Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json)
Hash identifier: p+e5oomRiqojP2Aj3ukGBwwXVqnwCMcECTf2bVW8p9c=
Subject key identifier: 37:3E:4D:B5:6A:8F:5A:D3:BE:74:D1:35:75:0F:56:32:51:41:E6:B6
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 0198D4A82E4A7654AEF14A703ED45FCA3DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
Manifest number: 6A
Signing time: Sat 23 Aug 2025 02:00:48 +0000
Manifest this update: Sat 23 Aug 2025 02:00:48 +0000
Manifest next update: Sun 24 Aug 2025 02:00:48 +0000
Files and hashes: 1: 5IPzjXtbudzhqWSCz_2qKpvgqfM.roa (hash: 3/k5aiqNpyNZ/fHElOfLbVv7ZKiwKvI6JAy6AM1SccM=)
2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: zTbWm9AsKH72hSVEpMbaynMG0BJ6d6rG5Z3E0Oe9BaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:2e:4a:76:54:ae:f1:4a:70:3e:d4:5f:ca:3d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Aug 23 02:00:48 2025 GMT
Not After : Aug 24 02:00:48 2025 GMT
Subject: CN=373e4db56a8f5ad3be74d135750f56325141e6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:1b:d3:71:02:9a:ca:c4:4f:47:e5:8e:c1:
fe:8e:e4:e0:a4:8a:03:1d:3d:00:7f:87:72:b5:9d:
a5:da:6a:71:85:02:90:80:91:ce:40:65:20:ae:42:
05:91:2c:cd:7c:99:8d:2c:6d:4a:e3:dc:11:84:20:
9a:07:19:59:85:73:19:d3:16:cd:d0:42:fd:8e:16:
ee:bd:68:74:82:cd:11:aa:54:87:91:dd:5c:6b:fd:
ae:84:3e:2d:3d:ac:1d:96:32:4e:b4:43:81:ec:e1:
d4:e3:50:a9:ae:e4:42:0d:3c:ca:9f:11:3c:f2:68:
de:ee:3e:44:59:73:57:a7:03:86:9d:25:d8:6a:5f:
ef:cb:01:94:9e:c8:2a:ed:ac:2e:1a:20:53:15:57:
cc:70:51:1b:6b:17:4c:5b:1a:db:63:19:a1:c7:35:
34:6f:5b:3e:a3:ad:2f:00:10:0a:24:bf:9c:2b:55:
fc:35:3f:cb:e9:e3:e6:a1:ae:42:a6:1c:14:05:89:
9e:8d:53:63:ad:24:24:32:a4:a7:54:24:1e:ae:c6:
d4:ee:4f:c5:98:dd:df:d0:cc:32:50:0b:ca:56:d7:
58:a0:51:93:32:db:38:84:c8:bb:9b:bd:c8:3e:ce:
9d:9e:39:22:44:7f:cb:ac:35:47:ee:8f:28:8f:64:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3E:4D:B5:6A:8F:5A:D3:BE:74:D1:35:75:0F:56:32:51:41:E6:B6
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e1:2c:cc:55:a4:50:29:e3:09:d1:c6:0d:1b:6c:76:03:60:
26:e2:98:05:b8:24:dc:12:3e:d9:99:e6:c9:43:2f:69:ee:af:
51:66:66:52:e4:b6:b5:5f:d9:16:16:dd:32:27:36:93:2c:d6:
03:17:41:78:b5:50:46:c9:05:1b:b0:f1:66:d5:db:c6:79:50:
86:35:be:8c:fb:84:da:fe:db:d8:21:33:91:aa:b6:f5:5b:a4:
63:de:17:e2:b8:63:d2:e6:ce:63:60:1f:0b:68:22:6a:40:5b:
07:b7:2d:ec:54:9b:65:9d:76:f9:4f:a0:a5:30:8b:7c:21:e6:
78:f4:57:07:7b:d2:5e:be:c4:8f:ab:f6:65:fd:0b:ff:a1:2d:
6c:53:3b:48:72:df:4d:34:7d:ac:01:f1:4c:54:ed:c3:24:b4:
68:5f:a2:ea:d2:65:47:42:c5:24:87:e8:1b:f9:5a:7d:ab:0a:
4a:81:5f:15:42:9c:fb:57:69:6f:d8:7d:8a:78:0e:cb:c0:b2:
e8:6a:4a:fb:09:60:39:16:6d:96:cd:3c:f9:17:1b:ae:91:d8:
59:7e:13:b6:10:54:df:c4:60:d1:75:1e:4d:d3:38:5f:2b:5a:
2b:03:c8:12:b7:be:f9:c8:1f:74:c9:66:5f:ba:88:0e:20:d9:
80:75:60:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqC5KdlSu8UpwPtRfyj3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3OWQxMzY2NGEzNzlkOGI1ZGFkZjc2M2RkMDRmNTExNWUw
MjMxODQwHhcNMjUwODIzMDIwMDQ4WhcNMjUwODI0MDIwMDQ4WjAzMTEwLwYDVQQD
EygzNzNlNGRiNTZhOGY1YWQzYmU3NGQxMzU3NTBmNTYzMjUxNDFlNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cMb03ECmsrET0fljsH+juTgpIoD
HT0Af4dytZ2l2mpxhQKQgJHOQGUgrkIFkSzNfJmNLG1K49wRhCCaBxlZhXMZ0xbN
0EL9jhbuvWh0gs0RqlSHkd1ca/2uhD4tPawdljJOtEOB7OHU41CpruRCDTzKnxE8
8mje7j5EWXNXpwOGnSXYal/vywGUnsgq7awuGiBTFVfMcFEbaxdMWxrbYxmhxzU0
b1s+o60vABAKJL+cK1X8NT/L6ePmoa5CphwUBYmejVNjrSQkMqSnVCQersbU7k/F
mN3f0MwyUAvKVtdYoFGTMts4hMi7m73IPs6dnjkiRH/LrDVH7o8oj2T5CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDc+TbVqj1rTvnTRNXUPVjJRQea2MB8GA1UdIwQY
MBaAFMedE2ZKN52LXa33Y90E9RFeAjGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9lYzZiMjktMzYyMS00MDI0LTg2Mjgt
Mjg4NDI1MjljN2ExLzEveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9lYzZiMjktMzYyMS00MDI0LTg2MjgtMjg4NDI1MjljN2Ex
LzEveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOEszFWk
UCnjCdHGDRtsdgNgJuKYBbgk3BI+2ZnmyUMvae6vUWZmUuS2tV/ZFhbdMic2kyzW
AxdBeLVQRskFG7DxZtXbxnlQhjW+jPuE2v7b2CEzkaq29VukY94X4rhj0ubOY2Af
C2giakBbB7ct7FSbZZ12+U+gpTCLfCHmePRXB3vSXr7Ej6v2Zf0L/6EtbFM7SHLf
TTR9rAHxTFTtwyS0aF+i6tJlR0LFJIfoG/lafasKSoFfFUKc+1dpb9h9ingOy8Cy
6GpK+wlgORZtls08+RcbrpHYWX4TthBU38Rg0XUeTdM4XytaKwPIEre++cgfdMlm
X7qIDiDZgHVg+w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:29 2025 by rpki-client