Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json)
Hash identifier: d0bUlnkBqtMtWKO3FmY/51Rhu5ELNPxclqdtNW+u4nw=
Subject key identifier: 19:7C:67:72:9B:AC:19:46:C4:78:8C:F0:E4:7C:8A:EE:E6:AC:91:DA
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 019873E1D32067C59A19D089FFB6D746D323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
Manifest number: 165A
Signing time: Mon 04 Aug 2025 07:00:36 +0000
Manifest this update: Mon 04 Aug 2025 07:00:36 +0000
Manifest next update: Tue 05 Aug 2025 07:00:36 +0000
Files and hashes: 1: 4NcTL285pt5vHsa8sRLMLmMiOV4.roa (hash: Arn8R5fVs3fVXhVyMLl20eHv17txV42oFln86qkkdKI=)
2: AJM-6Zm39xTWDgtragWJQRfYqM8.roa (hash: VMj18TvJaA2yJmPMgPMt6hsb7JE59Ed9FEylWh2nn3U=)
3: XxQXqatab54MwtEvRbVL6EigFQ8.roa (hash: D7EHKsQKGd8BxHFkj/BOthyEyhNjNBRXz8Cg84lbagg=)
4: Z83GLoAga3sBSQ_7zAotBwUPbzU.roa (hash: ZWcGtyQo9h5IeC35NP7le1RrDMKBapDGltNCVXN1yBQ=)
5: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: Js0g6K+Xywi5+KU/RmMjVLTP0yivAuJPMmzNdWFauOY=)
6: n3c9qLIhM0llrQC6fq5JWHe_KlA.roa (hash: nA71HgAh3Ie43jdpcA7ejYsH/8ttZHymDeMQC0kqD80=)
7: qYTgMdJGkAUtjDYiuMMhTxfJQuE.roa (hash: s9YOPVDXUwDCUpFUzrcMrXpu0dW70tO1ii9LPQmYpUc=)
8: sWIjgX3QVxVSX26S9pHF5E3pjN4.roa (hash: d9FlA8hG+kNnltDamJSIQnXgFCOCvEUasZrP2Lzdiqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:d3:20:67:c5:9a:19:d0:89:ff:b6:d7:46:d3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Aug 4 07:00:36 2025 GMT
Not After : Aug 5 07:00:36 2025 GMT
Subject: CN=197c67729bac1946c4788cf0e47c8aeee6ac91da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:6b:54:20:bc:8b:3f:a7:b3:43:00:4f:da:
bc:97:2d:90:64:dd:33:5e:0a:14:15:8d:fd:4b:81:
c2:fe:0b:d7:bd:af:19:fd:48:9e:30:d1:54:d7:ea:
1d:bd:ec:d7:8c:fe:45:43:2c:1e:97:7d:3a:79:4d:
95:b3:bf:b3:43:94:c0:b6:ea:3c:e1:9c:ef:d5:d8:
87:5a:6a:53:e7:f0:c8:49:52:87:eb:31:b2:d6:ae:
bd:33:89:37:88:7a:45:30:90:25:c0:14:50:9f:05:
ea:77:91:5e:05:f9:f0:1c:d5:0d:44:24:4a:3d:e5:
69:0d:0b:c8:ff:c5:8e:38:4f:49:35:50:c8:15:66:
72:f2:4c:1c:1e:b0:ff:6f:3d:2f:1c:10:d8:e1:96:
ce:30:54:fc:43:66:74:4d:6c:9e:d0:4b:80:bb:fe:
f3:2e:a2:a3:f6:43:eb:1a:91:a1:9d:39:d6:f1:2f:
1d:02:0d:bf:ff:d7:64:34:ce:00:12:41:e2:51:43:
a3:9a:1e:9a:d7:42:d4:68:00:72:0d:da:10:78:d7:
c2:ff:04:96:2a:cf:2d:54:62:39:cf:80:8b:82:86:
a7:e1:d9:55:df:f8:26:d6:64:e5:c5:c5:bf:58:e5:
