Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
File: RkVleaUXL8oI4EOwK7ly-3UDrq8.mft (raw, json)
Hash identifier: mKv/IMncW/SgyrZkrXR5qKeCiarcNI8DnyTz7/1e9Uo=
Subject key identifier: 6E:50:9B:13:CD:2D:A6:FC:B3:77:55:14:59:39:21:C3:4D:35:AE:68
Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf
Certificate serial: 0198D54E4635A1607621866B8D9FE61343DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
Manifest number: 139E
Signing time: Sat 23 Aug 2025 05:02:13 +0000
Manifest this update: Sat 23 Aug 2025 05:02:13 +0000
Manifest next update: Sun 24 Aug 2025 05:02:13 +0000
Files and hashes: 1: 6--mKTLhcJSvHElJeuoDt_lQE_Q.roa (hash: SXpjKVkVSr9zsLSxhubs4WsDg8DBpMmGqFFwLSfPmwo=)
2: RkVleaUXL8oI4EOwK7ly-3UDrq8.crl (hash: ISKnmvtIdheFp7pWvI9gR+zmWmTZfVB42vXGinUJiis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:46:35:a1:60:76:21:86:6b:8d:9f:e6:13:43:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf
Validity
Not Before: Aug 23 05:02:13 2025 GMT
Not After : Aug 24 05:02:13 2025 GMT
Subject: CN=6e509b13cd2da6fcb3775514593921c34d35ae68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:85:8e:5f:58:1c:f8:2b:0f:6d:2b:5b:2b:
bc:2c:66:08:3f:ed:4a:02:dd:f9:df:0b:cc:85:fb:
df:90:b3:b0:02:c1:90:0b:40:f9:78:1c:1e:98:48:
12:bd:50:f6:22:0b:90:3a:d4:8a:f4:bc:b5:c1:4f:
9e:b8:6e:f8:3c:90:67:a4:d7:ba:2f:bf:9a:42:dd:
57:5f:f0:87:c4:f0:1f:3b:53:6e:b4:e9:c2:80:3f:
b0:f7:2a:36:18:83:01:fb:28:99:52:c0:7d:43:12:
a2:79:a3:02:d3:ca:28:13:5e:71:e0:38:d4:ee:03:
ce:81:84:bd:ca:10:52:4d:e3:d7:b4:d1:e1:a4:14:
e0:85:9e:30:45:96:29:af:13:f2:74:23:a8:fc:57:
72:ff:c2:67:33:da:eb:22:b8:1e:e9:f3:70:c0:a7:
05:fd:47:d3:9a:1f:99:3a:73:6f:55:90:31:a2:1b:
40:f2:93:16:09:2f:54:5f:ac:ae:49:8d:71:89:a3:
88:95:ff:8f:54:a7:4d:cd:5c:35:b9:16:34:8a:5c:
06:a9:b3:3e:77:d1:44:9a:e5:86:51:1f:a9:a1:a0:
fd:70:bb:b9:7d:31:48:8e:a1:9e:2a:74:f2:27:05:
a6:e2:d9:88:df:09:96:fa:ca:2d:51:59:d0:23:53:
d2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:50:9B:13:CD:2D:A6:FC:B3:77:55:14:59:39:21:C3:4D:35:AE:68
X509v3 Authority Key Identifier:
keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:90:bb:0a:b1:93:b5:16:cb:d0:5e:b3:29:4c:3b:51:c7:55:
2b:b3:43:ae:98:33:cd:0f:ef:0d:7b:2f:8a:ab:c2:b1:4a:90:
09:80:9b:c8:db:16:05:df:fa:1b:5f:ed:0f:c8:fb:bb:3b:37:
8e:cc:3a:34:a5:09:1e:25:68:1d:36:1e:2a:22:95:4b:7c:21:
6d:8a:ae:0c:de:e4:a1:76:cd:e9:54:f7:67:a3:0d:37:4a:f3:
5f:33:2a:b4:59:6e:e4:b8:bb:bc:63:04:96:1d:50:37:49:80:
1a:ba:e1:f5:f8:73:26:bc:ac:a9:9c:27:b2:b7:14:57:12:7c:
71:20:c7:be:6b:61:d7:e9:24:17:66:94:bb:99:6e:05:c0:4b:
f1:75:62:b9:64:0c:65:54:bf:28:1b:4b:b6:0f:c9:86:86:a2:
10:79:11:e3:6b:94:65:f8:41:e3:d7:e4:8d:fe:dd:77:2a:97:
19:3d:6d:ac:90:6f:de:bd:c4:fb:f5:73:45:0f:f7:d5:1a:2b:
18:41:d6:18:a8:77:66:5a:61:f3:b8:db:09:4c:14:98:63:62:
53:7b:8b:81:9e:76:e5:b8:8d:b3:11:08:4a:ea:d0:9b:fe:cb:
2a:32:79:ab:32:cd:b4:93:c5:27:57:a5:12:b4:b3:1f:3e:2b:
1c:cf:6e:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTkY1oWB2IYZrjZ/mE0PaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NDU2NTc5YTUxNzJmY2EwOGUwNDNiMDJiYjk3MmZiNzUw
M2FlYWYwHhcNMjUwODIzMDUwMjEzWhcNMjUwODI0MDUwMjEzWjAzMTEwLwYDVQQD
Eyg2ZTUwOWIxM2NkMmRhNmZjYjM3NzU1MTQ1OTM5MjFjMzRkMzVhZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yWFjl9YHPgrD20rWyu8LGYIP+1K
At353wvMhfvfkLOwAsGQC0D5eBwemEgSvVD2IguQOtSK9Ly1wU+euG74PJBnpNe6
L7+aQt1XX/CHxPAfO1NutOnCgD+w9yo2GIMB+yiZUsB9QxKieaMC08ooE15x4DjU
7gPOgYS9yhBSTePXtNHhpBTghZ4wRZYprxPydCOo/Fdy/8JnM9rrIrge6fNwwKcF
/UfTmh+ZOnNvVZAxohtA8pMWCS9UX6yuSY1xiaOIlf+PVKdNzVw1uRY0ilwGqbM+
d9FEmuWGUR+poaD9cLu5fTFIjqGeKnTyJwWm4tmI3wmW+sotUVnQI1PSzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5QmxPNLab8s3dVFFk5IcNNNa5oMB8GA1UdIwQY
MBaAFEZFZXmlFy/KCOBDsCu5cvt1A66vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lYzllMjYtMjBmMi00ZTIzLWEwOGYt
YTM0Yzg1NWI1YWFiLzEvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lYzllMjYtMjBmMi00ZTIzLWEwOGYtYTM0Yzg1NWI1YWFi
LzEvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpC7CrGT
tRbL0F6zKUw7UcdVK7NDrpgzzQ/vDXsviqvCsUqQCYCbyNsWBd/6G1/tD8j7uzs3
jsw6NKUJHiVoHTYeKiKVS3whbYquDN7koXbN6VT3Z6MNN0rzXzMqtFlu5Li7vGME
lh1QN0mAGrrh9fhzJrysqZwnsrcUVxJ8cSDHvmth1+kkF2aUu5luBcBL8XViuWQM
ZVS/KBtLtg/JhoaiEHkR42uUZfhB49fkjf7ddyqXGT1trJBv3r3E+/VzRQ/31Ror
GEHWGKh3Zlph87jbCUwUmGNiU3uLgZ525biNsxEISurQm/7LKjJ5qzLNtJPFJ1el
ErSzHz4rHM9uRg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:01 2025 by rpki-client