Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json)
Hash identifier: jHxXeZhaNlpvmUcjkmAm2LUfETTkrez3YhLXZrWWBsw=
Subject key identifier: 98:ED:57:B7:91:1E:2A:50:D2:44:4E:BC:8B:10:6E:C5:DC:49:0B:14
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 0198D404D6E8AE25D48E37ABEF81483D45D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
Manifest number: 1336
Signing time: Fri 22 Aug 2025 23:02:23 +0000
Manifest this update: Fri 22 Aug 2025 23:02:23 +0000
Manifest next update: Sat 23 Aug 2025 23:02:23 +0000
Files and hashes: 1: BMtrajiT8kc1Pg7kzTaWX9dZggk.roa (hash: OKRwb7gvAgyjstxUa1W7+46wLP3OqM3yM6o0/CqxEn0=)
2: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: +4yHGvVwsuanGWDwEb9ecAO4zgtqV1A4TGj1q8mlBxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:d6:e8:ae:25:d4:8e:37:ab:ef:81:48:3d:45:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Aug 22 23:02:23 2025 GMT
Not After : Aug 23 23:02:23 2025 GMT
Subject: CN=98ed57b7911e2a50d2444ebc8b106ec5dc490b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:06:a9:75:b8:40:35:92:2e:f2:62:61:ed:
d5:e9:51:52:33:5e:1e:0a:f6:90:08:66:3a:e7:eb:
60:9a:21:b4:54:f9:52:a1:10:81:2c:ef:97:d2:99:
65:8b:bf:90:a5:52:47:af:29:fd:7c:e5:bf:9f:71:
63:b0:67:40:5d:57:77:e7:5e:86:93:f8:be:3f:a0:
64:ab:39:5d:ae:7d:fb:4c:96:d2:00:39:82:3d:0d:
bd:28:fa:38:2e:7b:58:83:3c:44:fe:3c:77:dc:38:
42:a0:6d:64:46:8a:8e:d9:10:e8:65:57:aa:aa:8a:
3a:e1:3b:e0:4b:9d:7e:c0:33:64:b9:dd:6f:1b:91:
7f:8a:9a:bb:d4:8d:a8:f9:80:03:e5:d7:c4:22:26:
74:ed:85:a6:16:b4:5d:38:a8:56:34:07:b6:98:e6:
23:2b:8d:4a:53:ea:73:a5:88:10:0e:3c:2c:d6:a9:
9c:7d:a4:fa:cd:af:ab:cf:ad:ce:07:83:bf:7f:5b:
b4:4a:90:d9:2d:0e:17:31:b2:e1:28:1d:94:cc:77:
e9:bf:00:11:1f:26:0c:b1:55:3e:1b:b3:0d:0e:d7:
f9:ab:85:d2:e9:ba:37:5e:ce:d6:1c:85:1a:49:86:
aa:61:61:00:71:4e:be:05:1c:a0:6f:73:f2:02:f1:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:57:B7:91:1E:2A:50:D2:44:4E:BC:8B:10:6E:C5:DC:49:0B:14
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dd:56:51:fd:81:3a:7f:e6:29:8d:05:e4:1f:89:95:aa:b0:
ed:a3:7c:e5:fb:7b:45:c5:57:53:e3:fe:48:73:d1:4a:84:0d:
95:92:ba:e6:5e:e0:2f:94:53:f5:71:40:15:ea:06:ca:c8:d5:
72:e0:d9:07:64:2c:da:f0:c7:e4:62:34:5b:bf:76:d4:85:67:
fa:16:54:a4:14:69:34:3b:b1:a0:64:f8:04:98:4a:63:12:bf:
d2:03:3b:9d:0d:7d:83:6a:13:fa:c1:4e:a8:3e:28:84:36:30:
99:80:81:42:22:00:40:65:00:3e:01:49:c3:1a:f2:06:c6:e8:
35:0c:62:ff:22:5a:3a:20:af:e0:e0:67:4c:06:2c:98:fc:4a:
ad:b1:72:89:2a:10:a2:cd:0a:57:c1:68:da:94:1f:91:3a:a3:
cc:7d:b5:96:1f:7a:42:02:44:70:55:c9:48:91:be:98:f4:89:
c3:82:9c:ed:01:10:7f:d3:66:bf:65:20:e1:b9:b0:2a:29:e4:
c2:2e:7a:0d:f2:b9:b3:ec:39:d9:f2:40:28:b7:d0:84:b1:19:
a4:e2:9d:44:46:34:e4:fb:4e:e7:95:19:02:e9:fe:ed:a7:2c:
6a:b3:d0:2f:07:c4:24:99:dc:1d:7d:25:75:b8:87:3a:03:93:
98:c6:06:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBNboriXUjjer74FIPUXQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTNmMWVkMWI0OWM1YmE3Y2MxZjE5MmE0MDI0NzY1YTI1
MzY2NGUwHhcNMjUwODIyMjMwMjIzWhcNMjUwODIzMjMwMjIzWjAzMTEwLwYDVQQD
Eyg5OGVkNTdiNzkxMWUyYTUwZDI0NDRlYmM4YjEwNmVjNWRjNDkwYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGMGqXW4QDWSLvJiYe3V6VFSM14e
CvaQCGY65+tgmiG0VPlSoRCBLO+X0plli7+QpVJHryn9fOW/n3FjsGdAXVd3516G
k/i+P6Bkqzldrn37TJbSADmCPQ29KPo4LntYgzxE/jx33DhCoG1kRoqO2RDoZVeq
qoo64TvgS51+wDNkud1vG5F/ipq71I2o+YAD5dfEIiZ07YWmFrRdOKhWNAe2mOYj
K41KU+pzpYgQDjws1qmcfaT6za+rz63OB4O/f1u0SpDZLQ4XMbLhKB2UzHfpvwAR
HyYMsVU+G7MNDtf5q4XS6bo3Xs7WHIUaSYaqYWEAcU6+BRygb3PyAvGI3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjtV7eRHipQ0kROvIsQbsXcSQsUMB8GA1UdIwQY
MBaAFK/j8e0bScW6fMHxkqQCR2WiU2ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iNDQ0ODgtMDUwMC00NTM4LTkzYjEt
MjY4OGQzNDZmNmFiLzEvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9iNDQ0ODgtMDUwMC00NTM4LTkzYjEtMjY4OGQzNDZmNmFi
LzEvci1QeDdSdEp4YnA4d2ZHU3BBSkhaYUpUWms0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPN1WUf2B
On/mKY0F5B+Jlaqw7aN85ft7RcVXU+P+SHPRSoQNlZK65l7gL5RT9XFAFeoGysjV
cuDZB2Qs2vDH5GI0W7921IVn+hZUpBRpNDuxoGT4BJhKYxK/0gM7nQ19g2oT+sFO
qD4ohDYwmYCBQiIAQGUAPgFJwxryBsboNQxi/yJaOiCv4OBnTAYsmPxKrbFyiSoQ
os0KV8Fo2pQfkTqjzH21lh96QgJEcFXJSJG+mPSJw4Kc7QEQf9Nmv2Ug4bmwKink
wi56DfK5s+w52fJAKLfQhLEZpOKdREY05PtO55UZAun+7acsarPQLwfEJJncHX0l
dbiHOgOTmMYGmg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:17 2025 by rpki-client