Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
File: txUfGUo-UkyCxne44TIFgUPI6-4.mft (raw, json)
Hash identifier: 5eUCipCpKCvuXfDbkWU6q1YIY+nUWKhUT31ZZogZKRY=
Subject key identifier: 2A:D4:E6:0E:64:B2:71:A8:55:74:90:83:56:34:5B:97:75:EB:81:C1
Authority key identifier: B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
Certificate issuer: /CN=b7151f194a3e524c82c677b8e132058143c8ebee
Certificate serial: 0199228C52D0836143079E14800CEF86604A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
Manifest number: 1233
Signing time: Sun 07 Sep 2025 05:00:45 +0000
Manifest this update: Sun 07 Sep 2025 05:00:45 +0000
Manifest next update: Mon 08 Sep 2025 05:00:45 +0000
Files and hashes: 1: n19PNekuUxk2MsanZv6k9gKadQg.roa (hash: YnWY6CP2zX/4Z5tMuISlijBU7Qx6tns7hQdNcVBZ1XI=)
2: txUfGUo-UkyCxne44TIFgUPI6-4.crl (hash: +6oTfrMn+vKHRI6sKO7gdX3uYU/d5idTPzqEEmywsoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:52:d0:83:61:43:07:9e:14:80:0c:ef:86:60:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7151f194a3e524c82c677b8e132058143c8ebee
Validity
Not Before: Sep 7 05:00:45 2025 GMT
Not After : Sep 8 05:00:45 2025 GMT
Subject: CN=2ad4e60e64b271a85574908356345b9775eb81c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:44:68:95:1a:2c:50:63:c5:24:88:5d:5c:
1f:dc:17:54:e1:60:7c:bf:19:f7:b9:0a:87:73:06:
cb:9d:5e:4b:90:3f:35:64:bd:1a:cf:35:7a:f8:d5:
56:7c:04:09:c2:d8:99:e1:f9:6d:92:7c:63:af:71:
4b:36:aa:83:c0:00:30:bb:ca:8b:64:c3:51:6e:c0:
4b:85:22:2e:5f:91:f2:9e:1c:11:34:43:ae:36:e4:
d2:51:01:57:71:32:43:19:ce:07:17:69:4c:ba:fe:
6a:bf:46:78:64:fc:16:fe:cc:fb:97:02:54:64:87:
8c:ca:13:a6:90:f1:86:4e:cd:75:1e:7c:a9:88:30:
98:46:16:9a:6f:20:f9:ac:4f:f7:30:b8:d0:92:9a:
c9:5d:38:5e:48:07:d1:ae:81:b2:f9:41:84:39:5d:
e7:02:ad:48:9f:fe:5a:a8:ff:a3:00:fc:b7:2c:0c:
e7:66:5f:57:0b:03:f3:79:51:35:00:57:38:37:9b:
9c:d8:20:0b:2c:88:1c:f0:17:bd:d8:63:42:97:99:
b5:93:fb:f2:fc:67:a4:f0:67:46:1b:60:b7:99:8d:
39:c6:39:b6:a7:9d:46:a5:49:50:92:27:dc:15:39:
66:fd:91:5c:ef:59:49:07:f0:47:2f:ac:fb:19:b2:
dc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D4:E6:0E:64:B2:71:A8:55:74:90:83:56:34:5B:97:75:EB:81:C1
X509v3 Authority Key Identifier:
keyid:B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7b:66:f6:ff:f3:67:70:fd:91:b3:92:70:64:de:02:99:a3:
04:e2:1f:a0:25:b5:d1:bb:07:b5:29:c2:db:21:95:f8:15:aa:
3a:0a:be:13:88:96:a6:49:02:18:85:53:53:c9:83:66:5b:85:
69:39:ab:20:55:06:18:8c:44:ea:15:7a:39:f8:30:f7:d7:b3:
67:25:72:cb:59:0d:ef:2a:a0:55:59:a7:da:65:98:1e:a5:51:
81:f3:b6:56:10:54:b8:b1:82:e3:eb:34:9c:54:b6:f8:5e:08:
67:1d:23:92:d0:01:2b:d6:f0:96:a2:55:dd:00:b3:20:b1:23:
0c:c0:cc:47:d0:bb:db:24:0b:b3:5a:ab:9a:2d:5f:12:64:1c:
55:6d:ef:07:ad:33:7a:a0:22:91:ea:d6:b8:d5:a5:af:b1:ff:
db:3d:65:4e:6a:3e:6c:ca:7f:99:69:d4:17:06:57:ad:34:d2:
e5:5a:53:be:c4:4e:42:8d:55:a5:9b:ee:9a:cc:97:f8:72:f2:
41:63:52:87:3b:58:3b:48:b6:d4:52:8c:b2:d4:4a:83:8d:99:
a2:b6:20:59:d4:df:4e:83:a6:3b:d2:b2:31:e5:40:5a:af:0b:
43:21:36:76:a9:13:be:10:3a:e1:ac:66:10:3f:9d:fe:ec:1e:
68:ae:a1:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijFLQg2FDB54UgAzvhmBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTUxZjE5NGEzZTUyNGM4MmM2NzdiOGUxMzIwNTgxNDNj
OGViZWUwHhcNMjUwOTA3MDUwMDQ1WhcNMjUwOTA4MDUwMDQ1WjAzMTEwLwYDVQQD
EygyYWQ0ZTYwZTY0YjI3MWE4NTU3NDkwODM1NjM0NWI5Nzc1ZWI4MWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GJEaJUaLFBjxSSIXVwf3BdU4WB8
vxn3uQqHcwbLnV5LkD81ZL0azzV6+NVWfAQJwtiZ4fltknxjr3FLNqqDwAAwu8qL
ZMNRbsBLhSIuX5HynhwRNEOuNuTSUQFXcTJDGc4HF2lMuv5qv0Z4ZPwW/sz7lwJU
ZIeMyhOmkPGGTs11HnypiDCYRhaabyD5rE/3MLjQkprJXTheSAfRroGy+UGEOV3n
Aq1In/5aqP+jAPy3LAznZl9XCwPzeVE1AFc4N5uc2CALLIgc8Be92GNCl5m1k/vy
/Gek8GdGG2C3mY05xjm2p51GpUlQkifcFTlm/ZFc71lJB/BHL6z7GbLcywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrU5g5ksnGoVXSQg1Y0W5d164HBMB8GA1UdIwQY
MBaAFLcVHxlKPlJMgsZ3uOEyBYFDyOvuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhVZkdVby1Va3lDeG5lNDRUSUZnVVBJNi00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80OWEzMmQtZDBmMi00ODFhLTk3OTEt
YzlhNDlmNzBlMjNiLzEvdHhVZkdVby1Va3lDeG5lNDRUSUZnVVBJNi00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80OWEzMmQtZDBmMi00ODFhLTk3OTEtYzlhNDlmNzBlMjNi
LzEvdHhVZkdVby1Va3lDeG5lNDRUSUZnVVBJNi00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXtm9v/z
Z3D9kbOScGTeApmjBOIfoCW10bsHtSnC2yGV+BWqOgq+E4iWpkkCGIVTU8mDZluF
aTmrIFUGGIxE6hV6Ofgw99ezZyVyy1kN7yqgVVmn2mWYHqVRgfO2VhBUuLGC4+s0
nFS2+F4IZx0jktABK9bwlqJV3QCzILEjDMDMR9C72yQLs1qrmi1fEmQcVW3vB60z
eqAikerWuNWlr7H/2z1lTmo+bMp/mWnUFwZXrTTS5VpTvsROQo1VpZvumsyX+HLy
QWNShztYO0i21FKMstRKg42ZorYgWdTfToOmO9KyMeVAWq8LQyE2dqkTvhA64axm
ED+d/uweaK6h+A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:11 2025 by rpki-client