Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: W3Y8CzPd4aNUqJ5nGeOunV9JFZDPrlaGZkSy6Y4oZso=
Subject key identifier: 1C:F6:6A:3A:6E:5F:71:8B:0D:B5:60:08:99:55:7A:2D:CC:5C:F7:ED
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 0199239F12EFF75644CD52A34B0D3ABDBE8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 154E
Signing time: Sun 07 Sep 2025 10:00:51 +0000
Manifest this update: Sun 07 Sep 2025 10:00:51 +0000
Manifest next update: Mon 08 Sep 2025 10:00:51 +0000
Files and hashes: 1: JsiUY4utQyGLQkMCxP2vm1DnYkM.roa (hash: t9dxvm0FP5XnZVQ8+CoMdOpLdpUdElKJXDgxciqeHNU=)
2: VS0vQXyTV30uKtTHz_uaATpRmNI.roa (hash: bd6zfzzABUQlbCGm2yH6xBJFNFWYvrN9JXn/fjw4bhU=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: r09Y2m3v1rZKMmLjPpzICI520w1s4NTXmWg64Mbdqrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:12:ef:f7:56:44:cd:52:a3:4b:0d:3a:bd:be:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Sep 7 10:00:51 2025 GMT
Not After : Sep 8 10:00:51 2025 GMT
Subject: CN=1cf66a3a6e5f718b0db5600899557a2dcc5cf7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:4d:6d:d8:de:ca:f7:9a:6c:c0:55:b8:42:
78:aa:16:fe:80:d7:43:b5:a8:82:81:29:96:d1:c4:
fa:ed:41:0c:fc:1e:f7:82:b4:35:25:6c:e6:bb:ba:
e1:8c:e0:40:af:bd:2c:e9:7d:72:b8:32:4c:84:36:
94:f5:7f:82:37:cb:d4:29:e8:dd:8d:13:85:ef:96:
65:08:ed:39:6c:5e:0d:d7:94:65:20:fc:11:35:72:
5c:db:ad:a7:77:71:0d:dc:4a:a7:50:2b:38:01:07:
08:e6:cd:b1:38:f4:6b:62:8c:ec:27:13:da:63:56:
70:8b:c0:95:10:a2:05:5f:18:2c:ce:cd:9a:9b:3e:
dc:f0:b0:b1:05:bf:8f:62:6f:87:8b:3b:14:8a:78:
04:c3:eb:09:5f:6c:f8:2b:39:2a:31:bd:5d:de:ca:
9c:ef:62:90:93:e0:9d:48:48:42:73:3b:33:ec:b1:
28:0d:fc:91:20:1f:ce:15:d1:95:8c:88:41:90:5e:
9e:e6:5d:2d:ea:46:43:49:66:77:fa:d0:7e:81:9b:
f1:fb:72:55:82:14:c2:74:76:66:0a:ad:46:ee:d9:
03:10:98:3d:80:23:06:9e:1a:e0:ba:9f:6d:94:e9:
28:b1:05:07:90:87:5b:89:d8:6d:63:51:f2:c8:39:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F6:6A:3A:6E:5F:71:8B:0D:B5:60:08:99:55:7A:2D:CC:5C:F7:ED
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:be:80:11:43:85:fb:f0:3e:f0:20:82:83:5a:1f:0f:f0:36:
1e:4b:bf:25:62:ae:71:38:71:5e:a7:24:dd:35:f8:db:e8:27:
82:18:25:06:80:e9:c6:42:45:25:bf:1a:d6:22:7a:b1:15:da:
0a:fc:65:a8:05:9c:57:28:13:07:fe:d5:a5:c6:85:9c:35:b4:
7c:98:83:25:94:01:d7:67:7b:43:05:e4:cd:50:d2:a3:68:0b:
9d:19:bb:e3:69:3a:2f:fa:1f:f8:e4:29:d9:84:4b:d7:5c:39:
60:cc:dc:ca:77:b1:e5:92:d8:a6:7f:1b:89:79:23:dd:51:28:
2c:2b:fe:7c:9b:1d:e5:82:ba:e8:a7:00:51:dd:34:d3:45:c8:
19:05:e1:fe:e2:8e:43:56:83:ce:d7:85:f2:5e:02:22:39:18:
09:b1:bb:ca:19:b2:0a:c7:db:5e:89:70:ff:bd:22:ff:69:17:
0c:ec:cd:79:73:5e:f1:48:9b:77:d4:9c:29:19:dc:45:a6:71:
3b:3d:84:5c:44:ab:a0:af:12:e9:1e:96:ff:9f:9d:e5:3c:ed:
b3:0c:90:d5:c2:32:49:ec:95:57:1c:ed:21:a3:ec:55:b1:dd:
ba:1c:b7:33:ef:98:b8:7f:21:ed:da:57:a1:66:3a:3f:bf:83:
cb:4b:f4:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnxLv91ZEzVKjSw06vb6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTUzNWEyZWFlYmM2OGMxNjU3YWFmY2Y1YTc4OGM4NzUx
ZDliNjIwHhcNMjUwOTA3MTAwMDUxWhcNMjUwOTA4MTAwMDUxWjAzMTEwLwYDVQQD
EygxY2Y2NmEzYTZlNWY3MThiMGRiNTYwMDg5OTU1N2EyZGNjNWNmN2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7dNbdjeyveabMBVuEJ4qhb+gNdD
taiCgSmW0cT67UEM/B73grQ1JWzmu7rhjOBAr70s6X1yuDJMhDaU9X+CN8vUKejd
jROF75ZlCO05bF4N15RlIPwRNXJc262nd3EN3EqnUCs4AQcI5s2xOPRrYozsJxPa
Y1Zwi8CVEKIFXxgszs2amz7c8LCxBb+PYm+HizsUingEw+sJX2z4KzkqMb1d3sqc
72KQk+CdSEhCczsz7LEoDfyRIB/OFdGVjIhBkF6e5l0t6kZDSWZ3+tB+gZvx+3JV
ghTCdHZmCq1G7tkDEJg9gCMGnhrgup9tlOkosQUHkIdbidhtY1HyyDmtgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz2ajpuX3GLDbVgCJlVei3MXPftMB8GA1UdIwQY
MBaAFHMVNaLq68aMFleq/PWniMh1HZtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTkt
NDM1YmRhNWJkMDQ4LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTktNDM1YmRhNWJkMDQ4
LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPr6AEUOF
+/A+8CCCg1ofD/A2Hku/JWKucThxXqck3TX42+gnghglBoDpxkJFJb8a1iJ6sRXa
CvxlqAWcVygTB/7VpcaFnDW0fJiDJZQB12d7QwXkzVDSo2gLnRm742k6L/of+OQp
2YRL11w5YMzcynex5ZLYpn8biXkj3VEoLCv+fJsd5YK66KcAUd0000XIGQXh/uKO
Q1aDzteF8l4CIjkYCbG7yhmyCsfbXolw/70i/2kXDOzNeXNe8Uibd9ScKRncRaZx
Oz2EXESroK8S6R6W/5+d5TztswyQ1cIySeyVVxztIaPsVbHduhy3M++YuH8h7dpX
oWY6P7+Dy0v02g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:26 2025 by rpki-client