Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: UkwG8Bd6CyWY/saW7kNC4Eqb6paYAul3jhTmxyZ0IHA=
Subject key identifier: 27:9D:D8:44:5F:65:FB:56:13:3B:9A:E6:CC:4F:41:01:CD:E1:8F:52
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 0198748699E0E0226BC6396F871B25975C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 10:00:34 +0000
Manifest this update: Mon 04 Aug 2025 10:00:34 +0000
Manifest next update: Tue 05 Aug 2025 10:00:34 +0000
Files and hashes: 1: qMVh3MmBW-5x18q2N1wXFpopTgM.roa (hash: PQtT5tx/edekggmnvi46ZZ9KahB7EPBY+tQD/QXkwJY=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: EgIELfSk0AKo7QLL8xyUu36tKkt+v632FS8SbvOwdC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:99:e0:e0:22:6b:c6:39:6f:87:1b:25:97:5c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Aug 4 10:00:34 2025 GMT
Not After : Aug 5 10:00:34 2025 GMT
Subject: CN=279dd8445f65fb56133b9ae6cc4f4101cde18f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:94:f8:88:5f:31:ab:08:d1:b8:9a:69:74:
57:18:e8:f0:9c:a6:e6:7e:36:b9:10:5b:7f:a5:b3:
28:af:0e:ba:86:fd:c0:6e:dc:a6:66:f5:73:71:a9:
35:8b:19:71:4a:00:a4:29:15:3a:0c:5e:9a:ae:af:
17:0a:76:3f:e8:d2:fc:0b:9c:50:db:6a:04:6e:c5:
70:e5:0b:f2:f3:0d:9e:6b:fe:09:17:20:8b:d8:99:
20:b3:41:99:27:aa:28:46:ff:3d:cc:09:ac:1f:7b:
b6:a7:f7:15:23:81:4c:f3:67:47:37:a6:75:e7:c4:
dc:3e:80:78:a5:24:04:b0:3e:62:d7:cc:6c:6a:29:
39:16:63:64:09:51:1b:a6:96:94:28:aa:12:c8:b5:
11:96:7a:6f:98:a8:d8:68:b0:9f:36:31:3f:12:15:
4a:c5:bb:2b:52:a1:cd:37:84:4a:2a:d1:c3:42:69:
7d:ec:48:90:db:7c:66:25:6c:9e:b7:65:e4:bf:cf:
c5:55:c9:2f:5a:d6:0b:ca:35:f3:ee:c2:36:14:9c:
7c:7d:c8:0c:49:e7:c8:69:ba:a5:2f:f4:5e:11:5d:
39:42:3e:c9:b8:b3:e2:4d:49:16:c2:05:b1:d6:fc:
0b:6c:5a:dd:33:28:45:ed:c7:6c:e2:32:31:13:e1:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9D:D8:44:5F:65:FB:56:13:3B:9A:E6:CC:4F:41:01:CD:E1:8F:52
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0c:df:0e:a0:9d:80:6d:09:5d:3d:8a:fc:75:ba:fb:85:9b:
8a:9a:3a:cf:97:77:32:ee:63:e1:28:d5:4e:c1:2e:57:b7:c2:
87:a5:b4:c3:72:e4:db:9e:59:0d:2c:70:69:e1:5a:0d:57:18:
04:2f:90:99:64:4b:d5:76:05:57:20:36:0c:15:3a:30:10:82:
5b:ca:95:96:7d:78:36:dd:d1:ca:7a:0d:3b:54:59:9b:6e:7b:
3e:1d:a7:0e:29:c1:05:c5:f6:69:ce:7b:90:2e:f2:f2:ff:ca:
f7:47:04:ea:5d:b4:eb:f6:6c:17:6a:d5:43:c1:cc:55:20:cc:
ba:53:7f:a3:9b:b8:5f:c8:bc:99:1c:e3:1d:db:89:e4:12:59:
b4:6c:06:31:ed:3c:d4:37:b3:84:bf:e8:3c:90:ef:29:dd:12:
7b:fc:67:32:da:d1:62:9f:32:1b:47:9d:53:52:71:1b:80:39:
8f:bc:55:df:0c:fc:d0:e0:8e:40:42:42:74:3c:d9:83:b5:8c:
75:5e:d6:56:57:24:77:98:18:7c:44:6d:b2:3f:17:3d:8a:5c:
87:4c:53:a8:c1:bf:0e:8d:1a:30:d8:8d:66:26:47:9b:d6:8a:
e4:4d:dd:73:96:a4:a7:0e:b2:22:5e:e8:9d:f2:82:16:da:80:
5f:5c:87:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hpng4CJrxjlvhxsll1w1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmY2U1NWQxNWViMTE5ZTUyZDZmYWZjZDM5NzNlMmY2ZDRm
MjIzZjIwHhcNMjUwODA0MTAwMDM0WhcNMjUwODA1MTAwMDM0WjAzMTEwLwYDVQQD
EygyNzlkZDg0NDVmNjVmYjU2MTMzYjlhZTZjYzRmNDEwMWNkZTE4ZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyOU+IhfMasI0biaaXRXGOjwnKbm
fja5EFt/pbMorw66hv3AbtymZvVzcak1ixlxSgCkKRU6DF6arq8XCnY/6NL8C5xQ
22oEbsVw5Qvy8w2ea/4JFyCL2Jkgs0GZJ6ooRv89zAmsH3u2p/cVI4FM82dHN6Z1
58TcPoB4pSQEsD5i18xsaik5FmNkCVEbppaUKKoSyLURlnpvmKjYaLCfNjE/EhVK
xbsrUqHNN4RKKtHDQml97EiQ23xmJWyet2Xkv8/FVckvWtYLyjXz7sI2FJx8fcgM
SefIabqlL/ReEV05Qj7JuLPiTUkWwgWx1vwLbFrdMyhF7cds4jIxE+H0BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCed2ERfZftWEzua5sxPQQHN4Y9SMB8GA1UdIwQY
MBaAFL/OVdFesRnlLW+vzTlz4vbU8iPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTct
MDUyY2YwMWQyMDQ4LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTctMDUyY2YwMWQyMDQ4
LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwzfDqCd
gG0JXT2K/HW6+4Wbipo6z5d3Mu5j4SjVTsEuV7fCh6W0w3Lk255ZDSxwaeFaDVcY
BC+QmWRL1XYFVyA2DBU6MBCCW8qVln14Nt3RynoNO1RZm257Ph2nDinBBcX2ac57
kC7y8v/K90cE6l206/ZsF2rVQ8HMVSDMulN/o5u4X8i8mRzjHduJ5BJZtGwGMe08
1DezhL/oPJDvKd0Se/xnMtrRYp8yG0edU1JxG4A5j7xV3wz80OCOQEJCdDzZg7WM
dV7WVlckd5gYfERtsj8XPYpch0xTqMG/Do0aMNiNZiZHm9aK5E3dc5akpw6yIl7o
nfKCFtqAX1yHRw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:49 2025 by rpki-client