Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File: 60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier: U5YbuYdkuhFI2I29nvHtribjXvSIL0LJUbE+7oxtRtA=
Subject key identifier: 95:02:D0:D5:00:D2:E7:32:90:02:67:B3:F2:06:B5:E9:3D:4B:5A:9E
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial: 019857215C68EB2B0144768A91CFFC596B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number: 0A7C
Signing time: Tue 29 Jul 2025 17:01:00 +0000
Manifest this update: Tue 29 Jul 2025 17:01:00 +0000
Manifest next update: Wed 30 Jul 2025 17:01:00 +0000
Files and hashes: 1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: lKqERG4iwYmK6klbta5CYZlGth2WKY86Fq6Lxh7zr+A=)
2: BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa (hash: ooQU4Ho0ybPL99Ep+vo4svb61ieYsfRUfMtTThTSOn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:21:5c:68:eb:2b:01:44:76:8a:91:cf:fc:59:6b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Validity
Not Before: Jul 29 17:01:00 2025 GMT
Not After : Jul 30 17:01:00 2025 GMT
Subject: CN=9502d0d500d2e732900267b3f206b5e93d4b5a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2c:49:fa:2f:c4:23:cb:3f:a8:a3:ed:06:24:
0f:59:06:0a:fa:54:1b:04:5a:ca:50:be:7e:e2:ae:
ed:35:b5:6d:ff:a4:b4:de:c5:f2:9c:86:99:80:30:
9f:fc:8c:c6:d9:2a:c0:89:5f:4d:28:52:30:5b:41:
11:59:e0:e0:b5:51:0a:da:56:4c:3c:59:a0:79:1e:
a8:8e:23:b5:33:24:c7:40:df:16:11:4a:b1:c2:ef:
60:60:d3:35:cb:16:83:28:0f:e4:2d:b5:e4:03:14:
cf:b2:2b:6a:18:30:24:b1:cb:f6:9d:1c:af:7d:6e:
83:fc:83:5a:96:26:ec:32:96:27:be:7c:57:15:7c:
14:2a:d8:9d:8d:ed:35:8b:4d:1f:81:6d:00:c8:a9:
fc:d8:17:7e:ac:8d:40:16:a3:b4:4c:7d:96:a2:fb:
98:69:d6:b1:60:a2:e4:71:9f:1e:5b:af:37:7e:47:
be:35:cc:bc:8e:01:71:e1:a6:0d:5d:c8:78:b7:34:
b2:96:36:55:69:2c:75:d6:3a:a5:72:cc:a0:c5:5e:
1d:c2:19:98:1d:a5:06:9f:ee:29:3e:97:3e:ec:24:
a7:d9:ad:2b:a1:e8:07:f1:89:ed:a4:4b:10:44:bf:
24:d0:b4:97:c0:cf:f0:d4:d8:75:ba:34:ce:c2:d3:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:02:D0:D5:00:D2:E7:32:90:02:67:B3:F2:06:B5:E9:3D:4B:5A:9E
X509v3 Authority Key Identifier:
keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:05:2e:95:86:af:20:e9:88:54:e4:81:04:0f:02:c9:b9:56:
60:32:e0:6d:9b:3e:ee:64:61:69:a1:cb:40:5f:62:ee:7c:33:
92:ab:4f:6a:3b:e2:4b:7f:a9:43:91:00:90:22:02:8e:2c:a4:
e9:a8:95:fc:80:a0:af:d6:00:1a:04:2e:4a:46:fc:1f:ba:7f:
f8:f6:0a:4a:90:df:8e:37:fc:aa:d7:46:07:cb:85:8e:6d:65:
b0:74:9c:f4:75:6a:85:3a:19:df:a4:cc:07:6c:03:01:bc:c0:
15:0d:32:c6:2d:84:58:9c:2c:68:b7:6d:04:9f:90:35:b8:40:
16:cc:48:b5:4f:41:d2:e7:51:c3:7e:88:59:4f:6d:20:6c:1d:
89:1d:ca:0f:87:3f:27:08:12:bf:ff:cb:da:22:e1:a9:44:dc:
19:d7:ac:09:e0:43:c1:07:b9:97:1c:4b:21:c9:21:a4:96:8d:
1f:4d:99:e8:8a:7b:38:5b:90:71:aa:d4:ff:c3:56:26:3a:18:
32:51:16:07:b5:17:91:45:54:06:83:11:96:b8:de:d5:fd:de:
0f:28:20:a5:64:61:8d:4b:6e:11:41:47:8c:72:20:92:a6:68:
0a:89:40:39:b4:89:02:9e:3d:ea:c7:b4:f8:83:94:d3:2e:d0:
c5:7f:1e:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhXIVxo6ysBRHaKkc/8WWsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNGM1YWNkNmZhMWU2YTkxMTI5YWM0MjQwNTdhODc3NTU4
ZTgwNTIwHhcNMjUwNzI5MTcwMTAwWhcNMjUwNzMwMTcwMTAwWjAzMTEwLwYDVQQD
Eyg5NTAyZDBkNTAwZDJlNzMyOTAwMjY3YjNmMjA2YjVlOTNkNGI1YTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SxJ+i/EI8s/qKPtBiQPWQYK+lQb
BFrKUL5+4q7tNbVt/6S03sXynIaZgDCf/IzG2SrAiV9NKFIwW0ERWeDgtVEK2lZM
PFmgeR6ojiO1MyTHQN8WEUqxwu9gYNM1yxaDKA/kLbXkAxTPsitqGDAkscv2nRyv
fW6D/INalibsMpYnvnxXFXwUKtidje01i00fgW0AyKn82Bd+rI1AFqO0TH2WovuY
adaxYKLkcZ8eW683fke+Ncy8jgFx4aYNXch4tzSyljZVaSx11jqlcsygxV4dwhmY
HaUGn+4pPpc+7CSn2a0roegH8YntpEsQRL8k0LSXwM/w1Nh1ujTOwtN8aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUC0NUA0ucykAJns/IGtek9S1qeMB8GA1UdIwQY
MBaAFOtMWs1voeapESmsQkBXqHdVjoBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAt
ZGNiZGY3MWZmMzQ3LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAtZGNiZGY3MWZmMzQ3
LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwUulYav
IOmIVOSBBA8CyblWYDLgbZs+7mRhaaHLQF9i7nwzkqtPajviS3+pQ5EAkCICjiyk
6aiV/ICgr9YAGgQuSkb8H7p/+PYKSpDfjjf8qtdGB8uFjm1lsHSc9HVqhToZ36TM
B2wDAbzAFQ0yxi2EWJwsaLdtBJ+QNbhAFsxItU9B0udRw36IWU9tIGwdiR3KD4c/
JwgSv//L2iLhqUTcGdesCeBDwQe5lxxLIckhpJaNH02Z6Ip7OFuQcarU/8NWJjoY
MlEWB7UXkUVUBoMRlrje1f3eDyggpWRhjUtuEUFHjHIgkqZoColAObSJAp496se0
+IOU0y7QxX8epg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 20:22:57 2025 by rpki-client