Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: G6J2ZXjzTeWQ5IHI8uL9tbZ+vNyYTZZCR28G+uI/BMU=
Subject key identifier: FE:1A:D6:6B:F0:2C:6F:89:A7:CB:E7:B0:72:0F:82:D2:66:90:C5:BF
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 0198D92B6DEC41C7F0B26839A3703CEFB1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0A02
Signing time: Sat 23 Aug 2025 23:02:38 +0000
Manifest this update: Sat 23 Aug 2025 23:02:38 +0000
Manifest next update: Sun 24 Aug 2025 23:02:38 +0000
Files and hashes: 1: 1pYkybGgKOUsse4DTksz46U1UVk.roa (hash: TAfzGG00BI7uAR7rTZh0yLg+7xDY58D62iiCBqbod3s=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: ZG5pmDCFcyZw4djatih+dB8RJldMJgYyij7v4qLSvNs=)
3: VxdHezzHKrkrE2Feoz1POMlVQMY.roa (hash: FkZe/vgHmq1Yaa4HgYSORTSSTc1UQglxGrV02REUteE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:2b:6d:ec:41:c7:f0:b2:68:39:a3:70:3c:ef:b1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Aug 23 23:02:38 2025 GMT
Not After : Aug 24 23:02:38 2025 GMT
Subject: CN=fe1ad66bf02c6f89a7cbe7b0720f82d26690c5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:ca:68:78:0f:f1:09:ae:c4:ff:bd:c4:d9:
dd:f1:f1:c0:c4:7c:23:3a:c1:90:10:3d:44:eb:68:
36:2a:7f:87:c5:bf:2c:2e:ce:fe:33:db:66:87:44:
b8:7c:76:ae:a9:f3:9a:2f:71:51:b1:31:83:4a:ea:
c4:b8:01:87:3a:25:eb:db:c0:68:3b:eb:86:19:29:
bc:09:a5:2e:05:4f:72:5b:7c:07:4e:12:48:14:52:
67:67:76:96:35:e4:1d:8c:db:ce:da:a3:49:05:10:
b2:06:08:b0:b4:35:56:56:d3:9d:2e:83:aa:d6:9e:
37:5f:08:97:b5:2a:10:59:de:0f:b9:30:7b:4f:70:
bc:24:db:6d:71:69:7c:19:db:13:ed:1b:79:1d:14:
fa:08:dd:a6:c4:a5:60:b2:bd:b9:60:ed:96:9f:32:
70:4f:01:b1:90:da:b0:25:ce:4a:9e:3b:db:c8:a0:
89:0f:4a:d7:3d:f0:2e:e9:f6:1a:f7:26:01:23:20:
d8:e0:60:9a:84:f7:41:f9:ab:d4:de:ba:98:a0:56:
93:ad:0b:92:9c:eb:78:3d:ec:a7:d7:fa:a1:5a:e9:
2b:05:fb:d8:98:78:e5:ea:cc:5b:6d:71:f0:c5:06:
e1:90:2b:78:11:e3:72:f4:bf:ae:8f:b8:32:52:6e:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1A:D6:6B:F0:2C:6F:89:A7:CB:E7:B0:72:0F:82:D2:66:90:C5:BF
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c3:c6:39:f6:d4:2f:5c:99:fe:1d:2d:b7:1b:36:bd:f1:8b:
16:84:70:cb:5f:53:ae:20:b0:e1:ed:93:a1:0c:91:92:47:4e:
ab:7a:58:aa:46:1b:f2:49:ec:0c:64:bd:95:c0:97:9e:8b:62:
72:66:c4:c9:46:8f:50:06:43:db:99:d2:1b:49:e0:c5:0f:97:
66:7f:9c:b4:d8:e1:a8:50:45:56:8b:e8:38:88:20:31:b3:77:
17:48:72:72:b8:8c:7d:be:e0:2f:05:4e:fc:e6:d5:17:1c:4d:
f1:ed:38:b5:00:39:5c:93:b3:3c:8e:5c:b9:6b:32:3c:a9:09:
e1:e7:fe:99:23:ad:5a:62:f5:b9:eb:5d:eb:05:02:f0:7d:fa:
80:16:a6:69:8f:ee:c5:7a:07:5d:20:07:cb:7f:e3:06:02:fa:
ac:27:db:08:09:00:24:0b:0e:3f:a6:2c:6b:f3:08:4c:de:39:
34:da:3a:d2:10:31:2a:ff:ce:fb:16:6e:bb:06:fc:a3:39:82:
22:3d:e1:29:5a:8f:f1:9c:57:22:42:36:9b:00:e1:dc:fc:ad:
14:99:a2:84:cf:e2:6e:5e:70:fd:62:5b:2c:d4:6a:11:0c:02:
a9:13:f3:2e:65:47:ee:c6:32:87:e3:a7:1c:32:6a:93:be:e5:
0c:d5:b4:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjZK23sQcfwsmg5o3A877HsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi
OWQ2ZDYwHhcNMjUwODIzMjMwMjM4WhcNMjUwODI0MjMwMjM4WjAzMTEwLwYDVQQD
EyhmZTFhZDY2YmYwMmM2Zjg5YTdjYmU3YjA3MjBmODJkMjY2OTBjNWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotzKaHgP8QmuxP+9xNnd8fHAxHwj
OsGQED1E62g2Kn+Hxb8sLs7+M9tmh0S4fHauqfOaL3FRsTGDSurEuAGHOiXr28Bo
O+uGGSm8CaUuBU9yW3wHThJIFFJnZ3aWNeQdjNvO2qNJBRCyBgiwtDVWVtOdLoOq
1p43XwiXtSoQWd4PuTB7T3C8JNttcWl8GdsT7Rt5HRT6CN2mxKVgsr25YO2WnzJw
TwGxkNqwJc5KnjvbyKCJD0rXPfAu6fYa9yYBIyDY4GCahPdB+avU3rqYoFaTrQuS
nOt4Peyn1/qhWukrBfvYmHjl6sxbbXHwxQbhkCt4EeNy9L+uj7gyUm7ebwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4a1mvwLG+Jp8vnsHIPgtJmkMW/MB8GA1UdIwQY
MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt
NTViNjU5Y2Q4MmJiLzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi
LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcPGOfbU
L1yZ/h0ttxs2vfGLFoRwy19TriCw4e2ToQyRkkdOq3pYqkYb8knsDGS9lcCXnoti
cmbEyUaPUAZD25nSG0ngxQ+XZn+ctNjhqFBFVovoOIggMbN3F0hycriMfb7gLwVO
/ObVFxxN8e04tQA5XJOzPI5cuWsyPKkJ4ef+mSOtWmL1uetd6wUC8H36gBamaY/u
xXoHXSAHy3/jBgL6rCfbCAkAJAsOP6Ysa/MITN45NNo60hAxKv/O+xZuuwb8ozmC
Ij3hKVqP8ZxXIkI2mwDh3PytFJmihM/ibl5w/WJbLNRqEQwCqRPzLmVH7sYyh+On
HDJqk77lDNW0IA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:09:09 2025 by rpki-client