
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json)
Hash identifier: lrwB8gxVifMZ4fQAdsQ24jIQbDP1EQ9MM6OIuleE0Jg=
Subject key identifier: A4:01:EE:FE:05:3F:C3:91:45:C5:D4:A0:93:C7:8E:BE:4B:F6:DA:DA
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial: 0198D583F900F830E7F6074FA2924A25CCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
Manifest number: 151B
Signing time: Sat 23 Aug 2025 06:00:52 +0000
Manifest this update: Sat 23 Aug 2025 06:00:52 +0000
Manifest next update: Sun 24 Aug 2025 06:00:52 +0000
Files and hashes: 1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: x2xVpsNRL5YmnbMtTVA/y6N3l0AAqm1f6oClSqJ3Rzg=)
2: kJ6ZzA1fcsMngPwnFcWmPQ2TpJY.roa (hash: spn1/mEz9B8AiCWdxXSLx/VFzig4ReQEdpbCrXX5I3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f9:00:f8:30:e7:f6:07:4f:a2:92:4a:25:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
Validity
Not Before: Aug 23 06:00:52 2025 GMT
Not After : Aug 24 06:00:52 2025 GMT
Subject: CN=a401eefe053fc39145c5d4a093c78ebe4bf6dada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:cc:7c:8e:f2:ff:b5:b8:37:23:5f:15:e1:
f2:96:ec:41:a4:c9:de:ea:77:3e:e4:79:e2:77:1c:
bb:8e:f3:84:f6:f1:75:90:be:a1:c9:18:19:e1:c4:
c3:2a:ae:8e:af:49:c8:fe:00:db:65:67:82:06:6b:
55:91:c2:a6:4a:96:40:d4:74:56:3f:45:ce:ee:82:
83:8a:c1:19:54:48:b1:6e:9c:e9:71:0a:06:d5:fd:
6d:82:9a:0d:cb:c4:ae:42:ec:ca:9c:45:b9:c2:cc:
ee:fb:dc:5c:76:84:27:94:16:f3:17:0d:5f:5c:4f:
84:16:63:f9:b8:8a:d0:7f:21:9c:19:65:5a:ed:68:
5d:0b:da:d1:08:a8:5b:72:f7:11:2b:fe:13:a3:f6:
88:6d:17:4c:74:ec:c2:1c:da:66:f4:79:f4:95:1e:
e3:36:ff:64:b1:65:26:a2:72:f3:c5:da:b0:71:9e:
9f:c4:71:34:de:55:4a:11:ec:44:ee:a5:99:48:bc:
63:52:b1:17:39:68:b6:82:09:ca:88:7d:d3:e6:2c:
e6:e8:cd:e8:fe:b4:e0:f8:eb:d0:f6:6e:bc:d8:97:
1d:66:f1:94:ed:76:7e:3a:f6:0d:84:9b:37:24:9c:
74:46:c8:26:60:01:a3:0b:ac:9d:5c:43:f0:2b:44:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:01:EE:FE:05:3F:C3:91:45:C5:D4:A0:93:C7:8E:BE:4B:F6:DA:DA
X509v3 Authority Key Identifier:
keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:21:e8:5d:71:cb:3d:67:38:57:1c:eb:68:a8:44:6b:7f:95:
d6:c0:21:d6:77:b3:03:69:e0:85:ca:bc:f2:9d:7e:3b:6f:6c:
d0:49:ff:d4:55:57:e7:30:c5:6d:0d:85:e1:7d:83:27:c4:d8:
80:1a:6a:d9:1b:68:33:8e:6e:99:18:25:fe:a2:35:97:f7:18:
8f:a5:9f:55:84:da:16:a0:e5:f7:68:6b:ee:e1:3d:4e:98:94:
6d:a1:67:18:c5:cb:ca:01:2d:46:47:7f:ae:1d:b2:db:3d:71:
84:25:29:d4:27:c3:99:c5:b4:97:5c:84:a9:ad:8a:b2:57:39:
27:bf:d5:ef:70:20:d4:1f:b5:e9:1f:29:8b:80:78:80:45:7f:
b5:4c:01:bb:54:22:1f:af:17:de:d4:6c:63:e5:f8:02:f2:43:
5c:72:fa:14:eb:b3:ff:92:c8:f4:72:d5:5c:93:22:05:df:de:
b5:a7:de:e2:58:84:7d:4e:33:1a:58:f5:d4:b6:d0:f1:41:7a:
06:c5:fe:42:c2:ec:28:37:13:a2:b7:cc:c5:0e:6d:5f:e8:01:
08:89:af:d2:1f:fc:3c:b0:52:0d:e7:87:b1:47:6c:19:ae:c9:
b4:e7:3a:b0:40:dd:4e:6c:52:d3:e8:08:38:01:ee:63:a6:c1:
c0:77:4b:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg/kA+DDn9gdPopJKJczPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNzE2NDFmMTU3Y2I1N2I1MzI2MjYzNTllNzE1ODI3NDJj
MmRjY2IwHhcNMjUwODIzMDYwMDUyWhcNMjUwODI0MDYwMDUyWjAzMTEwLwYDVQQD
EyhhNDAxZWVmZTA1M2ZjMzkxNDVjNWQ0YTA5M2M3OGViZTRiZjZkYWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnnMfI7y/7W4NyNfFeHyluxBpMne
6nc+5Hnidxy7jvOE9vF1kL6hyRgZ4cTDKq6Or0nI/gDbZWeCBmtVkcKmSpZA1HRW
P0XO7oKDisEZVEixbpzpcQoG1f1tgpoNy8SuQuzKnEW5wszu+9xcdoQnlBbzFw1f
XE+EFmP5uIrQfyGcGWVa7WhdC9rRCKhbcvcRK/4To/aIbRdMdOzCHNpm9Hn0lR7j
Nv9ksWUmonLzxdqwcZ6fxHE03lVKEexE7qWZSLxjUrEXOWi2ggnKiH3T5izm6M3o
/rTg+OvQ9m682JcdZvGU7XZ+OvYNhJs3JJx0RsgmYAGjC6ydXEPwK0SbXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQB7v4FP8ORRcXUoJPHjr5L9traMB8GA1UdIwQY
MBaAFBFxZB8VfLV7UyYmNZ5xWCdCwtzLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzIt
M2NiOWUxMDJhZmUwLzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzItM2NiOWUxMDJhZmUw
LzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACHoXXHL
PWc4VxzraKhEa3+V1sAh1nezA2nghcq88p1+O29s0En/1FVX5zDFbQ2F4X2DJ8TY
gBpq2RtoM45umRgl/qI1l/cYj6WfVYTaFqDl92hr7uE9TpiUbaFnGMXLygEtRkd/
rh2y2z1xhCUp1CfDmcW0l1yEqa2Kslc5J7/V73Ag1B+16R8pi4B4gEV/tUwBu1Qi
H68X3tRsY+X4AvJDXHL6FOuz/5LI9HLVXJMiBd/etafe4liEfU4zGlj11LbQ8UF6
BsX+QsLsKDcTorfMxQ5tX+gBCImv0h/8PLBSDeeHsUdsGa7JtOc6sEDdTmxS0+gI
OAHuY6bBwHdLAw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:17 2025 by rpki-client