Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json)
Hash identifier: pA72a4BBpuMJC6jIiB4vJzSYWgN4hR0wyr1iyRUoXKs=
Subject key identifier: CD:52:21:2C:1D:3B:63:F8:66:03:2F:BA:47:58:8C:1A:74:5F:82:F4
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 01983FBD06AAAC5F8D1A485FEFE3F4B7E378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
Manifest number: 11AB
Signing time: Fri 25 Jul 2025 04:00:09 +0000
Manifest this update: Fri 25 Jul 2025 04:00:09 +0000
Manifest next update: Sat 26 Jul 2025 04:00:09 +0000
Files and hashes: 1: 1-H8zwtiCrpCtpPhtU8BmTU4NN8Y.roa (hash: HRd7vxIurfbLc/eN8InR+wycqakqAWrM7JwDvrxV96A=)
2: 56Vpsd34am-XgZxuiIBx5ciZnvo.roa (hash: LIsLriDuZ7qA8gRRNpqBGuQDOGGc08GwyrJJTUnjn+I=)
3: 5aDG7pCYyxrbZjMpOApNgbcaJRA.roa (hash: KH+Hd+jzAT9WyojO5NRfs95pebo6CEWEKzj7hDMANEM=)
4: 7ftLKyY8GdyqYg2SvE9C7LNTwYE.roa (hash: UspdVgWSjoUphhiKWwgCmpo3/T+PQruLgntr17tnZLI=)
5: 9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa (hash: pi+ge/IvurZcgdtOnw6L7MyuhQVD1IzQ7GrQjJbNZf4=)
6: PoIdAsRHj_lyoBXzpjR49pFTfsI.roa (hash: tSDst5jBP0KkqvJ+KM2Moibp6droKIwwIwHkLMyazmM=)
7: ZAx7Azq9YHnuLtmsAGgkpQ9XaQk.roa (hash: Nv+QAFomBrYRU4aOf9OpKKgjZFP6zJcF4QMA/O4RLyo=)
8: gDW8r8sGQjgza7ecGOUQHgaDZvk.roa (hash: PRvvxS1NbjtP74Eh1qk8LVgvXDYkqrfyHo9xfSwr0AM=)
9: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: iyq2CM5fi1xO4Te5kuoysFEzOApUvyQHhXihaYHnrWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:06:aa:ac:5f:8d:1a:48:5f:ef:e3:f4:b7:e3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jul 25 04:00:09 2025 GMT
Not After : Jul 26 04:00:09 2025 GMT
Subject: CN=cd52212c1d3b63f866032fba47588c1a745f82f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:96:f7:4c:3c:04:b9:d7:1e:a2:15:13:b6:
05:51:f5:20:6e:fc:a8:02:5c:d1:9f:58:01:f6:b6:
a3:2a:50:16:a2:85:2e:ba:8c:38:01:98:cf:ff:10:
ab:71:a3:2e:0f:f3:c2:c1:cf:fd:5a:a2:75:e9:2b:
7f:11:bd:6f:e7:bd:80:96:46:5d:bb:06:61:51:35:
dc:38:51:b8:80:16:72:9c:42:be:1c:f2:61:fe:d6:
61:80:ef:6d:b0:a5:43:66:54:c3:77:20:68:2d:f1:
82:fb:98:de:ba:b5:36:74:6c:50:e7:bc:4d:ae:8d:
d1:44:45:8b:48:ea:30:ca:11:7b:6e:c1:a2:ae:f5:
5c:53:1b:3f:c8:df:60:da:0d:e0:cd:d8:b4:70:54:
0f:62:5b:40:b4:41:25:d9:99:ca:4b:88:11:62:49:
2e:20:8c:4a:72:f8:1e:b6:8c:6f:7d:05:d2:79:b6:
14:be:3f:5a:02:23:e2:38:d5:75:f0:98:f1:ec:80:
e9:7f:40:70:04:c0:fd:cd:03:58:70:fe:35:b9:33:
39:7a:1f:70:b6:7c:80:f7:ea:ff:6e:28:fe:3f:d1:
