Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File: x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier: lDPpBKKQxgpnmD5aboicE1508VJa7JknHGh77JH2iyA=
Subject key identifier: A3:59:CF:D2:73:EC:4E:2B:92:CB:26:3D:8E:AD:E1:C5:F3:C3:97:68
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer: /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial: 0198D66029D176AFBF61AB7E882711F58C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number: 0E15
Signing time: Sat 23 Aug 2025 10:01:23 +0000
Manifest this update: Sat 23 Aug 2025 10:01:23 +0000
Manifest next update: Sun 24 Aug 2025 10:01:23 +0000
Files and hashes: 1: tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa (hash: V0DKhUKbNvI4aOcWkxFt+dLkw7F0CNEt1KU67bvkMmI=)
2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: 1JqutXFib+B3Y3JcaiZtQi1C0NIQHR8c1WOhS8D1U/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:29:d1:76:af:bf:61:ab:7e:88:27:11:f5:8c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
Validity
Not Before: Aug 23 10:01:23 2025 GMT
Not After : Aug 24 10:01:23 2025 GMT
Subject: CN=a359cfd273ec4e2b92cb263d8eade1c5f3c39768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:fc:6f:6e:cc:32:62:fb:9b:22:c2:c4:39:
bc:c1:df:67:68:d7:46:7f:dc:00:14:6c:34:0d:94:
64:a9:8d:e7:df:0f:94:36:ad:ad:35:a6:3f:25:15:
a1:08:19:68:53:ad:94:35:e5:20:f0:f9:7e:55:73:
0d:db:61:76:46:6c:1f:46:74:93:c2:89:49:d4:2b:
a6:27:be:f0:8b:db:ce:e4:87:34:34:f3:25:f3:6f:
be:85:be:27:20:20:9d:2b:bd:55:34:57:88:dd:e9:
3c:b6:e6:3b:e0:50:c8:45:62:60:6f:81:cb:c2:1b:
51:f1:0d:42:f8:22:b2:64:d6:e8:ae:4e:22:f2:fd:
40:db:52:81:b9:26:d2:72:6e:65:52:33:b0:11:db:
35:bf:2d:44:65:31:ac:b5:97:74:24:4a:35:f0:61:
5f:07:4e:54:b3:b5:e8:e3:a8:fc:76:a9:cb:dd:bc:
03:c0:92:02:85:e0:e3:81:0e:e0:75:98:87:30:40:
67:90:ed:dd:e9:21:9e:1a:2a:b2:37:eb:88:69:23:
b4:77:5a:49:8f:40:c0:62:f9:71:e8:f6:a1:4f:9a:
c3:bf:c4:02:9e:a9:4e:72:1f:ce:bc:48:91:70:f6:
cc:99:4a:a7:d3:75:b8:1f:c7:f9:c2:45:9c:6f:cc:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:59:CF:D2:73:EC:4E:2B:92:CB:26:3D:8E:AD:E1:C5:F3:C3:97:68
X509v3 Authority Key Identifier:
keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e2:4e:37:1d:f3:dd:77:f9:40:44:b1:ee:37:26:fe:70:a7:
e9:58:53:c3:5a:47:4c:e4:f5:71:bb:36:84:30:74:9c:1b:14:
81:99:c9:ff:0a:c9:85:31:22:25:04:53:17:b4:2b:ab:44:ee:
17:7a:e1:d2:04:c0:b4:f1:5c:05:fe:91:4c:1b:16:75:a6:24:
e8:ea:aa:6e:be:69:2b:bc:8c:21:ce:dd:10:0f:5b:06:7d:d2:
b9:6c:c7:6f:4f:2d:41:5f:e8:13:cf:3e:60:66:ec:e6:1a:03:
07:f2:e1:d3:b7:b9:61:3a:70:d0:b5:d4:e8:94:ef:dc:29:24:
4e:e3:b8:88:72:db:4c:cb:a0:25:cc:f0:2c:25:d5:b0:31:b3:
9f:bd:9a:3a:25:40:ec:ae:a9:77:65:d0:74:a3:d5:82:a3:75:
bd:3e:98:f4:59:21:23:fc:54:3a:6e:7c:79:f9:6b:ab:0c:10:
1c:c5:23:bf:91:d6:68:19:83:4a:e1:71:63:42:e6:06:40:d6:
9b:b1:4f:80:67:87:2d:d0:83:bf:27:c6:84:3b:eb:82:b7:34:
20:a8:e9:f3:81:d5:6c:60:3e:a4:dd:45:46:1b:3c:c9:50:d1:
c8:44:16:8e:43:1b:ed:23:97:8a:67:3a:1b:13:5c:96:7a:f8:
7d:05:6f:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYCnRdq+/Yat+iCcR9YwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ODI3MzVhYTk4ZDQ2NDVkMDQxMDkzYTc2NjJhMTIzNzk1
MDNhMzEwHhcNMjUwODIzMTAwMTIzWhcNMjUwODI0MTAwMTIzWjAzMTEwLwYDVQQD
EyhhMzU5Y2ZkMjczZWM0ZTJiOTJjYjI2M2Q4ZWFkZTFjNWYzYzM5NzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6j8b27MMmL7myLCxDm8wd9naNdG
f9wAFGw0DZRkqY3n3w+UNq2tNaY/JRWhCBloU62UNeUg8Pl+VXMN22F2RmwfRnST
wolJ1CumJ77wi9vO5Ic0NPMl82++hb4nICCdK71VNFeI3ek8tuY74FDIRWJgb4HL
whtR8Q1C+CKyZNbork4i8v1A21KBuSbScm5lUjOwEds1vy1EZTGstZd0JEo18GFf
B05Us7Xo46j8dqnL3bwDwJICheDjgQ7gdZiHMEBnkO3d6SGeGiqyN+uIaSO0d1pJ
j0DAYvlx6PahT5rDv8QCnqlOch/OvEiRcPbMmUqn03W4H8f5wkWcb8w7NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNZz9Jz7E4rkssmPY6t4cXzw5doMB8GA1UdIwQY
MBaAFMeCc1qpjUZF0EEJOnZioSN5UDoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wNTgyZmYtNzE4OS00YzNjLWE0NWYt
YjQ5M2E5ZGY0ZjhmLzEveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wNTgyZmYtNzE4OS00YzNjLWE0NWYtYjQ5M2E5ZGY0Zjhm
LzEveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+JONx3z
3Xf5QESx7jcm/nCn6VhTw1pHTOT1cbs2hDB0nBsUgZnJ/wrJhTEiJQRTF7Qrq0Tu
F3rh0gTAtPFcBf6RTBsWdaYk6Oqqbr5pK7yMIc7dEA9bBn3SuWzHb08tQV/oE88+
YGbs5hoDB/Lh07e5YTpw0LXU6JTv3CkkTuO4iHLbTMugJczwLCXVsDGzn72aOiVA
7K6pd2XQdKPVgqN1vT6Y9FkhI/xUOm58eflrqwwQHMUjv5HWaBmDSuFxY0LmBkDW
m7FPgGeHLdCDvyfGhDvrgrc0IKjp84HVbGA+pN1FRhs8yVDRyEQWjkMb7SOXimc6
GxNclnr4fQVv1w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:15 2025 by rpki-client