Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: r5iPcarSYMOafmbpv3b+NQspNKrZEpd7mFun0UV44qs=
Subject key identifier: FD:5A:46:6B:65:B3:BE:0F:89:7C:D9:54:E3:FF:C8:3A:7F:0A:9C:2C
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 01988A32E6F4D21A79AF47E9A10DF61CDF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 162A
Signing time: Fri 08 Aug 2025 15:00:48 +0000
Manifest this update: Fri 08 Aug 2025 15:00:48 +0000
Manifest next update: Sat 09 Aug 2025 15:00:48 +0000
Files and hashes: 1: F0xtYGfQ_s_LJkUkk89IHcL9J5M.roa (hash: JVjlGGRIJlPuTdOW/N8SfdRvr3fAH3HHybxJ5aP4RD0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: J0zNFc51sT5vQAGz8XjgXR88FSegV5hXXiXj/PTNaGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:e6:f4:d2:1a:79:af:47:e9:a1:0d:f6:1c:df:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Aug 8 15:00:48 2025 GMT
Not After : Aug 9 15:00:48 2025 GMT
Subject: CN=fd5a466b65b3be0f897cd954e3ffc83a7f0a9c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:4f:ba:ad:09:c7:4f:6a:1a:05:d8:c4:f4:
12:86:06:e8:a9:9f:4c:38:7d:2e:29:6b:1c:7e:e7:
56:9a:e8:ca:60:9d:5c:33:d9:75:c9:d1:b2:cc:6c:
15:85:25:30:36:91:74:01:b8:40:85:1c:a6:e1:f1:
5d:1a:f6:66:e5:87:d7:75:96:f5:87:66:ce:4a:bf:
e7:88:ca:0b:aa:25:d3:62:30:97:3e:cc:81:7f:cf:
13:69:cd:52:82:0c:37:2b:3b:34:52:8a:20:7c:e7:
81:ef:ae:ec:a0:17:0c:3e:04:e9:49:78:f1:35:01:
e6:e5:0d:26:55:bf:70:8a:da:17:9e:8c:21:8f:e4:
09:1e:6a:8c:a1:b2:81:7d:da:a1:42:c6:51:06:04:
9e:9c:b1:f0:70:fd:92:6f:e4:a9:b3:75:f0:3b:80:
19:b1:1f:02:8e:fe:c6:e8:45:89:47:65:93:6d:b0:
d0:90:00:67:7b:46:c0:9e:44:8d:b7:1c:bb:52:fe:
bb:74:0e:f6:67:1f:b7:84:fb:48:b5:62:73:eb:bf:
26:0c:48:00:2e:2a:21:02:ef:66:dc:14:c2:2a:7e:
81:59:26:65:93:0f:ca:27:63:5e:fe:71:d0:39:b4:
cc:dc:28:ed:87:45:4f:fe:3a:cd:f3:6f:1d:51:52:
5d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5A:46:6B:65:B3:BE:0F:89:7C:D9:54:E3:FF:C8:3A:7F:0A:9C:2C
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8a:54:c0:96:94:63:43:1e:ee:a6:a8:5b:d9:23:d5:b7:83:
ec:d5:88:32:30:ee:a2:7a:8a:64:fa:97:8d:4b:56:bc:df:a2:
73:20:97:d8:f5:0e:93:9f:5b:64:2b:55:de:5b:8a:8b:02:35:
af:85:60:f8:43:0a:9a:b1:ae:db:3b:b1:38:02:c1:23:ea:25:
62:bb:fc:bf:50:6b:1e:83:30:c2:2c:79:8f:f3:28:e2:13:48:
a0:4a:20:5d:9f:d5:5b:a1:37:5e:62:2e:18:0e:b2:69:17:c6:
f4:ea:0d:a4:34:b2:c9:df:ad:5f:97:25:c9:19:6b:4c:a8:14:
5b:99:b0:ef:2e:bf:b9:91:a2:47:03:01:d4:3c:18:05:18:93:
56:90:80:bf:bc:b8:9d:93:a1:ff:a5:36:56:f9:ae:dd:e6:a8:
29:93:bf:c2:8b:60:ac:44:d7:a9:51:46:63:2c:4b:93:93:c2:
b6:05:94:97:ce:cc:50:82:98:0d:7f:78:de:54:fa:c9:47:80:
05:95:52:30:5c:eb:d7:62:87:48:8c:aa:5f:d7:5d:77:ec:0c:
a3:5e:21:65:36:86:73:94:c5:b9:47:e3:6d:87:9d:70:c2:ca:
71:ba:f0:cd:0f:c5:57:e7:16:f1:da:24:2b:ac:fc:d8:bb:2a:
2f:78:17:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKMub00hp5r0fpoQ32HN8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YmRjMzc2YTE1OWQwNWUyYWY5NzE3NmEzZWJhODM2MGU2
MGQxNzYwHhcNMjUwODA4MTUwMDQ4WhcNMjUwODA5MTUwMDQ4WjAzMTEwLwYDVQQD
EyhmZDVhNDY2YjY1YjNiZTBmODk3Y2Q5NTRlM2ZmYzgzYTdmMGE5YzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAFPuq0Jx09qGgXYxPQShgboqZ9M
OH0uKWscfudWmujKYJ1cM9l1ydGyzGwVhSUwNpF0AbhAhRym4fFdGvZm5YfXdZb1
h2bOSr/niMoLqiXTYjCXPsyBf88Tac1Sggw3Kzs0UoogfOeB767soBcMPgTpSXjx
NQHm5Q0mVb9witoXnowhj+QJHmqMobKBfdqhQsZRBgSenLHwcP2Sb+Sps3XwO4AZ
sR8Cjv7G6EWJR2WTbbDQkABne0bAnkSNtxy7Uv67dA72Zx+3hPtItWJz678mDEgA
LiohAu9m3BTCKn6BWSZlkw/KJ2Ne/nHQObTM3Cjth0VP/jrN828dUVJdfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1aRmtls74PiXzZVOP/yDp/CpwsMB8GA1UdIwQY
MBaAFLS9w3ahWdBeKvlxdqPrqDYOYNF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80MGVhMTQtZGM1MC00YWEwLWFhODUt
MjhkMDEwNjAzNTI5LzEvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80MGVhMTQtZGM1MC00YWEwLWFhODUtMjhkMDEwNjAzNTI5
LzEvdEwzRGRxRlowRjRxLVhGMm8tdW9OZzVnMFhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4pUwJaU
Y0Me7qaoW9kj1beD7NWIMjDuonqKZPqXjUtWvN+icyCX2PUOk59bZCtV3luKiwI1
r4Vg+EMKmrGu2zuxOALBI+olYrv8v1BrHoMwwix5j/Mo4hNIoEogXZ/VW6E3XmIu
GA6yaRfG9OoNpDSyyd+tX5clyRlrTKgUW5mw7y6/uZGiRwMB1DwYBRiTVpCAv7y4
nZOh/6U2Vvmu3eaoKZO/wotgrETXqVFGYyxLk5PCtgWUl87MUIKYDX943lT6yUeA
BZVSMFzr12KHSIyqX9ddd+wMo14hZTaGc5TFuUfjbYedcMLKcbrwzQ/FV+cW8dok
K6z82LsqL3gXvw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:35 2025 by rpki-client