Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json)
Hash identifier: MJAl/F27BTOI1TVVj97yq/UnQhAhTM4931lcQDXsKkw=
Subject key identifier: 2A:24:A0:83:9F:59:96:E1:8D:21:B7:04:53:75:33:78:08:0E:8F:19
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 019A02597BE0814E42271DF4F9A94259E6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
Manifest number: 0AA6
Signing time: Mon 20 Oct 2025 16:00:10 +0000
Manifest this update: Mon 20 Oct 2025 16:00:10 +0000
Manifest next update: Tue 21 Oct 2025 16:00:10 +0000
Files and hashes: 1: LUZuaBg79dIsS49OjD0lOYRx6WI.roa (hash: v0D4l90748oOxXUPlzJQ4Ifkz4PFxH9/jO6hptgWgns=)
2: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: jKFQQ6oqasxXCZfm9gzfEAMTcKMOFy8kEqcgioRqpUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:7b:e0:81:4e:42:27:1d:f4:f9:a9:42:59:e6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: Oct 20 16:00:10 2025 GMT
Not After : Oct 21 16:00:10 2025 GMT
Subject: CN=2a24a0839f5996e18d21b70453753378080e8f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:2f:f3:0a:0b:39:ac:67:f8:e5:1c:35:47:
39:2d:25:7f:b9:10:32:22:1c:ad:f3:eb:c6:c5:03:
d1:6f:02:5f:c9:89:00:b2:8e:40:d0:3f:cf:2f:56:
53:47:d5:07:72:b2:0b:f2:6b:c7:aa:89:40:56:a4:
44:03:2f:69:1b:a6:37:93:5f:65:3a:dd:b0:ce:32:
5c:fa:9c:ee:0f:08:86:bf:ac:1c:66:35:10:80:d5:
ea:0b:7c:45:44:6d:d1:80:1a:07:cb:36:92:57:6d:
08:ac:bf:ef:c7:d0:4e:9f:c8:99:ac:8e:25:c3:33:
ea:be:5a:de:83:0a:ed:e3:18:b6:8a:d1:ef:ff:f7:
c8:2b:60:b3:09:10:02:90:4e:08:dc:61:9a:04:87:
e5:80:bc:d4:18:22:fb:3c:8a:9f:2a:70:ff:b4:3f:
7e:d8:40:ad:d3:e7:bd:a5:1a:eb:d7:77:1b:89:bd:
5d:1e:26:99:2a:7a:78:63:b3:7c:97:75:9f:0f:a3:
6e:ff:05:f1:39:0c:11:42:27:0d:2d:c0:10:b6:7c:
07:3d:46:e6:ee:01:90:d1:a1:ec:69:2f:80:4d:1c:
81:9a:99:17:8c:b0:a3:1b:0b:4f:0a:c4:2b:83:ad:
2e:cb:02:88:06:22:bc:03:ce:f1:ee:88:2f:68:2a:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:24:A0:83:9F:59:96:E1:8D:21:B7:04:53:75:33:78:08:0E:8F:19
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6b:1f:9b:cb:44:06:41:d1:40:4c:20:c7:78:89:08:c8:54:
48:d3:d7:21:81:f1:19:1c:71:2e:41:b2:fd:2a:c5:18:d5:b5:
10:10:51:ac:35:58:a3:ac:4e:47:bd:13:25:44:47:10:73:fe:
25:6c:69:8e:8f:2f:0a:45:74:18:3e:22:3e:3f:f6:ce:17:21:
32:27:c7:55:f6:e7:50:21:80:af:77:59:d9:cc:73:3b:0e:08:
19:fb:15:7c:5e:42:ea:4f:60:65:ed:f4:37:a6:a7:8b:52:46:
c1:55:f1:36:d8:70:d5:64:8b:fd:15:d0:13:d1:6f:87:e8:7a:
6c:78:c5:22:23:00:8e:ac:cd:56:9a:f7:4c:11:d4:57:ae:8a:
83:e5:b8:2f:4b:ec:be:d6:e5:92:45:fc:81:00:d7:e4:f5:cf:
cc:c5:0b:47:50:e9:f2:66:db:9c:7d:e0:b6:8a:77:88:00:4b:
89:25:dc:87:fc:30:46:65:c3:36:6e:a3:3f:de:a3:6d:3c:39:
12:22:f6:6f:e4:41:25:f5:af:1b:2f:c6:0a:3a:08:46:16:38:
01:ea:46:c9:a3:6b:69:e5:ca:48:4e:46:0c:20:ef:f9:2d:cf:
4f:d9:9d:fd:e1:01:b0:b3:c4:3d:50:0d:b9:6d:15:ee:d8:d2:
71:bb:b2:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCWXvggU5CJx30+alCWebrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMWVlZTIyYzUwMTUzNjMxMThhNzFkMjZhOTQ2M2RjOTM3
NGJhMjgwHhcNMjUxMDIwMTYwMDEwWhcNMjUxMDIxMTYwMDEwWjAzMTEwLwYDVQQD
EygyYTI0YTA4MzlmNTk5NmUxOGQyMWI3MDQ1Mzc1MzM3ODA4MGU4ZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGkv8woLOaxn+OUcNUc5LSV/uRAy
Ihyt8+vGxQPRbwJfyYkAso5A0D/PL1ZTR9UHcrIL8mvHqolAVqREAy9pG6Y3k19l
Ot2wzjJc+pzuDwiGv6wcZjUQgNXqC3xFRG3RgBoHyzaSV20IrL/vx9BOn8iZrI4l
wzPqvlregwrt4xi2itHv//fIK2CzCRACkE4I3GGaBIflgLzUGCL7PIqfKnD/tD9+
2ECt0+e9pRrr13cbib1dHiaZKnp4Y7N8l3WfD6Nu/wXxOQwRQicNLcAQtnwHPUbm
7gGQ0aHsaS+ATRyBmpkXjLCjGwtPCsQrg60uywKIBiK8A87x7ogvaCoZywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCokoIOfWZbhjSG3BFN1M3gIDo8ZMB8GA1UdIwQY
MBaAFK8e7iLFAVNjEYpx0mqUY9yTdLooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUt
YjIxNzhlZjJmODJmLzEvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUtYjIxNzhlZjJmODJm
LzEvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2sfm8tE
BkHRQEwgx3iJCMhUSNPXIYHxGRxxLkGy/SrFGNW1EBBRrDVYo6xOR70TJURHEHP+
JWxpjo8vCkV0GD4iPj/2zhchMifHVfbnUCGAr3dZ2cxzOw4IGfsVfF5C6k9gZe30
N6ani1JGwVXxNthw1WSL/RXQE9Fvh+h6bHjFIiMAjqzNVpr3TBHUV66Kg+W4L0vs
vtblkkX8gQDX5PXPzMULR1Dp8mbbnH3gtop3iABLiSXch/wwRmXDNm6jP96jbTw5
EiL2b+RBJfWvGy/GCjoIRhY4AepGyaNraeXKSE5GDCDv+S3PT9md/eEBsLPEPVAN
uW0V7tjScbuysQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:16:45 2025 by rpki-client