Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: J7qvXg7lsf1ehHkVg/xlx5S7D720aC5k1JhMv/4RCAk=
Subject key identifier: 00:3E:BC:66:AC:2A:C9:56:5D:3D:17:39:15:8D:AF:89:C5:2E:11:2A
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 0198D4E062FF6FC0AE02F0DBA3BEBF46D841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 149E
Signing time: Sat 23 Aug 2025 03:02:11 +0000
Manifest this update: Sat 23 Aug 2025 03:02:11 +0000
Manifest next update: Sun 24 Aug 2025 03:02:11 +0000
Files and hashes: 1: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: CDXh6olqu6UPdNj0mRTPoRnpylt9XNWi9TzIUWNOv+A=)
2: zUVgbIXYeTGVKXvGEymmIIswak0.roa (hash: byi69vgfiULR5t5etKbYt0ap14VdTPxIUc5JBAXpbBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:62:ff:6f:c0:ae:02:f0:db:a3:be:bf:46:d8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Aug 23 03:02:11 2025 GMT
Not After : Aug 24 03:02:11 2025 GMT
Subject: CN=003ebc66ac2ac9565d3d1739158daf89c52e112a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:94:d1:a6:e5:2a:08:c0:51:8d:c9:67:5d:
01:ac:0d:2c:9a:f6:9a:4d:84:c8:cd:74:d8:49:e5:
21:40:28:10:2c:ad:6c:f9:5b:e8:2e:cd:b0:53:e7:
5a:50:35:ca:dd:bb:02:e0:61:18:1d:44:be:09:6c:
cc:61:da:e3:ed:22:26:9c:fd:2b:e3:90:1e:64:a3:
73:32:d0:35:c7:73:ab:dc:45:da:ff:98:30:05:c1:
7e:c0:fb:13:3e:79:66:03:c4:1c:7b:63:7d:62:ba:
bb:91:a7:72:91:d0:0b:6c:b8:be:d0:00:a9:03:85:
1f:71:7e:2f:6b:a4:20:b4:ff:1a:9b:f4:37:90:2a:
64:21:f2:2e:5c:2d:1b:89:9d:3d:ca:7b:a8:b5:44:
0b:13:b4:62:d5:92:5b:8e:ee:2d:b7:74:60:ff:c3:
3c:28:e9:dd:ae:6f:09:61:71:ba:07:88:d4:71:f7:
ea:b7:c3:ec:26:28:a1:d6:f4:75:ac:48:a7:50:cb:
b9:78:4e:ee:c7:f4:37:8b:61:6b:ff:cc:3c:1b:b9:
a3:52:a9:b6:15:48:62:42:06:40:c8:bc:4e:08:c5:
0c:24:09:ba:ce:64:14:90:9f:9d:1d:7c:83:06:17:
fe:94:24:5f:e6:39:45:a6:bb:3f:0d:0c:61:8c:11:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3E:BC:66:AC:2A:C9:56:5D:3D:17:39:15:8D:AF:89:C5:2E:11:2A
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:02:d8:1d:0f:7d:90:dc:e2:a0:cb:d8:41:07:06:32:06:dd:
d0:ab:e5:bb:00:51:7b:4d:11:8f:ba:8b:09:ae:d1:81:ed:81:
f7:23:6f:05:7f:64:dc:9e:97:95:0f:01:37:6b:43:fc:a3:87:
fc:05:c6:b0:94:5b:92:ee:f1:5c:26:f7:26:b9:18:d6:9c:6d:
58:a8:32:14:4c:cb:36:86:e3:1c:ba:7b:d6:19:63:24:0f:97:
14:8a:86:10:db:7a:61:d7:9a:7b:bd:3a:1d:63:66:f4:a9:47:
ec:aa:4f:90:04:fa:e6:ff:25:e4:32:8f:ed:17:f3:5b:89:46:
c4:a4:fd:68:4e:32:c7:2c:e4:5c:7b:21:0b:8e:13:e4:56:62:
98:30:8e:b4:53:f8:dd:65:04:5a:d7:54:7c:75:e3:84:df:77:
5c:68:70:0b:02:24:d6:e0:4b:4b:63:43:f1:e0:cc:91:0b:c6:
9a:e8:3b:94:09:d7:24:34:ed:7c:4b:74:6e:01:05:34:a6:81:
9e:e0:61:1d:b1:c1:4e:32:75:d4:44:c4:c6:af:84:81:ac:1d:
a5:5b:7d:ed:11:e0:57:41:29:b9:8e:b6:af:aa:f0:0e:a5:b5:
12:43:b8:6b:fb:ab:a0:15:e7:77:0d:34:d4:2f:e7:23:ac:05:
52:da:40:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4GL/b8CuAvDbo76/RthBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MTljYWQ5OTIyMTE1YmNmYTc0NTJiYTBhNmU0M2E2YWY0
ZTRjMjQwHhcNMjUwODIzMDMwMjExWhcNMjUwODI0MDMwMjExWjAzMTEwLwYDVQQD
EygwMDNlYmM2NmFjMmFjOTU2NWQzZDE3MzkxNThkYWY4OWM1MmUxMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6CU0ablKgjAUY3JZ10BrA0smvaa
TYTIzXTYSeUhQCgQLK1s+VvoLs2wU+daUDXK3bsC4GEYHUS+CWzMYdrj7SImnP0r
45AeZKNzMtA1x3Or3EXa/5gwBcF+wPsTPnlmA8Qce2N9Yrq7kadykdALbLi+0ACp
A4UfcX4va6QgtP8am/Q3kCpkIfIuXC0biZ09ynuotUQLE7Ri1ZJbju4tt3Rg/8M8
KOndrm8JYXG6B4jUcffqt8PsJiih1vR1rEinUMu5eE7ux/Q3i2Fr/8w8G7mjUqm2
FUhiQgZAyLxOCMUMJAm6zmQUkJ+dHXyDBhf+lCRf5jlFprs/DQxhjBERJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAA+vGasKslWXT0XORWNr4nFLhEqMB8GA1UdIwQY
MBaAFMcZytmSIRW8+nRSugpuQ6avTkwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNDkzMzItNjk2OS00YzRiLWI1OTEt
N2MyYzA4YjVlZTQ5LzEveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xNDkzMzItNjk2OS00YzRiLWI1OTEtN2MyYzA4YjVlZTQ5
LzEveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwLYHQ99
kNzioMvYQQcGMgbd0KvluwBRe00Rj7qLCa7Rge2B9yNvBX9k3J6XlQ8BN2tD/KOH
/AXGsJRbku7xXCb3JrkY1pxtWKgyFEzLNobjHLp71hljJA+XFIqGENt6Ydeae706
HWNm9KlH7KpPkAT65v8l5DKP7RfzW4lGxKT9aE4yxyzkXHshC44T5FZimDCOtFP4
3WUEWtdUfHXjhN93XGhwCwIk1uBLS2ND8eDMkQvGmug7lAnXJDTtfEt0bgEFNKaB
nuBhHbHBTjJ11ETExq+EgawdpVt97RHgV0EpuY62r6rwDqW1EkO4a/uroBXndw00
1C/nI6wFUtpAAg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:04 2025 by rpki-client