Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
File: x2v2t4G8-MKACKjo_d5g564xIqo.mft (raw, json)
Hash identifier: d8Q5EVLqn8f5DJhNPAvKXE3/P70t9gxXr37bPXFMOa4=
Subject key identifier: 7D:F4:6B:86:32:73:A9:19:39:E2:7F:7D:12:ED:7D:1B:6F:66:E6:E6
Authority key identifier: C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
Certificate issuer: /CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Certificate serial: 019A71B8235EE3929AF894993567B44523EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: 58adO5UB1FKlEoStUB0aT9zK1OU.roa (hash: VcDtIG0g4QLm3R4L3wJoUxzRN4qEZkuyhBUiyX4ea8Q=)
2: x2v2t4G8-MKACKjo_d5g564xIqo.crl (hash: EOU0L8dpGIE18MjZcsA8CAw5G+wxzawTNR+Fy7vb4A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:23:5e:e3:92:9a:f8:94:99:35:67:b4:45:23:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=7df46b863273a91939e27f7d12ed7d1b6f66e6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:69:e8:d7:01:b7:e2:55:16:da:fb:5c:86:
c3:96:2b:58:70:4a:16:af:9e:3c:5d:13:b7:85:56:
5d:1b:e3:b9:0a:3a:8c:5b:c8:63:de:41:89:78:c6:
ce:b9:56:45:05:f9:1f:e2:a3:c2:f4:1a:09:1a:92:
a8:80:bf:68:0c:8a:f1:12:51:2a:14:91:db:0a:3b:
3f:73:7c:00:52:33:2d:ec:24:c8:af:3c:df:9b:81:
7e:fd:df:ca:1d:b2:f6:ee:a7:02:c2:b4:48:9e:bf:
bd:90:7e:e9:e9:1c:af:5d:1e:fb:ca:33:94:fb:e1:
88:28:af:66:65:82:3f:47:60:90:46:57:98:26:4f:
c4:db:8d:e1:19:4a:b7:79:96:0f:fb:65:a5:a0:73:
41:80:99:00:28:72:ce:ae:69:e9:04:99:30:bb:7f:
d3:36:61:61:31:22:f3:9f:0f:7d:e4:70:57:b7:1f:
d3:84:bc:fe:9d:92:aa:cd:fa:48:7a:af:41:42:bd:
f6:cf:dc:f1:09:dd:ce:97:64:f0:ab:8a:bb:36:ef:
d2:8e:58:dd:1a:31:55:9d:21:3c:00:cc:77:88:32:
e3:40:be:cc:13:d0:06:3a:8c:3e:96:d4:63:4c:ee:
4d:f6:f9:da:d8:61:59:b9:be:18:64:cd:d9:40:1f:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F4:6B:86:32:73:A9:19:39:E2:7F:7D:12:ED:7D:1B:6F:66:E6:E6
X509v3 Authority Key Identifier:
keyid:C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c9:7d:68:10:47:66:c1:01:da:4d:f8:a1:68:e9:9f:e8:b1:
35:7d:3c:af:c6:78:c4:ef:8e:5b:3a:fb:4c:b0:97:21:2e:50:
73:92:d2:28:22:c7:19:8e:6c:5b:ea:88:64:2e:f6:ac:be:66:
90:3a:4d:3f:fe:08:10:c1:23:ad:60:60:b3:ab:99:3e:91:35:
ad:a7:60:fd:ec:e9:a5:09:48:77:41:fe:b5:9d:b6:9b:0b:ba:
15:63:19:84:f0:17:7f:48:3b:3a:4f:23:2d:83:d2:ba:9d:3a:
12:7f:e5:03:f9:95:64:3a:c2:9f:47:c9:f4:ac:49:47:50:f8:
5e:b6:01:fc:9b:38:f8:46:bc:2b:c3:7f:3b:9e:37:c4:a8:50:
c2:96:b7:f2:69:b9:d6:d3:f1:4d:b3:3c:c5:6e:88:83:30:83:
9b:b2:3a:35:bd:5b:3c:3c:95:00:99:2a:f4:97:b9:b8:8e:5e:
df:5d:2e:c2:a8:5d:b3:04:ac:f9:39:3b:bb:80:e7:4a:a5:55:
c7:e5:a9:51:55:10:46:fd:a2:f0:f0:c9:bf:e2:29:9d:55:f6:
bb:84:f8:a1:01:9b:38:67:24:57:d3:3b:42:d4:eb:16:5e:74:
f8:09:e6:1a:58:9e:80:49:15:d8:3a:97:d5:1d:9d:87:55:c5:
da:d3:62:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuCNe45Ka+JSZNWe0RSPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmJmNmI3ODFiY2Y4YzI4MDA4YThlOGZkZGU2MGU3YWUz
MTIyYWEwHhcNMjUxMTExMDcwMTI0WhcNMjUxMTEyMDcwMTI0WjAzMTEwLwYDVQQD
Eyg3ZGY0NmI4NjMyNzNhOTE5MzllMjdmN2QxMmVkN2QxYjZmNjZlNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc9p6NcBt+JVFtr7XIbDlitYcEoW
r548XRO3hVZdG+O5CjqMW8hj3kGJeMbOuVZFBfkf4qPC9BoJGpKogL9oDIrxElEq
FJHbCjs/c3wAUjMt7CTIrzzfm4F+/d/KHbL27qcCwrRInr+9kH7p6RyvXR77yjOU
++GIKK9mZYI/R2CQRleYJk/E243hGUq3eZYP+2WloHNBgJkAKHLOrmnpBJkwu3/T
NmFhMSLznw995HBXtx/ThLz+nZKqzfpIeq9BQr32z9zxCd3Ol2Twq4q7Nu/Sjljd
GjFVnSE8AMx3iDLjQL7ME9AGOow+ltRjTO5N9vna2GFZub4YZM3ZQB/06wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH30a4Yyc6kZOeJ/fRLtfRtvZubmMB8GA1UdIwQY
MBaAFMdr9reBvPjCgAio6P3eYOeuMSKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMTc4YmQtYjZhNS00NjEwLThjNmEt
YWJmNDg0MGVhNjA3LzEveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iMTc4YmQtYjZhNS00NjEwLThjNmEtYWJmNDg0MGVhNjA3
LzEveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcl9aBBH
ZsEB2k34oWjpn+ixNX08r8Z4xO+OWzr7TLCXIS5Qc5LSKCLHGY5sW+qIZC72rL5m
kDpNP/4IEMEjrWBgs6uZPpE1radg/ezppQlId0H+tZ22mwu6FWMZhPAXf0g7Ok8j
LYPSup06En/lA/mVZDrCn0fJ9KxJR1D4XrYB/Js4+Ea8K8N/O543xKhQwpa38mm5
1tPxTbM8xW6IgzCDm7I6Nb1bPDyVAJkq9Je5uI5e310uwqhdswSs+Tk7u4DnSqVV
x+WpUVUQRv2i8PDJv+IpnVX2u4T4oQGbOGckV9M7QtTrFl50+AnmGliegEkV2DqX
1R2dh1XF2tNiOQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:48 2025 by rpki-client