Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
File: RxGaIFaDFnklufBBdDEmN7FgDAc.mft (raw, json)
Hash identifier: i8j86bNXYSJ33sUdVe6p2tQ6rXkQmY8xM+xf/qyi/y4=
Subject key identifier: 44:FF:2C:BB:AB:FE:0E:B5:DF:14:07:A6:AB:9B:C2:5C:90:09:24:B7
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 019936F04DB6BF57E0A6D765067F86D5691C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 04:02:22 +0000
Manifest this update: Thu 11 Sep 2025 04:02:22 +0000
Manifest next update: Fri 12 Sep 2025 04:02:22 +0000
Files and hashes: 1: RxGaIFaDFnklufBBdDEmN7FgDAc.crl (hash: oZ3wLu7XFjgVBH1HbcPwg48FenDFAql4RzxYvgVJUNI=)
2: YlLGMMGfzp4BFnoZ0HiHBmcAlqs.roa (hash: imBK0lUnHzFl1op2tHfNsjuMR3mqpTEborDSGd19hUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:f0:4d:b6:bf:57:e0:a6:d7:65:06:7f:86:d5:69:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Sep 11 04:02:22 2025 GMT
Not After : Sep 12 04:02:22 2025 GMT
Subject: CN=44ff2cbbabfe0eb5df1407a6ab9bc25c900924b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:a0:33:f4:18:cd:bc:06:d4:8a:c5:56:4f:
a0:0c:47:b8:34:ec:81:f9:b8:02:19:ad:51:93:e3:
6a:4e:20:99:50:1f:62:45:24:27:5a:ae:64:df:00:
b9:0e:61:f5:c2:c4:35:9b:8a:c5:86:57:44:6a:f9:
20:bc:94:a7:49:e0:89:42:ee:70:3e:3f:c5:2e:2e:
84:b9:fb:38:a6:9b:99:b1:e7:13:25:c6:18:88:af:
3c:9d:08:32:26:b1:c6:e4:bf:c0:93:19:22:29:18:
a9:22:78:f5:26:3f:07:6c:54:e6:c3:00:ac:9c:fb:
80:84:ef:dc:d6:70:e3:59:e5:77:d2:f2:e6:ef:ac:
3a:93:95:6c:4a:a3:e2:7d:e0:34:ad:b1:d4:ac:aa:
4f:b6:ea:9a:9b:89:01:4c:f0:a3:f1:3b:9a:52:c4:
d2:a8:a8:57:a7:1f:7e:55:90:00:11:37:24:8c:7f:
a4:f6:da:6c:a0:56:8e:44:35:a0:ec:98:b9:28:19:
78:a3:96:38:fd:74:f9:cf:b2:45:00:d2:f1:e2:47:
df:a0:1d:20:71:60:2b:8e:c6:a1:c0:bc:ba:9a:70:
e4:2c:41:28:39:60:e8:b3:9e:96:c3:22:10:39:fc:
f6:3c:20:b4:e5:75:c5:08:31:8d:ca:a9:3d:d3:ba:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FF:2C:BB:AB:FE:0E:B5:DF:14:07:A6:AB:9B:C2:5C:90:09:24:B7
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:22:f8:be:eb:e7:36:01:2a:55:d2:a9:65:4f:4f:8a:c2:72:
86:18:b2:22:3a:3e:23:1a:42:c8:73:2c:72:52:4a:5d:04:4b:
77:ff:de:b5:7d:62:14:dd:a9:b6:73:83:2a:f2:36:2a:1d:c2:
b4:fa:b5:b3:03:88:1a:58:d4:50:4f:c7:12:0f:d4:3f:57:51:
7d:51:e1:21:f4:fb:9c:d5:94:22:8c:43:81:47:6e:5b:bb:1b:
6b:86:79:29:65:57:e7:e8:c6:bb:dc:f3:b6:5d:28:6c:d2:b9:
2f:2e:13:8d:b7:2b:52:83:78:f3:d3:e2:33:5c:f8:bb:bc:e5:
76:21:ea:83:23:31:8c:de:09:d2:41:87:2e:ef:c1:15:ab:d5:
3c:ad:ce:e2:93:2f:5c:5c:31:11:bb:b7:13:45:bf:a8:32:64:
8a:ee:87:13:c3:89:cb:83:c9:07:b3:02:1c:2b:07:39:64:cc:
9c:36:7a:2a:e4:05:a9:c1:6f:3d:49:cd:9e:d0:01:78:09:65:
52:be:6c:08:d5:24:50:6b:a5:80:2b:2a:d0:c9:2f:a5:5d:e4:
3c:ba:6d:0f:0e:78:09:8d:54:7e:b8:d1:c4:5f:b9:21:ba:b8:
63:0c:bb:f7:25:ab:5e:61:7f:03:a8:9e:6e:9c:5d:6b:5c:6c:
4d:cc:54:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk28E22v1fgptdlBn+G1WkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTE5YTIwNTY4MzE2NzkyNWI5ZjA0MTc0MzEyNjM3YjE2
MDBjMDcwHhcNMjUwOTExMDQwMjIyWhcNMjUwOTEyMDQwMjIyWjAzMTEwLwYDVQQD
Eyg0NGZmMmNiYmFiZmUwZWI1ZGYxNDA3YTZhYjliYzI1YzkwMDkyNGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmygM/QYzbwG1IrFVk+gDEe4NOyB
+bgCGa1Rk+NqTiCZUB9iRSQnWq5k3wC5DmH1wsQ1m4rFhldEavkgvJSnSeCJQu5w
Pj/FLi6Eufs4ppuZsecTJcYYiK88nQgyJrHG5L/AkxkiKRipInj1Jj8HbFTmwwCs
nPuAhO/c1nDjWeV30vLm76w6k5VsSqPifeA0rbHUrKpPtuqam4kBTPCj8TuaUsTS
qKhXpx9+VZAAETckjH+k9tpsoFaORDWg7Ji5KBl4o5Y4/XT5z7JFANLx4kffoB0g
cWArjsahwLy6mnDkLEEoOWDos56WwyIQOfz2PCC05XXFCDGNyqk907orZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFET/LLur/g613xQHpqubwlyQCSS3MB8GA1UdIwQY
MBaAFEcRmiBWgxZ5JbnwQXQxJjexYAwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQt
MmEwZTQ1ODYyYzAzLzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hYjM2YTAtMDRlYy00MTkwLWI1OWQtMmEwZTQ1ODYyYzAz
LzEvUnhHYUlGYURGbmtsdWZCQmRERW1ON0ZnREFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyL4vuvn
NgEqVdKpZU9PisJyhhiyIjo+IxpCyHMsclJKXQRLd//etX1iFN2ptnODKvI2Kh3C
tPq1swOIGljUUE/HEg/UP1dRfVHhIfT7nNWUIoxDgUduW7sba4Z5KWVX5+jGu9zz
tl0obNK5Ly4TjbcrUoN489PiM1z4u7zldiHqgyMxjN4J0kGHLu/BFavVPK3O4pMv
XFwxEbu3E0W/qDJkiu6HE8OJy4PJB7MCHCsHOWTMnDZ6KuQFqcFvPUnNntABeAll
Ur5sCNUkUGulgCsq0MkvpV3kPLptDw54CY1UfrjRxF+5Ibq4Ywy79yWrXmF/A6ie
bpxda1xsTcxUrg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 07:49:57 2025 by rpki-client