Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json)
Hash identifier: TKq+5E8kSryWTzTapwS/fPZcBh57ZRuPUaHRRIzZRx8=
Subject key identifier: 5B:53:41:CF:30:11:8C:C6:08:F7:06:68:68:3F:38:31:11:78:3D:61
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 0198D851043B9CCFDC33AAEF8F522039D1C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 19:04:04 +0000
Manifest this update: Sat 23 Aug 2025 19:04:04 +0000
Manifest next update: Sun 24 Aug 2025 19:04:04 +0000
Files and hashes: 1: 6x14Tr1KvbGHug5B88Kt5ILNIuQ.roa (hash: TGutJ2mIJk6NG98vs/RUqYq5wAmvywBgw3u1JfM1+58=)
2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: iwunrNmmRkDQAR5dPBm4DA31+/HO6o+6687UTQsJDxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:04:3b:9c:cf:dc:33:aa:ef:8f:52:20:39:d1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Aug 23 19:04:04 2025 GMT
Not After : Aug 24 19:04:04 2025 GMT
Subject: CN=5b5341cf30118cc608f70668683f383111783d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:07:e7:6e:45:b0:84:d7:ff:6b:22:ec:d5:
00:99:ce:e0:e5:71:76:05:ee:e1:5a:77:b5:18:bc:
62:21:66:15:8f:cc:2b:c6:ab:bd:2f:dd:fb:b9:17:
df:19:e2:f7:43:a0:0c:81:98:14:e1:dc:77:e4:92:
9e:6d:0d:68:94:b4:fd:de:76:26:51:22:ee:1e:82:
d0:2a:fc:01:c1:5f:a6:c0:bd:91:35:42:ce:ad:e3:
ac:d3:6a:57:c1:62:b0:ae:b0:67:c5:9c:3f:db:68:
7b:1b:7f:01:ab:63:77:d8:50:13:4b:45:ab:51:08:
47:e1:65:47:0d:91:4e:2a:1a:f3:43:15:42:86:64:
8d:04:40:2f:f6:70:d8:31:55:2c:53:e3:96:b6:ea:
21:c6:3f:21:b3:7f:ce:dc:ea:65:cf:a9:82:64:97:
65:3e:d3:d2:d4:67:67:fe:11:56:85:a6:d0:91:1c:
99:a4:51:a8:87:28:c3:f8:6e:e7:fe:10:a3:d0:5b:
1e:df:83:ac:84:1c:ee:c3:8b:ec:94:ed:d3:ba:40:
49:ee:d3:19:c1:2c:20:c3:c8:c9:e6:30:d8:f2:96:
c9:a4:ec:2c:2f:d3:4d:4d:38:cb:2b:f2:85:1b:1b:
1f:f3:94:25:a5:25:78:7a:30:ba:5a:a2:80:b4:bd:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:53:41:CF:30:11:8C:C6:08:F7:06:68:68:3F:38:31:11:78:3D:61
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d3:fd:68:b3:1e:76:99:d6:a7:d2:e7:63:13:c1:7e:20:89:
e5:77:12:c3:ba:f0:a6:5d:fa:fd:4f:85:45:00:c8:62:19:0b:
b6:dd:ed:9b:20:ea:a8:75:5f:fe:75:d5:84:14:bb:2f:94:df:
f0:47:f7:18:35:fe:3c:a2:74:71:2c:84:49:69:2d:ec:ee:22:
bc:89:e3:ed:c9:f0:bc:16:e5:d2:33:6e:f9:f3:53:70:78:75:
b2:76:0d:d1:87:79:d7:0c:c6:2a:c7:ef:0b:f7:f1:43:e8:d1:
15:ff:96:89:37:79:b9:f1:01:a4:0e:f8:a7:e6:2b:58:7e:ad:
33:b6:31:5e:73:a1:f1:3d:56:d9:07:17:75:82:92:e9:30:56:
49:b6:d1:cf:4a:b2:9d:16:67:56:3c:51:37:c3:d8:68:1b:aa:
c7:de:a8:12:d1:e7:ae:44:73:62:85:4d:39:fd:91:08:b0:a2:
5a:e9:70:ab:41:d3:ff:dd:93:9b:b5:35:81:50:01:13:bb:c1:
10:1d:be:d6:38:3b:4b:93:7f:29:b3:87:f4:07:68:a0:8d:19:
28:cc:87:11:e3:06:64:01:3d:1a:34:70:55:bb:4d:bc:7a:9b:
e0:14:d9:c8:14:5d:1c:ee:13:fb:1b:6e:f5:a2:4f:6d:de:a8:
b3:53:9a:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUQQ7nM/cM6rvj1IgOdHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTBjZDQ0NzFhM2Y4Y2RjZDg0NGQzZjM2NjE0ODk0MDk1
MmI0ZTcwHhcNMjUwODIzMTkwNDA0WhcNMjUwODI0MTkwNDA0WjAzMTEwLwYDVQQD
Eyg1YjUzNDFjZjMwMTE4Y2M2MDhmNzA2Njg2ODNmMzgzMTExNzgzZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshQH525FsITX/2si7NUAmc7g5XF2
Be7hWne1GLxiIWYVj8wrxqu9L937uRffGeL3Q6AMgZgU4dx35JKebQ1olLT93nYm
USLuHoLQKvwBwV+mwL2RNULOreOs02pXwWKwrrBnxZw/22h7G38Bq2N32FATS0Wr
UQhH4WVHDZFOKhrzQxVChmSNBEAv9nDYMVUsU+OWtuohxj8hs3/O3Oplz6mCZJdl
PtPS1Gdn/hFWhabQkRyZpFGohyjD+G7n/hCj0Fse34OshBzuw4vslO3TukBJ7tMZ
wSwgw8jJ5jDY8pbJpOwsL9NNTTjLK/KFGxsf85QlpSV4ejC6WqKAtL2F3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtTQc8wEYzGCPcGaGg/ODEReD1hMB8GA1UdIwQY
MBaAFLcQzURxo/jNzYRNPzZhSJQJUrTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAt
MjMyZmJkYWY1YzFhLzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAtMjMyZmJkYWY1YzFh
LzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNP9aLMe
dpnWp9LnYxPBfiCJ5XcSw7rwpl36/U+FRQDIYhkLtt3tmyDqqHVf/nXVhBS7L5Tf
8Ef3GDX+PKJ0cSyESWkt7O4ivInj7cnwvBbl0jNu+fNTcHh1snYN0Yd51wzGKsfv
C/fxQ+jRFf+WiTd5ufEBpA74p+YrWH6tM7YxXnOh8T1W2QcXdYKS6TBWSbbRz0qy
nRZnVjxRN8PYaBuqx96oEtHnrkRzYoVNOf2RCLCiWulwq0HT/92Tm7U1gVABE7vB
EB2+1jg7S5N/KbOH9AdooI0ZKMyHEeMGZAE9GjRwVbtNvHqb4BTZyBRdHO4T+xtu
9aJPbd6os1OaSQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:48:22 2025 by rpki-client