Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File: 60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier: fz8Y9L0tLoIfJN+NdTtKc09kLoWSdU0K0BzMZBuA0fc=
Subject key identifier: 25:59:41:1B:FD:82:B0:A1:83:4E:E5:C3:18:45:74:07:01:26:58:A0
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial: 0198D4A7B07A6FF31B8ADB71FFBEA4E39285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number: 0ABD
Signing time: Sat 23 Aug 2025 02:00:16 +0000
Manifest this update: Sat 23 Aug 2025 02:00:16 +0000
Manifest next update: Sun 24 Aug 2025 02:00:16 +0000
Files and hashes: 1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: OwAcMwmOouvgqqTihORQddUgv7EHAQa8YWHIY4pJJ8A=)
2: BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa (hash: ooQU4Ho0ybPL99Ep+vo4svb61ieYsfRUfMtTThTSOn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b0:7a:6f:f3:1b:8a:db:71:ff:be:a4:e3:92:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Validity
Not Before: Aug 23 02:00:16 2025 GMT
Not After : Aug 24 02:00:16 2025 GMT
Subject: CN=2559411bfd82b0a1834ee5c318457407012658a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fc:03:f0:0d:1f:b9:9e:2d:52:bd:d2:b5:6f:
be:60:48:93:04:ae:22:a7:ae:07:7a:7b:e5:ea:f9:
8e:a9:6d:17:f0:72:42:b8:5f:75:78:fe:2e:02:54:
b9:f7:c9:16:43:7c:51:15:82:df:d0:3b:10:4f:34:
d1:eb:e7:5c:5c:89:6e:fa:2f:cc:14:a7:92:fe:58:
64:b0:ed:00:3c:ca:13:7a:54:e6:1b:c9:4a:35:ad:
b1:c4:01:c7:23:e4:81:10:8a:0c:ec:f7:04:14:53:
ef:a6:4e:37:7f:d0:cb:32:21:01:ac:14:5a:5f:e8:
e1:7d:00:e5:c1:47:3d:1d:80:92:bc:a9:0e:64:b1:
2b:98:1f:a4:dd:1a:b8:71:7e:30:d5:7e:4b:88:8d:
26:b4:06:c4:06:6b:ba:b3:e4:5b:dd:ba:45:9d:0a:
52:b2:2e:6e:71:6e:9e:56:0a:8f:7f:bf:fd:ac:48:
2b:4e:ed:6c:b3:ac:cd:8f:81:87:47:da:d6:e7:57:
52:87:3a:97:e0:3f:b3:53:9a:a7:75:08:07:af:c5:
80:90:32:92:67:6a:84:8b:f5:69:26:d8:64:bb:0e:
ff:7f:0b:bc:d4:58:f5:25:ff:fb:f6:72:2e:7b:60:
d7:01:60:2a:a7:bf:f1:29:1c:07:0e:09:63:a4:27:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:59:41:1B:FD:82:B0:A1:83:4E:E5:C3:18:45:74:07:01:26:58:A0
X509v3 Authority Key Identifier:
keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2f:03:c0:0e:02:07:de:00:4f:40:ef:6d:26:61:17:5e:40:
cf:0a:46:cb:89:f6:7d:85:9c:26:92:d6:43:a8:84:e8:dc:13:
aa:23:c7:40:93:11:68:86:9c:48:14:e7:91:4e:54:fd:b7:6e:
4a:01:4e:d4:17:70:04:ea:96:a0:a2:eb:10:f5:ad:6f:fc:e2:
83:eb:f5:ee:f7:39:7a:06:30:8a:a7:b1:10:7b:28:c2:a3:be:
63:2b:04:76:37:aa:2f:78:16:64:f8:0e:c8:4a:3b:83:23:8a:
88:8e:f4:db:84:cd:b5:6d:aa:c3:9f:40:23:0c:b7:60:ae:e7:
8d:79:90:96:ff:46:97:07:94:fa:e3:6b:73:fb:e2:33:4b:e5:
8c:70:ff:19:a9:b5:1d:07:8d:7a:3a:f4:f8:db:9f:b8:90:b7:
34:24:62:03:2b:ee:6a:e2:71:08:34:ef:2a:5c:a6:1b:b8:4c:
2b:f5:0c:48:07:d2:1a:89:00:c7:b7:f2:ec:8b:06:0a:fe:f8:
8d:c4:3b:b4:9c:90:5e:67:f0:75:04:68:89:2f:09:21:43:22:
02:df:95:fc:c2:d8:36:c4:d8:1d:1e:bc:95:3b:f9:d3:61:c1:
67:8e:94:95:ee:e5:8b:41:d5:54:48:42:b7:09:36:5b:4b:d3:
1f:02:62:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp7B6b/Mbittx/76k45KFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNGM1YWNkNmZhMWU2YTkxMTI5YWM0MjQwNTdhODc3NTU4
ZTgwNTIwHhcNMjUwODIzMDIwMDE2WhcNMjUwODI0MDIwMDE2WjAzMTEwLwYDVQQD
EygyNTU5NDExYmZkODJiMGExODM0ZWU1YzMxODQ1NzQwNzAxMjY1OGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PwD8A0fuZ4tUr3StW++YEiTBK4i
p64Henvl6vmOqW0X8HJCuF91eP4uAlS598kWQ3xRFYLf0DsQTzTR6+dcXIlu+i/M
FKeS/lhksO0APMoTelTmG8lKNa2xxAHHI+SBEIoM7PcEFFPvpk43f9DLMiEBrBRa
X+jhfQDlwUc9HYCSvKkOZLErmB+k3Rq4cX4w1X5LiI0mtAbEBmu6s+Rb3bpFnQpS
si5ucW6eVgqPf7/9rEgrTu1ss6zNj4GHR9rW51dShzqX4D+zU5qndQgHr8WAkDKS
Z2qEi/VpJthkuw7/fwu81Fj1Jf/79nIue2DXAWAqp7/xKRwHDgljpCfP+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVZQRv9grChg07lwxhFdAcBJligMB8GA1UdIwQY
MBaAFOtMWs1voeapESmsQkBXqHdVjoBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAt
ZGNiZGY3MWZmMzQ3LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAtZGNiZGY3MWZmMzQ3
LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEi8DwA4C
B94AT0DvbSZhF15AzwpGy4n2fYWcJpLWQ6iE6NwTqiPHQJMRaIacSBTnkU5U/bdu
SgFO1BdwBOqWoKLrEPWtb/zig+v17vc5egYwiqexEHsowqO+YysEdjeqL3gWZPgO
yEo7gyOKiI7024TNtW2qw59AIwy3YK7njXmQlv9GlweU+uNrc/viM0vljHD/Gam1
HQeNejr0+NufuJC3NCRiAyvuauJxCDTvKlymG7hMK/UMSAfSGokAx7fy7IsGCv74
jcQ7tJyQXmfwdQRoiS8JIUMiAt+V/MLYNsTYHR68lTv502HBZ46Ule7li0HVVEhC
twk2W0vTHwJisw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:13 2025 by rpki-client