Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
File: x2v2t4G8-MKACKjo_d5g564xIqo.mft (raw, json)
Hash identifier: h0jjDJlvOYDwAy7uUmFbhc/On2sPr2wnpgcQe6Wl6K8=
Subject key identifier: 36:9F:DF:97:C8:AC:89:55:81:96:3D:50:5D:1D:12:88:C2:89:49:31
Authority key identifier: C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
Certificate issuer: /CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Certificate serial: 0198D6608C69C3DC538665F186D813ECDB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:48 +0000
Manifest this update: Sat 23 Aug 2025 10:01:48 +0000
Manifest next update: Sun 24 Aug 2025 10:01:48 +0000
Files and hashes: 1: 58adO5UB1FKlEoStUB0aT9zK1OU.roa (hash: VcDtIG0g4QLm3R4L3wJoUxzRN4qEZkuyhBUiyX4ea8Q=)
2: x2v2t4G8-MKACKjo_d5g564xIqo.crl (hash: 22GE35GbUHucWPsMcFYOQ0md7Jri2YzswKoVBqmAB8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8c:69:c3:dc:53:86:65:f1:86:d8:13:ec:db:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Validity
Not Before: Aug 23 10:01:48 2025 GMT
Not After : Aug 24 10:01:48 2025 GMT
Subject: CN=369fdf97c8ac895581963d505d1d1288c2894931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:c0:69:ce:70:26:5b:ad:da:99:7a:54:88:
a0:98:36:81:58:11:5a:91:b9:04:ee:c7:04:b5:9b:
50:b6:fe:93:f5:02:52:f9:04:90:83:e0:7a:4f:8e:
29:bb:16:25:e1:ae:58:e4:32:12:80:d2:84:46:c6:
60:ac:f2:ab:bf:21:eb:98:3d:72:17:b7:85:2c:15:
75:0f:af:6f:c1:90:97:18:6e:2d:dc:90:76:91:38:
8f:f4:77:73:51:ef:2d:cb:cb:fa:01:e6:80:f9:46:
28:cc:2b:3e:c9:08:d9:28:75:aa:1c:3f:fa:d0:74:
5d:ea:42:14:d5:56:70:14:0f:0c:72:b8:55:24:ce:
4b:07:e6:2f:42:9b:de:a2:d7:85:6f:d2:6b:89:aa:
4c:66:6a:73:35:b2:51:5b:92:ec:a7:5c:9f:17:f0:
29:57:dd:b9:8b:1c:96:0c:00:3f:76:d0:8f:35:e2:
e6:59:b7:95:90:2a:bd:f3:57:68:bd:e9:12:7a:4c:
d0:b3:03:fa:84:da:d3:bd:8b:4b:d3:55:71:ff:c8:
08:3e:3a:e6:0b:e1:d4:0b:c5:5a:5d:dd:dc:6b:1b:
6e:5f:09:63:09:8d:0c:3d:3d:2a:5c:32:83:dc:c0:
80:0e:87:6b:3d:f6:3e:f8:36:bc:78:ff:8a:d6:9e:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9F:DF:97:C8:AC:89:55:81:96:3D:50:5D:1D:12:88:C2:89:49:31
X509v3 Authority Key Identifier:
keyid:C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8c:b6:c3:82:0e:89:98:e8:dd:a3:9e:5d:19:95:9e:c4:03:
3f:f7:4a:d5:42:59:93:90:3b:2e:0c:9b:e2:f0:0f:52:e0:ed:
c4:2b:76:b0:4d:8b:69:b6:5f:b4:0a:f1:f7:dc:20:f1:d2:5b:
f0:7e:7c:a5:15:f9:a4:67:8d:0b:48:67:58:c9:fa:f6:03:67:
80:e6:03:b3:16:98:da:d4:cb:ea:5a:5a:b1:8f:00:a5:a4:fc:
39:64:36:28:5a:88:80:af:62:86:17:9c:f8:ca:c8:fd:5e:3e:
1b:53:c1:df:10:72:06:d9:34:fe:a4:9a:8d:f6:cc:7e:bc:28:
9b:3c:d0:ec:5d:3b:65:f7:18:f0:9d:c7:9a:82:81:3c:c1:fa:
b5:1e:17:ee:46:74:bc:d1:10:8e:35:cf:4d:48:d1:0b:e1:08:
e7:f5:c9:b4:3f:55:4e:05:58:9e:7b:f2:dc:78:ca:c7:4e:68:
a3:5b:3b:b6:6b:49:39:de:34:38:34:ba:50:d6:25:66:83:95:
4f:c5:9b:b6:fd:12:ab:41:85:67:ab:1b:d3:a5:29:da:81:4a:
c9:1e:6b:bf:93:ad:6f:1a:7b:ce:07:65:72:d3:cb:2e:62:14:
e7:b3:89:58:ca:18:24:98:db:94:2a:2e:06:17:2f:57:e1:b6:
cb:e8:42:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYIxpw9xThmXxhtgT7NsuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmJmNmI3ODFiY2Y4YzI4MDA4YThlOGZkZGU2MGU3YWUz
MTIyYWEwHhcNMjUwODIzMTAwMTQ4WhcNMjUwODI0MTAwMTQ4WjAzMTEwLwYDVQQD
EygzNjlmZGY5N2M4YWM4OTU1ODE5NjNkNTA1ZDFkMTI4OGMyODk0OTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6TAac5wJlut2pl6VIigmDaBWBFa
kbkE7scEtZtQtv6T9QJS+QSQg+B6T44puxYl4a5Y5DISgNKERsZgrPKrvyHrmD1y
F7eFLBV1D69vwZCXGG4t3JB2kTiP9HdzUe8ty8v6AeaA+UYozCs+yQjZKHWqHD/6
0HRd6kIU1VZwFA8McrhVJM5LB+YvQpveoteFb9JriapMZmpzNbJRW5Lsp1yfF/Ap
V925ixyWDAA/dtCPNeLmWbeVkCq981dovekSekzQswP6hNrTvYtL01Vx/8gIPjrm
C+HUC8VaXd3caxtuXwljCY0MPT0qXDKD3MCADodrPfY++Da8eP+K1p6ksQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaf35fIrIlVgZY9UF0dEojCiUkxMB8GA1UdIwQY
MBaAFMdr9reBvPjCgAio6P3eYOeuMSKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMTc4YmQtYjZhNS00NjEwLThjNmEt
YWJmNDg0MGVhNjA3LzEveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iMTc4YmQtYjZhNS00NjEwLThjNmEtYWJmNDg0MGVhNjA3
LzEveDJ2MnQ0RzgtTUtBQ0tqb19kNWc1NjR4SXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIy2w4IO
iZjo3aOeXRmVnsQDP/dK1UJZk5A7Lgyb4vAPUuDtxCt2sE2LabZftArx99wg8dJb
8H58pRX5pGeNC0hnWMn69gNngOYDsxaY2tTL6lpasY8ApaT8OWQ2KFqIgK9ihhec
+MrI/V4+G1PB3xByBtk0/qSajfbMfrwomzzQ7F07ZfcY8J3HmoKBPMH6tR4X7kZ0
vNEQjjXPTUjRC+EI5/XJtD9VTgVYnnvy3HjKx05oo1s7tmtJOd40ODS6UNYlZoOV
T8Wbtv0Sq0GFZ6sb06Up2oFKyR5rv5Otbxp7zgdlctPLLmIU57OJWMoYJJjblCou
BhcvV+G2y+hCEQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:22 2025 by rpki-client