Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json)
Hash identifier: CzSi+dUHjvY/c3/cstgYw0fxtpKZASXjZ4K11RzzcX4=
Subject key identifier: B1:AB:E5:03:71:9E:E3:B9:DF:6A:9D:67:B2:E7:96:6F:D5:A7:35:0D
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial: 0198477805D6FE2228A039F54FF95C74D92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
Manifest number: 054E
Signing time: Sat 26 Jul 2025 16:01:44 +0000
Manifest this update: Sat 26 Jul 2025 16:01:44 +0000
Manifest next update: Sun 27 Jul 2025 16:01:44 +0000
Files and hashes: 1: 5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa (hash: jy9SGKilmmhulS0SQ8USL/F90L5q42BS/yYoLYQj470=)
2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: sE7+WFjenLPFuxNLA53T/rp3n0iX5tT6cF0Thn2wnz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:05:d6:fe:22:28:a0:39:f5:4f:f9:5c:74:d9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Validity
Not Before: Jul 26 16:01:44 2025 GMT
Not After : Jul 27 16:01:44 2025 GMT
Subject: CN=b1abe503719ee3b9df6a9d67b2e7966fd5a7350d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:99:6a:e9:c7:72:ea:dd:be:68:82:05:98:
ce:6d:9d:ce:49:a3:9e:e0:82:54:96:27:f8:fe:46:
c8:b2:c7:9b:67:a5:ce:8d:81:28:a2:0a:74:3c:59:
16:33:04:99:3c:74:e7:57:ba:12:62:80:94:fe:07:
26:78:13:16:da:0f:c4:4b:52:cf:5a:08:74:4c:f1:
d4:1a:8e:86:d0:9b:43:0a:5f:9f:23:a4:97:a1:a1:
f4:2d:79:b9:17:12:96:a6:a6:09:90:72:c1:6b:e1:
aa:ac:ea:53:99:95:b4:bf:00:06:2e:65:81:57:15:
66:36:51:e9:ed:f4:34:79:ba:c6:d0:6a:e3:c4:07:
21:3b:72:59:8f:96:3f:95:41:db:cc:7e:7b:d8:97:
20:76:0a:1b:d3:58:bc:2e:62:75:d2:1a:d4:b8:42:
2b:07:d9:ff:95:a2:5e:5f:37:2c:d8:2d:db:46:86:
ea:22:57:21:17:49:f1:3e:9d:d8:a6:2e:f4:b7:71:
c5:9a:ae:08:26:b5:40:9b:7d:01:1b:0b:8d:64:22:
b0:9b:d5:15:59:4e:94:60:36:39:ff:d7:4a:c9:57:
d1:13:d0:51:f0:e6:22:d1:0d:20:7f:7f:7c:8a:40:
fc:33:8a:ae:3d:ab:35:c3:b3:cb:0e:38:e1:3e:08:
d3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AB:E5:03:71:9E:E3:B9:DF:6A:9D:67:B2:E7:96:6F:D5:A7:35:0D
X509v3 Authority Key Identifier:
keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:46:b1:09:2a:c2:f1:a0:e9:09:fa:ac:c8:98:c2:17:ea:23:
b6:66:73:95:20:33:00:37:6e:09:47:84:70:18:2f:80:32:c8:
31:8a:cb:1a:60:98:23:f4:be:0b:10:0c:83:e3:7f:20:ac:d5:
1a:8a:46:14:bd:7f:1a:4d:90:56:70:ac:3f:dd:da:7e:d6:83:
33:71:04:7e:4f:5f:26:ee:48:28:3d:2e:cf:54:19:b3:49:86:
b5:15:52:be:1f:47:be:a5:06:a8:8a:1e:98:c0:2a:05:78:98:
a7:8f:d6:1b:5b:ea:73:ff:e0:0f:34:35:ab:0f:6c:b3:ed:73:
91:2e:cf:4a:d5:7c:9b:83:c6:26:94:db:47:96:dc:0e:cf:66:
69:94:9a:f2:15:2d:aa:7e:60:1f:97:74:86:07:d4:f0:2f:ad:
02:72:d3:43:1f:44:86:66:05:61:04:d5:34:3d:f3:1a:b3:75:
b3:b7:9a:d4:74:43:b7:ba:cb:7d:96:9b:2e:3d:1a:29:3d:ab:
0a:40:0c:9d:90:4a:22:8f:d5:b8:d0:f9:d9:f9:65:37:43:99:
84:aa:8c:8c:e3:e9:03:14:8e:8b:d0:2e:80:c6:e3:e3:25:0b:
73:56:86:28:3d:27:dc:f3:6b:15:95:3d:11:3e:40:54:49:50:
d9:08:58:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeAXW/iIooDn1T/lcdNkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YmQ3ODU0YWEwNTBmZDZlNTUwZmM3Y2QwMmI1NTg3MzBi
ZmJiN2EwHhcNMjUwNzI2MTYwMTQ0WhcNMjUwNzI3MTYwMTQ0WjAzMTEwLwYDVQQD
EyhiMWFiZTUwMzcxOWVlM2I5ZGY2YTlkNjdiMmU3OTY2ZmQ1YTczNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXyZaunHcurdvmiCBZjObZ3OSaOe
4IJUlif4/kbIssebZ6XOjYEoogp0PFkWMwSZPHTnV7oSYoCU/gcmeBMW2g/ES1LP
Wgh0TPHUGo6G0JtDCl+fI6SXoaH0LXm5FxKWpqYJkHLBa+GqrOpTmZW0vwAGLmWB
VxVmNlHp7fQ0ebrG0GrjxAchO3JZj5Y/lUHbzH572Jcgdgob01i8LmJ10hrUuEIr
B9n/laJeXzcs2C3bRobqIlchF0nxPp3Ypi70t3HFmq4IJrVAm30BGwuNZCKwm9UV
WU6UYDY5/9dKyVfRE9BR8OYi0Q0gf398ikD8M4quPas1w7PLDjjhPgjTPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGr5QNxnuO532qdZ7Lnlm/VpzUNMB8GA1UdIwQY
MBaAFMW9eFSqBQ/W5VD8fNArVYcwv7t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODkt
NmZmMWQ0MjdkOTcxLzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODktNmZmMWQ0MjdkOTcx
LzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUaxCSrC
8aDpCfqsyJjCF+ojtmZzlSAzADduCUeEcBgvgDLIMYrLGmCYI/S+CxAMg+N/IKzV
GopGFL1/Gk2QVnCsP93aftaDM3EEfk9fJu5IKD0uz1QZs0mGtRVSvh9HvqUGqIoe
mMAqBXiYp4/WG1vqc//gDzQ1qw9ss+1zkS7PStV8m4PGJpTbR5bcDs9maZSa8hUt
qn5gH5d0hgfU8C+tAnLTQx9EhmYFYQTVND3zGrN1s7ea1HRDt7rLfZabLj0aKT2r
CkAMnZBKIo/VuND52fllN0OZhKqMjOPpAxSOi9AugMbj4yULc1aGKD0n3PNrFZU9
ET5AVElQ2QhYOw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:46:41 2025 by rpki-client