Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
File: RxS79TeHr06TXTCkjoglotoUoIs.mft (raw, json)
Hash identifier: EqN+/KanDWVIVlaQ5ERZmIq15vcmOzIbVm3gnboRpuw=
Subject key identifier: 2E:AA:94:8C:F9:3B:48:CE:8B:83:02:C3:5A:8E:DF:98:CC:81:49:D5
Authority key identifier: 47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
Certificate issuer: /CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Certificate serial: 0199FB0F0B0BB946F086ADD0076C6B1DC5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
Manifest number: 1F
Signing time: Sun 19 Oct 2025 06:01:30 +0000
Manifest this update: Sun 19 Oct 2025 06:01:30 +0000
Manifest next update: Mon 20 Oct 2025 06:01:30 +0000
Files and hashes: 1: 1RhZ680ZFwSWL0eW5jF3xOe9MxM.roa (hash: sgWoBKYoXGWVKYDBWWq0HZS7lSSlvVBQHXsa6478dkc=)
2: RxS79TeHr06TXTCkjoglotoUoIs.crl (hash: IOlxSrlgMdJkLfQyMc36fjBzt4jFneyNBM6STUGAf40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:0b:0b:b9:46:f0:86:ad:d0:07:6c:6b:1d:c5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4714bbf53787af4e935d30a48e8825a2da14a08b
Validity
Not Before: Oct 19 06:01:30 2025 GMT
Not After : Oct 20 06:01:30 2025 GMT
Subject: CN=2eaa948cf93b48ce8b8302c35a8edf98cc8149d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:87:c0:86:93:6a:d6:cb:69:a4:5f:d7:03:ac:
39:51:c4:32:16:f2:e6:3c:14:2b:5d:0d:40:a8:3c:
11:cd:d0:c0:9e:97:45:8d:94:ae:33:b5:e0:ce:48:
96:a5:9f:93:15:d0:c9:95:87:2b:fe:34:06:22:73:
4a:8e:43:56:66:30:c7:02:63:38:b5:fa:41:ec:e2:
b7:72:39:9d:5f:fc:23:23:dc:1a:3d:61:a6:5f:eb:
4b:ef:50:b3:8d:9e:d2:e6:3b:c6:e3:fa:26:49:3e:
19:ae:cc:0b:15:8e:d6:35:f3:cf:31:6e:a9:ed:89:
ff:18:0c:73:e9:66:ac:f7:e5:81:57:7d:60:56:99:
8f:3e:2c:b9:f7:c7:0f:25:1a:0f:40:91:c9:f3:be:
cb:86:70:83:66:57:6f:a3:c9:f8:11:87:05:57:5f:
b2:96:67:84:40:8d:9d:f2:d0:62:b3:27:e0:4d:3a:
89:1a:2f:02:66:d2:98:40:e9:3c:7b:2c:3b:0c:61:
dd:54:55:69:5d:ac:3e:2d:a1:24:02:3d:89:52:1d:
68:0b:b8:76:b8:d8:4b:b8:ac:94:26:4c:9d:3e:a1:
1a:d7:20:b8:02:6a:ce:97:80:fe:e9:b3:99:3f:71:
b3:38:50:09:87:63:06:23:fc:ee:bf:2b:a2:94:62:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:94:8C:F9:3B:48:CE:8B:83:02:C3:5A:8E:DF:98:CC:81:49:D5
X509v3 Authority Key Identifier:
keyid:47:14:BB:F5:37:87:AF:4E:93:5D:30:A4:8E:88:25:A2:DA:14:A0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxS79TeHr06TXTCkjoglotoUoIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/ccea55-eac2-42ba-9dec-e690ed21f94f/1/RxS79TeHr06TXTCkjoglotoUoIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:00:a4:ef:fd:58:0c:89:5e:9f:ff:b2:14:31:b4:60:73:62:
