Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
File: 500-XZlL7NPyWMQd858fY-xWPh0.mft (raw, json)
Hash identifier: q6pg9FUycELuUbM1tBl7IyQ8bxSroDdBo1uZ7FzmWuI=
Subject key identifier: 28:A7:13:E3:0F:2B:7B:81:13:83:67:4B:04:2B:74:5A:6E:30:06:7C
Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
Certificate issuer: /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Certificate serial: 019848C076B285B8CF1554D858CCEB5B0FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
Manifest number: 0FAB
Signing time: Sat 26 Jul 2025 22:00:29 +0000
Manifest this update: Sat 26 Jul 2025 22:00:29 +0000
Manifest next update: Sun 27 Jul 2025 22:00:29 +0000
Files and hashes: 1: 500-XZlL7NPyWMQd858fY-xWPh0.crl (hash: geuEls9w3PtjtKbAfNuy9848F1kNUJvkSHMVZdX/dww=)
2: BBc69UDcCnvJ9YXOkYKIegaNiDE.roa (hash: u/teCtCSqk7whi20Ul6NWhHZ26QmJCDD43T9Guz4eqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:76:b2:85:b8:cf:15:54:d8:58:cc:eb:5b:0f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Validity
Not Before: Jul 26 22:00:29 2025 GMT
Not After : Jul 27 22:00:29 2025 GMT
Subject: CN=28a713e30f2b7b811383674b042b745a6e30067c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:cf:20:bd:0e:88:9a:dc:f1:6a:68:fa:96:
e7:b1:66:23:e1:3d:8e:f0:e3:cc:3e:c5:21:b0:52:
4b:9d:f6:bb:5e:b7:b0:9b:9a:34:94:c8:7d:78:e6:
d6:e8:07:f4:a0:e8:ed:1b:c3:f7:a7:69:7c:c7:da:
59:1a:f7:25:fa:cb:4f:88:0f:ce:66:c6:a0:4a:a8:
02:e7:92:2c:cc:08:6f:5f:86:8f:82:17:de:98:4e:
19:aa:9a:c6:5a:6e:52:76:9b:d7:4f:6d:82:2f:6b:
92:16:ab:39:8c:d8:a3:88:af:da:67:b4:38:5a:0e:
56:3a:d2:b9:23:5f:c0:7a:ef:1d:14:ff:77:fb:05:
f5:db:13:61:f4:9e:c5:3a:02:3f:2f:f7:38:ce:10:
84:dc:50:94:fd:a5:35:6c:6e:92:18:0c:f9:29:fa:
23:ea:d4:42:dd:54:40:4f:13:e6:c6:d6:00:44:9c:
15:44:d0:0e:5d:89:3d:c0:e3:90:63:ed:01:76:08:
c9:b7:6b:fa:8c:58:a4:76:2c:d5:83:d9:58:d0:60:
dd:42:17:87:9a:ed:ca:8b:6f:5b:11:48:4a:08:df:
88:fa:e3:ae:da:c2:60:5d:62:d3:43:27:01:9b:f5:
91:a7:a2:14:2f:a2:f1:df:c7:b5:7b:c2:85:6c:33:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A7:13:E3:0F:2B:7B:81:13:83:67:4B:04:2B:74:5A:6E:30:06:7C
X509v3 Authority Key Identifier:
keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ba:5b:5a:dc:f2:9d:d8:32:6e:87:4a:3e:8a:38:7d:c9:6d:
82:8f:33:4a:81:62:52:6a:52:89:ea:9b:a8:7d:45:32:ad:4b:
8f:0c:46:ea:61:b7:0a:27:92:a2:1f:4d:df:94:a4:a0:7a:34:
a4:da:a7:fb:47:d6:da:80:84:0b:6d:1d:33:d8:b0:a5:94:99:
e0:de:34:20:af:b0:86:23:93:a2:b6:58:da:2d:ed:6e:be:48:
49:0d:6c:4c:15:d0:6f:f5:27:aa:09:17:61:a9:f7:24:cc:6e:
40:e5:3a:5e:3c:b7:d0:1b:d1:60:fa:19:7e:86:27:f3:f5:f7:
85:63:ea:04:a4:40:af:88:04:37:3f:9d:c0:73:ae:d2:b3:7e:
44:d0:42:7e:99:9f:c5:03:1a:f6:1f:bb:8a:73:d7:cb:93:c7:
30:f2:5b:0f:25:c5:a3:60:b9:dd:57:c1:e5:d2:df:b0:05:e1:
de:8f:47:30:69:8c:b3:7e:2e:fa:33:cf:86:a8:3f:24:17:ad:
ce:9e:cd:b5:ea:5c:49:36:7d:d6:60:92:79:b2:a1:03:70:a5:
49:40:ae:74:6c:2f:63:32:0a:cc:9d:f8:62:71:ab:ca:08:a8:
d9:5f:69:0e:98:94:f4:2f:81:52:60:99:f0:84:a6:64:d5:d9:
9a:17:d7:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwHayhbjPFVTYWMzrWw/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NGQzZTVkOTk0YmVjZDNmMjU4YzQxZGYzOWYxZjYzZWM1
NjNlMWQwHhcNMjUwNzI2MjIwMDI5WhcNMjUwNzI3MjIwMDI5WjAzMTEwLwYDVQQD
EygyOGE3MTNlMzBmMmI3YjgxMTM4MzY3NGIwNDJiNzQ1YTZlMzAwNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLPPIL0OiJrc8Wpo+pbnsWYj4T2O
8OPMPsUhsFJLnfa7Xrewm5o0lMh9eObW6Af0oOjtG8P3p2l8x9pZGvcl+stPiA/O
ZsagSqgC55IszAhvX4aPghfemE4ZqprGWm5SdpvXT22CL2uSFqs5jNijiK/aZ7Q4
Wg5WOtK5I1/Aeu8dFP93+wX12xNh9J7FOgI/L/c4zhCE3FCU/aU1bG6SGAz5Kfoj
6tRC3VRATxPmxtYARJwVRNAOXYk9wOOQY+0BdgjJt2v6jFikdizVg9lY0GDdQheH
mu3Ki29bEUhKCN+I+uOu2sJgXWLTQycBm/WRp6IUL6Lx38e1e8KFbDOkJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCinE+MPK3uBE4NnSwQrdFpuMAZ8MB8GA1UdIwQY
MBaAFOdNPl2ZS+zT8ljEHfOfH2PsVj4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTAwLVhabEw3TlB5V01RZDg1OGZZLXhXUGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80MmUyNGMtMjFmNS00NDFmLWI2YmMt
YzIzZDdhZGJlYmRjLzEvNTAwLVhabEw3TlB5V01RZDg1OGZZLXhXUGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80MmUyNGMtMjFmNS00NDFmLWI2YmMtYzIzZDdhZGJlYmRj
LzEvNTAwLVhabEw3TlB5V01RZDg1OGZZLXhXUGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbpbWtzy
ndgybodKPoo4fcltgo8zSoFiUmpSieqbqH1FMq1LjwxG6mG3CieSoh9N35SkoHo0
pNqn+0fW2oCEC20dM9iwpZSZ4N40IK+whiOTorZY2i3tbr5ISQ1sTBXQb/UnqgkX
Yan3JMxuQOU6Xjy30BvRYPoZfoYn8/X3hWPqBKRAr4gENz+dwHOu0rN+RNBCfpmf
xQMa9h+7inPXy5PHMPJbDyXFo2C53VfB5dLfsAXh3o9HMGmMs34u+jPPhqg/JBet
zp7NtepcSTZ91mCSebKhA3ClSUCudGwvYzIKzJ34YnGrygio2V9pDpiU9C+BUmCZ
8ISmZNXZmhfXFg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:37 2025 by rpki-client