Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
File: RlxixrzUz7iTO8tqYc97Pa0vsRg.mft (raw, json)
Hash identifier: l/jxmB6GE3PMWRslfYXxm7WfcBcRLGpEHsEbniaITRI=
Subject key identifier: 07:6E:11:A0:7E:A3:BE:75:28:65:1A:98:64:06:55:A8:E3:DE:AF:5C
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial: 0198D5F1C575F281A47FD9BAE419CEB14283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
Manifest number: 0D3F
Signing time: Sat 23 Aug 2025 08:00:48 +0000
Manifest this update: Sat 23 Aug 2025 08:00:48 +0000
Manifest next update: Sun 24 Aug 2025 08:00:48 +0000
Files and hashes: 1: RlxixrzUz7iTO8tqYc97Pa0vsRg.crl (hash: cUxFeVvyMnoi8xdTBcWtKsGQ1xDeqMtfj1S+A+yHKPk=)
2: egGTR94gsD7sQAhG3KJ4vP9O6xI.roa (hash: U5VvDZubZFCpTXi93NWnw4hGkgnoWx3BFWnLjsNRwko=)
3: iZoqGkHfTscgkTRCL_nQYe_AAg4.roa (hash: gZNhRS+asEm9YEfETKtD9xHhALpBNhQLktZUScrlo6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c5:75:f2:81:a4:7f:d9:ba:e4:19:ce:b1:42:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Validity
Not Before: Aug 23 08:00:48 2025 GMT
Not After : Aug 24 08:00:48 2025 GMT
Subject: CN=076e11a07ea3be7528651a98640655a8e3deaf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:a8:04:11:f6:a6:2a:11:2d:bd:2a:c1:8c:
30:63:d0:12:cd:32:a6:8d:0d:98:da:7e:59:a1:ff:
ee:ef:cf:8c:de:48:ab:ed:6e:cb:e5:3d:00:5c:01:
a3:2d:a7:c6:85:2d:b7:3c:85:9c:13:bc:39:f6:d0:
13:b0:e3:3d:88:8e:4d:f0:8e:7f:ad:9e:85:24:99:
81:30:1a:c7:03:5c:1d:af:f2:b4:be:be:ee:eb:22:
d8:5c:83:3b:67:c6:80:90:d1:19:09:c9:11:c5:4c:
92:2f:59:80:1d:f6:9e:5c:7e:0b:fa:07:c3:c6:d2:
10:f6:37:05:79:ba:47:a7:75:8b:91:5d:ca:ec:e3:
1a:1b:04:90:46:f2:d0:11:d3:ca:2b:f3:75:f0:e5:
29:c4:8d:12:78:59:b5:73:27:88:8a:f1:45:bd:7a:
6b:76:09:98:49:1b:22:02:51:cb:40:7f:5c:9d:2f:
6e:19:e4:26:66:b3:a0:62:d3:2a:c2:60:dc:1f:12:
0c:53:c2:c0:ed:62:63:dd:65:90:b9:72:82:0d:ad:
28:72:ea:d0:53:53:99:49:4b:d4:e2:a1:e4:37:f1:
db:6a:16:0f:33:75:2c:32:e9:68:d3:26:f9:34:76:
26:a1:c6:dc:bf:f2:d4:b3:3b:71:01:6f:63:34:d5:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6E:11:A0:7E:A3:BE:75:28:65:1A:98:64:06:55:A8:E3:DE:AF:5C
X509v3 Authority Key Identifier:
keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8e:b0:bd:4b:fb:cd:5a:5c:cb:03:7d:68:36:24:99:74:42:
