Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
File: 0xryhyw_VQMHOGbf_vSItxeD2rY.mft (raw, json)
Hash identifier: wZZAeRsb5UhZKLQJGHb8/XZyyjTk8Ve/HqqtTOXRZi4=
Subject key identifier: 02:41:86:7A:47:90:40:E0:A1:CF:DF:16:17:AF:9F:DC:26:5B:48:2A
Authority key identifier: D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
Certificate issuer: /CN=d31af2872c3f5503073866dffef488b71783dab6
Certificate serial: 019848C0CDB1F13BA8D477C7F0B640ADFAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
Manifest number: 1300
Signing time: Sat 26 Jul 2025 22:00:51 +0000
Manifest this update: Sat 26 Jul 2025 22:00:51 +0000
Manifest next update: Sun 27 Jul 2025 22:00:51 +0000
Files and hashes: 1: 0xryhyw_VQMHOGbf_vSItxeD2rY.crl (hash: Qcq1picxF+i1vTR+txXye2da8qGQt7DcFIzv5qTf7KY=)
2: Vr2MHbk4BkpwijegPw7svFXxpY8.roa (hash: J4FlYQ16tBtXCX4bdbpdB9oishsKJVSj1Pc1U4pte9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:cd:b1:f1:3b:a8:d4:77:c7:f0:b6:40:ad:fa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31af2872c3f5503073866dffef488b71783dab6
Validity
Not Before: Jul 26 22:00:51 2025 GMT
Not After : Jul 27 22:00:51 2025 GMT
Subject: CN=0241867a479040e0a1cfdf1617af9fdc265b482a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dc:78:c4:0e:94:d5:43:41:2b:a1:17:7d:fc:
49:62:be:d5:c6:a6:2b:92:89:91:27:79:46:09:08:
c3:93:f7:5a:96:69:2a:0f:8d:b7:cd:5a:48:d4:7f:
ce:89:25:55:1e:b6:d6:76:93:80:eb:d7:fb:75:47:
e7:e4:29:e1:22:d9:f7:50:8c:70:15:10:c2:a5:3f:
cc:73:89:75:dd:cd:0b:23:41:d4:e5:2a:36:90:d4:
af:9f:2b:87:8e:10:23:c4:da:51:53:8f:40:71:14:
70:83:3e:e8:a3:d8:c6:20:f9:bf:45:3c:a3:71:37:
3a:75:01:ea:56:e6:2d:13:dc:92:82:39:d8:d6:1d:
41:1b:ad:97:52:df:60:9a:2a:27:ea:49:3a:2b:bf:
39:ec:b0:b7:1e:70:cf:19:1a:29:dd:26:86:3d:ed:
fb:b3:b3:1e:a0:86:70:a7:08:c1:b0:c9:72:8f:c2:
13:c8:e8:b5:47:61:5b:bc:84:8f:be:c8:46:15:04:
f2:2c:ae:42:ef:2e:1b:29:a5:4f:38:fc:c2:b9:42:
a5:02:3d:b5:b8:42:5d:b6:db:6e:27:d9:bb:25:c2:
a0:02:9e:ec:53:11:a6:2b:74:2b:eb:cb:74:dd:7c:
cc:76:c1:11:ec:9f:dd:86:b2:d9:90:e9:6e:4c:4c:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:41:86:7A:47:90:40:E0:A1:CF:DF:16:17:AF:9F:DC:26:5B:48:2A
X509v3 Authority Key Identifier:
keyid:D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c6:d8:71:68:24:39:d4:54:1d:d3:f3:fb:3a:e5:0e:18:db:
7f:ba:18:fd:b4:e6:21:f1:ea:69:c5:19:d6:8e:35:c8:99:fe:
