Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
File: MFxE6MlhoUUNCqshLw3scX0d77Y.mft (raw, json)
Hash identifier: NAwXkD2jgoHC+7lMno5ez6Ia7VZl1exMwH7ImfaZDN0=
Subject key identifier: 6C:F9:08:0D:6C:E1:98:D5:3F:49:4C:C6:29:1B:40:E5:CC:5A:AC:70
Authority key identifier: 30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6
Certificate issuer: /CN=305c44e8c961a1450d0aab212f0dec717d1defb6
Certificate serial: 0198D65FA85D3923ED0F96C948197552583F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:49 +0000
Manifest this update: Sat 23 Aug 2025 10:00:49 +0000
Manifest next update: Sun 24 Aug 2025 10:00:49 +0000
Files and hashes: 1: MFxE6MlhoUUNCqshLw3scX0d77Y.crl (hash: JCVP8Lttsx6hCf0gTFvdHRa+/DW9qQsd/IcJtoF+byc=)
2: mJgdj-dzJHYIwfc18P0iKUu6K8Q.roa (hash: BwFiGax6tDOHoiiFhGtxEO6XUIlUJlP+Zm+e5NhOWpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a8:5d:39:23:ed:0f:96:c9:48:19:75:52:58:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305c44e8c961a1450d0aab212f0dec717d1defb6
Validity
Not Before: Aug 23 10:00:49 2025 GMT
Not After : Aug 24 10:00:49 2025 GMT
Subject: CN=6cf9080d6ce198d53f494cc6291b40e5cc5aac70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:11:8d:c9:d9:74:86:42:63:79:e4:65:03:
53:54:fb:ca:3e:d6:2c:da:95:72:fc:18:37:91:e7:
d9:dc:d1:89:0f:d0:52:3b:a0:83:ca:96:8a:c6:ec:
f9:24:17:f9:48:80:82:e9:77:5e:26:11:b1:eb:4f:
fc:bc:31:3b:16:3a:1b:3d:42:a1:1d:02:42:18:02:
bd:26:97:76:bd:fb:96:9c:35:30:39:3e:59:33:9c:
84:0a:0c:0b:21:06:c2:36:5c:78:c2:72:89:d0:b9:
eb:dd:eb:aa:51:49:5f:d9:0c:c5:d0:03:df:2b:20:
57:be:95:25:c6:9c:b0:d8:0a:60:37:96:01:70:06:
a0:86:cd:4d:c1:3d:94:5b:5e:67:33:03:86:6b:b6:
2f:d2:70:80:cb:8b:93:5c:48:09:fd:9e:06:c9:26:
01:69:2f:5e:9a:35:42:05:96:56:e9:c3:7c:fe:35:
a2:64:8b:58:72:0b:d0:8b:eb:34:51:88:94:18:0f:
6e:c4:31:11:ea:e3:50:21:5d:89:83:09:d8:62:36:
be:bc:2f:aa:58:8d:f0:33:7a:13:a2:e1:5b:b2:ff:
29:bd:e9:c9:f6:59:69:89:a5:67:29:17:b2:05:cb:
6d:6b:53:97:a0:a0:07:52:82:0c:a3:eb:ba:94:32:
86:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F9:08:0D:6C:E1:98:D5:3F:49:4C:C6:29:1B:40:E5:CC:5A:AC:70
X509v3 Authority Key Identifier:
keyid:30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b9:a3:5b:cd:69:5b:40:c2:79:fa:ad:d9:4b:57:5c:b2:d0:
a5:a9:b0:ed:fd:4f:27:41:a5:59:36:db:85:09:ec:62:fc:e1:
