Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: xfgu2QvNy8FE/Mn94k0J23aMtPAxu0BaEXN/4ZPyNLI=
Subject key identifier: 34:26:AF:C9:77:D1:06:C0:36:23:6B:65:EA:4F:28:93:F7:46:BF:0E
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 0198560EAC852219A764AE38418A78DA2CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 06AA
Signing time: Tue 29 Jul 2025 12:00:58 +0000
Manifest this update: Tue 29 Jul 2025 12:00:58 +0000
Manifest next update: Wed 30 Jul 2025 12:00:58 +0000
Files and hashes: 1: Cj_iWDZ0D1TK46uScrNJsyJfZ60.roa (hash: 2EItGET7KN5xYUnaftxX5tZU9l5ZOP9oj5BYiCLbSjk=)
2: TX8cnXXbIgaO3aE68x88MMtMTTI.roa (hash: FeZgp0BLqJdm0jiS+/GIZyqTIXPtIBPoCgnCgn78SEQ=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: DDUSF7ROYZWw/LJ2hKluoCeR7uY4HdkFVdybMziA6BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:ac:85:22:19:a7:64:ae:38:41:8a:78:da:2c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Jul 29 12:00:58 2025 GMT
Not After : Jul 30 12:00:58 2025 GMT
Subject: CN=3426afc977d106c036236b65ea4f2893f746bf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:c7:3b:30:f2:6b:f6:f4:a6:6c:6b:80:5d:
b6:a5:8f:6d:8d:21:c0:02:03:a4:96:c6:6f:27:38:
cb:8f:86:42:6f:b5:d3:ae:fc:1c:2a:8e:dc:a7:9f:
2e:17:40:c9:dd:cc:f6:9d:1b:9c:44:e1:dd:da:b9:
ab:ac:ff:b6:b3:8f:56:45:c7:ad:ac:fb:40:df:99:
1a:35:f5:a8:be:af:f4:77:7f:6d:a1:5f:44:8e:0b:
30:e9:a5:66:9b:13:e2:30:32:b3:d6:d3:77:67:ee:
83:dc:d6:55:e3:1c:cf:fc:9d:6b:b4:e5:8c:c2:16:
38:58:e9:9e:bd:01:b2:de:a4:63:d7:29:01:22:8f:
28:8e:89:6d:cd:ea:a4:7f:02:03:02:2d:8a:1c:2d:
86:8b:53:16:dd:b1:04:08:c7:da:cb:61:2c:59:ca:
f1:90:12:11:fd:cd:25:ac:3d:7d:56:fa:31:51:02:
94:26:74:d0:40:90:12:03:32:f9:41:81:0c:50:7d:
03:88:48:ae:83:77:2a:b2:1a:71:89:9c:0b:51:86:
d7:4f:bf:f8:86:ab:1d:e4:ec:43:ea:55:1e:d7:0c:
54:19:b2:da:c9:da:d4:06:be:33:a5:4f:a9:50:1f:
17:27:72:f2:ec:21:86:74:98:39:d9:b0:ec:da:29:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:26:AF:C9:77:D1:06:C0:36:23:6B:65:EA:4F:28:93:F7:46:BF:0E
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:28:07:a2:3a:3e:d5:19:c9:63:34:4d:04:2a:10:79:4f:52:
d9:93:66:1e:00:5b:09:a7:3e:33:eb:4e:9c:ce:3c:bd:25:eb:
46:04:30:36:e5:eb:77:42:d9:a8:02:29:f8:df:ad:cb:88:a0:
b3:ee:86:33:af:a6:1f:9b:72:d5:07:51:56:cd:d9:81:fb:3f:
b1:ed:54:2d:6a:53:48:d2:84:8a:a9:d1:88:57:f3:18:d7:9c:
c0:bc:47:2d:bc:0e:1f:f0:64:3f:a7:13:a8:0c:ce:84:99:35:
96:6f:fc:1d:02:8a:7d:15:bc:54:46:45:56:4c:26:31:9e:12:
5c:45:96:bb:8f:41:78:bd:8d:e3:69:6c:c4:86:f9:29:73:22:
d9:ed:c2:3d:e5:13:8a:61:72:32:67:0c:cd:6f:cf:9e:ae:54:
92:b0:d6:77:88:d1:f4:21:7a:84:25:2e:5a:6d:a9:64:6f:1c:
59:5f:86:ee:85:2f:09:d2:8f:ba:8c:44:3b:e4:56:c3:68:1b:
e5:05:7b:1f:f4:40:15:b6:f7:de:d3:74:a9:f6:00:29:f0:9a:
85:cb:6f:11:ce:3e:24:85:63:8a:f9:86:a6:06:9e:24:f8:38:
0d:1f:a3:05:d4:d7:63:46:f7:26:5a:c5:a0:18:ec:44:e9:07:
4b:95:3b:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhWDqyFIhmnZK44QYp42iy1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YmE1MWMwNzE0ODg0M2Q0MDA4MDViNDAzMzVlNzJkMzI0
MjY1ZjEwHhcNMjUwNzI5MTIwMDU4WhcNMjUwNzMwMTIwMDU4WjAzMTEwLwYDVQQD
EygzNDI2YWZjOTc3ZDEwNmMwMzYyMzZiNjVlYTRmMjg5M2Y3NDZiZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMnHOzDya/b0pmxrgF22pY9tjSHA
AgOklsZvJzjLj4ZCb7XTrvwcKo7cp58uF0DJ3cz2nRucROHd2rmrrP+2s49WRcet
rPtA35kaNfWovq/0d39toV9Ejgsw6aVmmxPiMDKz1tN3Z+6D3NZV4xzP/J1rtOWM
whY4WOmevQGy3qRj1ykBIo8ojoltzeqkfwIDAi2KHC2Gi1MW3bEECMfay2EsWcrx
kBIR/c0lrD19VvoxUQKUJnTQQJASAzL5QYEMUH0DiEiug3cqshpxiZwLUYbXT7/4
hqsd5OxD6lUe1wxUGbLaydrUBr4zpU+pUB8XJ3Ly7CGGdJg52bDs2ikm0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQmr8l30QbANiNrZepPKJP3Rr8OMB8GA1UdIwQY
MBaAFMW6UcBxSIQ9QAgFtAM15y0yQmXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kYjYzYjUtMWY5Ni00ZjAwLTg2NWEt
OWZmNWMxYTNiMGUwLzEveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kYjYzYjUtMWY5Ni00ZjAwLTg2NWEtOWZmNWMxYTNiMGUw
LzEveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESgHojo+
1RnJYzRNBCoQeU9S2ZNmHgBbCac+M+tOnM48vSXrRgQwNuXrd0LZqAIp+N+ty4ig
s+6GM6+mH5ty1QdRVs3Zgfs/se1ULWpTSNKEiqnRiFfzGNecwLxHLbwOH/BkP6cT
qAzOhJk1lm/8HQKKfRW8VEZFVkwmMZ4SXEWWu49BeL2N42lsxIb5KXMi2e3CPeUT
imFyMmcMzW/Pnq5UkrDWd4jR9CF6hCUuWm2pZG8cWV+G7oUvCdKPuoxEO+RWw2gb
5QV7H/RAFbb33tN0qfYAKfCahctvEc4+JIVjivmGpgaeJPg4DR+jBdTXY0b3JlrF
oBjsROkHS5U7+A==
-----END CERTIFICATE-----
Generated at Tue Jul 29 18:56:59 2025 by rpki-client