f2:00:4e:61:6f:48:67:82:07:e8:61:f3:f9:5e:7a:20:6f:93:
66:e9:bf:b0:d2:ee:4e:f3:d0:5a:21:c3:3b:d3:38:66:77:57:
34:ec:c4:71:b8:8e:03:d3:57:40:4e:d1:20:0f:0a:65:da:b3:
37:ec:8b:a4:ba:e1:93:d4:ab:71:7f:86:ba:5a:72:18:36:53:
2a:25:36:d4:59:b0:fa:99:a4:09:eb:b5:7d:df:25:be:b9:0a:
fd:3b:99:2b:a7:60:2a:b6:99:e3:65:b9:0b:fc:94:3e:01:32:
0d:e5:33:d7:6e:db:c7:80:a4:4e:b6:36:c3:d4:53:35:62:ad:
5d:9d:18:20:9f:60:51:c6:57:33:a2:cc:c8:e7:0e:d5:0c:43:
d8:49:cf:7d:aa:d3:c5:c4:dd:dc:d0:42:06:c2:6d:f6:e3:ad:
cd:10:30:4a:7c:05:d0:3c:c8:03:a6:95:6c:be:4a:25:cc:3f:
4d:cd:b5:d3:aa:2f:44:3f:47:98:4e:c2:cf:98:60:f8:1a:cf:
72:b1:f4:bf:a9:54:90:d1:b6:ef:b6:f5:f6:36:0e:55:75:1a:
18:81:84:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwM2x8Tuo1HfH8LZArfq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWFmMjg3MmMzZjU1MDMwNzM4NjZkZmZlZjQ4OGI3MTc4
M2RhYjYwHhcNMjUwNzI2MjIwMDUxWhcNMjUwNzI3MjIwMDUxWjAzMTEwLwYDVQQD
EygwMjQxODY3YTQ3OTA0MGUwYTFjZmRmMTYxN2FmOWZkYzI2NWI0ODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktx4xA6U1UNBK6EXffxJYr7VxqYr
komRJ3lGCQjDk/dalmkqD423zVpI1H/OiSVVHrbWdpOA69f7dUfn5CnhItn3UIxw
FRDCpT/Mc4l13c0LI0HU5So2kNSvnyuHjhAjxNpRU49AcRRwgz7oo9jGIPm/RTyj
cTc6dQHqVuYtE9ySgjnY1h1BG62XUt9gmion6kk6K7857LC3HnDPGRop3SaGPe37
s7MeoIZwpwjBsMlyj8ITyOi1R2FbvISPvshGFQTyLK5C7y4bKaVPOPzCuUKlAj21
uEJdtttuJ9m7JcKgAp7sUxGmK3Qr68t03XzMdsER7J/dhrLZkOluTEyItwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJBhnpHkEDgoc/fFhevn9wmW0gqMB8GA1UdIwQY
MBaAFNMa8ocsP1UDBzhm3/70iLcXg9q2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHhyeWh5d19WUU1IT0diZl92U0l0eGVEMnJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82OGI3NWMtODNkZi00NzRlLWE5ZmUt
MDFiZjFmMTQ1YzI2LzEvMHhyeWh5d19WUU1IT0diZl92U0l0eGVEMnJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82OGI3NWMtODNkZi00NzRlLWE5ZmUtMDFiZjFmMTQ1YzI2
LzEvMHhyeWh5d19WUU1IT0diZl92U0l0eGVEMnJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcbYcWgk
OdRUHdPz+zrlDhjbf7oY/bTmIfHqacUZ1o41yJn+8gBOYW9IZ4IH6GHz+V56IG+T
Zum/sNLuTvPQWiHDO9M4ZndXNOzEcbiOA9NXQE7RIA8KZdqzN+yLpLrhk9SrcX+G
ulpyGDZTKiU21Fmw+pmkCeu1fd8lvrkK/TuZK6dgKraZ42W5C/yUPgEyDeUz127b
x4CkTrY2w9RTNWKtXZ0YIJ9gUcZXM6LMyOcO1QxD2EnPfarTxcTd3NBCBsJt9uOt
zRAwSnwF0DzIA6aVbL5KJcw/Tc2106ovRD9HmE7Cz5hg+BrPcrH0v6lUkNG277b1
9jYOVXUaGIGE3Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:52:49 2025 by rpki-client