94:94:af:5d:a9:51:86:50:33:9f:4a:58:04:c1:6a:33:bb:0a:
f6:a5:e2:ab:9b:f5:27:da:7c:2a:fb:4c:4f:58:f5:14:cf:01:
fc:d4:f1:e5:df:2f:ca:e8:2c:45:fb:1f:29:02:bd:84:d5:a9:
e9:cc:eb:b8:70:91:a5:4d:fb:5f:4b:74:30:b8:4e:d8:20:3d:
e9:31:8f:c2:22:fb:7a:df:ec:32:9c:dd:99:45:15:1c:1f:e6:
64:54:83:0e:55:c7:45:35:73:bc:90:ee:25:da:e6:54:f6:cb:
a2:2d:82:a6:86:f6:0b:32:24:ab:50:1e:55:37:6b:13:f0:cd:
42:85:6d:b4:95:50:7f:6c:e7:d2:59:3f:0b:22:3d:6f:34:67:
86:81:cc:62:5e:90:f7:e8:7e:63:53:9c:4d:0c:84:be:54:b9:
a0:f0:4f:a0:dc:2a:b3:3c:94:fb:d1:b5:20:5b:5c:3a:d1:05:
17:61:de:e8:98:a3:87:fb:b8:96:5e:a9:f0:f3:00:50:91:82:
1a:c9:12:c5:fe:af:93:9d:31:f2:66:6f:30:c7:a4:c8:89:e8:
c4:a4:44:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX6hdOSPtD5bJSBl1Ulg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNWM0NGU4Yzk2MWExNDUwZDBhYWIyMTJmMGRlYzcxN2Qx
ZGVmYjYwHhcNMjUwODIzMTAwMDQ5WhcNMjUwODI0MTAwMDQ5WjAzMTEwLwYDVQQD
Eyg2Y2Y5MDgwZDZjZTE5OGQ1M2Y0OTRjYzYyOTFiNDBlNWNjNWFhYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1URjcnZdIZCY3nkZQNTVPvKPtYs
2pVy/Bg3kefZ3NGJD9BSO6CDypaKxuz5JBf5SICC6XdeJhGx60/8vDE7FjobPUKh
HQJCGAK9Jpd2vfuWnDUwOT5ZM5yECgwLIQbCNlx4wnKJ0Lnr3euqUUlf2QzF0APf
KyBXvpUlxpyw2ApgN5YBcAaghs1NwT2UW15nMwOGa7Yv0nCAy4uTXEgJ/Z4GySYB
aS9emjVCBZZW6cN8/jWiZItYcgvQi+s0UYiUGA9uxDER6uNQIV2JgwnYYja+vC+q
WI3wM3oTouFbsv8pvenJ9llpiaVnKReyBctta1OXoKAHUoIMo+u6lDKG0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGz5CA1s4ZjVP0lMxikbQOXMWqxwMB8GA1UdIwQY
MBaAFDBcROjJYaFFDQqrIS8N7HF9He+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUZ4RTZNbGhvVVVOQ3FzaEx3M3NjWDBkNzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yODIwZDEtZmQyMC00ODg5LTgzNGYt
ZDUyN2NlMGQ5OTMwLzEvTUZ4RTZNbGhvVVVOQ3FzaEx3M3NjWDBkNzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yODIwZDEtZmQyMC00ODg5LTgzNGYtZDUyN2NlMGQ5OTMw
LzEvTUZ4RTZNbGhvVVVOQ3FzaEx3M3NjWDBkNzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7mjW81p
W0DCefqt2UtXXLLQpamw7f1PJ0GlWTbbhQnsYvzhlJSvXalRhlAzn0pYBMFqM7sK
9qXiq5v1J9p8KvtMT1j1FM8B/NTx5d8vyugsRfsfKQK9hNWp6czruHCRpU37X0t0
MLhO2CA96TGPwiL7et/sMpzdmUUVHB/mZFSDDlXHRTVzvJDuJdrmVPbLoi2Cpob2
CzIkq1AeVTdrE/DNQoVttJVQf2zn0lk/CyI9bzRnhoHMYl6Q9+h+Y1OcTQyEvlS5
oPBPoNwqszyU+9G1IFtcOtEFF2He6Jijh/u4ll6p8PMAUJGCGskSxf6vk50x8mZv
MMekyInoxKREGg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:07 2025 by rpki-client