d7:44:93:3d:61:7d:0e:2c:44:c5:dd:bb:28:8c:89:7a:9d:d6:
1a:5d:c7:da:70:25:73:86:62:84:0e:55:9e:ea:9c:eb:bc:ed:
bd:c9:61:e4:69:7f:d2:5a:e5:bb:d0:4d:42:37:43:a2:8b:3c:
fc:86:f6:26:73:86:b2:76:82:52:0a:23:18:b3:b1:2d:a2:9a:
30:09:5b:1e:ca:4b:93:13:f8:eb:f5:59:e6:e4:1c:13:0d:4c:
cf:62:1c:34:73:53:57:c5:41:5c:c4:ae:dc:80:57:2e:af:9c:
c1:72:d8:a5:d9:07:ae:60:61:f4:06:d8:e1:30:11:2e:a8:37:
b9:57:5c:e2:72:08:a4:b9:06:61:ee:9b:e9:0d:75:fc:b4:6f:
ed:61:34:26:a0:32:66:ff:e6:54:30:a1:28:ce:07:e4:11:cb:
8e:75:3d:84:de:4f:f9:12:e9:60:84:67:c5:0d:8c:12:fb:9e:
82:2f:7a:19:5f:0a:d8:07:46:9d:d5:73:77:f4:8e:f4:60:b6:
1f:1b:b1:aa:66:b5:5a:f0:cf:6b:39:5c:04:30:ab:49:4c:63:
bf:50:a4:ca:4a:ec:32:3f:5a:94:1b:8e:8e:17:d5:c1:08:e8:
a7:24:62:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DwsLuUbwhq3QB2xrHcX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTRiYmY1Mzc4N2FmNGU5MzVkMzBhNDhlODgyNWEyZGEx
NGEwOGIwHhcNMjUxMDE5MDYwMTMwWhcNMjUxMDIwMDYwMTMwWjAzMTEwLwYDVQQD
EygyZWFhOTQ4Y2Y5M2I0OGNlOGI4MzAyYzM1YThlZGY5OGNjODE0OWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4fAhpNq1stppF/XA6w5UcQyFvLm
PBQrXQ1AqDwRzdDAnpdFjZSuM7XgzkiWpZ+TFdDJlYcr/jQGInNKjkNWZjDHAmM4
tfpB7OK3cjmdX/wjI9waPWGmX+tL71CzjZ7S5jvG4/omST4ZrswLFY7WNfPPMW6p
7Yn/GAxz6Was9+WBV31gVpmPPiy598cPJRoPQJHJ877LhnCDZldvo8n4EYcFV1+y
lmeEQI2d8tBisyfgTTqJGi8CZtKYQOk8eyw7DGHdVFVpXaw+LaEkAj2JUh1oC7h2
uNhLuKyUJkydPqEa1yC4AmrOl4D+6bOZP3GzOFAJh2MGI/zuvyuilGIlNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6qlIz5O0jOi4MCw1qO35jMgUnVMB8GA1UdIwQY
MBaAFEcUu/U3h69Ok10wpI6IJaLaFKCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jY2VhNTUtZWFjMi00MmJhLTlkZWMt
ZTY5MGVkMjFmOTRmLzEvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9jY2VhNTUtZWFjMi00MmJhLTlkZWMtZTY5MGVkMjFmOTRm
LzEvUnhTNzlUZUhyMDZUWFRDa2pvZ2xvdG9Vb0lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQCk7/1Y
DIlen/+yFDG0YHNi10STPWF9DixExd27KIyJep3WGl3H2nAlc4ZihA5Vnuqc67zt
vclh5Gl/0lrlu9BNQjdDoos8/Ib2JnOGsnaCUgojGLOxLaKaMAlbHspLkxP46/VZ
5uQcEw1Mz2IcNHNTV8VBXMSu3IBXLq+cwXLYpdkHrmBh9AbY4TARLqg3uVdc4nII
pLkGYe6b6Q11/LRv7WE0JqAyZv/mVDChKM4H5BHLjnU9hN5P+RLpYIRnxQ2MEvue
gi96GV8K2AdGndVzd/SO9GC2Hxuxqma1WvDPazlcBDCrSUxjv1CkykrsMj9alBuO
jhfVwQjopyRi7A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:03 2025 by rpki-client