Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
File: RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft (raw, json)
Hash identifier: KlJmsaqbSb/f6wVQODYxgZsZDM5YJsqAl4NV5cJ7Q7I=
Subject key identifier: B8:2F:AC:F1:15:D6:64:AE:1B:5C:1C:63:D6:92:E8:2B:D0:34:64:B3
Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Certificate serial: 019892C7E3113960A804C2654C4677AE9373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
Manifest number: 0D39
Signing time: Sun 10 Aug 2025 07:00:29 +0000
Manifest this update: Sun 10 Aug 2025 07:00:29 +0000
Manifest next update: Mon 11 Aug 2025 07:00:29 +0000
Files and hashes: 1: C21UyjKwyHlotXzUs2wrT9-7ml4.roa (hash: ZR2xWVZUFQuKM7jT26V7/BzP532dWCavsfpkwUm/YAU=)
2: RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl (hash: 9aXGHSR5pPmQsTJ9DlcSJT07MyFxykd/OLCb+hvAWBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c7:e3:11:39:60:a8:04:c2:65:4c:46:77:ae:93:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Validity
Not Before: Aug 10 07:00:29 2025 GMT
Not After : Aug 11 07:00:29 2025 GMT
Subject: CN=b82facf115d664ae1b5c1c63d692e82bd03464b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:52:67:00:cd:b4:a1:56:48:0d:d1:53:e8:82:
1a:d2:ba:7e:8d:ef:fc:06:48:b4:c5:78:5c:8d:2d:
9e:74:3c:eb:49:c0:2a:d2:b4:74:0e:dc:14:b2:93:
f0:bb:e1:27:85:d1:62:54:61:6c:a9:e7:b2:66:a0:
8f:33:70:2c:a1:65:8d:ed:a5:a7:1c:c8:58:27:8f:
12:77:5f:62:42:fc:f8:55:33:41:80:c3:3c:ff:9a:
a4:c8:5c:34:c6:a0:88:b7:a0:6e:6b:5e:9e:e5:4e:
b1:6e:36:9c:3d:79:92:74:24:2f:b2:6a:b6:d1:fb:
73:31:08:81:30:fc:7f:d5:42:a7:8e:ee:b9:c0:08:
41:30:da:4f:c3:1a:28:f5:06:65:e8:51:d3:4a:0a:
7d:ab:0f:90:44:e3:bc:df:ad:c4:88:6d:6e:d2:63:
ca:52:d8:4f:86:96:cb:3e:44:7b:de:b0:dd:ed:0d:
35:0e:c7:a7:49:b8:ad:9f:92:45:88:11:cb:ca:c0:
da:a9:bd:4d:5a:12:30:f6:73:98:37:a6:99:2b:56:
7d:eb:b5:32:c9:55:42:58:cd:ae:1f:9d:a9:f2:e5:
07:4b:d9:01:ac:1a:b1:0e:76:ae:e1:0a:d6:42:2f:
c1:cb:3d:d3:0d:a9:19:b6:0e:8c:1a:7b:80:1b:e0:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2F:AC:F1:15:D6:64:AE:1B:5C:1C:63:D6:92:E8:2B:D0:34:64:B3
X509v3 Authority Key Identifier:
keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0f:cb:87:a2:24:70:8a:b1:a2:c7:80:ec:e8:76:3a:a4:c3:
34:8f:d1:3e:5a:b1:53:e5:04:01:f3:ae:71:7c:60:fa:54:ab:
cf:ad:6c:b1:b5:26:56:c4:7c:a3:34:2b:a9:03:3c:66:f0:28:
77:0a:51:5c:6c:f4:0d:ae:cf:3f:71:86:34:98:00:73:73:82:
b1:07:8f:bc:c0:e7:eb:a2:d3:ff:6c:fe:61:0e:ec:29:1c:f1:
01:cb:a8:16:c5:7b:c9:99:22:d0:82:76:9f:dc:0f:08:02:36:
22:50:c3:85:e6:98:61:d1:ff:9c:76:37:71:00:a0:9e:43:87:
0c:74:c0:af:7c:d4:63:8f:25:16:9a:48:66:16:5f:e5:8b:16:
da:3e:32:36:21:c9:83:08:98:cf:fe:7c:2c:53:aa:9b:2c:06:
df:9e:d9:10:36:5f:31:84:ed:53:a1:b7:c7:fb:40:c6:12:1e:
9b:3f:a5:06:1c:16:af:00:4e:b8:a5:9a:73:f5:51:21:ae:dd:
a4:e2:fa:96:51:01:05:ec:24:e5:b9:5e:9d:44:0b:a2:70:d0:
2f:ce:a7:06:e9:cb:5d:66:f5:1e:e5:87:f8:5e:a6:d7:a7:9d:
f3:7a:00:a5:5a:0a:03:e2:e9:59:3b:43:4a:c2:f3:47:b0:47:
5c:9b:2f:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSx+MROWCoBMJlTEZ3rpNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTZhNDQzNzRmZWE1ZWM5OWYxMGZiOGQ2YzdkOGVmZTJh
MzM0OGIwHhcNMjUwODEwMDcwMDI5WhcNMjUwODExMDcwMDI5WjAzMTEwLwYDVQQD
EyhiODJmYWNmMTE1ZDY2NGFlMWI1YzFjNjNkNjkyZTgyYmQwMzQ2NGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FJnAM20oVZIDdFT6IIa0rp+je/8
Bki0xXhcjS2edDzrScAq0rR0DtwUspPwu+EnhdFiVGFsqeeyZqCPM3AsoWWN7aWn
HMhYJ48Sd19iQvz4VTNBgMM8/5qkyFw0xqCIt6Bua16e5U6xbjacPXmSdCQvsmq2
0ftzMQiBMPx/1UKnju65wAhBMNpPwxoo9QZl6FHTSgp9qw+QROO8363EiG1u0mPK
UthPhpbLPkR73rDd7Q01DsenSbitn5JFiBHLysDaqb1NWhIw9nOYN6aZK1Z967Uy
yVVCWM2uH52p8uUHS9kBrBqxDnau4QrWQi/Byz3TDakZtg6MGnuAG+Br8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgvrPEV1mSuG1wcY9aS6CvQNGSzMB8GA1UdIwQY
MBaAFEcWpEN0/qXsmfEPuNbH2O/iozSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85YTFmZmYtMDUwZS00ZGU5LThlNjQt
NWQ0MDEwOTAwZTg2LzEvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi85YTFmZmYtMDUwZS00ZGU5LThlNjQtNWQ0MDEwOTAwZTg2
LzEvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXg/Lh6Ik
cIqxoseA7Oh2OqTDNI/RPlqxU+UEAfOucXxg+lSrz61ssbUmVsR8ozQrqQM8ZvAo
dwpRXGz0Da7PP3GGNJgAc3OCsQePvMDn66LT/2z+YQ7sKRzxAcuoFsV7yZki0IJ2
n9wPCAI2IlDDheaYYdH/nHY3cQCgnkOHDHTAr3zUY48lFppIZhZf5YsW2j4yNiHJ
gwiYz/58LFOqmywG357ZEDZfMYTtU6G3x/tAxhIemz+lBhwWrwBOuKWac/VRIa7d
pOL6llEBBewk5blenUQLonDQL86nBunLXWb1HuWH+F6m16ed83oApVoKA+LpWTtD
SsLzR7BHXJsvyQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:40 2025 by rpki-client