Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
File: Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft (raw, json)
Hash identifier: krMB2RnNnTzkSNAmKQSwTSH2dwDCCb25CAsCBmimX9A=
Subject key identifier: EF:4E:B0:48:70:FD:60:02:E6:7C:5C:81:41:26:74:12:0A:33:3E:6D
Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
Certificate issuer: /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Certificate serial: 01984A0A4C09DAF601D060D78487F16B0D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 04:00:45 +0000
Manifest this update: Sun 27 Jul 2025 04:00:45 +0000
Manifest next update: Mon 28 Jul 2025 04:00:45 +0000
Files and hashes: 1: Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl (hash: Amkzm3iCTLK07m/PXBbPGTgxLnN9PRjgJ4kxjmYexDU=)
2: ZL3E7Adz2UxGlx__ehEXq17MBJk.roa (hash: eyCT9Oq7LBXIn9/dNlFO4JQgfNKfcXzeYyZGwsbG9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:4c:09:da:f6:01:d0:60:d7:84:87:f1:6b:0d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Validity
Not Before: Jul 27 04:00:45 2025 GMT
Not After : Jul 28 04:00:45 2025 GMT
Subject: CN=ef4eb04870fd6002e67c5c81412674120a333e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:c7:f5:1f:2f:8c:1a:50:cb:ac:d5:7c:96:
b5:b9:fb:c9:bd:33:e3:db:31:80:37:71:56:bc:12:
eb:91:4b:cb:89:41:67:27:9a:0b:d1:62:1f:75:2e:
71:6a:09:7d:e2:d4:b9:63:c6:52:ff:e3:33:a9:2a:
e4:19:c2:6b:2a:d2:b4:20:2e:73:e9:14:ff:8d:14:
d4:a4:55:7b:8d:d4:a9:9a:ed:e8:86:15:7f:40:47:
3f:0b:f2:29:7d:c0:a1:82:0c:a6:c7:7b:b6:0b:3e:
81:81:b5:09:74:3b:f6:66:87:ea:35:9f:f3:cd:40:
61:7a:86:1d:f3:c8:f6:0c:16:d6:23:85:83:53:cf:
77:b1:73:24:17:82:9a:2b:34:75:37:97:a1:05:ab:
f6:96:9f:b3:4c:47:56:90:d3:bf:64:20:7b:dd:0c:
7f:66:b6:01:46:45:51:cd:86:a2:36:22:6c:7c:4e:
2b:81:bb:7b:07:87:c1:a1:c1:4c:8d:0a:09:87:3f:
b6:e8:c4:49:dc:ae:25:33:d4:68:7a:d2:65:c1:7e:
8c:29:ac:82:24:d7:5c:46:03:7d:00:fe:ea:f9:26:
30:fe:04:dc:a0:2e:2b:72:a4:fb:64:78:56:ab:39:
b1:32:8d:b3:a0:69:be:96:db:c8:3f:0d:33:70:4d:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4E:B0:48:70:FD:60:02:E6:7C:5C:81:41:26:74:12:0A:33:3E:6D
X509v3 Authority Key Identifier:
keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8c:da:7c:a5:ac:2e:5a:8d:56:fe:02:03:db:8f:a7:99:eb:
ca:7f:13:52:13:e8:b6:e9:d8:8e:e6:43:e6:22:b5:f6:91:fd:
aa:42:75:f7:64:a6:65:68:28:66:23:cf:d7:1c:0d:04:b7:ac:
d5:30:46:30:52:48:bf:a7:af:32:54:0b:00:b8:72:ef:9f:b3:
01:58:a1:59:b8:1e:06:0a:cc:2c:95:91:24:54:10:a5:6c:b8:
01:af:e2:0d:2c:15:9d:60:13:c9:b8:51:ae:65:09:8e:92:92:
78:e9:3e:7b:45:28:85:d5:a0:a6:41:ac:cc:36:5c:82:44:84:
51:b0:33:d3:1f:14:02:c0:ac:a1:b7:26:12:f1:e1:c5:38:24:
5e:c6:dd:51:dd:da:18:ed:0c:4c:a2:17:49:d6:4d:d9:18:e3:
a9:09:ab:2c:ca:4d:b0:b1:3a:05:b4:10:5b:67:46:89:7a:2d:
cf:52:b8:78:b8:47:20:bd:2d:6d:88:69:46:3a:48:42:f6:ce:
46:ee:a9:29:fa:3c:78:7a:36:48:39:ca:26:88:a2:86:51:10:
57:0b:d0:58:9f:82:d5:71:a1:6f:fa:64:eb:86:c6:2c:11:f8:
4e:fd:de:4d:15:61:ae:64:1f:be:2e:9d:9e:ff:fb:c0:61:9c:
3f:54:c1:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCkwJ2vYB0GDXhIfxaw0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZmZmMjU3OGEwZTYyMTVkYzYwZTJkYTk0NmYzMGQyNWM2
M2NkNmEwHhcNMjUwNzI3MDQwMDQ1WhcNMjUwNzI4MDQwMDQ1WjAzMTEwLwYDVQQD
EyhlZjRlYjA0ODcwZmQ2MDAyZTY3YzVjODE0MTI2NzQxMjBhMzMzZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQHH9R8vjBpQy6zVfJa1ufvJvTPj
2zGAN3FWvBLrkUvLiUFnJ5oL0WIfdS5xagl94tS5Y8ZS/+MzqSrkGcJrKtK0IC5z
6RT/jRTUpFV7jdSpmu3ohhV/QEc/C/IpfcChggymx3u2Cz6BgbUJdDv2ZofqNZ/z
zUBheoYd88j2DBbWI4WDU893sXMkF4KaKzR1N5ehBav2lp+zTEdWkNO/ZCB73Qx/
ZrYBRkVRzYaiNiJsfE4rgbt7B4fBocFMjQoJhz+26MRJ3K4lM9RoetJlwX6MKayC
JNdcRgN9AP7q+SYw/gTcoC4rcqT7ZHhWqzmxMo2zoGm+ltvIPw0zcE1BVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9OsEhw/WAC5nxcgUEmdBIKMz5tMB8GA1UdIwQY
MBaAFF7/8leKDmIV3GDi2pRvMNJcY81qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83OWQxYTEtMDkxYy00MDM5LTg3Nzgt
YjY5NzkwN2ZmZGM4LzEvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC83OWQxYTEtMDkxYy00MDM5LTg3NzgtYjY5NzkwN2ZmZGM4
LzEvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmozafKWs
LlqNVv4CA9uPp5nryn8TUhPotunYjuZD5iK19pH9qkJ192SmZWgoZiPP1xwNBLes
1TBGMFJIv6evMlQLALhy75+zAVihWbgeBgrMLJWRJFQQpWy4Aa/iDSwVnWATybhR
rmUJjpKSeOk+e0UohdWgpkGszDZcgkSEUbAz0x8UAsCsobcmEvHhxTgkXsbdUd3a
GO0MTKIXSdZN2RjjqQmrLMpNsLE6BbQQW2dGiXotz1K4eLhHIL0tbYhpRjpIQvbO
Ru6pKfo8eHo2SDnKJoiihlEQVwvQWJ+C1XGhb/pk64bGLBH4Tv3eTRVhrmQfvi6d
nv/7wGGcP1TBRA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:50:47 2025 by rpki-client