Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier: lfk5MLiT1310eL1rTkaVO9BsyXRG2X+1KkoElzZeHtQ=
Subject key identifier: 2A:EC:C2:0E:41:4F:53:D0:05:96:BD:0D:16:49:18:A7:05:2E:DB:93
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 0198D583D0A6F22138ACEE9D3688F35B53A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:42 +0000
Manifest this update: Sat 23 Aug 2025 06:00:42 +0000
Manifest next update: Sun 24 Aug 2025 06:00:42 +0000
Files and hashes: 1: 8Zjvv60lC8NGP14VoQ8RNeofQIM.roa (hash: P7KtzcRE9odqg/BTLMYwDj7fh0a6LBnncSFvQDv5Bp0=)
2: FpKKPofiudOty7FxUMr6flRZ1Yw.roa (hash: 19qYKj9K4I/iMwutyl2SfY76xgKtvj/68+BwpIEN2Kg=)
3: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: 3Gg51/XP2R6Ru0bIN4i96TMo97okCnxOs3+U6CpbNJ8=)
4: yOx4nY5h71UsEVGCdqce7EnVtbw.roa (hash: pblfkKrPcMJNUK4hgNwzxNA61gyD6ePezh9yKZ6o3M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d0:a6:f2:21:38:ac:ee:9d:36:88:f3:5b:53:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Aug 23 06:00:42 2025 GMT
Not After : Aug 24 06:00:42 2025 GMT
Subject: CN=2aecc20e414f53d00596bd0d164918a7052edb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:03:ea:a9:1f:59:ca:0c:18:61:6c:4c:7d:71:
1b:32:90:25:5e:cb:66:db:61:8e:cc:91:4d:99:1b:
25:d4:5b:31:a8:23:0b:1c:ca:8b:eb:ca:a2:0a:3f:
0f:96:ab:8c:ad:17:f7:55:16:13:ad:64:91:05:09:
76:0c:58:2b:bf:8c:59:be:79:90:26:03:b8:1f:24:
e7:83:60:03:65:a8:8d:ff:67:ed:f5:ea:3d:3f:64:
66:df:ba:de:c8:6f:01:af:09:3c:29:c0:31:45:db:
fd:d9:9e:04:84:4f:2b:4c:1b:67:ce:86:03:42:62:
7f:fc:d0:c0:7f:b9:a7:d7:bf:17:f7:bf:3a:e3:e3:
1f:89:59:fe:3c:9f:c6:dd:72:9d:ae:62:38:95:53:
08:4f:72:6f:39:c9:29:39:a2:75:70:7b:47:7f:ba:
dc:3f:1a:3f:2b:40:36:b4:0e:c8:1f:b1:6b:72:6c:
14:e2:77:77:83:39:0c:d1:de:54:89:1a:57:ea:cf:
c6:36:99:05:3d:f4:a0:d2:64:a9:4d:ef:ff:e1:98:
e7:2e:3d:96:22:a0:27:2d:e8:a2:30:49:d8:d6:a6:
ca:ca:87:2c:13:37:e1:1f:b2:6e:fc:f9:87:f6:b0:
14:ac:e5:a3:f8:d2:88:cb:6e:ca:b4:e6:6d:f6:6b:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EC:C2:0E:41:4F:53:D0:05:96:BD:0D:16:49:18:A7:05:2E:DB:93
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:06:50:31:e1:f3:19:96:0e:15:49:09:a0:73:0f:b4:27:32:
de:57:db:94:54:2f:2a:f1:62:92:e7:bb:2f:04:04:b1:bf:54:
9c:6c:96:bf:00:43:19:d0:13:86:73:50:46:15:bc:9b:47:a2:
37:cd:1b:1f:bb:e6:d2:4b:38:10:9a:3f:41:d4:22:ef:42:da:
5d:dd:09:8e:7b:2b:9a:c0:aa:b3:60:ac:4d:b0:16:cd:86:ac:
a2:ca:cc:9a:8b:49:f4:4b:0e:fb:09:f7:6d:dc:79:09:7c:04:
fb:bc:e0:09:e0:26:99:b4:33:9f:6a:0c:66:4c:fe:df:38:0b:
73:c4:ed:9e:ea:8f:a0:56:12:a9:d9:a8:d4:f7:82:82:67:dd:
45:0a:13:68:60:98:10:0e:ae:ab:b9:5e:71:a4:b8:fe:35:8a:
1f:4e:9f:53:d9:c2:89:af:a9:c1:d0:63:ec:14:7e:ed:6c:27:
94:7f:f2:c6:1a:21:d4:36:fe:12:90:21:16:45:91:99:fd:17:
96:a0:28:9d:7e:f1:11:0a:f6:58:32:ce:f0:c3:54:62:9f:43:
31:94:94:22:93:65:31:6f:25:37:d6:4e:c0:02:40:c2:1f:c0:
c5:41:6b:9b:5a:14:ca:33:02:2e:e5:75:9b:b0:9c:bc:57:0f:
6f:8a:41:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg9Cm8iE4rO6dNojzW1OkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTUyOTAwYjBkMzIzZDM2ZDk0NTEwYWIwYjAxYzkzZjQ1
MTdjODkwHhcNMjUwODIzMDYwMDQyWhcNMjUwODI0MDYwMDQyWjAzMTEwLwYDVQQD
EygyYWVjYzIwZTQxNGY1M2QwMDU5NmJkMGQxNjQ5MThhNzA1MmVkYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8APqqR9ZygwYYWxMfXEbMpAlXstm
22GOzJFNmRsl1FsxqCMLHMqL68qiCj8PlquMrRf3VRYTrWSRBQl2DFgrv4xZvnmQ
JgO4HyTng2ADZaiN/2ft9eo9P2Rm37reyG8Brwk8KcAxRdv92Z4EhE8rTBtnzoYD
QmJ//NDAf7mn178X97864+MfiVn+PJ/G3XKdrmI4lVMIT3JvOckpOaJ1cHtHf7rc
Pxo/K0A2tA7IH7FrcmwU4nd3gzkM0d5UiRpX6s/GNpkFPfSg0mSpTe//4ZjnLj2W
IqAnLeiiMEnY1qbKyocsEzfhH7Ju/PmH9rAUrOWj+NKIy27KtOZt9ms4QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrswg5BT1PQBZa9DRZJGKcFLtuTMB8GA1UdIwQY
MBaAFE8VKQCw0yPTbZRRCrCwHJP0UXyJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84OWZmM2ItMTI2My00Y2RkLTljYWQt
MjNkZjhkZGRmOTc4LzEvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC84OWZmM2ItMTI2My00Y2RkLTljYWQtMjNkZjhkZGRmOTc4
LzEvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAZQMeHz
GZYOFUkJoHMPtCcy3lfblFQvKvFikue7LwQEsb9UnGyWvwBDGdAThnNQRhW8m0ei
N80bH7vm0ks4EJo/QdQi70LaXd0JjnsrmsCqs2CsTbAWzYasosrMmotJ9EsO+wn3
bdx5CXwE+7zgCeAmmbQzn2oMZkz+3zgLc8TtnuqPoFYSqdmo1PeCgmfdRQoTaGCY
EA6uq7lecaS4/jWKH06fU9nCia+pwdBj7BR+7WwnlH/yxhoh1Db+EpAhFkWRmf0X
lqAonX7xEQr2WDLO8MNUYp9DMZSUIpNlMW8lN9ZOwAJAwh/AxUFrm1oUyjMCLuV1
m7CcvFcPb4pBeQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:27 2025 by rpki-client