Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier: 6w3NomPIDWsrOIFtlWWomvUjNLEFgOU6PO4xd3DPF7s=
Subject key identifier: 90:D9:59:32:61:52:60:76:6B:15:8A:DD:C4:6B:D3:13:D9:32:54:DF
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 019872CF8994D4AE921111B4B9D88C60C7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 02:01:00 +0000
Manifest this update: Mon 04 Aug 2025 02:01:00 +0000
Manifest next update: Tue 05 Aug 2025 02:01:00 +0000
Files and hashes: 1: ghEtezlgRxtM8_A6BWhHBoi7MAA.roa (hash: XbPqTVhQ0C1rkf6WQ+W7x28ipcXojyuCGKdg2k0Xwvo=)
2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: 7+ToTQ8N3EyBCeFsGoAhy0OjY1xOQioYedzUV2XJrGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:89:94:d4:ae:92:11:11:b4:b9:d8:8c:60:c7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Aug 4 02:01:00 2025 GMT
Not After : Aug 5 02:01:00 2025 GMT
Subject: CN=90d95932615260766b158addc46bd313d93254df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:7d:a3:a8:7a:97:ba:1c:de:73:0a:88:f0:
58:70:fa:c9:ec:b3:eb:53:61:d8:6f:e1:66:b1:0f:
0f:3a:56:d7:b2:6d:17:b8:db:88:c6:7f:12:5c:68:
e5:1b:d4:7b:9e:9f:79:e9:2b:5f:e4:86:b3:31:5e:
d9:13:12:77:87:35:ed:09:95:09:f0:63:3c:0e:28:
4f:db:44:32:14:5f:3c:82:bc:aa:e9:6c:88:78:93:
49:30:07:74:8c:03:fe:85:d5:ee:61:32:d0:9a:66:
38:a6:43:e1:2d:93:87:c1:d0:17:31:5b:9e:52:89:
a2:85:e4:e8:b3:1d:eb:f7:ca:26:10:86:b4:74:13:
74:0d:d2:86:47:05:35:fe:cf:af:05:2c:7f:f0:ca:
d5:fc:69:c8:47:94:a8:1c:fd:bd:6b:db:7b:09:79:
b9:2e:49:0b:11:9e:32:48:d9:55:51:53:b1:c8:de:
23:9e:44:ba:93:d6:30:0e:f4:65:7a:af:f4:14:4c:
61:b8:3b:d8:dc:fa:39:ea:fb:80:cd:56:27:e2:30:
b0:0a:b6:60:b4:d3:44:ef:d4:0c:a8:85:ef:6a:93:
15:bd:d8:8f:4b:44:ee:64:78:55:6a:cf:e1:5a:ef:
40:f3:c7:86:c2:43:dd:14:0d:7c:75:96:e1:f8:a4:
af:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D9:59:32:61:52:60:76:6B:15:8A:DD:C4:6B:D3:13:D9:32:54:DF
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ac:62:6c:8b:32:8d:36:e8:99:44:51:b9:74:0b:4f:6d:20:
9c:53:9d:76:da:77:b0:ef:e5:c3:bf:15:23:77:2b:bb:b7:9a:
fb:c1:4c:a5:74:f0:39:86:59:fd:36:ce:9f:50:9a:26:6b:a8:
6b:1d:74:4a:a7:6c:7a:23:77:15:0c:69:44:26:76:f3:6f:12:
08:9c:79:a4:e4:66:92:24:0f:7e:b0:ba:66:a9:5c:4d:7a:0c:
71:15:ba:d0:06:9b:17:02:3b:81:a3:90:2b:31:5f:80:a0:e9:
4d:c8:de:39:7c:91:cc:41:5d:b6:32:f2:35:b4:4f:dd:ac:5c:
03:7f:d8:16:08:0f:f7:62:f1:98:29:af:a5:e3:c8:de:db:9a:
28:a5:d7:fd:e0:01:b5:7d:9c:b1:f1:20:ab:44:52:f9:55:a5:
d4:39:97:55:10:27:b6:5e:b9:ca:3b:fc:57:bb:b1:5c:93:59:
58:80:71:ed:e3:cf:b5:cd:7c:ed:f8:18:5c:a7:67:f1:92:2b:
e6:27:85:49:71:c3:0d:24:dd:b5:0f:ff:d4:6c:74:d6:dc:e3:
5f:43:7f:67:85:a6:3a:cf:ed:b8:fe:40:73:9b:ce:9e:fa:19:
fe:05:53:13:7d:c0:5a:98:f3:32:06:14:4e:5e:24:97:95:16:
03:22:6f:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz4mU1K6SERG0udiMYMfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YzAzMjkzNWU5NjMzZGY4YjE5OTI1ZGYwYmQyNWI4MWM2
ODYzYjcwHhcNMjUwODA0MDIwMTAwWhcNMjUwODA1MDIwMTAwWjAzMTEwLwYDVQQD
Eyg5MGQ5NTkzMjYxNTI2MDc2NmIxNThhZGRjNDZiZDMxM2Q5MzI1NGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstR9o6h6l7oc3nMKiPBYcPrJ7LPr
U2HYb+FmsQ8POlbXsm0XuNuIxn8SXGjlG9R7np956Stf5IazMV7ZExJ3hzXtCZUJ
8GM8DihP20QyFF88gryq6WyIeJNJMAd0jAP+hdXuYTLQmmY4pkPhLZOHwdAXMVue
UomiheTosx3r98omEIa0dBN0DdKGRwU1/s+vBSx/8MrV/GnIR5SoHP29a9t7CXm5
LkkLEZ4ySNlVUVOxyN4jnkS6k9YwDvRleq/0FExhuDvY3Po56vuAzVYn4jCwCrZg
tNNE79QMqIXvapMVvdiPS0TuZHhVas/hWu9A88eGwkPdFA18dZbh+KSvRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDZWTJhUmB2axWK3cRr0xPZMlTfMB8GA1UdIwQY
MBaAFMTAMpNeljPfixmSXfC9JbgcaGO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjIt
OWVhOWNhMTc0MmRiLzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjItOWVhOWNhMTc0MmRi
LzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaxibIsy
jTbomURRuXQLT20gnFOddtp3sO/lw78VI3cru7ea+8FMpXTwOYZZ/TbOn1CaJmuo
ax10SqdseiN3FQxpRCZ2828SCJx5pORmkiQPfrC6ZqlcTXoMcRW60AabFwI7gaOQ
KzFfgKDpTcjeOXyRzEFdtjLyNbRP3axcA3/YFggP92LxmCmvpePI3tuaKKXX/eAB
tX2csfEgq0RS+VWl1DmXVRAntl65yjv8V7uxXJNZWIBx7ePPtc187fgYXKdn8ZIr
5ieFSXHDDSTdtQ//1Gx01tzjX0N/Z4WmOs/tuP5Ac5vOnvoZ/gVTE33AWpjzMgYU
Tl4kl5UWAyJvfw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:19 2025 by rpki-client