Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
File: rXz7zh1tOmok8lZSBl0xV1go7bU.mft (raw, json)
Hash identifier: DhWxND4RitmP4maL3/zS23kThqtwkrqf5cjKkDyuaRQ=
Subject key identifier: 81:AE:99:1E:C7:92:FF:1D:80:EA:0C:87:BF:49:62:6E:A1:A0:25:4D
Authority key identifier: AD:7C:FB:CE:1D:6D:3A:6A:24:F2:56:52:06:5D:31:57:58:28:ED:B5
Certificate issuer: /CN=ad7cfbce1d6d3a6a24f25652065d31575828edb5
Certificate serial: 01984776E6507AF8FF74AD37CC1C71861CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
Manifest number: 0D11
Signing time: Sat 26 Jul 2025 16:00:31 +0000
Manifest this update: Sat 26 Jul 2025 16:00:31 +0000
Manifest next update: Sun 27 Jul 2025 16:00:31 +0000
Files and hashes: 1: Im3NuoFQdX7egdBojqG76hMiXq0.roa (hash: MBZCzXbY6/6xAtTJ9sYOEhNyw2Jnz8TgfEJHylhcfdM=)
2: rXz7zh1tOmok8lZSBl0xV1go7bU.crl (hash: SdVclxKZmqyP1HptnqMq32yND9C0FRPI9nCOo4a+65w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:e6:50:7a:f8:ff:74:ad:37:cc:1c:71:86:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7cfbce1d6d3a6a24f25652065d31575828edb5
Validity
Not Before: Jul 26 16:00:31 2025 GMT
Not After : Jul 27 16:00:31 2025 GMT
Subject: CN=81ae991ec792ff1d80ea0c87bf49626ea1a0254d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:40:91:70:ba:e7:68:20:9b:e1:55:e1:1c:
85:b1:09:87:2c:ed:be:cc:64:25:ee:fd:dd:05:4c:
74:db:98:b3:be:7f:5e:5e:2d:1b:89:48:13:ed:0b:
0f:56:8f:43:b6:02:45:89:bb:4d:65:04:3e:65:cd:
47:aa:83:4e:c3:b1:08:ae:ca:82:01:8c:61:bb:86:
09:53:24:4f:9a:74:56:3a:ee:a2:7e:87:0f:49:1b:
6d:96:35:63:8b:2a:b0:fa:83:52:9f:d3:3e:7b:03:
fa:37:c9:88:44:0e:0b:c2:97:c3:6b:52:36:48:9c:
2a:40:78:89:48:17:d0:d9:1c:18:fe:23:5f:03:65:
a7:1f:9f:c5:5d:aa:df:da:0f:32:5b:75:bc:10:2d:
57:fd:c6:d2:13:eb:93:84:af:41:51:74:16:d0:12:
25:72:19:0b:b5:65:3c:31:6f:62:47:90:b4:0a:2a:
a3:fc:4c:5d:95:7f:00:fd:1a:0c:be:fa:1c:2e:13:
89:76:6d:a1:00:80:9e:46:45:f4:68:bd:52:31:45:
f4:b8:f4:86:da:35:9e:b8:10:8d:49:b7:12:c5:68:
04:85:fb:67:3b:a8:44:8b:1f:0e:f7:29:68:e2:62:
7e:dd:5b:98:5c:2b:11:62:57:af:8f:ec:79:94:cb:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AE:99:1E:C7:92:FF:1D:80:EA:0C:87:BF:49:62:6E:A1:A0:25:4D
X509v3 Authority Key Identifier:
keyid:AD:7C:FB:CE:1D:6D:3A:6A:24:F2:56:52:06:5D:31:57:58:28:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d8:28:a0:7f:06:b8:a7:3d:dd:54:6a:3c:cb:da:b5:5b:86:
