Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
File: poXxkUzrGSIcVjGTAn1FNFAzrV8.mft (raw, json)
Hash identifier: xS9Vq5yxR5sMe7U2o9KQbDV7Fa17NDBVsRuphobeYnM=
Subject key identifier: 69:4A:04:0D:66:26:6D:44:AB:4F:48:0F:3A:2A:67:66:78:7B:F4:38
Authority key identifier: A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
Certificate issuer: /CN=a685f1914ceb19221c563193027d45345033ad5f
Certificate serial: 0198499C2D7E841322530CCAAFD339A6B237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
Manifest number: 0244
Signing time: Sun 27 Jul 2025 02:00:28 +0000
Manifest this update: Sun 27 Jul 2025 02:00:28 +0000
Manifest next update: Mon 28 Jul 2025 02:00:28 +0000
Files and hashes: 1: TCiOUS2lOe-d-inEeAtaNF22X3k.roa (hash: H5jxU1+mIYAsjzlbjYeTvSFiOWLCAxpo86ZAHMuzEhY=)
2: poXxkUzrGSIcVjGTAn1FNFAzrV8.crl (hash: blOkdZ68A3nRIg47wSukEUHRwsi7VSGsnYcdP9Ril/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:2d:7e:84:13:22:53:0c:ca:af:d3:39:a6:b2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a685f1914ceb19221c563193027d45345033ad5f
Validity
Not Before: Jul 27 02:00:28 2025 GMT
Not After : Jul 28 02:00:28 2025 GMT
Subject: CN=694a040d66266d44ab4f480f3a2a6766787bf438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:06:3e:52:05:6d:41:c3:33:de:a2:fe:60:d7:
4f:9f:0c:de:a9:6d:cf:e4:dc:51:d8:d5:86:50:34:
10:1b:64:6d:22:f1:5b:b2:2a:4d:b3:55:0c:cc:ae:
14:a9:27:6f:b2:30:ae:c9:c7:9a:30:71:b3:fc:83:
e7:0b:8a:c2:13:f8:d8:51:3c:19:7c:58:87:25:ea:
a4:cb:c0:82:fb:ba:1d:d9:84:04:89:20:ac:48:5a:
71:cf:1d:e5:03:65:15:cd:dc:93:53:1a:71:55:75:
ae:9d:78:4d:90:d1:1a:4a:c6:2b:65:57:2d:d5:ac:
8b:21:22:0a:7e:f6:6d:1e:fb:00:47:ac:d6:2a:e1:
6e:50:1a:e3:86:3c:c2:dc:0a:53:fd:45:b9:46:3f:
0a:a5:11:f7:f1:85:05:cb:7c:bb:21:de:7b:31:59:
38:95:83:69:22:94:e7:d2:5a:e2:a1:98:fd:65:92:
4c:31:d9:78:cb:5c:77:14:d0:b9:f8:a3:78:28:01:
af:de:65:7b:71:2a:2f:f2:e5:13:4b:89:2a:02:d2:
25:81:8c:b0:d5:e6:64:f5:5f:8e:9f:e6:2f:37:b0:
47:c7:30:d1:fc:ad:d5:49:80:7c:dd:54:15:e5:78:
a3:f2:92:ef:9c:13:d6:58:1c:9b:af:a6:e2:93:3e:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4A:04:0D:66:26:6D:44:AB:4F:48:0F:3A:2A:67:66:78:7B:F4:38
X509v3 Authority Key Identifier:
keyid:A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:64:83:17:c7:86:59:89:b1:4a:3f:22:d5:62:ab:6d:a2:a5:
42:47:f2:ea:e6:f0:be:b4:be:1e:86:79:c6:8b:ac:b3:41:e2:
56:65:d3:8b:97:a3:a6:f4:1d:a0:26:94:94:ac:75:80:77:0f:
6f:b8:1a:ee:77:be:3f:1a:53:c9:98:cc:21:4f:57:ab:70:87:
30:e9:ca:91:58:e4:74:fe:14:68:d6:8a:07:f1:e9:8e:9e:03:
09:9e:e2:95:45:17:52:2a:e6:84:c8:c1:9f:83:a3:d7:8d:62:
d7:1b:b0:a3:0d:2d:e3:d8:bc:a1:ce:18:c1:f8:00:61:61:96:
27:0a:0f:a1:68:5f:f8:6e:04:82:ae:fc:7f:02:d2:86:39:6b:
d1:1b:32:70:6a:80:56:16:ce:6a:9d:f6:5d:25:d9:8c:13:37:
10:d0:2a:72:4f:91:25:7e:71:2a:2e:87:ad:b4:58:7d:1e:f4:
72:3d:03:be:a1:58:e8:d0:5e:00:6a:46:77:b9:8c:95:ec:b5:
62:90:41:cf:52:cf:d8:76:66:b1:21:09:87:31:de:a8:81:6c:
c4:0a:e4:bf:98:71:bf:0c:d5:15:65:a3:75:5a:51:a7:9e:1f:
be:2c:50:3f:eb:f3:e7:6e:27:d8:38:e1:7a:5b:95:d4:3d:6d:
00:5e:c5:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnC1+hBMiUwzKr9M5prI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ODVmMTkxNGNlYjE5MjIxYzU2MzE5MzAyN2Q0NTM0NTAz
M2FkNWYwHhcNMjUwNzI3MDIwMDI4WhcNMjUwNzI4MDIwMDI4WjAzMTEwLwYDVQQD
Eyg2OTRhMDQwZDY2MjY2ZDQ0YWI0ZjQ4MGYzYTJhNjc2Njc4N2JmNDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAY+UgVtQcMz3qL+YNdPnwzeqW3P
5NxR2NWGUDQQG2RtIvFbsipNs1UMzK4UqSdvsjCuyceaMHGz/IPnC4rCE/jYUTwZ
fFiHJeqky8CC+7od2YQEiSCsSFpxzx3lA2UVzdyTUxpxVXWunXhNkNEaSsYrZVct
1ayLISIKfvZtHvsAR6zWKuFuUBrjhjzC3ApT/UW5Rj8KpRH38YUFy3y7Id57MVk4
lYNpIpTn0lrioZj9ZZJMMdl4y1x3FNC5+KN4KAGv3mV7cSov8uUTS4kqAtIlgYyw
1eZk9V+On+YvN7BHxzDR/K3VSYB83VQV5Xij8pLvnBPWWBybr6bikz6ykQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlKBA1mJm1Eq09IDzoqZ2Z4e/Q4MB8GA1UdIwQY
MBaAFKaF8ZFM6xkiHFYxkwJ9RTRQM61fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xOTg2MmMtZjdkNC00ZjRmLWE4ZGQt
MWViYzUwZGNlZDQ5LzEvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8xOTg2MmMtZjdkNC00ZjRmLWE4ZGQtMWViYzUwZGNlZDQ5
LzEvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGSDF8eG
WYmxSj8i1WKrbaKlQkfy6ubwvrS+HoZ5xouss0HiVmXTi5ejpvQdoCaUlKx1gHcP
b7ga7ne+PxpTyZjMIU9Xq3CHMOnKkVjkdP4UaNaKB/Hpjp4DCZ7ilUUXUirmhMjB
n4Oj141i1xuwow0t49i8oc4YwfgAYWGWJwoPoWhf+G4Egq78fwLShjlr0RsycGqA
VhbOap32XSXZjBM3ENAqck+RJX5xKi6HrbRYfR70cj0DvqFY6NBeAGpGd7mMley1
YpBBz1LP2HZmsSEJhzHeqIFsxArkv5hxvwzVFWWjdVpRp54fvixQP+vz524n2Djh
eluV1D1tAF7FWA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:03:58 2025 by rpki-client