Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json)
Hash identifier: 3fmkwHbJUUPhV08F8uziig4gQ6nqVHYfC+G13DegM3E=
Subject key identifier: D4:54:99:5E:E4:E2:12:37:DB:66:F4:A4:20:DD:16:6D:6E:44:CE:1B
Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Certificate serial: 019874F5382E7254BE7F6D00E51D5BB2B868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
Manifest number: 120E
Signing time: Mon 04 Aug 2025 12:01:24 +0000
Manifest this update: Mon 04 Aug 2025 12:01:24 +0000
Manifest next update: Tue 05 Aug 2025 12:01:24 +0000
Files and hashes: 1: 0_n0dJGdGPC54n6Su3XhjRpEGaE.roa (hash: ecsdCD7tgZtKRsUvKu336lhnysfVM1v2m6QNHH0P3gg=)
2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: jJxHkcxrSZaVYmlPVaqsElYWCF/Oyb0IAyLulpvkRLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:38:2e:72:54:be:7f:6d:00:e5:1d:5b:b2:b8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Validity
Not Before: Aug 4 12:01:24 2025 GMT
Not After : Aug 5 12:01:24 2025 GMT
Subject: CN=d454995ee4e21237db66f4a420dd166d6e44ce1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:de:cd:bb:80:de:ea:c0:10:6c:c4:34:8a:
4a:e6:81:82:13:78:9c:ee:0b:cc:f0:5d:07:05:e0:
e7:37:79:b4:b3:3a:0e:52:1d:14:4b:34:ca:ce:a3:
5e:03:5b:1c:6d:94:9b:f0:97:bd:c4:40:1e:75:a0:
d8:b5:95:58:1d:84:ba:e2:af:35:f1:7b:42:cb:e2:
0a:f9:0f:3e:38:63:ff:ae:5d:f9:6e:9f:8d:37:04:
9b:71:0c:54:9c:d6:d1:54:b9:d1:85:63:31:5b:e4:
24:a3:8a:72:ea:4d:ec:96:49:6c:8b:df:09:e2:7c:
38:5f:6a:29:0d:d2:90:6a:b8:f4:54:82:d9:8d:27:
67:0e:cd:c5:c8:c1:d9:94:c3:9c:b8:fa:de:61:9a:
17:2a:36:9f:45:bc:df:71:81:df:e6:60:bd:4b:ed:
5d:3a:74:88:f7:63:7b:9e:53:84:3a:da:47:f3:75:
fb:aa:17:6c:32:79:cd:64:0b:61:d6:b7:94:fb:3a:
54:35:3d:db:02:db:e6:a3:b0:24:1a:c7:bf:07:33:
1e:c9:d0:04:bb:3f:39:33:92:db:18:3b:a8:e8:bb:
c5:54:a9:48:bf:1e:e1:b1:65:25:03:c4:3d:6a:fe:
d5:4a:ce:79:f7:f0:00:c6:77:12:93:53:2f:87:18:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:54:99:5E:E4:E2:12:37:DB:66:F4:A4:20:DD:16:6D:6E:44:CE:1B
X509v3 Authority Key Identifier:
keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c2:1f:3d:38:f3:53:7c:d3:e9:e9:dd:a0:33:06:cf:2c:d0:
dc:9a:1a:a0:28:ce:23:c9:61:99:5e:e3:f6:d1:da:3d:1d:eb:
30:b2:ba:c7:af:f3:2b:5c:a0:4d:e4:5d:f3:4a:66:b8:c4:04:
0d:87:8f:fa:91:2c:3d:16:df:f0:83:c9:e6:1d:e0:45:11:c8:
c4:2e:a4:25:0a:cd:7a:42:21:4e:66:8d:e4:95:7d:ce:9d:08:
85:f7:ab:b8:a0:d2:20:2a:97:e3:6d:18:90:1f:db:2b:3f:8e:
5d:e1:a6:f3:f8:ea:fe:66:01:01:eb:c8:ff:6f:92:69:5a:d0:
2e:95:8d:f1:2b:61:8d:b7:cc:69:3d:3b:0f:8d:2e:be:55:e7:
53:e7:c7:12:a4:22:84:5b:d0:d4:f0:ed:23:15:a6:99:c7:8e:
f8:70:86:62:90:04:fb:e0:ba:23:96:10:a3:ee:eb:f6:5d:3c:
db:f4:1e:03:5c:b0:a5:59:2f:ef:ae:0a:c4:10:a0:d2:40:03:
32:3f:03:d9:e8:bb:04:43:d6:d7:e2:21:d1:34:0c:ba:c2:a2:
79:14:ea:f7:bb:49:79:4d:31:76:1a:28:14:1e:18:93:6f:0e:
eb:da:41:21:2c:1b:1d:92:e6:75:87:12:f0:33:f9:83:f5:06:
fb:98:f7:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09TguclS+f20A5R1bsrhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkN2Q4ZGU4Y2EwNjFlYTE2NGU2NzFjMzRlYjMzNzdmNTcz
NmJiYzMwHhcNMjUwODA0MTIwMTI0WhcNMjUwODA1MTIwMTI0WjAzMTEwLwYDVQQD
EyhkNDU0OTk1ZWU0ZTIxMjM3ZGI2NmY0YTQyMGRkMTY2ZDZlNDRjZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08vezbuA3urAEGzENIpK5oGCE3ic
7gvM8F0HBeDnN3m0szoOUh0USzTKzqNeA1scbZSb8Je9xEAedaDYtZVYHYS64q81
8XtCy+IK+Q8+OGP/rl35bp+NNwSbcQxUnNbRVLnRhWMxW+Qko4py6k3slklsi98J
4nw4X2opDdKQarj0VILZjSdnDs3FyMHZlMOcuPreYZoXKjafRbzfcYHf5mC9S+1d
OnSI92N7nlOEOtpH83X7qhdsMnnNZAth1reU+zpUNT3bAtvmo7AkGse/BzMeydAE
uz85M5LbGDuo6LvFVKlIvx7hsWUlA8Q9av7VSs559/AAxncSk1MvhxiVowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRUmV7k4hI322b0pCDdFm1uRM4bMB8GA1UdIwQY
MBaAFK19jejKBh6hZOZxw06zN39XNrvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hMDg1MjAtN2YwNi00ZjEyLTg2NDAt
NDk3ODVmY2RkOWM0LzEvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hMDg1MjAtN2YwNi00ZjEyLTg2NDAtNDk3ODVmY2RkOWM0
LzEvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsIfPTjz
U3zT6endoDMGzyzQ3JoaoCjOI8lhmV7j9tHaPR3rMLK6x6/zK1ygTeRd80pmuMQE
DYeP+pEsPRbf8IPJ5h3gRRHIxC6kJQrNekIhTmaN5JV9zp0IhferuKDSICqX420Y
kB/bKz+OXeGm8/jq/mYBAevI/2+SaVrQLpWN8SthjbfMaT07D40uvlXnU+fHEqQi
hFvQ1PDtIxWmmceO+HCGYpAE++C6I5YQo+7r9l082/QeA1ywpVkv764KxBCg0kAD
Mj8D2ei7BEPW1+Ih0TQMusKieRTq97tJeU0xdhooFB4Yk28O69pBISwbHZLmdYcS
8DP5g/UG+5j3TA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:40 2025 by rpki-client