Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
File: p_xcZck6dAQIaxelTn4NqWCpspM.mft (raw, json)
Hash identifier: m1ksyPP34xbh4XHT23NWfD9HATMeczrBxnsADjKvBdM=
Subject key identifier: 48:F3:31:29:B4:95:06:B1:4B:82:62:03:3F:EF:A0:9C:E3:ED:F4:61
Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Certificate serial: 019874501B494BB8CC8BF39F6453A652CB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
Manifest number: 119A
Signing time: Mon 04 Aug 2025 09:01:03 +0000
Manifest this update: Mon 04 Aug 2025 09:01:03 +0000
Manifest next update: Tue 05 Aug 2025 09:01:03 +0000
Files and hashes: 1: 8-SPB1FRD1dqgSwieEEafk1GdQA.roa (hash: vazRE5ylOn6vVMnXFU4rXRZh7sO8QjAU8zOnvhOztXo=)
2: p_xcZck6dAQIaxelTn4NqWCpspM.crl (hash: I8kLWSFeku+dTOr2NL+B+aIRXrkuA/UQVCf4UXLRUmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:1b:49:4b:b8:cc:8b:f3:9f:64:53:a6:52:cb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Validity
Not Before: Aug 4 09:01:03 2025 GMT
Not After : Aug 5 09:01:03 2025 GMT
Subject: CN=48f33129b49506b14b8262033fefa09ce3edf461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:fa:5c:a7:cf:78:8f:e8:11:74:fe:8d:db:
7f:f9:75:99:8e:ca:4a:cc:1f:57:c2:45:1f:a7:85:
22:a0:7f:d6:0c:3c:0b:7d:48:ea:81:61:57:df:44:
29:d4:1a:39:3b:22:c0:a0:6b:4c:4d:4a:a8:dc:82:
c6:e2:47:d6:4e:81:44:28:8a:81:ec:67:dd:4b:1e:
ed:cb:bd:d6:cc:43:4b:29:00:dc:12:a5:10:3d:8e:
c0:29:0f:0e:cf:8c:b8:74:2a:f3:39:c8:29:09:0c:
3e:e6:87:6f:b4:9a:6f:10:74:ef:b7:70:e1:78:16:
4d:c3:4f:ef:0c:b6:99:aa:a8:6d:98:63:24:df:4e:
21:05:c4:46:a4:f6:ad:ef:14:03:d5:f3:ed:cf:37:
f4:ae:b2:e2:89:3b:9a:28:0b:dd:2b:0b:38:b1:a6:
2d:83:57:ef:ed:99:97:c9:76:7b:55:f4:45:c3:c8:
fe:ff:2a:ce:46:2c:78:1b:70:fc:75:2b:6a:4f:b2:
c1:93:29:bf:13:92:71:a2:8e:e7:ee:e8:01:54:0c:
2d:a4:16:e4:1c:c1:82:93:da:70:20:99:a6:9b:8c:
05:4a:d3:aa:fb:3b:31:c8:93:64:71:89:0f:a5:ba:
c7:a9:1b:52:3c:03:e7:b4:84:d2:da:5b:02:bf:32:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F3:31:29:B4:95:06:B1:4B:82:62:03:3F:EF:A0:9C:E3:ED:F4:61
X509v3 Authority Key Identifier:
keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:97:40:b3:a1:74:9b:c0:22:61:62:87:6e:9e:fd:65:3a:1e:
f1:9d:90:9c:68:b1:0b:24:0f:2d:3b:1a:9f:92:49:51:28:c3:
6b:11:be:44:9a:37:ef:b7:3f:a3:22:b0:f8:69:c8:4d:eb:47:
ec:0e:43:f4:ef:6a:e8:39:7f:42:f7:ab:c6:87:4b:76:d9:53:
63:34:e8:8f:3f:55:3f:85:92:32:32:27:c3:a7:90:53:39:57:
2c:a8:0f:d6:c9:38:02:6e:3e:aa:12:67:50:8c:5f:23:1a:f2:
1d:e9:1b:fc:5e:c1:22:e4:59:55:31:7d:1d:da:dd:e0:5c:17:
b8:18:b1:22:9a:48:c6:2d:61:14:ad:58:96:05:b0:d5:71:8e:
93:82:50:c3:5f:b8:57:a4:ee:42:a9:55:87:48:a8:b8:fe:a3:
b5:d2:61:9a:0e:6b:42:54:ab:57:dc:cd:72:34:38:27:74:70:
5e:15:1d:57:1e:d6:f9:08:b8:68:9f:93:c6:28:93:38:b8:2d:
bb:58:ba:45:cb:8c:fb:b5:2e:1d:fb:bb:34:f8:9d:8d:8e:01:
9b:e8:5f:4d:1e:84:b3:82:3d:78:7d:69:f0:dc:4b:70:40:ea:
e7:e4:69:23:dc:9a:5a:0c:93:7e:ad:93:a1:65:f9:5c:8f:7f:
a9:31:a7:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UBtJS7jMi/OfZFOmUssuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZmM1YzY1YzkzYTc0MDQwODZiMTdhNTRlN2UwZGE5NjBh
OWIyOTMwHhcNMjUwODA0MDkwMTAzWhcNMjUwODA1MDkwMTAzWjAzMTEwLwYDVQQD
Eyg0OGYzMzEyOWI0OTUwNmIxNGI4MjYyMDMzZmVmYTA5Y2UzZWRmNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBj6XKfPeI/oEXT+jdt/+XWZjspK
zB9XwkUfp4UioH/WDDwLfUjqgWFX30Qp1Bo5OyLAoGtMTUqo3ILG4kfWToFEKIqB
7GfdSx7ty73WzENLKQDcEqUQPY7AKQ8Oz4y4dCrzOcgpCQw+5odvtJpvEHTvt3Dh
eBZNw0/vDLaZqqhtmGMk304hBcRGpPat7xQD1fPtzzf0rrLiiTuaKAvdKws4saYt
g1fv7ZmXyXZ7VfRFw8j+/yrORix4G3D8dStqT7LBkym/E5Jxoo7n7ugBVAwtpBbk
HMGCk9pwIJmmm4wFStOq+zsxyJNkcYkPpbrHqRtSPAPntITS2lsCvzJgkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjzMSm0lQaxS4JiAz/voJzj7fRhMB8GA1UdIwQY
MBaAFKf8XGXJOnQECGsXpU5+DalgqbKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF94Y1pjazZkQVFJYXhlbFRuNE5xV0Nwc3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84ZmNiMTItYWU0ZS00MzUzLWEzYjkt
ZjBhZDM3NWE4MDg2LzEvcF94Y1pjazZkQVFJYXhlbFRuNE5xV0Nwc3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84ZmNiMTItYWU0ZS00MzUzLWEzYjktZjBhZDM3NWE4MDg2
LzEvcF94Y1pjazZkQVFJYXhlbFRuNE5xV0Nwc3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5dAs6F0
m8AiYWKHbp79ZToe8Z2QnGixCyQPLTsan5JJUSjDaxG+RJo377c/oyKw+GnITetH
7A5D9O9q6Dl/QverxodLdtlTYzTojz9VP4WSMjInw6eQUzlXLKgP1sk4Am4+qhJn
UIxfIxryHekb/F7BIuRZVTF9Hdrd4FwXuBixIppIxi1hFK1YlgWw1XGOk4JQw1+4
V6TuQqlVh0iouP6jtdJhmg5rQlSrV9zNcjQ4J3RwXhUdVx7W+Qi4aJ+TxiiTOLgt
u1i6RcuM+7UuHfu7NPidjY4Bm+hfTR6Es4I9eH1p8NxLcEDq5+RpI9yaWgyTfq2T
oWX5XI9/qTGnpg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:12:59 2025 by rpki-client