61:f6:69:b2:18:1a:34:05:5a:61:7c:9f:c8:3b:c9:41:f3:d2:
f8:66:52:e2:6b:b1:41:7a:08:ab:0e:54:d7:d6:4b:ca:11:5a:
6a:f0:93:a4:1e:5c:ec:ab:a6:4d:56:6e:f0:b7:9b:3e:a9:26:
a3:96:13:4a:78:f6:f1:5c:60:84:a8:97:6d:d8:ad:5e:72:43:
69:6f:ab:c7:67:ec:b0:2b:2d:9b:d0:6a:99:c0:60:db:80:00:
5e:66:b5:77:30:33:49:ea:7b:1c:8c:db:dd:ce:59:1f:ac:6f:
68:f7:e2:6c:b5:5c:98:b1:f9:77:95:ab:b4:6f:a8:ab:10:72:
d9:35:45:83:72:f8:e7:5e:39:c5:c6:40:df:f5:c6:ec:09:44:
c9:df:9d:50:c3:be:04:b1:0a:34:42:30:34:41:6d:b9:9e:df:
8c:cb:08:28:ac:40:9e:97:27:ca:2f:45:6a:1a:53:f5:c7:2c:
07:03:09:af:56:4c:7f:5e:d6:40:43:1f:d9:d9:23:83:b6:a0:
57:65:99:07:b7:f3:5e:b6:e4:c5:6e:40:38:4f:89:c8:aa:f4:
bf:2f:ec:38:48:4f:12:cc:b8:6d:9e:b9:5c:7f:c4:eb:95:0c:
7b:47:21:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHduZQevj/dK03zBxxhhyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkN2NmYmNlMWQ2ZDNhNmEyNGYyNTY1MjA2NWQzMTU3NTgy
OGVkYjUwHhcNMjUwNzI2MTYwMDMxWhcNMjUwNzI3MTYwMDMxWjAzMTEwLwYDVQQD
Eyg4MWFlOTkxZWM3OTJmZjFkODBlYTBjODdiZjQ5NjI2ZWExYTAyNTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7FAkXC652ggm+FV4RyFsQmHLO2+
zGQl7v3dBUx025izvn9eXi0biUgT7QsPVo9DtgJFibtNZQQ+Zc1HqoNOw7EIrsqC
AYxhu4YJUyRPmnRWOu6ifocPSRttljVjiyqw+oNSn9M+ewP6N8mIRA4LwpfDa1I2
SJwqQHiJSBfQ2RwY/iNfA2WnH5/FXarf2g8yW3W8EC1X/cbSE+uThK9BUXQW0BIl
chkLtWU8MW9iR5C0Ciqj/ExdlX8A/RoMvvocLhOJdm2hAICeRkX0aL1SMUX0uPSG
2jWeuBCNSbcSxWgEhftnO6hEix8O9ylo4mJ+3VuYXCsRYlevj+x5lMu62wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGumR7Hkv8dgOoMh79JYm6hoCVNMB8GA1UdIwQY
MBaAFK18+84dbTpqJPJWUgZdMVdYKO21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclh6N3poMXRPbW9rOGxaU0JsMHhWMWdvN2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xMTQzNDAtMmM3MC00MWZjLWFiZTct
MmZhN2M5YjExMWIxLzEvclh6N3poMXRPbW9rOGxaU0JsMHhWMWdvN2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xMTQzNDAtMmM3MC00MWZjLWFiZTctMmZhN2M5YjExMWIx
LzEvclh6N3poMXRPbW9rOGxaU0JsMHhWMWdvN2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdgooH8G
uKc93VRqPMvatVuGYfZpshgaNAVaYXyfyDvJQfPS+GZS4muxQXoIqw5U19ZLyhFa
avCTpB5c7KumTVZu8LebPqkmo5YTSnj28VxghKiXbditXnJDaW+rx2fssCstm9Bq
mcBg24AAXma1dzAzSep7HIzb3c5ZH6xvaPfibLVcmLH5d5WrtG+oqxBy2TVFg3L4
5145xcZA3/XG7AlEyd+dUMO+BLEKNEIwNEFtuZ7fjMsIKKxAnpcnyi9FahpT9ccs
BwMJr1ZMf17WQEMf2dkjg7agV2WZB7fzXrbkxW5AOE+JyKr0vy/sOEhPEsy4bZ65
XH/E65UMe0chtQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:59 2025 by rpki-client