Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
File: XzHZebcQ7eIGiCOIGqYRrROvVFk.mft (raw, json)
Hash identifier: irMUa5lEXXYP88GI7T+qLxs2k7bkqkG8geU1XFCuyfE=
Subject key identifier: A1:F5:D3:69:15:F9:8A:CD:6C:98:59:B4:8B:AE:53:C9:57:05:9C:AA
Authority key identifier: 5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
Certificate issuer: /CN=5f31d979b710ede2068823881aa611ad13af5459
Certificate serial: 01984B53BA1006B3E46AEA214C7D95D50D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
Manifest number: 0BB7
Signing time: Sun 27 Jul 2025 10:00:34 +0000
Manifest this update: Sun 27 Jul 2025 10:00:34 +0000
Manifest next update: Mon 28 Jul 2025 10:00:34 +0000
Files and hashes: 1: 7VePb56Lb2mDp_DoHqAJOVOs_T8.roa (hash: V7IpcMoqQADg7SX3r725vYH2jPknDmi+ikdfBjQyP5c=)
2: XzHZebcQ7eIGiCOIGqYRrROvVFk.crl (hash: bxQq4a/NjfhLftF/Xfaa5ERQI179yDzwrdpYosRYUSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:ba:10:06:b3:e4:6a:ea:21:4c:7d:95:d5:0d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f31d979b710ede2068823881aa611ad13af5459
Validity
Not Before: Jul 27 10:00:34 2025 GMT
Not After : Jul 28 10:00:34 2025 GMT
Subject: CN=a1f5d36915f98acd6c9859b48bae53c957059caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ea:46:85:09:02:d4:ef:9c:15:1c:15:65:33:
2b:34:52:34:a6:a0:e2:63:3b:b7:62:01:fe:74:87:
19:e7:8f:40:0b:62:eb:53:53:61:54:92:c0:9f:42:
71:46:34:e7:c8:4a:33:92:17:2e:51:cf:5e:28:5c:
88:36:cf:39:83:18:fc:04:c3:52:53:ca:a6:7c:7a:
90:96:5b:e2:8c:39:68:cc:6b:89:6a:bb:b1:42:44:
62:c6:bf:80:9c:8f:90:ca:f9:4f:d7:db:52:ba:6e:
3f:aa:6c:f3:2e:a6:2b:bc:39:f6:c5:ce:51:03:f0:
5b:60:b8:0c:df:0b:02:70:b9:13:2d:5a:23:1d:8d:
3c:83:a7:26:76:05:ce:dd:64:e9:d8:20:99:3a:21:
32:a9:f3:64:7e:17:62:85:39:e3:98:00:35:91:01:
04:ac:04:58:0f:69:f0:30:b2:4f:b6:55:b9:5a:f5:
f9:61:0a:63:e7:93:5d:7b:2e:2a:f2:f2:af:71:17:
76:73:09:95:1e:24:5a:ca:78:4c:d7:a6:fb:75:ad:
ec:42:67:b3:0b:bf:61:e6:18:09:05:3d:54:dd:50:
41:2c:43:b9:1f:42:d5:86:93:ed:f7:bb:7b:f9:f2:
71:78:26:80:9f:fe:47:d6:94:37:c3:e9:a4:fd:81:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F5:D3:69:15:F9:8A:CD:6C:98:59:B4:8B:AE:53:C9:57:05:9C:AA
X509v3 Authority Key Identifier:
keyid:5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:38:7c:a6:07:4a:0e:0d:0b:d1:f7:d5:90:02:3b:03:97:4c:
1e:e3:05:ba:f9:9c:41:00:62:56:b5:50:b1:13:6f:10:81:e0:
93:26:6f:08:c8:ea:a7:ff:b1:2a:45:45:c7:4b:a0:14:04:5b:
cc:23:bf:8d:73:6c:71:a5:a2:e7:a2:41:58:0b:58:b7:06:d7:
5e:24:0b:fa:84:80:dd:05:1e:fd:86:62:b2:20:f8:18:46:6a:
e2:98:fc:14:d0:dc:19:7e:71:de:49:df:09:c2:9e:b1:52:83:
3f:57:72:fc:22:fa:28:df:df:9a:64:77:16:93:bc:fa:21:c1:
f8:e6:b7:c7:b7:02:a7:3f:63:86:31:94:1b:71:05:40:f3:8e:
b1:34:44:40:d8:30:d9:fa:34:a3:40:ca:36:5f:11:16:05:29:
32:13:40:de:a5:0f:56:28:f6:92:29:97:1f:65:00:05:b9:1e:
ab:af:18:b2:25:5a:5e:55:c5:72:cf:79:9e:dc:32:89:56:fe:
36:70:9d:84:64:45:ef:d1:44:8d:5d:78:7c:0d:7c:bc:39:67:
77:49:22:a1:9b:5d:7e:eb:3d:55:9b:e1:bd:85:68:a9:06:ec:
06:4d:2d:04:7f:36:0e:a8:dd:7f:b7:3b:b6:e9:02:be:c1:9b:
c4:00:db:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLU7oQBrPkauohTH2V1Q1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMzFkOTc5YjcxMGVkZTIwNjg4MjM4ODFhYTYxMWFkMTNh
ZjU0NTkwHhcNMjUwNzI3MTAwMDM0WhcNMjUwNzI4MTAwMDM0WjAzMTEwLwYDVQQD
EyhhMWY1ZDM2OTE1Zjk4YWNkNmM5ODU5YjQ4YmFlNTNjOTU3MDU5Y2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5upGhQkC1O+cFRwVZTMrNFI0pqDi
Yzu3YgH+dIcZ549AC2LrU1NhVJLAn0JxRjTnyEozkhcuUc9eKFyINs85gxj8BMNS
U8qmfHqQllvijDlozGuJaruxQkRixr+AnI+QyvlP19tSum4/qmzzLqYrvDn2xc5R
A/BbYLgM3wsCcLkTLVojHY08g6cmdgXO3WTp2CCZOiEyqfNkfhdihTnjmAA1kQEE
rARYD2nwMLJPtlW5WvX5YQpj55Ndey4q8vKvcRd2cwmVHiRaynhM16b7da3sQmez
C79h5hgJBT1U3VBBLEO5H0LVhpPt97t7+fJxeCaAn/5H1pQ3w+mk/YHDCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKH102kV+YrNbJhZtIuuU8lXBZyqMB8GA1UdIwQY
MBaAFF8x2Xm3EO3iBogjiBqmEa0Tr1RZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHpIWmViY1E3ZUlHaUNPSUdxWVJyUk92VkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZGUyOGQtMzc0OS00ZDAyLWJlOWMt
NDFjNjY0NThkZDczLzEvWHpIWmViY1E3ZUlHaUNPSUdxWVJyUk92VkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83ZGUyOGQtMzc0OS00ZDAyLWJlOWMtNDFjNjY0NThkZDcz
LzEvWHpIWmViY1E3ZUlHaUNPSUdxWVJyUk92VkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjh8pgdK
Dg0L0ffVkAI7A5dMHuMFuvmcQQBiVrVQsRNvEIHgkyZvCMjqp/+xKkVFx0ugFARb
zCO/jXNscaWi56JBWAtYtwbXXiQL+oSA3QUe/YZisiD4GEZq4pj8FNDcGX5x3knf
CcKesVKDP1dy/CL6KN/fmmR3FpO8+iHB+Oa3x7cCpz9jhjGUG3EFQPOOsTREQNgw
2fo0o0DKNl8RFgUpMhNA3qUPVij2kimXH2UABbkeq68YsiVaXlXFcs95ntwyiVb+
NnCdhGRF79FEjV14fA18vDlnd0kioZtdfus9VZvhvYVoqQbsBk0tBH82Dqjdf7c7
tukCvsGbxADb3w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:56:41 2025 by rpki-client