Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier: B4uNaA6N7bRdcFzAFGS8evqFpHmTllzlbclXDrBqVh4=
Subject key identifier: BE:94:D9:C6:41:D3:4E:77:AD:7E:0D:55:0D:BD:10:15:C8:03:59:B7
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial: 01984A40BF134793C1B9852C606B2014EF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number: 1594
Signing time: Sun 27 Jul 2025 05:00:13 +0000
Manifest this update: Sun 27 Jul 2025 05:00:13 +0000
Manifest next update: Mon 28 Jul 2025 05:00:13 +0000
Files and hashes: 1: cGueQe1h8duehogXBQfbjMf187c.roa (hash: SeygR9MEl7TBvHViQ7GiY7qErcMbLwgXcJ9lbMPWx3c=)
2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: kEDrVmJQR/i2qJYkf3Yp869pULTXuyWfLruvLfq0mIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:bf:13:47:93:c1:b9:85:2c:60:6b:20:14:ef:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
Validity
Not Before: Jul 27 05:00:13 2025 GMT
Not After : Jul 28 05:00:13 2025 GMT
Subject: CN=be94d9c641d34e77ad7e0d550dbd1015c80359b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:91:72:03:80:ef:59:64:7e:e4:91:05:5b:
ab:a4:e1:2e:1e:59:bc:cb:79:cc:a8:4a:71:64:6a:
b4:c9:95:ed:f8:43:4c:2d:d3:32:86:68:dd:cf:d1:
c3:fe:de:cd:b3:d2:93:50:d1:f1:f5:51:2b:f7:cb:
6c:c9:f9:c7:ff:62:72:c4:53:0e:ae:18:94:2d:6d:
3b:7a:53:a3:88:fb:c4:b9:ea:9f:f0:1b:4a:21:70:
d2:b7:7f:13:28:7e:69:fc:b5:9e:f4:14:ac:f9:e2:
b0:4a:fb:ce:51:f6:4f:50:11:8d:98:32:4c:fe:0e:
a8:fd:a9:13:0c:b8:cf:8d:86:46:b3:2a:4a:70:b4:
9d:3b:dc:39:22:5a:5c:db:0b:d4:fa:b9:05:6c:26:
ad:d9:28:f9:e4:cb:58:40:e8:7c:a5:55:bc:f4:8a:
bc:3d:89:a8:b4:9e:42:03:1e:69:7e:e5:43:f4:f9:
21:77:ec:86:9e:46:66:04:e1:59:54:91:ec:ee:33:
8c:81:ae:06:4c:ce:99:b6:ab:e3:c6:8d:5a:31:6b:
56:ef:d0:78:24:21:ae:e3:e3:b0:24:68:8e:fb:68:
56:84:6d:83:95:a7:fe:45:01:a8:a9:67:f6:9c:d3:
e8:93:d3:c9:d0:1d:a3:78:59:38:40:9a:2c:27:86:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:94:D9:C6:41:D3:4E:77:AD:7E:0D:55:0D:BD:10:15:C8:03:59:B7
X509v3 Authority Key Identifier:
keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f7:b4:93:5c:4e:76:80:a7:bf:05:59:58:e7:56:a4:58:c8:
36:c2:74:41:69:72:e2:5d:dd:9e:17:d8:d1:ab:bd:6b:70:1c:
38:86:fc:a7:72:b7:1f:f6:0f:a5:10:46:b6:9e:b6:6b:21:4b:
9c:d2:13:c5:9d:2e:bc:62:4a:f6:dd:ca:68:7d:39:21:d1:13:
d1:da:59:c1:cf:3b:40:39:6a:cd:f8:b3:62:2e:1f:2d:86:37:
4e:c5:83:55:7d:9f:5e:56:ea:b0:61:51:ce:1b:b4:d2:fd:cc:
85:c4:4f:e8:94:bc:a5:6b:ef:00:1b:db:57:5f:48:9e:67:6b:
84:23:a9:30:45:9f:96:22:e6:fa:15:6d:8f:c2:88:08:f2:cd:
9f:4d:a9:6a:ec:5c:eb:91:13:2f:b4:92:54:98:41:cc:e6:ef:
40:aa:22:d6:91:48:ff:15:4a:d5:94:06:bb:fb:59:59:86:6c:
9b:90:ce:95:b6:80:8a:5a:1b:7e:2f:c7:4a:8d:e9:f5:e0:f2:
f4:c5:85:9d:d4:c7:c8:b5:d0:fa:e6:8d:1b:43:d0:cb:0e:0b:
78:5f:67:11:07:40:7a:2a:4a:09:b2:65:85:25:38:97:99:97:
a7:6e:5d:1e:85:bb:61:a8:30:46:7a:b6:47:f8:c1:dd:f5:13:
ee:16:ab:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQL8TR5PBuYUsYGsgFO8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OWM0MWRhZjAwOTJiNzAzYmMwNTliYTEzNTNmMDcxZWQx
MjE5OWIwHhcNMjUwNzI3MDUwMDEzWhcNMjUwNzI4MDUwMDEzWjAzMTEwLwYDVQQD
EyhiZTk0ZDljNjQxZDM0ZTc3YWQ3ZTBkNTUwZGJkMTAxNWM4MDM1OWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzriRcgOA71lkfuSRBVurpOEuHlm8
y3nMqEpxZGq0yZXt+ENMLdMyhmjdz9HD/t7Ns9KTUNHx9VEr98tsyfnH/2JyxFMO
rhiULW07elOjiPvEueqf8BtKIXDSt38TKH5p/LWe9BSs+eKwSvvOUfZPUBGNmDJM
/g6o/akTDLjPjYZGsypKcLSdO9w5Ilpc2wvU+rkFbCat2Sj55MtYQOh8pVW89Iq8
PYmotJ5CAx5pfuVD9Pkhd+yGnkZmBOFZVJHs7jOMga4GTM6Ztqvjxo1aMWtW79B4
JCGu4+OwJGiO+2hWhG2Dlaf+RQGoqWf2nNPok9PJ0B2jeFk4QJosJ4ZKgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6U2cZB0053rX4NVQ29EBXIA1m3MB8GA1UdIwQY
MBaAFMWcQdrwCStwO8BZuhNT8HHtEhmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kNTRkMmItMjEyNi00NTQyLWE1ZTQt
YzU0OTNmZTgyZTI2LzEveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kNTRkMmItMjEyNi00NTQyLWE1ZTQtYzU0OTNmZTgyZTI2
LzEveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/e0k1xO
doCnvwVZWOdWpFjINsJ0QWly4l3dnhfY0au9a3AcOIb8p3K3H/YPpRBGtp62ayFL
nNITxZ0uvGJK9t3KaH05IdET0dpZwc87QDlqzfizYi4fLYY3TsWDVX2fXlbqsGFR
zhu00v3MhcRP6JS8pWvvABvbV19InmdrhCOpMEWfliLm+hVtj8KICPLNn02pauxc
65ETL7SSVJhBzObvQKoi1pFI/xVK1ZQGu/tZWYZsm5DOlbaAilobfi/HSo3p9eDy
9MWFndTHyLXQ+uaNG0PQyw4LeF9nEQdAeipKCbJlhSU4l5mXp25dHoW7YagwRnq2
R/jB3fUT7har/w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:21:24 2025 by rpki-client