Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json)
Hash identifier: BXT9ueZo/p8Z3ejKxDuZ8MFaVq9s81sfWBQlLljhzgA=
Subject key identifier: 72:DF:49:69:C5:C8:B1:BA:05:A5:EB:0F:B4:2A:C9:A8:34:9E:17:7F
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 01989F3AAEE769B034AB3C2DF2F0A534ADB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
Manifest number: 12C1
Signing time: Tue 12 Aug 2025 17:01:19 +0000
Manifest this update: Tue 12 Aug 2025 17:01:19 +0000
Manifest next update: Wed 13 Aug 2025 17:01:19 +0000
Files and hashes: 1: JtxbWq9ormth5LcKwN5vG4Q3apo.roa (hash: lQXeYw4zv4cIzlRUFSI2nS9Q4llqbkuImnCVCQNKPmM=)
2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: 17QZwqqDL69qCiGsnL8snz3I56Etv4X5S/PZQIWTOwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:ae:e7:69:b0:34:ab:3c:2d:f2:f0:a5:34:ad:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: Aug 12 17:01:19 2025 GMT
Not After : Aug 13 17:01:19 2025 GMT
Subject: CN=72df4969c5c8b1ba05a5eb0fb42ac9a8349e177f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:00:d0:f8:11:ca:50:5a:4e:85:90:6a:ab:43:
64:27:fc:0a:2b:28:60:b0:34:26:40:7a:39:27:94:
c3:e8:60:cc:7b:74:fc:7c:66:c5:27:3a:7b:f6:8d:
b5:a0:4e:dd:d3:1c:ee:58:65:6a:8c:a3:7f:ba:73:
9f:12:72:38:ff:6e:e8:27:30:d0:dc:f2:ac:62:e9:
ad:91:ef:29:60:1c:a6:16:1c:ff:eb:df:1c:cf:a7:
37:c2:3f:61:61:22:4e:90:7a:d8:e9:d9:43:f8:1a:
d8:58:46:f5:ec:b4:f2:a5:f1:4d:20:d1:65:cf:fb:
10:ee:eb:2b:2b:48:d4:22:a2:80:1e:0b:5a:43:19:
13:fc:9d:95:7c:13:c7:2d:9e:4b:5f:77:f2:63:82:
25:52:57:f1:cb:30:2d:9c:8d:5e:0a:94:6c:d0:2b:
64:f2:1f:24:ec:c9:69:e2:00:29:65:43:f4:96:80:
63:b4:67:9f:52:e3:a8:8e:c6:c3:cd:0b:73:7e:6a:
18:5c:e0:94:cb:b7:a3:bf:cc:f1:31:27:b2:99:dc:
9e:80:30:e8:cd:1e:4f:22:78:08:d6:02:da:39:ee:
ac:a3:64:28:a4:44:5b:43:5d:28:cf:6c:52:ce:cb:
02:5f:32:0e:41:1d:72:06:b2:41:e7:13:26:7c:e2:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DF:49:69:C5:C8:B1:BA:05:A5:EB:0F:B4:2A:C9:A8:34:9E:17:7F
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:af:42:ee:dc:96:18:2c:76:ec:87:97:f4:c9:71:60:e1:27:
c7:c8:cf:04:fd:4d:8a:66:b4:3a:2b:35:e6:ac:a9:1b:15:51:
ca:d9:b8:6d:3f:87:c2:80:1b:5d:65:ae:c3:73:12:91:ba:46:
79:e1:69:71:26:64:7b:d1:fa:76:c0:75:54:bc:97:20:fd:75:
c1:9a:a4:00:45:e5:c7:58:55:96:c9:b0:ad:3d:ee:01:e4:fc:
53:ed:85:f6:17:b1:4c:05:c4:18:a4:e5:bc:87:1d:34:32:00:
35:59:01:76:5a:00:e7:0d:3b:5a:53:af:e6:15:66:7e:33:5d:
07:4f:52:a1:cd:04:56:d2:db:36:c8:2c:42:70:b6:d1:c6:10:
66:c3:a0:93:c9:06:89:a4:6f:3c:85:fd:f0:86:af:c4:ee:19:
fd:b9:26:01:6a:f6:4f:09:a3:76:a3:51:c3:e1:d4:9b:cb:34:
8d:f4:d8:d2:f8:c9:20:38:3e:ba:8d:75:ff:92:92:3a:c1:8c:
91:55:7d:c1:22:5c:36:ca:c7:28:72:3d:a1:3c:3b:f0:13:63:
85:4d:49:86:b3:14:5e:be:98:2c:4a:6a:6a:4c:c0:06:50:52:
a4:5d:da:30:4a:51:44:43:c3:3a:67:44:8c:3e:c6:25:26:69:
1a:5b:9d:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifOq7nabA0qzwt8vClNK2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MGM0YmIzOGUzNWNkNzAzMjBlYjc5MTUyMGM2Y2FkMzRh
NGIyNzEwHhcNMjUwODEyMTcwMTE5WhcNMjUwODEzMTcwMTE5WjAzMTEwLwYDVQQD
Eyg3MmRmNDk2OWM1YzhiMWJhMDVhNWViMGZiNDJhYzlhODM0OWUxNzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgDQ+BHKUFpOhZBqq0NkJ/wKKyhg
sDQmQHo5J5TD6GDMe3T8fGbFJzp79o21oE7d0xzuWGVqjKN/unOfEnI4/27oJzDQ
3PKsYumtke8pYBymFhz/698cz6c3wj9hYSJOkHrY6dlD+BrYWEb17LTypfFNINFl
z/sQ7usrK0jUIqKAHgtaQxkT/J2VfBPHLZ5LX3fyY4IlUlfxyzAtnI1eCpRs0Ctk
8h8k7Mlp4gApZUP0loBjtGefUuOojsbDzQtzfmoYXOCUy7ejv8zxMSeymdyegDDo
zR5PIngI1gLaOe6so2QopERbQ10oz2xSzssCXzIOQR1yBrJB5xMmfOLl3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLfSWnFyLG6BaXrD7Qqyag0nhd/MB8GA1UdIwQY
MBaAFJkMS7OONc1wMg63kVIMbK00pLJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQt
OTU5M2UzYTQzNzI1LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80NGM0MmMtMWU2OC00YWFiLTgzOWQtOTU5M2UzYTQzNzI1
LzEvbVF4THM0NDF6WEF5RHJlUlVneHNyVFNrc25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASa9C7tyW
GCx27IeX9MlxYOEnx8jPBP1Nima0Ois15qypGxVRytm4bT+HwoAbXWWuw3MSkbpG
eeFpcSZke9H6dsB1VLyXIP11wZqkAEXlx1hVlsmwrT3uAeT8U+2F9hexTAXEGKTl
vIcdNDIANVkBdloA5w07WlOv5hVmfjNdB09Soc0EVtLbNsgsQnC20cYQZsOgk8kG
iaRvPIX98IavxO4Z/bkmAWr2TwmjdqNRw+HUm8s0jfTY0vjJIDg+uo11/5KSOsGM
kVV9wSJcNsrHKHI9oTw78BNjhU1JhrMUXr6YLEpqakzABlBSpF3aMEpRREPDOmdE
jD7GJSZpGludgw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:40 2025 by rpki-client