Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier: G/lzkdVOqHENBCbl9YyYdnHriyqGeobwMj0jqu+Ct0w=
Subject key identifier: 7B:4C:47:77:DC:30:00:91:6D:39:1D:2D:DA:82:B4:AB:92:22:18:67
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 019827ECA349BFBB2E182904350317B602B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number: 0574
Signing time: Sun 20 Jul 2025 13:01:16 +0000
Manifest this update: Sun 20 Jul 2025 13:01:16 +0000
Manifest next update: Mon 21 Jul 2025 13:01:16 +0000
Files and hashes: 1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: cI5+Z5BI1fFuXSp/e+kRLFRqGAc/B8K7XAEArYGCL4k=)
2: 3e96O0zql-DJprCN832OErRtWhY.roa (hash: YxeaSNUi71632qJZwGZv8Hu3idvAcvJX148wv4xYwpc=)
3: 6W_cfm-J8Jm0OpvUv8VEPziXvqU.roa (hash: ntUZRyHP+6WOiJkOEZN4Fuk1A/G3+Q9sIm3AVgN1jow=)
4: 7iPtEMlcS-95zv2l-9LcExzrIMU.roa (hash: wBjPWZtqDlytdLWUUgzq4RIZY24YAMcvhX1x0tSKKDI=)
5: w4HlqPi1OFmgM8LH-X3G7-isDzc.roa (hash: L9SAWLXqlEKX0McJ5PDoHev7KlGzu28LLCwZ81A7uqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:a3:49:bf:bb:2e:18:29:04:35:03:17:b6:02:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Jul 20 13:01:16 2025 GMT
Not After : Jul 21 13:01:16 2025 GMT
Subject: CN=7b4c4777dc3000916d391d2dda82b4ab92221867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b2:91:ff:12:85:8d:d9:a7:94:ad:41:d1:74:
3a:47:d6:36:a8:67:9c:86:23:cf:8c:a8:fb:fd:ce:
bb:d7:25:3f:ed:91:b5:1d:df:cf:a5:41:0c:8e:d6:
22:a4:3c:9f:39:8a:fe:7e:3f:d9:f7:0a:f0:72:59:
06:fe:89:e6:27:4c:1d:52:1e:94:4b:99:6a:58:03:
c3:d6:41:b5:3c:81:b6:55:11:a7:63:14:e7:5c:3f:
08:e4:cb:7a:c5:77:7d:8d:58:76:72:a6:e7:d1:bd:
d1:94:d6:6f:20:0a:95:5f:bb:7e:d6:82:eb:04:3b:
18:22:47:8d:84:dc:38:42:4b:41:5a:5f:b8:9f:ea:
2c:34:d8:02:2b:80:2c:f3:21:97:21:3b:11:c3:c2:
d6:da:3c:b2:87:65:fc:d1:9f:3a:d6:5c:a2:fb:38:
0e:1d:fe:91:82:84:07:02:94:11:74:c7:a2:86:7d:
79:95:37:2d:8d:d7:4c:e6:4d:da:8f:46:f8:fd:27:
7f:e2:25:85:48:04:5e:ce:d8:84:f9:dc:77:c9:bb:
2c:b3:d1:5a:09:b3:76:b8:1e:a0:b2:34:6b:83:4d:
c8:43:9a:9f:c2:df:ec:1c:2b:ca:95:1a:b9:24:e4:
3c:b4:12:99:8f:36:6b:9e:a3:11:fc:bc:5b:71:7a:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4C:47:77:DC:30:00:91:6D:39:1D:2D:DA:82:B4:AB:92:22:18:67
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f9:3a:73:c2:56:0b:69:54:40:5e:d2:44:69:ea:63:fc:e9:
