Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
File: xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft (raw, json)
Hash identifier: v5zIhD8IwZf2c3i2IURBwcfgpnyVqmwjrDf/eXniyAg=
Subject key identifier: 95:01:37:A8:4F:93:A7:D0:49:72:5D:57:DA:E2:EB:4F:A0:8B:B7:E3
Authority key identifier: C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
Certificate issuer: /CN=c49c88442ba97345bc0106559e6fa786944adca4
Certificate serial: 019853449D174395543DD2D48507C76E3118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
Manifest number: 0BD7
Signing time: Mon 28 Jul 2025 23:01:02 +0000
Manifest this update: Mon 28 Jul 2025 23:01:02 +0000
Manifest next update: Tue 29 Jul 2025 23:01:02 +0000
Files and hashes: 1: P8LvrKYCtI_9k9pIXDDvB_mFdxQ.roa (hash: 6bur0sayGgh0sVPJYH4mk361HnE3wDlMvWYT8l9DJaQ=)
2: xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl (hash: +jgryW8VdQNMwCmEaAM9CqQE2Knt+K7oOADBoQhaY8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:9d:17:43:95:54:3d:d2:d4:85:07:c7:6e:31:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49c88442ba97345bc0106559e6fa786944adca4
Validity
Not Before: Jul 28 23:01:02 2025 GMT
Not After : Jul 29 23:01:02 2025 GMT
Subject: CN=950137a84f93a7d049725d57dae2eb4fa08bb7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:8d:1a:5e:3e:69:07:7b:fd:9e:08:fc:c8:
11:0f:64:97:ee:23:5f:8e:12:f9:38:75:fa:f8:3b:
f0:ba:6c:77:46:7f:bb:f9:79:75:e4:2c:60:3a:16:
c6:9e:db:89:6d:9f:d9:25:68:7a:e8:9c:6c:c1:d0:
87:26:7f:f9:02:35:c0:f9:ae:bb:07:96:77:9e:0f:
fe:90:71:21:05:ab:02:0f:4c:f8:19:55:99:98:fd:
44:d7:eb:61:60:f8:3e:2e:a7:84:82:b0:b3:3e:ca:
70:fe:fa:b1:65:69:51:de:be:5c:22:3f:55:30:a1:
fe:5f:83:f4:dd:2e:da:97:9d:86:0f:44:35:cf:27:
c0:df:3a:40:2f:1e:4d:87:20:01:12:1d:4c:17:eb:
0a:ab:07:90:52:ca:1c:36:bf:a6:f3:1b:61:47:2f:
af:21:c3:0b:a2:8a:1c:ec:a0:21:6a:e8:33:d4:de:
66:1a:01:0a:b2:90:71:02:2b:9f:be:f0:48:46:7e:
50:eb:02:9b:4a:12:30:36:bf:42:81:5f:18:e2:8a:
95:6c:0c:aa:85:20:25:32:c3:17:31:fc:df:88:8a:
fc:d0:08:0d:aa:69:39:40:98:ba:24:95:ea:09:74:
59:12:44:32:40:fb:33:b0:80:44:da:e7:d1:25:8d:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:01:37:A8:4F:93:A7:D0:49:72:5D:57:DA:E2:EB:4F:A0:8B:B7:E3
X509v3 Authority Key Identifier:
keyid:C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ab:75:ea:35:81:35:84:e3:cb:c7:13:70:6c:13:6a:5d:04:
9f:b8:85:69:31:52:8c:0a:e9:5a:e8:ee:12:5e:02:04:84:cc:
69:27:e2:62:f6:51:b5:63:2f:74:e5:d9:55:fb:81:b8:7c:e2:
53:1b:cb:45:b1:bd:6d:45:73:91:bf:93:e6:f4:af:51:a3:b8:
1f:21:ee:25:b5:6e:90:66:24:b3:92:31:e7:56:a0:fb:12:0d:
54:8f:0e:8a:a4:4f:a0:97:e6:cf:0f:c8:d9:98:3b:37:19:f2:
3a:0d:73:57:98:e9:55:03:67:7c:c0:1a:09:c8:7c:dc:a1:ac:
6e:6d:e1:e1:f9:b6:14:8a:72:f4:a4:f0:ce:6a:36:4b:77:79:
fd:86:c9:5d:12:4f:24:3c:32:45:39:7a:41:f9:68:07:a4:eb:
a7:28:a9:f5:c7:17:3a:ed:41:33:60:ec:55:b3:16:c1:52:20:
46:4c:be:0f:38:79:6a:d5:88:e4:fd:bd:1c:06:ca:d4:3a:50:
f1:3d:6c:5c:d7:4d:94:1f:7c:8a:e1:f8:f8:bd:66:40:4e:14:
80:9d:e5:ea:2a:57:be:26:24:13:4e:e1:10:d6:2b:a4:b5:84:
f1:cc:95:a8:f8:32:01:a6:42:9b:a8:01:fb:6d:36:47:f0:67:
b0:8c:f9:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRJ0XQ5VUPdLUhQfHbjEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWM4ODQ0MmJhOTczNDViYzAxMDY1NTllNmZhNzg2OTQ0
YWRjYTQwHhcNMjUwNzI4MjMwMTAyWhcNMjUwNzI5MjMwMTAyWjAzMTEwLwYDVQQD
Eyg5NTAxMzdhODRmOTNhN2QwNDk3MjVkNTdkYWUyZWI0ZmEwOGJiN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEGNGl4+aQd7/Z4I/MgRD2SX7iNf
jhL5OHX6+Dvwumx3Rn+7+Xl15CxgOhbGntuJbZ/ZJWh66JxswdCHJn/5AjXA+a67
B5Z3ng/+kHEhBasCD0z4GVWZmP1E1+thYPg+LqeEgrCzPspw/vqxZWlR3r5cIj9V
MKH+X4P03S7al52GD0Q1zyfA3zpALx5NhyABEh1MF+sKqweQUsocNr+m8xthRy+v
IcMLoooc7KAhaugz1N5mGgEKspBxAiufvvBIRn5Q6wKbShIwNr9CgV8Y4oqVbAyq
hSAlMsMXMfzfiIr80AgNqmk5QJi6JJXqCXRZEkQyQPszsIBE2ufRJY3sNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUBN6hPk6fQSXJdV9ri60+gi7fjMB8GA1UdIwQY
MBaAFMSciEQrqXNFvAEGVZ5vp4aUStykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80ZjYxODctYmM2Ny00YWMzLTljOGQt
YTcwZjk5MmE1NTI5LzEveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80ZjYxODctYmM2Ny00YWMzLTljOGQtYTcwZjk5MmE1NTI5
LzEveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6t16jWB
NYTjy8cTcGwTal0En7iFaTFSjArpWujuEl4CBITMaSfiYvZRtWMvdOXZVfuBuHzi
UxvLRbG9bUVzkb+T5vSvUaO4HyHuJbVukGYks5Ix51ag+xINVI8OiqRPoJfmzw/I
2Zg7NxnyOg1zV5jpVQNnfMAaCch83KGsbm3h4fm2FIpy9KTwzmo2S3d5/YbJXRJP
JDwyRTl6QfloB6Trpyip9ccXOu1BM2DsVbMWwVIgRky+Dzh5atWI5P29HAbK1DpQ
8T1sXNdNlB98iuH4+L1mQE4UgJ3l6ipXviYkE07hENYrpLWE8cyVqPgyAaZCm6gB
+202R/BnsIz5pA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:19:57 2025 by rpki-client