Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json)
Hash identifier: lYpFFvnp4wLLZ2MzjJk80kkkEvNKyrERBSi2FBjytvQ=
Subject key identifier: 53:2B:BE:1D:7D:4B:98:D1:9F:FA:38:AF:6F:08:A4:7B:96:C3:3D:06
Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Certificate serial: 01987BD2A85A49E5871BCBD690691E028896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 20:00:59 +0000
Manifest this update: Tue 05 Aug 2025 20:00:59 +0000
Manifest next update: Wed 06 Aug 2025 20:00:59 +0000
Files and hashes: 1: 2PjElAAJU3KrVInjZlxeKaqsURQ.roa (hash: E5/GwvtnZzLjYWDNMf6Xqpe3KvrLvjhM7f3dCAih0vU=)
2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: Ax3ekdlW9ilx4sdud8QrMFOXPLveGlDNsIaVxBNpDLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:a8:5a:49:e5:87:1b:cb:d6:90:69:1e:02:88:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Validity
Not Before: Aug 5 20:00:59 2025 GMT
Not After : Aug 6 20:00:59 2025 GMT
Subject: CN=532bbe1d7d4b98d19ffa38af6f08a47b96c33d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:96:13:33:d7:ea:c5:54:8c:b0:78:a4:69:3e:
ee:6b:cf:e5:40:04:b1:cf:c1:18:6a:50:ca:2a:b5:
ad:65:1e:2f:a5:09:5b:c5:a1:fe:a4:cd:7b:ba:ea:
ca:ba:6d:24:d7:b7:ba:49:73:c5:da:71:ef:09:99:
b0:11:33:3d:f3:93:cf:8b:25:c5:c6:7e:09:15:7e:
70:c1:13:dc:9f:21:af:6b:1d:cd:82:f3:63:cb:13:
89:8c:7f:a3:70:81:78:9f:3d:8a:ec:a8:bd:40:0b:
34:d2:c8:fa:12:a2:8f:f6:a3:06:43:e2:58:30:7e:
fa:44:a3:92:62:5c:84:42:1a:4f:3c:f9:cf:7c:ba:
34:46:a5:9e:5a:71:65:23:0d:c1:3e:a6:9d:12:c4:
16:1d:ff:7c:dc:d4:32:26:ef:cd:aa:00:f0:92:de:
ec:dd:d7:8f:a4:e0:82:20:e9:7c:0d:72:67:1a:04:
20:f6:ff:09:11:f0:2b:1e:87:07:58:d6:a2:06:cb:
6b:19:ba:0e:4f:49:4f:72:2d:15:f4:c8:e8:fb:8b:
4e:b7:0c:16:fc:a3:5d:d7:42:ff:37:61:48:7f:08:
f7:a7:f7:b3:6e:a1:97:e3:49:66:9a:e4:27:15:10:
12:1c:23:8c:11:db:6b:3f:c4:8c:09:c5:a8:85:7d:
b5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2B:BE:1D:7D:4B:98:D1:9F:FA:38:AF:6F:08:A4:7B:96:C3:3D:06
X509v3 Authority Key Identifier:
keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:dd:94:40:4e:f5:36:1f:8a:a0:39:5d:1a:95:68:ad:b3:a2:
47:1d:ce:c1:92:0d:64:28:a7:da:e3:05:8d:5f:66:69:1f:d6:
29:00:d3:bd:23:14:2f:2f:7a:88:97:16:0d:c4:33:9a:0f:e1:
97:97:fd:9f:a3:d0:87:25:e0:c6:21:54:36:ae:b0:c4:0b:df:
08:2b:5f:71:60:55:62:c6:ce:09:7e:4a:24:fa:ba:c2:d2:cd:
d5:7a:1f:d9:14:92:c0:41:1a:89:29:1e:05:a1:54:d9:22:f6:
1c:9c:a9:87:3d:d7:f8:cf:03:4a:20:d2:18:a5:99:6f:d1:f9:
48:21:69:f6:d9:13:c1:42:44:74:15:b3:30:f9:dd:9a:f4:47:
83:69:53:b9:35:e4:bb:e9:59:82:90:74:8f:a9:d8:ec:4d:8d:
e5:8c:f0:72:cd:3b:a9:f4:88:8b:11:e2:84:af:15:16:20:71:
a5:21:95:ec:02:ce:19:ef:50:64:82:13:02:a9:7d:c6:b8:f4:
b3:3d:8f:d0:2b:0c:f5:4f:ba:a8:72:b8:cd:fd:18:c0:03:af:
50:0b:28:2b:88:ce:5e:b7:08:ec:c5:4e:42:67:fa:9f:01:d8:
8b:40:43:76:3b:d8:74:59:22:78:ac:ee:62:88:ed:47:f7:89:
1d:ab:24:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh70qhaSeWHG8vWkGkeAoiWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZDNhOTE0NTk3M2M3OWEzZTdiOTU1MzFlM2QwZGY3ZDI4
YzRhMDQwHhcNMjUwODA1MjAwMDU5WhcNMjUwODA2MjAwMDU5WjAzMTEwLwYDVQQD
Eyg1MzJiYmUxZDdkNGI5OGQxOWZmYTM4YWY2ZjA4YTQ3Yjk2YzMzZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpYTM9fqxVSMsHikaT7ua8/lQASx
z8EYalDKKrWtZR4vpQlbxaH+pM17uurKum0k17e6SXPF2nHvCZmwETM985PPiyXF
xn4JFX5wwRPcnyGvax3NgvNjyxOJjH+jcIF4nz2K7Ki9QAs00sj6EqKP9qMGQ+JY
MH76RKOSYlyEQhpPPPnPfLo0RqWeWnFlIw3BPqadEsQWHf983NQyJu/NqgDwkt7s
3dePpOCCIOl8DXJnGgQg9v8JEfArHocHWNaiBstrGboOT0lPci0V9Mjo+4tOtwwW
/KNd10L/N2FIfwj3p/ezbqGX40lmmuQnFRASHCOMEdtrP8SMCcWohX219wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMrvh19S5jRn/o4r28IpHuWwz0GMB8GA1UdIwQY
MBaAFInTqRRZc8eaPnuVUx49DffSjEoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YzBmMGMtMTljNy00ZWFmLTk2ZjUt
N2Q0MGMxMWE5NTAwLzEvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84YzBmMGMtMTljNy00ZWFmLTk2ZjUtN2Q0MGMxMWE5NTAw
LzEvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAed2UQE71
Nh+KoDldGpVorbOiRx3OwZINZCin2uMFjV9maR/WKQDTvSMULy96iJcWDcQzmg/h
l5f9n6PQhyXgxiFUNq6wxAvfCCtfcWBVYsbOCX5KJPq6wtLN1Xof2RSSwEEaiSke
BaFU2SL2HJyphz3X+M8DSiDSGKWZb9H5SCFp9tkTwUJEdBWzMPndmvRHg2lTuTXk
u+lZgpB0j6nY7E2N5Yzwcs07qfSIixHihK8VFiBxpSGV7ALOGe9QZIITAql9xrj0
sz2P0CsM9U+6qHK4zf0YwAOvUAsoK4jOXrcI7MVOQmf6nwHYi0BDdjvYdFkieKzu
YojtR/eJHaskYg==
-----END CERTIFICATE-----
Generated at Tue Aug 5 22:57:34 2025 by rpki-client