9e:09:eb:44:ca:0e:f1:33:ab:c9:01:8c:b0:e2:3a:
30:f1:68:82:e6:fb:d9:ff:57:5e:61:29:87:b7:e8:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:52:21:2C:1D:3B:63:F8:66:03:2F:BA:47:58:8C:1A:74:5F:82:F4
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ed:2a:01:5b:9b:6f:1e:80:54:ce:fa:2b:07:ef:78:3c:24:
a0:86:8f:25:15:87:a5:3c:be:ed:d5:e6:22:d2:a2:59:10:ea:
c4:e1:36:76:b2:36:4d:63:14:58:d9:7d:94:61:97:f1:8f:b3:
68:e3:85:9c:54:65:e9:18:50:55:bf:80:50:96:9d:c3:cc:a2:
e5:3d:3d:8c:43:a9:c9:52:9c:92:b5:9d:91:81:ed:cd:11:06:
4e:42:43:a4:ad:5f:a9:f0:c5:90:12:c7:b4:13:ad:2c:3f:db:
0d:01:0e:8f:b4:5f:28:10:98:6b:83:9c:8c:92:e7:6f:8a:4e:
10:11:55:8f:c3:ff:48:8d:60:bc:44:50:72:cd:53:6f:9a:a8:
36:da:a7:f7:41:f2:71:a5:a7:56:e8:a7:fd:ca:d9:5e:33:be:
47:6a:80:f1:2e:e0:9b:b9:a7:2d:5a:95:66:ce:06:f0:57:41:
74:e8:71:f3:00:68:a0:c6:8b:0f:ec:25:cb:74:60:25:f4:10:
27:f1:2c:9f:ac:7a:08:24:35:a7:75:15:77:0e:57:24:c1:04:
49:23:53:ea:15:9e:96:c0:cd:dd:b0:18:f4:c1:ac:78:8f:97:
12:74:f5:65:6f:b7:98:50:8a:75:eb:c7:a9:df:f7:fc:fd:76:
30:d0:ad:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg/vQaqrF+NGkhf7+P0t+N4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl
NzczNWIwHhcNMjUwNzI1MDQwMDA5WhcNMjUwNzI2MDQwMDA5WjAzMTEwLwYDVQQD
EyhjZDUyMjEyYzFkM2I2M2Y4NjYwMzJmYmE0NzU4OGMxYTc0NWY4MmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVyW90w8BLnXHqIVE7YFUfUgbvyo
AlzRn1gB9rajKlAWooUuuow4AZjP/xCrcaMuD/PCwc/9WqJ16St/Eb1v572AlkZd
uwZhUTXcOFG4gBZynEK+HPJh/tZhgO9tsKVDZlTDdyBoLfGC+5jeurU2dGxQ57xN
ro3RREWLSOowyhF7bsGirvVcUxs/yN9g2g3gzdi0cFQPYltAtEEl2ZnKS4gRYkku
IIxKcvgetoxvfQXSebYUvj9aAiPiONV18Jjx7IDpf0BwBMD9zQNYcP41uTM5eh9w
tnyA9+r/bij+P9GeCetEyg7xM6vJAYyw4jow8WiC5vvZ/1deYSmHt+gnwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1SISwdO2P4ZgMvukdYjBp0X4L0MB8GA1UdIwQY
MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt
ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj
LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiu0qAVub
bx6AVM76KwfveDwkoIaPJRWHpTy+7dXmItKiWRDqxOE2drI2TWMUWNl9lGGX8Y+z
aOOFnFRl6RhQVb+AUJadw8yi5T09jEOpyVKckrWdkYHtzREGTkJDpK1fqfDFkBLH
tBOtLD/bDQEOj7RfKBCYa4OcjJLnb4pOEBFVj8P/SI1gvERQcs1Tb5qoNtqn90Hy
caWnVuin/crZXjO+R2qA8S7gm7mnLVqVZs4G8FdBdOhx8wBooMaLD+wly3RgJfQQ
J/Esn6x6CCQ1p3UVdw5XJMEESSNT6hWelsDN3bAY9MGseI+XEnT1ZW+3mFCKdevH
qd/3/P12MNCt/Q==
-----END CERTIFICATE-----
Generated at Fri Jul 25 13:10:44 2025 by rpki-client