a:4f:ac:a5:fc:80:0d:6a:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A4:9A:C0:15:9A:0C:E3:07:D5:8B:E4:82:26:76:79:46:33:C8:00
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:65:4c:a0:af:b6:a5:20:29:5b:03:fb:bc:1d:da:9f:1f:e1:
59:4d:07:0e:15:f7:0f:38:df:19:00:0f:3d:60:36:8d:31:cd:
1a:79:5e:39:49:67:98:be:d0:89:cf:da:31:8b:91:0b:a2:21:
8d:0f:59:3d:33:a7:7a:3a:f3:5d:ff:1a:05:08:5a:ee:7b:3d:
26:d3:ac:09:b4:00:25:fa:90:e1:41:bc:2c:c7:71:7a:d1:ff:
26:33:c5:65:15:dd:2e:19:b0:51:a2:ec:16:d9:08:be:b7:1f:
72:a4:f5:0e:89:79:64:74:b9:8d:78:13:67:b4:78:0f:74:89:
17:19:ac:8e:36:ca:97:ae:9a:7f:15:cf:0b:cc:5c:1a:de:74:
10:d6:c9:1b:93:50:89:a0:b7:be:9f:0f:73:c7:48:6f:7a:86:
bd:d4:36:af:3b:2f:b9:fa:5a:42:01:72:a8:15:ab:68:61:81:
43:1a:b9:e6:d7:88:f2:4b:24:a1:8e:2d:06:3f:36:98:b6:5a:
5d:ec:7a:67:68:b1:ba:67:1a:c9:85:10:d2:c3:69:16:88:a0:
a0:bb:e6:a8:07:0f:5d:f2:46:ce:26:95:c2:32:cb:03:92:b7:
48:54:41:a3:e0:88:bd:3d:b7:b9:1d:01:3c:15:1d:c6:a4:5d:
be:6e:22:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZic3bCWVGvH/KoMiw08Kl5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzZhZDg3OWM2NDVhZWU5OGFjNGE4OWZjODAwYjlhOTc0
ZTk0MWYwHhcNMjUwODEyMDYwMDMwWhcNMjUwODEzMDYwMDMwWjAzMTEwLwYDVQQD
EyhkN2E0OWFjMDE1OWEwY2UzMDdkNThiZTQ4MjI2NzY3OTQ2MzNjODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGUeCDXr/DHrLBcTqKIcOd1UBt/O
xe0eiOBK9vJxkz06nuxcOt1OHkeDF5AucZ+jEOcUl/Jp3knsAid9tSVcO+NuIRJP
+MO4WoGtzhsDtvF36GzgNJYK+cYxWe30Rz53QqDIMobKu4BOji2IpLxYk3PpELrT
lPe7oNqFIKyolUuyg16d9cpaAc93yodMlQ4vIDxO2A/mhCnXcRP4N8f7nH7jWfTi
x2DohKk+Wt6ccZLuzQgy4JoShf39km/pITg4F3sMu2ne8flO+XUQ3LpMio8nqAeA
T4Cs7v43Uo+GZh41iHpBFg2cxOAoq/nYo8GJhDgNEDGOak+spfyADWprRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNekmsAVmgzjB9WL5IImdnlGM8gAMB8GA1UdIwQY
MBaAFIw2rYecZFrumKxKifyAC5qXTpQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRhdGg1eGtXdTZZckVxSl9JQUxtcGRPbEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mNjYzYTMtNjg0ZS00Nzc5LTg4Yjkt
MTRlNmVjMDIwYmZhLzEvakRhdGg1eGtXdTZZckVxSl9JQUxtcGRPbEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mNjYzYTMtNjg0ZS00Nzc5LTg4YjktMTRlNmVjMDIwYmZh
LzEvakRhdGg1eGtXdTZZckVxSl9JQUxtcGRPbEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2VMoK+2
pSApWwP7vB3anx/hWU0HDhX3DzjfGQAPPWA2jTHNGnleOUlnmL7Qic/aMYuRC6Ih
jQ9ZPTOnejrzXf8aBQha7ns9JtOsCbQAJfqQ4UG8LMdxetH/JjPFZRXdLhmwUaLs
FtkIvrcfcqT1Dol5ZHS5jXgTZ7R4D3SJFxmsjjbKl66afxXPC8xcGt50ENbJG5NQ
iaC3vp8Pc8dIb3qGvdQ2rzsvufpaQgFyqBWraGGBQxq55teI8kskoY4tBj82mLZa
Xex6Z2ixumcayYUQ0sNpFoigoLvmqAcPXfJGziaVwjLLA5K3SFRBo+CIvT23uR0B
PBUdxqRdvm4iWA==
-----END CERTIFICATE-----
Generated at Tue Aug 12 14:36:58 2025 by rpki-client