Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
File: a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft (raw, json)
Hash identifier: RbrVhDTpwiV3srmjFMAAEXu47itXL6vIaXgntLawenA=
Subject key identifier: A0:AB:F5:E6:C6:DA:54:88:B1:CE:16:E0:B3:BC:BA:E9:E6:38:BB:E9
Authority key identifier: 6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
Certificate issuer: /CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Certificate serial: 0198499C3B55914564A80B673749BD787600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
Manifest number: 0D6E
Signing time: Sun 27 Jul 2025 02:00:32 +0000
Manifest this update: Sun 27 Jul 2025 02:00:32 +0000
Manifest next update: Mon 28 Jul 2025 02:00:32 +0000
Files and hashes: 1: a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl (hash: j/VaZO359eu+CgwAT0bPCXYAfsI4wb40ci29myfJDeo=)
2: y1CXud9r4_KJCPJy5YSEoyYl1eg.roa (hash: kuTX8hxg4+tvv3VjP1J6iCQyHiFE3dinO8w9j6x97BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:3b:55:91:45:64:a8:0b:67:37:49:bd:78:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bec4e29c6849c5f808428e66858f4f0ecf4a654
Validity
Not Before: Jul 27 02:00:32 2025 GMT
Not After : Jul 28 02:00:32 2025 GMT
Subject: CN=a0abf5e6c6da5488b1ce16e0b3bcbae9e638bbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:15:1d:7f:f5:fd:c7:27:79:b7:c2:e8:9f:
a4:b2:c4:b9:91:23:9a:ef:0a:76:c2:d1:78:e6:89:
0f:64:59:67:bd:58:2e:86:6e:50:03:54:be:98:60:
1a:31:ca:12:1c:07:d9:e3:36:be:fb:c5:c2:13:ed:
10:90:29:de:70:f8:28:92:a8:3e:04:c7:ae:d3:12:
45:12:e5:48:63:17:cf:92:39:c6:0e:b1:72:9f:63:
2e:72:fe:c6:06:26:f6:e8:1b:65:ab:c8:27:7c:1a:
c9:ba:78:72:0c:60:d8:e3:03:72:5c:55:95:35:1f:
b3:c9:33:2e:6e:23:28:aa:1c:58:28:82:1f:ba:50:
2b:81:20:8d:0c:c3:fe:51:f2:0b:57:59:6e:8f:2f:
84:e1:66:28:22:e0:b0:47:43:d2:c7:56:c7:aa:b3:
26:9f:9e:ab:77:b7:b0:c8:6c:67:73:15:b3:11:80:
d1:1e:57:92:2f:98:56:b2:c1:d6:52:18:54:40:1f:
30:7a:a9:8a:4e:81:2b:ac:73:6f:19:55:4c:08:69:
42:d4:04:55:47:fa:24:dd:dd:94:97:a1:7f:b6:3e:
74:06:df:d1:80:7c:e5:87:a4:2b:6a:52:80:14:5e:
89:53:4b:48:f6:15:6d:31:db:85:66:57:e1:fe:34:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AB:F5:E6:C6:DA:54:88:B1:CE:16:E0:B3:BC:BA:E9:E6:38:BB:E9
X509v3 Authority Key Identifier:
keyid:6B:EC:4E:29:C6:84:9C:5F:80:84:28:E6:68:58:F4:F0:EC:F4:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-xOKcaEnF-AhCjmaFj08Oz0plQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f8ac99-0eaa-4f51-8d58-dbfaecdc7ea3/1/a-xOKcaEnF-AhCjmaFj08Oz0plQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:39:f8:a1:f0:f9:19:a9:20:05:44:67:02:1f:91:9a:16:c4:
1c:40:94:b6:56:70:b4:6c:15:95:ec:24:aa:d8:5d:51:ef:98:
69:b8:dd:44:17:35:6b:e0:b5:e9:22:9d:00:88:10:dc:89:8b:
c3:63:2b:f1:63:2d:2b:05:d0:21:8e:d3:bd:67:46:19:f3:8c:
ee:07:2f:a3:35:76:1f:8a:c4:d1:e9:b1:bd:f9:26:4b:80:e8:
05:4e:d6:ea:57:50:ee:e6:e7:82:1b:02:cf:1c:8a:3e:63:8c:
02:58:1a:42:8c:30:2e:86:47:72:52:9f:15:4f:85:eb:ce:a3:
62:59:a3:dc:7e:0b:a2:d1:41:ad:4e:33:e5:50:b5:1b:ef:4c:
d4:4f:57:40:fc:3d:82:62:40:7b:a6:97:f1:6c:8b:58:6d:f0:
41:da:6f:fa:4e:d8:97:d7:66:4e:b6:a6:84:10:43:66:24:eb:
b0:f0:4d:fb:b0:de:24:0a:83:fc:f5:9b:93:6c:12:91:6e:8c:
bd:5e:01:8b:82:e3:94:9c:61:e3:25:98:b1:29:1d:df:f3:f1:
bc:35:71:fb:20:e4:2b:81:6b:55:c8:e5:3c:10:b9:05:36:33:
0e:88:eb:08:37:8a:4f:47:ef:c3:fe:8e:9d:9f:2f:75:80:cf:
c7:7f:68:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnDtVkUVkqAtnN0m9eHYAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWM0ZTI5YzY4NDljNWY4MDg0MjhlNjY4NThmNGYwZWNm
NGE2NTQwHhcNMjUwNzI3MDIwMDMyWhcNMjUwNzI4MDIwMDMyWjAzMTEwLwYDVQQD
EyhhMGFiZjVlNmM2ZGE1NDg4YjFjZTE2ZTBiM2JjYmFlOWU2MzhiYmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy4VHX/1/ccnebfC6J+kssS5kSOa
7wp2wtF45okPZFlnvVguhm5QA1S+mGAaMcoSHAfZ4za++8XCE+0QkCnecPgokqg+
BMeu0xJFEuVIYxfPkjnGDrFyn2Mucv7GBib26Btlq8gnfBrJunhyDGDY4wNyXFWV
NR+zyTMubiMoqhxYKIIfulArgSCNDMP+UfILV1lujy+E4WYoIuCwR0PSx1bHqrMm
n56rd7ewyGxncxWzEYDRHleSL5hWssHWUhhUQB8weqmKToErrHNvGVVMCGlC1ARV
R/ok3d2Ul6F/tj50Bt/RgHzlh6QralKAFF6JU0tI9hVtMduFZlfh/jSXkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCr9ebG2lSIsc4W4LO8uunmOLvpMB8GA1UdIwQY
MBaAFGvsTinGhJxfgIQo5mhY9PDs9KZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOGFjOTktMGVhYS00ZjUxLThkNTgt
ZGJmYWVjZGM3ZWEzLzEvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mOGFjOTktMGVhYS00ZjUxLThkNTgtZGJmYWVjZGM3ZWEz
LzEvYS14T0tjYUVuRi1BaENqbWFGajA4T3owcGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzn4ofD5
GakgBURnAh+RmhbEHECUtlZwtGwVlewkqthdUe+YabjdRBc1a+C16SKdAIgQ3ImL
w2Mr8WMtKwXQIY7TvWdGGfOM7gcvozV2H4rE0emxvfkmS4DoBU7W6ldQ7ubnghsC
zxyKPmOMAlgaQowwLoZHclKfFU+F686jYlmj3H4LotFBrU4z5VC1G+9M1E9XQPw9
gmJAe6aX8WyLWG3wQdpv+k7Yl9dmTramhBBDZiTrsPBN+7DeJAqD/PWbk2wSkW6M
vV4Bi4LjlJxh4yWYsSkd3/PxvDVx+yDkK4FrVcjlPBC5BTYzDojrCDeKT0fvw/6O
nZ8vdYDPx39oDA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:26:50 2025 by rpki-client