fa:ab:87:3b:d2:3e:36:98:85:49:43:39:27:b3:9e:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7C:67:72:9B:AC:19:46:C4:78:8C:F0:E4:7C:8A:EE:E6:AC:91:DA
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f0:24:9b:e8:52:d8:7e:b3:fe:24:6d:40:11:22:13:8d:6a:
da:41:ca:58:4a:cb:81:e7:8f:3c:ec:bd:72:90:d4:cd:dc:83:
58:90:06:d7:db:2b:8a:0f:df:5d:7e:38:74:62:d7:84:da:49:
14:e6:28:fd:0e:d0:0a:e8:e5:5d:c7:cd:09:d8:a2:29:48:01:
1e:3a:ae:22:8f:be:6a:cc:b2:70:3a:4e:f7:60:3e:9b:cf:f3:
55:a3:d5:00:19:b4:1a:18:fb:40:0d:86:94:6a:4d:08:f8:43:
4a:ee:98:77:0e:f4:c8:94:5c:60:5d:46:6b:d3:49:f9:83:c6:
b5:96:a9:e0:20:b8:19:c1:9c:f9:1e:7d:e9:8f:f1:bd:d3:f9:
77:bc:54:da:10:ad:67:27:09:8b:42:e0:c1:35:eb:a0:2b:4a:
e8:d6:c3:2b:9d:1a:7a:3b:1e:74:db:cc:8f:5c:bc:61:b7:1f:
95:33:23:b8:58:a6:31:94:2b:0d:fe:86:6b:8d:f1:54:af:05:
ab:cc:81:84:b0:76:73:ad:7b:af:d5:f3:ef:b3:6c:5f:36:c7:
c3:ec:85:02:84:e5:41:02:1a:b5:03:6b:a3:69:70:af:40:ea:
60:b5:c8:6a:6d:7a:84:21:6c:20:54:62:2a:b4:77:15:3d:2c:
21:52:9b:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4dMgZ8WaGdCJ/7bXRtMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw
ZmM2MmEwHhcNMjUwODA0MDcwMDM2WhcNMjUwODA1MDcwMDM2WjAzMTEwLwYDVQQD
EygxOTdjNjc3MjliYWMxOTQ2YzQ3ODhjZjBlNDdjOGFlZWU2YWM5MWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSVrVCC8iz+ns0MAT9q8ly2QZN0z
XgoUFY39S4HC/gvXva8Z/UieMNFU1+odvezXjP5FQywel306eU2Vs7+zQ5TAtuo8
4Zzv1diHWmpT5/DISVKH6zGy1q69M4k3iHpFMJAlwBRQnwXqd5FeBfnwHNUNRCRK
PeVpDQvI/8WOOE9JNVDIFWZy8kwcHrD/bz0vHBDY4ZbOMFT8Q2Z0TWye0EuAu/7z
LqKj9kPrGpGhnTnW8S8dAg2//9dkNM4AEkHiUUOjmh6a10LUaAByDdoQeNfC/wSW
Ks8tVGI5z4CLgoan4dlV3/gm1mTlxcW/WOX6q4c70j42mIVJQzkns54v/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBl8Z3KbrBlGxHiM8OR8iu7mrJHaMB8GA1UdIwQY
MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt
MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx
LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvAkm+hS
2H6z/iRtQBEiE41q2kHKWErLgeePPOy9cpDUzdyDWJAG19srig/fXX44dGLXhNpJ
FOYo/Q7QCujlXcfNCdiiKUgBHjquIo++asyycDpO92A+m8/zVaPVABm0Ghj7QA2G
lGpNCPhDSu6Ydw70yJRcYF1Ga9NJ+YPGtZap4CC4GcGc+R596Y/xvdP5d7xU2hCt
ZycJi0LgwTXroCtK6NbDK50aejsedNvMj1y8YbcflTMjuFimMZQrDf6Ga43xVK8F
q8yBhLB2c617r9Xz77NsXzbHw+yFAoTlQQIatQNro2lwr0DqYLXIam16hCFsIFRi
KrR3FT0sIVKbWg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:15 2025 by rpki-client