fd:62:dc:49:42:b5:78:48:2c:00:14:b1:0c:47:3a:7d:5b:06:
ce:0a:af:57:ef:aa:da:c3:0e:0c:5b:4e:20:65:5a:86:ca:36:
8e:c9:30:81:f5:ec:71:16:57:68:e5:c5:03:2c:79:17:c1:9a:
88:72:01:a9:a3:50:8a:de:b8:b6:b7:41:59:27:37:b0:5d:8a:
9d:40:c0:0b:b6:54:0f:12:b9:59:42:00:b7:94:ed:7e:4a:8b:
3e:b0:da:f9:13:6c:35:ea:93:6b:8b:3f:db:24:1f:02:6b:43:
5d:7f:e4:14:9c:36:3a:d9:6f:f0:af:16:21:75:e3:85:90:71:
6a:c5:98:0c:1f:f7:f3:dc:40:c7:35:e0:00:dc:88:7d:b9:ca:
bd:f1:a4:02:63:10:44:ff:f5:91:81:ee:52:1e:12:82:1f:12:
8c:77:e7:47:01:f0:7e:f0:58:37:56:65:7a:8f:eb:61:de:05:
9c:6c:4f:77:25:e9:9a:dc:3a:94:ab:7d:c0:1e:57:92:48:ff:
8d:14:31:7e:47:5e:7d:af:83:ab:0b:2b:21:89:85:ab:9d:9d:
2e:8d:7b:32:35:a1:eb:12:34:ea:34:09:19:ad:60:74:32:85:
be:c3:e7:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgn7KNJv7suGCkENQMXtgKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxN2FlOWRjOWY0M2EyNjllYjBhY2NmMzQ4OGU4NjFmNGZm
MGU4OWUwHhcNMjUwNzIwMTMwMTE2WhcNMjUwNzIxMTMwMTE2WjAzMTEwLwYDVQQD
Eyg3YjRjNDc3N2RjMzAwMDkxNmQzOTFkMmRkYTgyYjRhYjkyMjIxODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rKR/xKFjdmnlK1B0XQ6R9Y2qGec
hiPPjKj7/c671yU/7ZG1Hd/PpUEMjtYipDyfOYr+fj/Z9wrwclkG/onmJ0wdUh6U
S5lqWAPD1kG1PIG2VRGnYxTnXD8I5Mt6xXd9jVh2cqbn0b3RlNZvIAqVX7t+1oLr
BDsYIkeNhNw4QktBWl+4n+osNNgCK4As8yGXITsRw8LW2jyyh2X80Z861lyi+zgO
Hf6RgoQHApQRdMeihn15lTctjddM5k3aj0b4/Sd/4iWFSAReztiE+dx3ybsss9Fa
CbN2uB6gsjRrg03IQ5qfwt/sHCvKlRq5JOQ8tBKZjzZrnqMR/LxbcXp0owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtMR3fcMACRbTkdLdqCtKuSIhhnMB8GA1UdIwQY
MBaAFNF66dyfQ6Jp6wrM80iOhh9P8OieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUt
ZmRhNGU4YTViNDZlLzEvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUtZmRhNGU4YTViNDZl
LzEvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/k6c8JW
C2lUQF7SRGnqY/zp/WLcSUK1eEgsABSxDEc6fVsGzgqvV++q2sMODFtOIGVahso2
jskwgfXscRZXaOXFAyx5F8GaiHIBqaNQit64trdBWSc3sF2KnUDAC7ZUDxK5WUIA
t5TtfkqLPrDa+RNsNeqTa4s/2yQfAmtDXX/kFJw2Otlv8K8WIXXjhZBxasWYDB/3
89xAxzXgANyIfbnKvfGkAmMQRP/1kYHuUh4Sgh8SjHfnRwHwfvBYN1Zleo/rYd4F
nGxPdyXpmtw6lKt9wB5Xkkj/jRQxfkdefa+DqwsrIYmFq52dLo17MjWh6xI06jQJ
Ga1gdDKFvsPnYg==
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:18:07 2025 by rpki-client