Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
File: RlxixrzUz7iTO8tqYc97Pa0vsRg.mft (raw, json)
Hash identifier: v1W358AZels+dx9BVDgifvaUhKALJfyu9k3feJLqyH4=
Subject key identifier: FE:32:48:82:B9:4C:1A:49:25:1E:80:C2:19:D2:5F:C8:EC:C0:E5:E7
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial: 0199FB7CC34DDCF295893335CD6DE411DAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
Manifest number: 0DD7
Signing time: Sun 19 Oct 2025 08:01:21 +0000
Manifest this update: Sun 19 Oct 2025 08:01:21 +0000
Manifest next update: Mon 20 Oct 2025 08:01:21 +0000
Files and hashes: 1: RlxixrzUz7iTO8tqYc97Pa0vsRg.crl (hash: sYg26ZMVQelJj4s5/YKNb57LFenb51PFsy3tID5uGIY=)
2: egGTR94gsD7sQAhG3KJ4vP9O6xI.roa (hash: U5VvDZubZFCpTXi93NWnw4hGkgnoWx3BFWnLjsNRwko=)
3: iZoqGkHfTscgkTRCL_nQYe_AAg4.roa (hash: gZNhRS+asEm9YEfETKtD9xHhALpBNhQLktZUScrlo6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c3:4d:dc:f2:95:89:33:35:cd:6d:e4:11:da:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Validity
Not Before: Oct 19 08:01:21 2025 GMT
Not After : Oct 20 08:01:21 2025 GMT
Subject: CN=fe324882b94c1a49251e80c219d25fc8ecc0e5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9f:82:28:42:74:52:a5:95:f4:56:1d:13:62:
8a:27:20:11:12:d4:2a:8c:fa:dd:38:04:b7:52:32:
c3:35:f9:8d:3a:65:92:25:c3:13:65:ec:45:e4:33:
ee:10:d5:06:83:c1:2e:86:53:c7:26:f5:bc:bb:33:
ae:bc:aa:5f:ab:f4:b3:db:f6:04:eb:2b:eb:c9:35:
5e:10:ef:74:57:e9:76:37:01:7f:81:9d:26:b9:29:
35:f8:07:eb:f7:9c:d7:3f:27:29:1e:bc:c8:e1:3b:
6d:36:40:fe:6e:9b:60:b9:3a:35:8c:1d:f8:59:c5:
0f:fb:45:aa:b8:e5:26:66:81:45:18:83:1d:7b:fe:
ad:8a:53:89:43:d1:60:74:5f:17:61:08:5f:39:38:
41:ab:17:3e:5a:4e:d4:75:b9:ad:db:1a:ae:9a:44:
d2:92:3c:97:d5:2f:ed:8e:36:1b:c6:d2:67:c8:b5:
db:65:6a:3c:c9:ce:09:35:68:ef:c5:ed:48:06:39:
25:49:50:5f:88:06:1a:58:f9:a4:5a:48:e4:3f:93:
14:0d:70:a4:30:9c:81:e0:81:72:df:77:99:35:d7:
a0:08:bf:12:5d:43:8a:84:0f:f8:34:44:88:07:42:
64:83:67:9e:44:77:e0:b8:91:f6:f8:a3:a4:a2:28:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:32:48:82:B9:4C:1A:49:25:1E:80:C2:19:D2:5F:C8:EC:C0:E5:E7
X509v3 Authority Key Identifier:
keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:31:37:d7:ee:4a:91:eb:ed:6d:f0:b3:0b:f5:a2:0c:55:f3:
6b:5d:06:9f:1f:31:1e:05:5e:b8:78:12:46:78:6d:97:14:e3:
29:71:7e:d1:f7:8b:e5:5c:b8:f1:12:3f:36:22:f0:ad:ac:b7:
8a:7c:c0:b1:73:39:fa:c6:42:7d:24:43:2e:f7:03:82:ca:a8:
fe:b0:ea:92:2a:26:e5:e6:66:4a:5d:9b:3c:9c:8a:b6:f9:5f:
d4:1f:d8:86:84:e5:5e:ca:63:02:02:66:d5:0a:f7:16:44:c8:
ab:04:9f:39:26:8f:bb:e1:05:c3:d0:25:43:bd:72:94:2e:8c:
28:10:dc:4c:69:bd:89:63:e4:52:fe:db:21:d5:60:ad:d4:f3:
07:64:bf:7b:9f:bf:0c:57:fc:7c:21:9d:26:35:4c:c4:19:98:
43:92:27:3a:ee:7f:70:91:7f:10:dc:82:d0:77:fe:7d:54:a8:
3e:7b:e9:24:3a:f3:14:ed:c2:e7:8f:b6:87:c2:83:e8:43:98:
87:92:ad:9b:42:0b:e3:84:60:45:84:20:da:2b:5d:a5:a2:72:
f3:4d:0f:d9:2c:38:03:21:6f:f2:22:cc:e2:8f:1a:30:66:0e:
74:e7:e6:d0:6d:51:23:5d:c7:e3:77:51:40:45:42:1b:f3:e4:
b0:4c:86:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fMNN3PKViTM1zW3kEdrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWM2MmM2YmNkNGNmYjg5MzNiY2I2YTYxY2Y3YjNkYWQy
ZmIxMTgwHhcNMjUxMDE5MDgwMTIxWhcNMjUxMDIwMDgwMTIxWjAzMTEwLwYDVQQD
EyhmZTMyNDg4MmI5NGMxYTQ5MjUxZTgwYzIxOWQyNWZjOGVjYzBlNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5+CKEJ0UqWV9FYdE2KKJyAREtQq
jPrdOAS3UjLDNfmNOmWSJcMTZexF5DPuENUGg8EuhlPHJvW8uzOuvKpfq/Sz2/YE
6yvryTVeEO90V+l2NwF/gZ0muSk1+Afr95zXPycpHrzI4TttNkD+bptguTo1jB34
WcUP+0WquOUmZoFFGIMde/6tilOJQ9FgdF8XYQhfOThBqxc+Wk7Udbmt2xqumkTS
kjyX1S/tjjYbxtJnyLXbZWo8yc4JNWjvxe1IBjklSVBfiAYaWPmkWkjkP5MUDXCk
MJyB4IFy33eZNdegCL8SXUOKhA/4NESIB0Jkg2eeRHfguJH2+KOkoihwSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4ySIK5TBpJJR6AwhnSX8jswOXnMB8GA1UdIwQY
MBaAFEZcYsa81M+4kzvLamHPez2tL7EYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80OWEyMjEtNjdmNS00ZWRkLWIwMGQt
NGQyYzRjNWFkMTRlLzEvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80OWEyMjEtNjdmNS00ZWRkLWIwMGQtNGQyYzRjNWFkMTRl
LzEvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDE31+5K
kevtbfCzC/WiDFXza10Gnx8xHgVeuHgSRnhtlxTjKXF+0feL5Vy48RI/NiLwray3
inzAsXM5+sZCfSRDLvcDgsqo/rDqkiom5eZmSl2bPJyKtvlf1B/YhoTlXspjAgJm
1Qr3FkTIqwSfOSaPu+EFw9AlQ71ylC6MKBDcTGm9iWPkUv7bIdVgrdTzB2S/e5+/
DFf8fCGdJjVMxBmYQ5InOu5/cJF/ENyC0Hf+fVSoPnvpJDrzFO3C54+2h8KD6EOY
h5Ktm0IL44RgRYQg2itdpaJy800P2Sw4AyFv8iLM4o8aMGYOdOfm0G1RI13H43dR
QEVCG/PksEyGVg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:54 2025 by rpki-client