Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json)
Hash identifier: V+5dvZzjzm6eQBQF3+baKR0pjI+DMgp+yZwlOVda2CM=
Subject key identifier: 91:0B:84:EC:26:D2:FE:2D:DD:82:C2:1F:E6:ED:1B:FE:A4:3E:F2:CB
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 019847E472F927455E4BBDC5B144C10613B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
Manifest number: 0529
Signing time: Sat 26 Jul 2025 18:00:10 +0000
Manifest this update: Sat 26 Jul 2025 18:00:10 +0000
Manifest next update: Sun 27 Jul 2025 18:00:10 +0000
Files and hashes: 1: kHiX8WHdFwuPFdrPXqiFRGBzUrk.roa (hash: otjzQBnh+aIeRc4Qh5LotaBSTmBU7xZUCsHLwTppJLQ=)
2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: hB68Di5to8fEKcu6HPM5YQXWsgwYIPzyUu1S5/iZFZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:72:f9:27:45:5e:4b:bd:c5:b1:44:c1:06:13:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: Jul 26 18:00:10 2025 GMT
Not After : Jul 27 18:00:10 2025 GMT
Subject: CN=910b84ec26d2fe2ddd82c21fe6ed1bfea43ef2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:61:7f:9b:43:92:e0:14:8f:ea:da:3a:87:
ad:a9:f4:23:9c:fa:b9:67:da:c6:cd:3a:62:d0:75:
54:07:f7:ec:2c:95:63:36:51:6e:82:0f:f6:d6:78:
72:fd:b9:bc:b4:a2:2a:bc:d9:3c:5c:26:5a:51:9d:
46:0c:2b:8f:45:ea:57:d5:78:85:14:80:59:33:0d:
73:df:77:98:c9:76:df:61:b0:13:e3:d6:52:c7:a6:
5e:5d:93:a3:04:b5:2b:13:8b:d4:2b:ae:d5:64:f5:
ed:76:ed:d3:51:cf:f9:1b:53:05:26:03:de:69:ce:
a2:55:07:41:74:94:e4:7e:92:1c:79:e6:ac:9f:25:
ec:53:ea:20:bc:53:02:fb:6e:01:af:26:25:b6:ed:
f6:17:1f:d1:7c:1a:fd:fd:68:2e:20:12:0e:04:06:
e0:a8:6d:13:45:c5:40:52:19:a7:8a:a9:7e:39:a2:
81:86:b3:6a:23:54:e3:13:d1:6d:81:26:7f:83:1b:
a5:6b:78:aa:49:a0:50:3e:e9:e0:d9:33:b9:fe:1d:
73:50:ad:12:1b:af:89:40:a2:65:0d:c5:f1:e5:71:
1e:68:66:d9:46:01:c8:f4:1e:c7:91:44:6f:bb:16:
cc:3c:2c:7e:5b:3e:dd:d4:ac:17:88:ed:79:ac:c0:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0B:84:EC:26:D2:FE:2D:DD:82:C2:1F:E6:ED:1B:FE:A4:3E:F2:CB
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7e:54:26:ff:7c:b8:49:97:2e:76:1a:aa:f8:b4:bb:fd:65:
13:88:f8:6b:ed:eb:ee:98:78:32:fb:ac:a3:bd:7c:d6:b2:ce:
68:44:8f:e0:d9:26:f5:25:0b:21:97:3d:fb:07:8a:e2:23:49:
cf:cf:f2:f8:e3:c7:54:66:a8:ce:82:d2:96:2b:a3:d5:62:a6:
86:74:1d:16:86:01:73:b3:07:ca:9d:34:de:b2:41:7e:0b:28:
0c:da:7c:f8:e3:ff:ae:a6:ba:43:e7:f2:72:2c:db:02:96:6b:
9a:5a:08:d9:63:96:e1:1c:3e:cd:e6:3f:ef:9f:f1:f7:96:e9:
af:4d:af:97:cf:79:bb:03:c4:70:a0:4b:64:d2:94:18:22:20:
0d:d5:6e:8e:06:1c:97:4e:77:e5:e4:45:a1:08:b1:3b:04:10:
d3:3a:b1:fc:8c:b4:56:fd:78:21:57:58:63:93:1e:b3:12:2d:
83:4a:d4:e7:50:d2:11:46:c9:3a:33:c4:eb:7b:d3:15:c2:4e:
d5:7f:00:7f:65:c9:63:e1:2b:50:4c:76:93:ca:51:59:8b:35:
1e:97:b8:c6:08:12:2a:12:72:ad:be:7b:e6:2e:a5:ea:31:e9:
83:d0:ba:70:5a:12:30:4b:d6:d7:97:07:79:13:a6:aa:82:12:
87:d1:df:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5HL5J0VeS73FsUTBBhOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YmM1OWY4Zjc1NDRmMWVhNWJhNWMxOGIzOGUyNTczNTE3
YzkxMzIwHhcNMjUwNzI2MTgwMDEwWhcNMjUwNzI3MTgwMDEwWjAzMTEwLwYDVQQD
Eyg5MTBiODRlYzI2ZDJmZTJkZGQ4MmMyMWZlNmVkMWJmZWE0M2VmMmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVVhf5tDkuAUj+raOoetqfQjnPq5
Z9rGzTpi0HVUB/fsLJVjNlFugg/21nhy/bm8tKIqvNk8XCZaUZ1GDCuPRepX1XiF
FIBZMw1z33eYyXbfYbAT49ZSx6ZeXZOjBLUrE4vUK67VZPXtdu3TUc/5G1MFJgPe
ac6iVQdBdJTkfpIceeasnyXsU+ogvFMC+24BryYltu32Fx/RfBr9/WguIBIOBAbg
qG0TRcVAUhmniql+OaKBhrNqI1TjE9FtgSZ/gxula3iqSaBQPung2TO5/h1zUK0S
G6+JQKJlDcXx5XEeaGbZRgHI9B7HkURvuxbMPCx+Wz7d1KwXiO15rMAYCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJELhOwm0v4t3YLCH+btG/6kPvLLMB8GA1UdIwQY
MBaAFMa8Wfj3VE8epbpcGLOOJXNRfJEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85M2E4NDMtZDllNi00NDVlLWIyYTAt
M2NhNDA5YjUzMTFmLzEveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85M2E4NDMtZDllNi00NDVlLWIyYTAtM2NhNDA5YjUzMTFm
LzEveHJ4Wi1QZFVUeDZsdWx3WXM0NGxjMUY4a1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGH5UJv98
uEmXLnYaqvi0u/1lE4j4a+3r7ph4Mvuso7181rLOaESP4Nkm9SULIZc9+weK4iNJ
z8/y+OPHVGaozoLSliuj1WKmhnQdFoYBc7MHyp003rJBfgsoDNp8+OP/rqa6Q+fy
cizbApZrmloI2WOW4Rw+zeY/75/x95bpr02vl895uwPEcKBLZNKUGCIgDdVujgYc
l0535eRFoQixOwQQ0zqx/Iy0Vv14IVdYY5MesxItg0rU51DSEUbJOjPE63vTFcJO
1X8Af2XJY+ErUEx2k8pRWYs1Hpe4xggSKhJyrb575i6l6jHpg9C6cFoSMEvW15cH
eROmqoISh9HfrA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:41:50 2025 by rpki-client