Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: nyYhyBBSFkv9q/oZkq8kjo0XAr4XxmKAENsNZe8/nTg=
Subject key identifier: 3A:3E:95:B4:2A:3A:5A:3C:69:B3:6B:AD:D3:06:9A:91:AA:B4:EC:B5
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 019897B7DB9FE99FE5490B69C8121C81B6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 1630
Signing time: Mon 11 Aug 2025 06:01:05 +0000
Manifest this update: Mon 11 Aug 2025 06:01:05 +0000
Manifest next update: Tue 12 Aug 2025 06:01:05 +0000
Files and hashes: 1: ExfUqNEW3Lyq9Nl7Jq22WcfJ1rw.roa (hash: 6SjZfPEMGV4QZNr6XzSlmm+VNkfjjPfYSSMSKKIpL5E=)
2: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: 6uzq2ry2RAkXZkWYevzEw7sKNbmQPauq8MWp6R/j8qg=)
3: vuckuXbmedLIJWITtJ1gJzQY8X0.roa (hash: BujWwxtiu31OcVkERDwp6qXjCF/qZpedTzNgbY+R4ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:db:9f:e9:9f:e5:49:0b:69:c8:12:1c:81:b6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Aug 11 06:01:05 2025 GMT
Not After : Aug 12 06:01:05 2025 GMT
Subject: CN=3a3e95b42a3a5a3c69b36badd3069a91aab4ecb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:43:b8:8b:b0:17:e6:a7:ff:2a:1f:de:6c:
e2:71:83:5d:f2:2e:5c:06:04:1b:33:4b:ac:5b:c0:
4f:44:8b:16:db:a4:3a:6e:c2:2d:7c:19:83:9e:c5:
b9:a9:ff:3f:ab:de:ff:9b:97:8f:1f:f7:90:d0:66:
ae:20:38:ec:20:1f:5b:f0:59:a7:e2:b0:03:8e:23:
ed:df:7b:53:26:05:c3:ad:bb:c8:66:25:c4:f9:b1:
03:65:97:4c:5f:df:02:58:3b:ef:0f:bb:ca:76:1b:
b2:e2:fa:39:69:c6:10:ee:11:78:8c:45:d8:cf:3e:
09:58:38:87:53:02:03:2d:a4:0a:b8:2b:64:f9:43:
54:bc:ef:7b:10:2d:b2:93:a2:2d:e8:db:18:7e:17:
60:ab:90:65:bf:f5:cf:fe:8c:91:d2:dd:e5:9d:dc:
02:f4:e0:89:91:95:1a:48:27:f0:5b:6b:80:9e:5f:
71:89:71:27:ff:ee:56:bc:88:a8:ed:e9:b1:25:c3:
ed:aa:5c:80:8b:da:62:3d:6f:37:bd:14:74:8f:1e:
f9:5b:dc:a7:27:e2:d0:0f:a1:45:a6:3c:be:8a:e3:
c9:c9:7a:b8:eb:b2:15:42:d0:1e:2a:d5:79:20:3d:
37:18:1f:0b:53:dc:b9:2e:b3:95:8a:fb:c3:95:c4:
46:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3E:95:B4:2A:3A:5A:3C:69:B3:6B:AD:D3:06:9A:91:AA:B4:EC:B5
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:47:b0:1f:e1:c0:df:97:5d:d0:66:de:89:32:0b:42:13:19:
9f:8f:d3:33:91:ec:47:38:35:da:5f:da:cc:44:c4:cb:4f:20:
89:79:5e:0e:09:a1:1e:b4:4d:58:bd:09:64:19:c5:bf:41:da:
e5:8f:3d:75:3a:69:ca:f0:b6:07:80:fa:1b:e1:ef:25:4e:8d:
dc:81:7c:e0:56:78:e9:e1:34:02:e9:1e:f5:57:47:43:d4:6d:
8d:62:87:6d:61:16:ea:3f:a1:26:4b:e3:6b:cf:61:35:4b:e6:
15:a9:72:0a:18:1f:e2:91:20:14:18:e7:4a:db:b0:53:38:59:
f4:60:75:36:26:b2:13:22:24:cd:58:df:c9:35:59:c6:4e:3f:
55:79:cf:60:d1:8a:1e:46:a3:70:b2:b9:f5:4b:20:c4:b4:5d:
2e:88:00:ad:de:da:94:aa:04:43:37:a7:e0:33:4f:87:eb:fc:
d2:47:25:47:f8:11:ea:46:29:a0:4c:0c:01:52:01:cf:71:ad:
97:fe:3f:8b:f8:be:c9:65:4b:69:72:3e:ed:0e:86:8e:cb:c9:
41:dc:2d:22:44:ac:4d:aa:7b:d1:45:84:0c:83:e7:37:1c:33:
22:dc:c1:21:0f:53:b2:8e:c9:0c:78:87:16:12:69:67:45:47:
a9:bc:f9:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXt9uf6Z/lSQtpyBIcgbajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMTY2MThiNzFmZmM4MGUxYzNmNDFlZDBkZmM4OWFiNWU5
NjNmZDIwHhcNMjUwODExMDYwMTA1WhcNMjUwODEyMDYwMTA1WjAzMTEwLwYDVQQD
EygzYTNlOTViNDJhM2E1YTNjNjliMzZiYWRkMzA2OWE5MWFhYjRlY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVxDuIuwF+an/yof3mzicYNd8i5c
BgQbM0usW8BPRIsW26Q6bsItfBmDnsW5qf8/q97/m5ePH/eQ0GauIDjsIB9b8Fmn
4rADjiPt33tTJgXDrbvIZiXE+bEDZZdMX98CWDvvD7vKdhuy4vo5acYQ7hF4jEXY
zz4JWDiHUwIDLaQKuCtk+UNUvO97EC2yk6It6NsYfhdgq5Blv/XP/oyR0t3lndwC
9OCJkZUaSCfwW2uAnl9xiXEn/+5WvIio7emxJcPtqlyAi9piPW83vRR0jx75W9yn
J+LQD6FFpjy+iuPJyXq467IVQtAeKtV5ID03GB8LU9y5LrOVivvDlcRGZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDo+lbQqOlo8abNrrdMGmpGqtOy1MB8GA1UdIwQY
MBaAFIoWYYtx/8gOHD9B7Q38iatelj/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUt
MjkxYWFlZGQ1OGNjLzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUtMjkxYWFlZGQ1OGNj
LzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEewH+HA
35dd0GbeiTILQhMZn4/TM5HsRzg12l/azETEy08giXleDgmhHrRNWL0JZBnFv0Ha
5Y89dTppyvC2B4D6G+HvJU6N3IF84FZ46eE0Auke9VdHQ9RtjWKHbWEW6j+hJkvj
a89hNUvmFalyChgf4pEgFBjnStuwUzhZ9GB1NiayEyIkzVjfyTVZxk4/VXnPYNGK
HkajcLK59UsgxLRdLogArd7alKoEQzen4DNPh+v80kclR/gR6kYpoEwMAVIBz3Gt
l/4/i/i+yWVLaXI+7Q6GjsvJQdwtIkSsTap70UWEDIPnNxwzItzBIQ9Tso7JDHiH
FhJpZ0VHqbz5tg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:30:02 2025 by rpki-client