Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: 7qQvWKrxasHieXCmNlN2G2dBkcQb1SOJ4HUXbXlvxCU=
Subject key identifier: AF:88:77:28:EA:38:FE:10:43:52:05:A5:D7:9B:24:07:CB:47:AF:C2
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 0198D4DFEDDC1DEA1C089AD90D475A3170A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:41 +0000
Manifest this update: Sat 23 Aug 2025 03:01:41 +0000
Manifest next update: Sun 24 Aug 2025 03:01:41 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: GyyjcDu6zhkMekbOrCrUtYpTEvC5cO8MvNrABgLn1eA=)
2: ugc9sZedf1kQim_ILlGgEqT8zEQ.roa (hash: il9YS8RE+T8nxwMQDbcqvrV75JMzYR3yLbUc6KCg+oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ed:dc:1d:ea:1c:08:9a:d9:0d:47:5a:31:70:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Aug 23 03:01:41 2025 GMT
Not After : Aug 24 03:01:41 2025 GMT
Subject: CN=af887728ea38fe10435205a5d79b2407cb47afc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c6:ec:f9:20:83:ac:4c:1a:43:99:b9:00:57:
d6:14:24:c3:52:38:f4:49:aa:21:14:7f:63:94:ba:
07:f6:d4:aa:7a:df:a6:53:51:c2:1c:b4:78:ea:fa:
f3:29:cd:1c:e2:7c:87:31:39:56:17:8b:c3:06:46:
29:8a:11:64:4b:92:48:d8:c3:d3:97:87:5f:7d:b1:
61:b7:79:58:3a:dd:63:7e:86:de:6e:da:85:26:a9:
ef:44:c9:fb:2c:3f:f4:25:fd:02:21:27:6b:aa:10:
73:ef:3f:51:89:b5:75:2d:18:51:d9:a7:71:e1:e4:
20:78:9f:fb:ed:2a:f8:67:e5:05:79:bf:9d:4b:ea:
ed:40:d1:7d:3f:d3:23:cf:2c:1c:0e:87:e7:98:aa:
b1:ae:ea:21:da:db:b7:a3:66:b6:5c:78:4d:2f:fa:
2d:fd:cf:a6:10:40:79:b2:fa:c0:ea:60:61:36:92:
30:39:75:3d:fa:63:81:09:52:e1:a7:68:80:11:ac:
12:cf:71:58:aa:f1:65:af:49:37:1c:03:42:de:c1:
19:a6:ea:66:27:2b:8f:3c:eb:c1:e9:f9:b3:bc:28:
30:f1:0f:61:b5:f0:bb:73:78:6a:a7:73:c3:85:b1:
02:84:f7:35:69:55:dc:6c:cd:dc:6a:6e:5b:53:43:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:88:77:28:EA:38:FE:10:43:52:05:A5:D7:9B:24:07:CB:47:AF:C2
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:79:b0:ad:63:3d:a7:70:57:f4:60:f7:60:28:dc:ba:be:5e:
ec:4b:b4:2c:a1:e2:4e:5c:9b:5a:be:b1:02:f9:13:bd:9a:54:
e5:3c:e1:2c:e1:f2:51:58:77:4c:1a:ba:1e:93:e9:0c:93:5a:
9e:89:ed:2f:2c:fa:2b:ff:f6:6e:fb:e7:d2:c4:3c:ad:86:c9:
34:db:56:3c:d3:37:a8:b9:d6:35:33:e1:3f:19:ff:7b:cd:52:
20:a4:6a:74:aa:e3:3b:9f:17:41:dd:a5:a2:fd:67:97:6a:27:
02:e8:ec:8c:2d:b5:24:1f:5c:0e:bd:7e:c9:8e:f9:1b:97:cc:
3c:19:b0:0f:95:56:0a:af:79:84:cf:05:cd:04:f0:72:6a:9b:
92:14:24:be:93:88:23:28:0e:26:cb:b9:e4:25:55:4f:04:38:
ba:c3:a4:96:35:e7:78:99:fd:90:09:22:58:b0:a7:8b:9a:7c:
6c:5b:ef:1f:4c:4a:74:f5:10:4d:69:6e:8e:7b:96:c0:46:3f:
68:ba:fc:42:d8:ab:8e:3e:7f:ca:da:85:15:58:b8:05:c7:f4:
0d:56:bd:df:46:04:de:4d:8d:b1:c5:eb:94:6f:8a:b2:e3:79:
1d:86:b3:bb:09:58:21:29:af:f6:fb:9a:7b:86:84:f6:5c:c2:
86:cc:a4:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3+3cHeocCJrZDUdaMXCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMTAyN2FjZTE3ZjAwNjdmNjk3YzY1MzYxNDg4MTkyZWFm
NjQxMzgwHhcNMjUwODIzMDMwMTQxWhcNMjUwODI0MDMwMTQxWjAzMTEwLwYDVQQD
EyhhZjg4NzcyOGVhMzhmZTEwNDM1MjA1YTVkNzliMjQwN2NiNDdhZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sbs+SCDrEwaQ5m5AFfWFCTDUjj0
SaohFH9jlLoH9tSqet+mU1HCHLR46vrzKc0c4nyHMTlWF4vDBkYpihFkS5JI2MPT
l4dffbFht3lYOt1jfobebtqFJqnvRMn7LD/0Jf0CISdrqhBz7z9RibV1LRhR2adx
4eQgeJ/77Sr4Z+UFeb+dS+rtQNF9P9MjzywcDofnmKqxruoh2tu3o2a2XHhNL/ot
/c+mEEB5svrA6mBhNpIwOXU9+mOBCVLhp2iAEawSz3FYqvFlr0k3HANC3sEZpupm
JyuPPOvB6fmzvCgw8Q9htfC7c3hqp3PDhbEChPc1aVXcbM3cam5bU0MPNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+IdyjqOP4QQ1IFpdebJAfLR6/CMB8GA1UdIwQY
MBaAFAsQJ6zhfwBn9pfGU2FIgZLq9kE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hBbnJPRl9BR2YybDhaVFlVaUJrdXIyUVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iMzExZDQtZTM1OC00NzIxLWFiOGQt
NmU2YTVmMTcyYmUzLzEvQ3hBbnJPRl9BR2YybDhaVFlVaUJrdXIyUVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iMzExZDQtZTM1OC00NzIxLWFiOGQtNmU2YTVmMTcyYmUz
LzEvQ3hBbnJPRl9BR2YybDhaVFlVaUJrdXIyUVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3mwrWM9
p3BX9GD3YCjcur5e7Eu0LKHiTlybWr6xAvkTvZpU5TzhLOHyUVh3TBq6HpPpDJNa
nontLyz6K//2bvvn0sQ8rYbJNNtWPNM3qLnWNTPhPxn/e81SIKRqdKrjO58XQd2l
ov1nl2onAujsjC21JB9cDr1+yY75G5fMPBmwD5VWCq95hM8FzQTwcmqbkhQkvpOI
IygOJsu55CVVTwQ4usOkljXneJn9kAkiWLCni5p8bFvvH0xKdPUQTWlujnuWwEY/
aLr8Qtirjj5/ytqFFVi4Bcf0DVa930YE3k2NscXrlG+KsuN5HYazuwlYISmv9vua
e4aE9lzChsykhQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:54 2025 by rpki-client