Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: VFgp8taoZbxmQveJmma00tqGSFyzQpF9iQodUjtyVZ0=
Subject key identifier: 27:87:70:FD:01:32:9F:27:60:9D:83:E9:B1:1F:0F:6F:08:7A:9C:50
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 019844ACF066658E2B66E622566E67595225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 03F2
Signing time: Sat 26 Jul 2025 03:00:41 +0000
Manifest this update: Sat 26 Jul 2025 03:00:41 +0000
Manifest next update: Sun 27 Jul 2025 03:00:41 +0000
Files and hashes: 1: jw_UZUOgx6yF78j9CZngLPh5MJg.roa (hash: CTLi772NuP6ENX6hf9k8r6vRlCcaoedrcUdbAIXJuzo=)
2: mHdbhQxgyf7CV9jCGJvliFVilXc.roa (hash: 4CdqTf57TkDxaRHOcnXl2aFyjkgmNRswPmW9ZMUYxw8=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: DBsqymRiECCwkgd5ROnLl7UM5nqAYob3RltpnxCRU3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:f0:66:65:8e:2b:66:e6:22:56:6e:67:59:52:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Jul 26 03:00:41 2025 GMT
Not After : Jul 27 03:00:41 2025 GMT
Subject: CN=278770fd01329f27609d83e9b11f0f6f087a9c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:19:8b:4d:65:27:51:91:12:59:db:d8:3b:
d5:ac:de:56:96:cb:83:6a:05:ea:72:30:b2:fd:86:
56:16:33:4d:9b:71:cd:52:c3:71:23:08:c1:03:30:
5d:58:21:e6:1d:e1:7f:b3:ba:05:41:36:cf:bd:9f:
d5:92:6b:e8:7a:19:33:f0:c8:99:3a:84:2a:bd:c9:
22:b5:1e:f5:ef:fa:53:eb:de:62:27:26:6e:7a:fd:
14:74:62:69:13:bf:2a:08:3c:ba:4f:7a:38:41:41:
e6:0b:c2:9e:c1:bb:97:ef:63:e6:d2:97:7b:fb:cf:
5b:de:a2:31:2e:e0:d5:20:d3:4c:76:74:50:01:90:
42:34:52:cb:ba:5b:48:8e:12:b4:03:f8:6d:42:25:
f8:94:b4:d9:6f:b2:ad:02:55:77:d7:c3:f3:a4:96:
91:e3:ba:b4:35:9f:c1:c6:8f:b5:b6:6e:8e:38:46:
a8:77:c7:5e:6a:9e:8f:78:2d:a8:52:5e:b9:ac:3b:
2a:ea:0e:84:5c:b3:ff:2d:d1:ae:35:fc:3c:9e:ee:
69:39:7b:a9:ec:37:34:20:46:71:b1:42:f2:8b:6f:
c4:21:47:0b:64:f3:5e:dd:66:69:b3:8e:14:f1:a0:
28:68:78:99:91:b9:f7:0a:f6:6d:78:96:1b:69:2b:
10:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:87:70:FD:01:32:9F:27:60:9D:83:E9:B1:1F:0F:6F:08:7A:9C:50
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2e:d4:ec:2e:3f:41:43:16:78:2b:27:e4:d9:82:b3:ca:b3:
bd:4f:94:cb:3f:d8:c1:fb:09:2d:b3:53:e4:14:97:50:4c:7d:
a2:6f:bf:87:97:13:a8:75:64:3a:43:4e:d7:57:ae:6a:a9:1b:
1b:e5:26:c8:00:af:80:00:37:c6:89:ad:33:4e:c6:7b:6e:69:
d2:d9:1e:a8:ed:ca:98:b5:3f:19:67:d1:2b:62:dd:1d:26:84:
ec:aa:26:85:57:44:55:8a:c9:c5:68:00:96:67:7f:d7:a0:c8:
a1:14:e7:6d:4f:02:76:9b:45:57:9c:00:69:f5:08:47:11:09:
92:2f:cf:f0:37:a5:c1:cc:58:02:0a:fa:8f:22:3b:9f:6d:61:
22:b9:a6:80:22:5a:b2:30:f6:12:d8:2f:d9:26:86:8f:87:ab:
d9:f9:a3:21:c9:f1:65:6f:41:ac:ba:b1:53:1b:87:7a:21:90:
91:68:bd:98:f1:0a:36:1b:ee:7c:a4:98:5e:f2:b2:a2:0a:76:
2d:3a:0a:8c:ab:b3:0c:63:bb:1e:4e:ed:2d:6a:23:5d:4a:d5:
c5:4b:95:1f:c6:6f:71:39:69:dd:1f:7b:a2:ce:55:08:7d:95:
72:df:12:f0:2b:ff:9c:33:0a:0f:56:e5:79:e4:4d:cd:85:89:
0d:1b:ec:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhErPBmZY4rZuYiVm5nWVIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWM0Y2U2NjNlMWVjMjQ1ZTc0N2NkODQ2ZjFhNjlkZGI4
MzRiM2IwHhcNMjUwNzI2MDMwMDQxWhcNMjUwNzI3MDMwMDQxWjAzMTEwLwYDVQQD
EygyNzg3NzBmZDAxMzI5ZjI3NjA5ZDgzZTliMTFmMGY2ZjA4N2E5YzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv30Zi01lJ1GRElnb2DvVrN5WlsuD
agXqcjCy/YZWFjNNm3HNUsNxIwjBAzBdWCHmHeF/s7oFQTbPvZ/Vkmvoehkz8MiZ
OoQqvckitR717/pT695iJyZuev0UdGJpE78qCDy6T3o4QUHmC8KewbuX72Pm0pd7
+89b3qIxLuDVINNMdnRQAZBCNFLLultIjhK0A/htQiX4lLTZb7KtAlV318PzpJaR
47q0NZ/Bxo+1tm6OOEaod8deap6PeC2oUl65rDsq6g6EXLP/LdGuNfw8nu5pOXup
7Dc0IEZxsULyi2/EIUcLZPNe3WZps44U8aAoaHiZkbn3CvZteJYbaSsQewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeHcP0BMp8nYJ2D6bEfD28IepxQMB8GA1UdIwQY
MBaAFLMcTOZj4ewkXnR82Ebxpp3bg0s7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMt
NDY1YWRjMjk1OWYyLzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMtNDY1YWRjMjk1OWYy
LzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAii7U7C4/
QUMWeCsn5NmCs8qzvU+Uyz/YwfsJLbNT5BSXUEx9om+/h5cTqHVkOkNO11euaqkb
G+UmyACvgAA3xomtM07Ge25p0tkeqO3KmLU/GWfRK2LdHSaE7KomhVdEVYrJxWgA
lmd/16DIoRTnbU8CdptFV5wAafUIRxEJki/P8DelwcxYAgr6jyI7n21hIrmmgCJa
sjD2Etgv2SaGj4er2fmjIcnxZW9BrLqxUxuHeiGQkWi9mPEKNhvufKSYXvKyogp2
LToKjKuzDGO7Hk7tLWojXUrVxUuVH8ZvcTlp3R97os5VCH2Vct8S8Cv/nDMKD1bl
eeRNzYWJDRvsvQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:17 2025 by rpki-client