Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
File: xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json)
Hash identifier: fAX7QOUtyqM/TnFDtYwfjptSufqLfclT5UgtgtOI6fE=
Subject key identifier: A0:FB:EA:39:F1:8F:99:31:60:3F:B3:E4:1F:56:2F:EC:F1:85:F3:FD
Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
Certificate issuer: /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Certificate serial: 01984B54FA2C3030D6396710EDD6B5422622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
Manifest number: 1525
Signing time: Sun 27 Jul 2025 10:01:56 +0000
Manifest this update: Sun 27 Jul 2025 10:01:56 +0000
Manifest next update: Mon 28 Jul 2025 10:01:56 +0000
Files and hashes: 1: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: h6WOEU321HLexE5SiU76wdxQOe++2jwVjEvneenDERM=)
2: zG4ly3FhpsRy_muFf41M8ZKPF5o.roa (hash: 9tm7KsG1SMgxDQdJBogQZSZKc5Vw7KrlfAJHfrS64mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:fa:2c:30:30:d6:39:67:10:ed:d6:b5:42:26:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Validity
Not Before: Jul 27 10:01:56 2025 GMT
Not After : Jul 28 10:01:56 2025 GMT
Subject: CN=a0fbea39f18f9931603fb3e41f562fecf185f3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:0d:29:2e:15:c1:00:02:b2:c3:c2:01:0f:
8b:25:1f:2e:7c:55:fa:6e:95:83:8b:17:76:2b:71:
2f:0d:ed:ca:ba:d5:89:96:24:c1:c7:30:5d:9f:d9:
98:98:f2:3c:d3:54:16:75:33:64:eb:da:20:a3:64:
b9:e1:a4:c9:4b:ac:0c:16:7c:a4:8c:d8:60:fd:16:
2c:84:02:c7:89:9f:ff:47:14:75:4e:7b:a1:43:8c:
ef:1f:b4:a0:88:b1:15:14:f4:fc:cb:00:c3:23:d4:
45:b0:1f:e9:e9:db:cc:91:9f:48:8f:57:6a:1b:e0:
e9:15:e5:fc:a9:54:1d:8e:03:03:fc:6d:1d:fd:aa:
56:29:9e:16:ad:64:77:53:ed:51:79:ad:df:5e:89:
c3:ef:14:46:05:f5:7b:8f:47:d9:5d:24:b0:36:c1:
b8:cd:80:ac:28:79:43:39:ec:d5:8f:96:c2:97:8b:
fc:de:87:dd:e6:b8:d0:6b:52:b5:6a:66:60:1a:60:
d0:f8:dc:e6:90:51:0a:89:dd:db:04:4e:37:00:85:
4b:9c:a7:3c:63:89:3d:59:0a:68:95:5c:7a:61:a5:
95:20:ea:87:d6:a8:6d:93:1d:89:db:3e:a3:4b:a5:
cf:08:66:c3:77:d3:b3:3d:0f:02:21:e1:2c:e8:d8:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FB:EA:39:F1:8F:99:31:60:3F:B3:E4:1F:56:2F:EC:F1:85:F3:FD
X509v3 Authority Key Identifier:
keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f7:59:38:62:4d:4f:c3:4b:8f:38:d9:d0:03:93:c5:6a:34:
6b:97:d1:97:24:61:41:99:29:1b:88:43:61:fa:84:d9:44:51:
a5:ac:24:4d:d7:f1:d4:99:4d:13:5c:ae:63:b2:a0:8a:e9:98:
6a:09:e4:ae:53:e1:5b:62:87:7e:ed:d8:36:e8:8e:6a:18:cd:
03:88:b9:30:7f:8a:e7:8a:f6:13:c0:30:60:c7:4d:c3:53:bc:
99:ea:86:29:5c:e6:bc:82:f4:11:a6:3e:fe:b8:eb:6a:c8:6d:
44:f0:ce:26:93:72:97:84:db:f0:57:4e:f6:20:07:db:ed:1f:
8f:e8:d7:5f:25:55:bb:ab:aa:83:ed:dd:aa:f5:a8:8d:d4:f6:
97:74:43:df:cd:97:9a:5e:15:08:7c:62:c8:72:9a:0e:9f:fa:
7a:e0:e3:67:12:b5:1f:c4:c2:06:01:e4:a2:e9:4a:88:2b:24:
a5:77:84:0f:46:80:2b:c5:85:e3:40:36:33:33:36:80:d7:96:
8e:22:c7:b6:1d:f5:e9:09:9a:c2:38:1a:23:75:70:5d:92:90:
dc:93:33:66:75:7e:af:19:24:f1:14:26:a3:43:3a:e4:16:cf:
34:de:e1:74:e6:c2:e0:73:d5:d6:87:d0:d0:dc:fd:5e:58:87:
10:84:8b:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVPosMDDWOWcQ7da1QiYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZWJiOGI3OTQyMmZiMmQ2ZDhhODJkYjdmMWFjMGI2YWE1
OWIzN2YwHhcNMjUwNzI3MTAwMTU2WhcNMjUwNzI4MTAwMTU2WjAzMTEwLwYDVQQD
EyhhMGZiZWEzOWYxOGY5OTMxNjAzZmIzZTQxZjU2MmZlY2YxODVmM2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWENKS4VwQACssPCAQ+LJR8ufFX6
bpWDixd2K3EvDe3KutWJliTBxzBdn9mYmPI801QWdTNk69ogo2S54aTJS6wMFnyk
jNhg/RYshALHiZ//RxR1TnuhQ4zvH7SgiLEVFPT8ywDDI9RFsB/p6dvMkZ9Ij1dq
G+DpFeX8qVQdjgMD/G0d/apWKZ4WrWR3U+1Rea3fXonD7xRGBfV7j0fZXSSwNsG4
zYCsKHlDOezVj5bCl4v83ofd5rjQa1K1amZgGmDQ+NzmkFEKid3bBE43AIVLnKc8
Y4k9WQpolVx6YaWVIOqH1qhtkx2J2z6jS6XPCGbDd9OzPQ8CIeEs6NjIzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKD76jnxj5kxYD+z5B9WL+zxhfP9MB8GA1UdIwQY
MBaAFMXruLeUIvstbYqC238awLaqWbN/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTBlY2QtMWMxNi00YmQzLWJkMGUt
Yzg0YmZkNGVlODc4LzEveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNTBlY2QtMWMxNi00YmQzLWJkMGUtYzg0YmZkNGVlODc4
LzEveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPdZOGJN
T8NLjzjZ0AOTxWo0a5fRlyRhQZkpG4hDYfqE2URRpawkTdfx1JlNE1yuY7KgiumY
agnkrlPhW2KHfu3YNuiOahjNA4i5MH+K54r2E8AwYMdNw1O8meqGKVzmvIL0EaY+
/rjrashtRPDOJpNyl4Tb8FdO9iAH2+0fj+jXXyVVu6uqg+3dqvWojdT2l3RD382X
ml4VCHxiyHKaDp/6euDjZxK1H8TCBgHkoulKiCskpXeED0aAK8WF40A2MzM2gNeW
jiLHth316QmawjgaI3VwXZKQ3JMzZnV+rxkk8RQmo0M65BbPNN7hdObC4HPV1ofQ
0Nz9XliHEISLJw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:35:29 2025 by rpki-client