
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
File: P-XZqjR4a6oW1Fa9857K-12XMPg.mft (raw, json)
Hash identifier: UBOjmhnA46SV0BTeDnVs4E6LMZpOwvlo9v/PP/eRT/A=
Subject key identifier: 86:59:72:8C:BF:69:43:47:E7:B6:F6:F4:02:94:55:AA:EE:03:8A:9B
Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Certificate serial: 01988B0E5692D23C2F5E178727E2529A60BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 19:00:29 +0000
Manifest this update: Fri 08 Aug 2025 19:00:29 +0000
Manifest next update: Sat 09 Aug 2025 19:00:29 +0000
Files and hashes: 1: I8Hl2QUOJ6pW-HzuzhburaAUCcs.roa (hash: TO7xgPDDMwBnfoyPmeOZq+S6vszklMWr0Jg0Yq+3Oiw=)
2: P-XZqjR4a6oW1Fa9857K-12XMPg.crl (hash: v85SLtQDL02KPuXQ27Swg8feLAQ2jKtsa2HYi4col70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:56:92:d2:3c:2f:5e:17:87:27:e2:52:9a:60:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Validity
Not Before: Aug 8 19:00:29 2025 GMT
Not After : Aug 9 19:00:29 2025 GMT
Subject: CN=8659728cbf694347e7b6f6f4029455aaee038a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:31:6d:3b:0f:f4:5f:ab:59:34:1d:7c:d0:
33:7e:08:31:ac:cb:7c:1e:f0:0f:7a:94:2e:ce:1a:
32:23:94:68:0f:99:64:4d:44:9d:ce:8a:26:10:6e:
57:c5:c6:44:4b:7f:7c:3e:75:ef:7b:00:62:67:5d:
3e:fb:de:74:65:39:2b:80:a6:15:b0:a0:ba:3f:91:
fe:a5:6d:dc:cf:6f:11:5f:8a:13:74:c1:8f:61:dc:
75:b4:a9:93:37:a0:8b:f0:71:c6:3c:47:22:6f:59:
a1:70:13:4e:0f:17:9e:1d:0c:5d:b3:45:d7:0e:91:
ca:12:fb:f5:d8:98:ec:82:92:c1:85:ca:93:ad:82:
27:12:24:c7:92:6e:c9:85:19:d0:cb:ec:08:da:7d:
9c:20:a5:38:8d:65:1c:74:05:d8:3b:58:ea:5c:c9:
c2:63:2c:8f:2e:fa:7d:2d:e1:a5:e1:07:49:ca:d8:
f9:ff:af:e0:d1:f9:41:7d:c9:ed:10:26:b7:a6:31:
da:40:1c:2c:44:34:04:fe:db:73:b9:8f:4a:59:5d:
96:d2:3a:1f:13:c6:02:17:f8:a3:e0:c0:f8:d1:80:
83:2e:44:c6:d3:95:92:50:76:22:08:11:a1:8d:c0:
02:e5:76:f4:cd:fb:6d:88:d9:13:b0:c8:d9:56:12:
28:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:59:72:8C:BF:69:43:47:E7:B6:F6:F4:02:94:55:AA:EE:03:8A:9B
X509v3 Authority Key Identifier:
keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:45:03:2e:a5:b1:68:59:b3:bc:c8:f4:c4:63:e1:d6:71:0e:
20:cc:e4:f5:28:98:07:2d:1e:74:26:d1:33:0b:3b:8d:16:a0:
e1:26:57:37:f2:6a:8a:b3:49:0e:6f:0a:4c:49:f0:d6:3e:d3:
28:36:46:ab:8e:e4:9a:3e:49:ea:74:14:00:f6:fa:be:37:e8:
18:3f:47:c3:55:52:6f:e9:22:a8:69:b0:30:c8:89:9b:bd:f3:
83:8a:67:d3:05:65:b4:9e:5b:fe:ea:2c:8a:b5:e9:c1:13:8c:
bc:d5:53:3d:90:3b:78:d2:f8:33:c1:a5:75:21:af:4b:02:45:
3f:fe:e0:ed:1e:4a:0e:6f:12:33:78:3e:bd:3b:67:5e:18:93:
84:7f:be:c2:bb:00:39:7a:4c:3b:ff:27:88:29:20:45:d1:3d:
71:8d:53:70:d7:d1:7e:41:b8:db:bc:b5:33:f6:c9:9b:f1:1a:
b7:fc:e5:e6:c6:4d:1f:91:7d:3b:c0:59:38:d2:b3:9d:db:a0:
36:dc:a2:72:f1:1f:fd:f2:c8:40:a0:47:b7:1d:03:0b:5f:6d:
e7:09:92:5f:91:96:b6:34:3e:d2:9c:45:a3:07:70:15:dc:3e:
a2:0b:07:e9:b8:73:d6:c5:c7:ae:4b:e5:4f:29:56:e1:89:36:
df:18:52:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLDlaS0jwvXheHJ+JSmmC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZTVkOWFhMzQ3ODZiYWExNmQ0NTZiZGYzOWVjYWZiNWQ5
NzMwZjgwHhcNMjUwODA4MTkwMDI5WhcNMjUwODA5MTkwMDI5WjAzMTEwLwYDVQQD
Eyg4NjU5NzI4Y2JmNjk0MzQ3ZTdiNmY2ZjQwMjk0NTVhYWVlMDM4YTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp0xbTsP9F+rWTQdfNAzfggxrMt8
HvAPepQuzhoyI5RoD5lkTUSdzoomEG5XxcZES398PnXvewBiZ10++950ZTkrgKYV
sKC6P5H+pW3cz28RX4oTdMGPYdx1tKmTN6CL8HHGPEcib1mhcBNODxeeHQxds0XX
DpHKEvv12JjsgpLBhcqTrYInEiTHkm7JhRnQy+wI2n2cIKU4jWUcdAXYO1jqXMnC
YyyPLvp9LeGl4QdJytj5/6/g0flBfcntECa3pjHaQBwsRDQE/ttzuY9KWV2W0jof
E8YCF/ij4MD40YCDLkTG05WSUHYiCBGhjcAC5Xb0zfttiNkTsMjZVhIoQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZZcoy/aUNH57b29AKUVaruA4qbMB8GA1UdIwQY
MBaAFD/l2ao0eGuqFtRWvfOeyvtdlzD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2Qt
NTk0YzFhY2Q5ZGFmLzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2QtNTk0YzFhY2Q5ZGFm
LzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyUUDLqWx
aFmzvMj0xGPh1nEOIMzk9SiYBy0edCbRMws7jRag4SZXN/JqirNJDm8KTEnw1j7T
KDZGq47kmj5J6nQUAPb6vjfoGD9Hw1VSb+kiqGmwMMiJm73zg4pn0wVltJ5b/uos
irXpwROMvNVTPZA7eNL4M8GldSGvSwJFP/7g7R5KDm8SM3g+vTtnXhiThH++wrsA
OXpMO/8niCkgRdE9cY1TcNfRfkG427y1M/bJm/Eat/zl5sZNH5F9O8BZONKzndug
NtyicvEf/fLIQKBHtx0DC19t5wmSX5GWtjQ+0pxFowdwFdw+ogsH6bhz1sXHrkvl
TylW4Yk23xhSZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:37 2025 by rpki-client