0e:aa:a6:22:cc:ea:0b:b7:64:06:43:10:14:1e:24:5c:99:9a:
f2:ec:88:0d:76:44:b7:c8:90:91:03:a1:37:01:d4:1b:4f:b4:
4f:09:0b:41:55:1b:c3:38:5e:da:41:8a:b9:bc:36:e5:5e:5b:
e4:ec:2e:09:ed:db:c2:e9:5a:04:04:7e:3c:88:a4:01:ab:67:
83:0c:5c:de:ef:4b:e6:39:a7:9f:6d:49:ea:80:98:b5:44:7b:
b8:e8:37:07:e9:94:9a:e4:dc:77:a7:8e:7a:9c:99:fc:92:d4:
1d:fa:cb:da:c4:e5:27:b4:b3:e5:30:6a:2a:83:eb:4b:17:b6:
a8:77:06:a0:8a:71:f5:dd:d2:06:64:8f:64:7e:af:18:e0:1f:
c3:3c:6d:8d:89:8a:79:25:14:e6:47:44:60:f8:a4:68:ce:55:
12:51:c4:21:3c:1f:14:76:a6:02:ac:45:a0:b8:14:38:34:26:
b6:2b:41:3c:40:5a:8b:39:76:a8:76:b4:f9:57:ac:70:67:10:
53:19:38:71:06:43:ae:de:09:d4:93:6f:48:a7:15:ff:e4:fb:
ee:e4:82:37:dc:ed:e2:07:e0:9b:18:e1:38:cf:06:78:20:ef:
d9:2f:fa:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8cV18oGkf9m65BnOsUKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWM2MmM2YmNkNGNmYjg5MzNiY2I2YTYxY2Y3YjNkYWQy
ZmIxMTgwHhcNMjUwODIzMDgwMDQ4WhcNMjUwODI0MDgwMDQ4WjAzMTEwLwYDVQQD
EygwNzZlMTFhMDdlYTNiZTc1Mjg2NTFhOTg2NDA2NTVhOGUzZGVhZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkGoBBH2pioRLb0qwYwwY9ASzTKm
jQ2Y2n5Zof/u78+M3kir7W7L5T0AXAGjLafGhS23PIWcE7w59tATsOM9iI5N8I5/
rZ6FJJmBMBrHA1wdr/K0vr7u6yLYXIM7Z8aAkNEZCckRxUySL1mAHfaeXH4L+gfD
xtIQ9jcFebpHp3WLkV3K7OMaGwSQRvLQEdPKK/N18OUpxI0SeFm1cyeIivFFvXpr
dgmYSRsiAlHLQH9cnS9uGeQmZrOgYtMqwmDcHxIMU8LA7WJj3WWQuXKCDa0ocurQ
U1OZSUvU4qHkN/HbahYPM3UsMulo0yb5NHYmocbcv/LUsztxAW9jNNX3ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAduEaB+o751KGUamGQGVajj3q9cMB8GA1UdIwQY
MBaAFEZcYsa81M+4kzvLamHPez2tL7EYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80OWEyMjEtNjdmNS00ZWRkLWIwMGQt
NGQyYzRjNWFkMTRlLzEvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80OWEyMjEtNjdmNS00ZWRkLWIwMGQtNGQyYzRjNWFkMTRl
LzEvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIo6wvUv7
zVpcywN9aDYkmXRCDqqmIszqC7dkBkMQFB4kXJma8uyIDXZEt8iQkQOhNwHUG0+0
TwkLQVUbwzhe2kGKubw25V5b5OwuCe3bwulaBAR+PIikAatngwxc3u9L5jmnn21J
6oCYtUR7uOg3B+mUmuTcd6eOepyZ/JLUHfrL2sTlJ7Sz5TBqKoPrSxe2qHcGoIpx
9d3SBmSPZH6vGOAfwzxtjYmKeSUU5kdEYPikaM5VElHEITwfFHamAqxFoLgUODQm
titBPEBaizl2qHa0+VescGcQUxk4cQZDrt4J1JNvSKcV/+T77uSCN9zt4gfgmxjh
OM8GeCDv2S/6sg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:00:12 2025 by rpki-client