Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier: kgo1wnG0DXG1boOef+l8qFMnd+Bks0BImLUVgn1vfJw=
Subject key identifier: 8B:3B:3F:71:7E:50:7C:5B:07:58:CA:81:01:1A:C0:EB:5F:11:28:E6
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial: 01984B548625420ABF5A31BC4F7C2E963CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 10:01:27 +0000
Manifest this update: Sun 27 Jul 2025 10:01:27 +0000
Manifest next update: Mon 28 Jul 2025 10:01:27 +0000
Files and hashes: 1: 31Tgo6hkUgGEDxpcJDek08Avr_U.roa (hash: kmmgYbNt9oWzUWS0e88Ufjcw3KVy4vM/TBImZVi6icQ=)
2: BVA-ewMKFfhNlaM9uEKeCRcxb44.roa (hash: p6Ztck3uBhR0bzcjLWO0QVdiIOvuYAXPjQqrSbEcptQ=)
3: HqPvNlx7UZiRVbk5_3PH9NhbC6A.roa (hash: +/Uf0WY1OyHo7LRFa5WaahOPnbyyowzO8Q8lBC3l8kM=)
4: RowHyzmbIUhwLNzP2aGdUq-bTxw.roa (hash: BWNoFSha19ToKG1Hm+elPv4NQAdo5EC6p+W2DfujBas=)
5: dcug0fKg-KsGzBpKENJINtdS5vw.roa (hash: 4mmQ47qSm1UkTR696jh82p3nO+ZrpORkySuxILnJi4I=)
6: kXFsWv63EX5LzlpEXl1PFUMjMlU.roa (hash: 55+NcYoCAfsxn/1QTku+M6mFFv7l9njuKzUccasgI84=)
7: qBz1hjzykMH_ZcIwvTn0SDyhgfs.roa (hash: W/hp3H2l3tBtLyOj1Fa5/YEuC/XubK4WM06Ks3Q9e/8=)
8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: 4iEFQWyJaLLSawQRqOIAhzfTriPg7kY+ddO3zn3Fc/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:86:25:42:0a:bf:5a:31:bc:4f:7c:2e:96:3c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Validity
Not Before: Jul 27 10:01:27 2025 GMT
Not After : Jul 28 10:01:27 2025 GMT
Subject: CN=8b3b3f717e507c5b0758ca81011ac0eb5f1128e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:af:6b:5d:57:3c:97:de:94:1c:af:e5:19:
e6:02:0b:d7:ec:bb:02:d7:b5:4e:61:6c:e9:0b:bb:
02:43:f3:57:75:a2:87:4a:50:73:8a:b7:15:9f:8a:
ba:7e:4a:5d:92:b6:0e:06:04:e4:bd:bc:14:ae:7f:
5f:7e:33:e8:2f:10:84:0d:24:8f:83:4c:fc:64:9e:
f0:d9:f8:fe:a8:21:56:46:37:0f:73:15:39:75:d9:
42:de:2f:ec:a2:ef:53:37:73:48:1b:cd:ee:9a:52:
04:7b:3c:54:38:47:ae:36:1a:34:1d:bd:2a:fd:60:
fb:ff:00:31:af:67:c5:a5:7b:bd:e5:8b:b7:0e:59:
22:85:c6:b4:19:03:2d:7c:8e:69:63:11:35:fd:94:
a0:ad:9b:97:b6:08:76:07:ba:9d:37:0b:91:db:69:
01:7b:30:c3:2f:8f:34:77:2c:94:62:bd:d2:21:52:
f0:1e:04:81:65:76:16:bb:9f:28:6a:db:2f:b5:ba:
56:85:79:11:f5:66:1e:fc:99:58:66:da:7e:fb:a4:
44:e8:85:85:ab:0e:72:37:c5:66:ae:18:e9:be:9a:
57:fc:61:80:c1:49:9a:6a:d6:9f:fa:5a:bc:53:7b:
6b:19:dc:7d:04:8a:05:16:47:5d:7c:84:97:ff:11:
19:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3B:3F:71:7E:50:7C:5B:07:58:CA:81:01:1A:C0:EB:5F:11:28:E6
X509v3 Authority Key Identifier:
keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b6:20:ac:a8:75:45:ab:de:61:b9:65:2d:b4:c0:dc:fc:ff:
fd:07:3f:3e:d9:0e:d6:0a:c0:5a:9d:f4:2a:fb:ff:0a:29:6e:
81:e0:37:fd:af:08:5c:d5:4e:90:38:c8:0b:2e:b4:71:1c:a8:
4c:cc:a2:8e:61:5b:80:69:f6:5b:b4:fc:25:e5:06:74:72:16:
04:e6:9b:04:66:16:10:97:de:0d:02:3c:dd:bd:13:0d:62:e4:
ff:63:95:9c:88:9c:73:81:29:42:d6:ac:07:27:dd:3a:40:74:
7f:9a:77:7d:17:24:57:59:85:ed:09:5a:15:55:72:3e:10:37:
ce:cb:ca:26:06:be:82:52:e6:c3:a0:b4:74:4c:02:89:0b:90:
e2:11:53:42:15:14:de:09:ac:aa:a6:ac:29:13:eb:19:07:22:
3a:74:41:eb:31:87:8e:bd:f5:e6:e3:75:43:04:13:1a:a5:92:
d2:2a:9b:bd:1c:04:61:ee:5e:43:b8:ac:18:3c:38:9a:e9:6d:
68:4d:d3:b6:cf:e6:4a:50:4d:5f:b9:9c:c9:e2:cb:80:83:20:
5e:67:74:d7:36:9a:14:c6:6e:0b:a5:28:85:c5:92:8a:aa:1c:
f8:da:c6:c1:76:19:de:d8:77:0b:be:a2:83:c2:ce:a6:c3:73:
c5:16:7f:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVIYlQgq/WjG8T3wuljz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm
MGY2NzEwHhcNMjUwNzI3MTAwMTI3WhcNMjUwNzI4MTAwMTI3WjAzMTEwLwYDVQQD
Eyg4YjNiM2Y3MTdlNTA3YzViMDc1OGNhODEwMTFhYzBlYjVmMTEyOGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Wva11XPJfelByv5RnmAgvX7LsC
17VOYWzpC7sCQ/NXdaKHSlBzircVn4q6fkpdkrYOBgTkvbwUrn9ffjPoLxCEDSSP
g0z8ZJ7w2fj+qCFWRjcPcxU5ddlC3i/sou9TN3NIG83umlIEezxUOEeuNho0Hb0q
/WD7/wAxr2fFpXu95Yu3Dlkihca0GQMtfI5pYxE1/ZSgrZuXtgh2B7qdNwuR22kB
ezDDL480dyyUYr3SIVLwHgSBZXYWu58oatsvtbpWhXkR9WYe/JlYZtp++6RE6IWF
qw5yN8VmrhjpvppX/GGAwUmaataf+lq8U3trGdx9BIoFFkddfISX/xEZNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIs7P3F+UHxbB1jKgQEawOtfESjmMB8GA1UdIwQY
MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt
NGM5OGQ5YTUxNDA1LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1
LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbYgrKh1
RaveYbllLbTA3Pz//Qc/PtkO1grAWp30Kvv/CilugeA3/a8IXNVOkDjICy60cRyo
TMyijmFbgGn2W7T8JeUGdHIWBOabBGYWEJfeDQI83b0TDWLk/2OVnIicc4EpQtas
ByfdOkB0f5p3fRckV1mF7QlaFVVyPhA3zsvKJga+glLmw6C0dEwCiQuQ4hFTQhUU
3gmsqqasKRPrGQciOnRB6zGHjr315uN1QwQTGqWS0iqbvRwEYe5eQ7isGDw4mult
aE3Tts/mSlBNX7mcyeLLgIMgXmd01zaaFMZuC6UohcWSiqoc+NrGwXYZ3th3C76i
g8LOpsNzxRZ/tQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:45:03 2025 by rpki-client