Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: lg4wrAVrned6dICatIre6XWuNStKk+PpWbG5dV4R6aY=
Subject key identifier: AC:CC:AB:6D:B9:76:B9:E9:CF:21:EB:E3:BA:18:1C:75:FA:73:AD:EC
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 0198D5161F29C37E9314D7A8E0EB760D63A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 0672
Signing time: Sat 23 Aug 2025 04:00:53 +0000
Manifest this update: Sat 23 Aug 2025 04:00:53 +0000
Manifest next update: Sun 24 Aug 2025 04:00:53 +0000
Files and hashes: 1: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (hash: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=)
2: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: Xgpn1Ewn0H/ABzffmud3LchFopNedHySiiPVflFsQAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:1f:29:c3:7e:93:14:d7:a8:e0:eb:76:0d:63:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Aug 23 04:00:53 2025 GMT
Not After : Aug 24 04:00:53 2025 GMT
Subject: CN=acccab6db976b9e9cf21ebe3ba181c75fa73adec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:32:3d:41:67:fd:70:7c:7b:8e:0f:33:52:
bf:c5:02:07:b7:00:66:86:f7:10:7e:ff:05:5a:4b:
d7:05:7e:06:76:ca:13:66:71:f9:4f:18:9e:f1:d8:
e7:ec:f6:35:25:d2:7d:25:5e:3a:92:d4:83:a3:c3:
2c:a0:7d:3a:b6:cb:ce:2b:72:a0:26:99:b1:4b:44:
43:62:44:f3:b4:fb:a6:5d:5c:73:c0:60:56:c5:49:
57:06:8d:c0:f0:13:85:6b:49:3f:ae:c4:a7:1f:37:
2d:71:5b:e4:03:e1:9f:6f:ec:f5:08:4c:3d:40:1d:
bd:65:db:b2:6c:9d:ba:89:9a:3b:b2:48:57:17:31:
72:61:b6:37:59:8d:97:d1:51:01:38:22:95:6f:cd:
b0:08:81:79:f5:2e:e4:d5:17:4f:46:2f:1a:45:5a:
8b:31:7c:a9:f3:7c:88:60:19:f5:69:b3:85:88:ad:
eb:4b:0c:7f:b0:5f:b0:a0:e0:0d:30:2e:6d:39:d3:
21:83:95:a8:3b:61:87:71:df:a7:d8:a1:bc:fb:7c:
00:cd:38:7d:3d:38:79:d7:5c:d2:8b:19:ea:24:03:
0c:4d:3f:f2:d5:9d:ae:6d:8a:3a:1a:a0:a3:96:c9:
4e:3d:b2:9a:e0:51:bd:c7:9d:42:16:6f:be:ad:51:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CC:AB:6D:B9:76:B9:E9:CF:21:EB:E3:BA:18:1C:75:FA:73:AD:EC
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:02:4a:fa:5a:41:bf:b6:3b:39:cb:36:2c:e4:0e:45:ea:be:
1e:45:45:b2:62:0e:23:6e:b0:b9:e4:15:0a:3d:e3:d5:cb:d4:
60:30:82:52:f2:64:cd:69:2b:95:ab:6a:95:89:b9:e8:bb:25:
72:44:28:db:df:25:ef:d6:7d:c7:fa:4a:54:bc:6e:f0:ca:62:
9a:b2:0b:62:7a:2b:9e:81:0d:fd:0f:d6:34:b9:a8:9a:e7:16:
88:5e:0d:dc:75:2d:68:54:90:27:4f:ca:2a:8c:c7:88:e6:f3:
e0:fc:82:2b:4f:8d:f2:c3:6c:91:99:c8:c8:e9:d8:01:a0:0e:
9a:7f:eb:63:23:42:77:5a:1e:b0:10:29:34:86:78:62:f8:89:
e2:39:29:df:ed:12:57:54:80:94:77:a0:6d:38:3c:33:0c:3c:
f7:e5:1a:07:74:9a:c4:c8:b8:1c:56:b1:d5:a1:c3:98:33:4d:
20:aa:8c:cc:a9:cc:ed:ff:ab:42:56:1d:b0:ae:93:22:fb:c5:
5e:62:9e:ca:1c:5c:84:7c:d1:43:11:b0:f8:3f:27:2d:d0:49:
7f:c7:c1:21:2d:0b:ce:29:51:09:d0:9d:3f:8e:60:0b:2f:e0:
5e:48:74:d7:44:d7:ec:d7:46:c1:66:72:3a:c6:03:65:99:d9:
dc:fd:f0:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFh8pw36TFNeo4Ot2DWOpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2
MmM1YTkwHhcNMjUwODIzMDQwMDUzWhcNMjUwODI0MDQwMDUzWjAzMTEwLwYDVQQD
EyhhY2NjYWI2ZGI5NzZiOWU5Y2YyMWViZTNiYTE4MWM3NWZhNzNhZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl4yPUFn/XB8e44PM1K/xQIHtwBm
hvcQfv8FWkvXBX4GdsoTZnH5Txie8djn7PY1JdJ9JV46ktSDo8MsoH06tsvOK3Kg
JpmxS0RDYkTztPumXVxzwGBWxUlXBo3A8BOFa0k/rsSnHzctcVvkA+Gfb+z1CEw9
QB29ZduybJ26iZo7skhXFzFyYbY3WY2X0VEBOCKVb82wCIF59S7k1RdPRi8aRVqL
MXyp83yIYBn1abOFiK3rSwx/sF+woOANMC5tOdMhg5WoO2GHcd+n2KG8+3wAzTh9
PTh511zSixnqJAMMTT/y1Z2ubYo6GqCjlslOPbKa4FG9x51CFm++rVFlhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzMq225drnpzyHr47oYHHX6c63sMB8GA1UdIwQY
MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct
ODY1NDI2NjQ1N2M2LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2
LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwJK+lpB
v7Y7Ocs2LOQOReq+HkVFsmIOI26wueQVCj3j1cvUYDCCUvJkzWkrlatqlYm56Lsl
ckQo298l79Z9x/pKVLxu8MpimrILYnornoEN/Q/WNLmomucWiF4N3HUtaFSQJ0/K
KozHiObz4PyCK0+N8sNskZnIyOnYAaAOmn/rYyNCd1oesBApNIZ4YviJ4jkp3+0S
V1SAlHegbTg8Mww89+UaB3SaxMi4HFax1aHDmDNNIKqMzKnM7f+rQlYdsK6TIvvF
XmKeyhxchHzRQxGw+D8nLdBJf8fBIS0LzilRCdCdP45gCy/gXkh010TX7NdGwWZy
OsYDZZnZ3P3wNQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:51 2025 by rpki-client