Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: qSKz46tSRv5b3mLfyfuf3AF2w7xyE0uXf9VdzZUPc4o=
Subject key identifier: 8F:73:D0:26:B7:72:20:92:DD:24:5B:6E:50:51:58:09:8D:A1:9E:7A
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 0198D4E09DE94F5CFCA84C9B9747D262AD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 071D
Signing time: Sat 23 Aug 2025 03:02:26 +0000
Manifest this update: Sat 23 Aug 2025 03:02:26 +0000
Manifest next update: Sun 24 Aug 2025 03:02:26 +0000
Files and hashes: 1: l2_sIOs4HMyf2OgLQgyJY2hl_f0.roa (hash: ux1UyG4HPgGv7Al9zX4rAYUS2Y3nKcLtZPuBWZDi2xs=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: ui2Vm4U9a03d2uhT3vpNVXvnrl5pabWT2TNkT383y4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9d:e9:4f:5c:fc:a8:4c:9b:97:47:d2:62:ad:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Aug 23 03:02:26 2025 GMT
Not After : Aug 24 03:02:26 2025 GMT
Subject: CN=8f73d026b7722092dd245b6e505158098da19e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:3b:e2:31:41:4e:3d:08:b9:b6:4c:75:a6:
6f:2b:de:36:8b:34:59:ed:d1:49:a0:f2:16:64:8d:
e3:d0:3c:5b:64:fc:4f:54:c4:f2:e8:9c:ba:0f:b7:
c4:e3:f3:b5:de:51:1c:69:61:c0:52:b3:2f:f3:5f:
10:03:56:48:d4:db:97:a5:6c:33:42:71:0d:d9:91:
2c:b3:c5:b2:80:29:d7:3b:cc:18:bd:8a:bb:4b:2c:
51:bc:7c:3a:a7:eb:f9:18:bb:e8:fb:4f:58:ab:a5:
20:d0:0a:17:57:19:b0:4e:80:92:b4:05:91:79:4e:
b5:df:71:2b:f1:1e:b0:20:92:d8:14:1e:22:77:47:
7b:57:ba:51:5e:d1:37:dd:36:1e:7d:2b:5a:99:e4:
74:a6:b6:41:a9:20:23:24:69:2b:dd:95:9e:a8:65:
a5:a3:26:d1:78:b5:29:26:5b:df:6d:60:0b:33:9c:
21:de:ae:e9:b6:bd:f9:4c:b3:8d:ec:9f:59:86:67:
f4:75:30:7d:27:0a:76:74:ba:af:9f:7d:6d:41:93:
9f:88:5f:81:e6:af:ac:34:88:31:da:ce:b3:b7:3f:
0b:ba:7a:1d:34:a8:6b:4f:ad:18:e5:5b:0b:49:20:
b4:a7:ed:8e:56:7c:ae:4e:79:8a:d2:9c:4a:fa:ac:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:73:D0:26:B7:72:20:92:DD:24:5B:6E:50:51:58:09:8D:A1:9E:7A
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:4c:05:b3:7e:2a:2c:58:a0:7b:76:a5:8a:98:03:2e:9b:
0f:ad:46:7f:3b:13:17:fe:e7:89:b6:03:84:cb:d0:a9:bb:82:
dc:1c:88:1c:39:bf:43:5f:cf:61:a3:52:8f:95:60:64:9d:19:
04:d6:76:7a:59:bd:aa:49:4d:91:b8:07:7f:c2:59:dc:30:13:
04:f6:42:fd:9a:4e:09:4d:f0:ad:89:8b:75:56:c4:d6:31:74:
84:81:99:2e:84:c5:bc:03:05:df:44:e1:da:89:fd:4f:05:55:
14:76:42:61:97:e9:3c:e4:a2:73:2f:86:2f:4c:63:e6:a3:5e:
5f:03:47:70:e3:85:69:88:fc:ed:46:a8:ba:77:22:59:7e:3d:
88:75:28:74:0d:40:77:00:6e:fc:b2:24:83:cd:2d:d4:eb:36:
20:f1:db:f0:44:55:14:66:92:3a:93:2a:0b:5c:7c:f0:19:9d:
19:3d:26:7a:62:8e:52:80:48:6d:c4:96:ca:94:29:22:26:1a:
57:1a:66:2d:62:23:94:65:a6:27:a6:f7:ce:85:67:d4:56:3e:
f8:1f:ee:a3:80:b2:fa:18:ff:38:b9:2b:fd:74:33:9a:e7:4e:
c5:e0:7b:e4:27:11:21:ad:0f:8c:67:f4:2f:2b:bf:a8:f4:a4:
66:5a:b4:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4J3pT1z8qEybl0fSYq1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NjcxMjcwYjY5Y2VjNTA0NjA2YjEyNmM0Y2E4MzM4MTZh
ZjdkYTQwHhcNMjUwODIzMDMwMjI2WhcNMjUwODI0MDMwMjI2WjAzMTEwLwYDVQQD
Eyg4ZjczZDAyNmI3NzIyMDkyZGQyNDViNmU1MDUxNTgwOThkYTE5ZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorw74jFBTj0IubZMdaZvK942izRZ
7dFJoPIWZI3j0DxbZPxPVMTy6Jy6D7fE4/O13lEcaWHAUrMv818QA1ZI1NuXpWwz
QnEN2ZEss8WygCnXO8wYvYq7SyxRvHw6p+v5GLvo+09Yq6Ug0AoXVxmwToCStAWR
eU6133Er8R6wIJLYFB4id0d7V7pRXtE33TYefStameR0prZBqSAjJGkr3ZWeqGWl
oybReLUpJlvfbWALM5wh3q7ptr35TLON7J9Zhmf0dTB9Jwp2dLqvn31tQZOfiF+B
5q+sNIgx2s6ztz8LunodNKhrT60Y5VsLSSC0p+2OVnyuTnmK0pxK+qyyBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9z0Ca3ciCS3SRbblBRWAmNoZ56MB8GA1UdIwQY
MBaAFMdnEnC2nOxQRgaxJsTKgzgWr32kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZWI3MGEtYTNmYy00NDYzLWE3Y2Qt
OTg2ZWEyMDNmOWVjLzEveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hZWI3MGEtYTNmYy00NDYzLWE3Y2QtOTg2ZWEyMDNmOWVj
LzEveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfINMBbN+
KixYoHt2pYqYAy6bD61GfzsTF/7nibYDhMvQqbuC3ByIHDm/Q1/PYaNSj5VgZJ0Z
BNZ2elm9qklNkbgHf8JZ3DATBPZC/ZpOCU3wrYmLdVbE1jF0hIGZLoTFvAMF30Th
2on9TwVVFHZCYZfpPOSicy+GL0xj5qNeXwNHcOOFaYj87UaounciWX49iHUodA1A
dwBu/LIkg80t1Os2IPHb8ERVFGaSOpMqC1x88BmdGT0memKOUoBIbcSWypQpIiYa
VxpmLWIjlGWmJ6b3zoVn1FY++B/uo4Cy+hj/OLkr/XQzmudOxeB75CcRIa0PjGf0
Lyu/qPSkZlq0JQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:59 2025 by rpki-client