Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json)
Hash identifier: T0ZW4RBrGtinMYN7ScElILAVkKRn+m/s/JSpsosLxBI=
Subject key identifier: 50:22:C6:1B:D9:20:5B:BB:1E:D5:7E:1D:63:EB:0E:58:DD:6B:9C:3E
Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Certificate serial: 01984A40CADD5FFC914B6D737EEA109BFDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
Manifest number: 076D
Signing time: Sun 27 Jul 2025 05:00:16 +0000
Manifest this update: Sun 27 Jul 2025 05:00:16 +0000
Manifest next update: Mon 28 Jul 2025 05:00:16 +0000
Files and hashes: 1: NEtQy5f2240GFeET2QYMep1OUSw.roa (hash: MvgE972/GBhvnhbQmRaRf/7py1gPZlkr59j136VjyK4=)
2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: 1omrRLFCvBM64vyoBZnjD0Umu6nD4ttssQySPp9LRGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:ca:dd:5f:fc:91:4b:6d:73:7e:ea:10:9b:fd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Validity
Not Before: Jul 27 05:00:16 2025 GMT
Not After : Jul 28 05:00:16 2025 GMT
Subject: CN=5022c61bd9205bbb1ed57e1d63eb0e58dd6b9c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:bf:0f:49:c7:bd:bc:4f:22:a8:31:8f:34:
25:ea:22:69:5c:e2:38:cf:83:98:49:a1:45:68:95:
f5:4f:f2:46:80:42:05:0b:b4:e2:0b:f8:7a:b5:3b:
e2:65:7c:1f:d1:ea:aa:fb:6b:f2:de:9e:62:d0:0d:
34:bf:bc:b6:68:4a:0e:86:2c:ab:21:30:c8:0c:3b:
5e:e4:f3:0a:72:90:4e:e8:65:f8:6f:2d:46:96:42:
93:e3:ca:8d:36:47:a9:00:cb:36:32:d6:f4:a8:44:
ef:f2:1e:ce:2e:20:b5:c5:27:c9:2e:2c:d5:46:27:
1a:52:54:ef:48:3a:57:9e:3a:47:8c:29:df:e8:c7:
5b:de:e9:ec:ee:7e:7f:2e:b3:75:b9:40:5f:d7:1a:
61:87:15:72:c8:23:43:25:f0:77:3b:a6:cc:a8:94:
dd:4a:56:ea:2a:97:a1:1b:85:71:47:d3:3d:d6:49:
19:e4:59:54:8b:bd:fd:ac:a8:00:65:af:70:7c:5f:
16:52:d0:d6:4b:3a:75:ad:92:ed:00:12:39:36:68:
29:04:c3:6d:0d:f6:44:17:29:30:da:a8:8b:97:70:
98:4d:d4:b2:77:44:78:a3:ec:ca:b4:3b:8f:bf:8e:
95:44:13:40:3b:bb:39:4c:46:4a:ee:b4:30:ae:5b:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:22:C6:1B:D9:20:5B:BB:1E:D5:7E:1D:63:EB:0E:58:DD:6B:9C:3E
X509v3 Authority Key Identifier:
keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:24:04:cf:be:3c:f3:7f:3a:25:d4:0f:46:2c:f2:3c:22:0d:
84:57:b4:d4:fa:d4:56:cf:6c:5d:f3:fa:3a:95:02:fd:31:c4:
f4:8b:c4:49:c4:9e:f5:a2:7f:4b:f0:f6:91:c0:a0:99:a7:d9:
4e:c3:f5:cf:74:c9:b4:0b:39:62:42:49:3d:55:25:02:a5:d0:
51:01:5f:46:57:06:42:45:8c:5a:8f:b2:b4:2c:12:34:bc:d9:
0c:49:bf:ba:7b:01:75:18:38:b0:fb:3e:be:5b:c0:95:a3:86:
90:da:e5:d8:2b:d9:99:25:03:aa:ab:66:27:60:5f:c5:bc:cf:
92:9e:c7:c1:7f:2a:52:ef:85:d8:43:33:e1:cd:69:4f:b9:ad:
36:9b:d3:35:b0:a2:b4:d4:74:b1:75:87:d8:01:8f:5a:92:4d:
1e:d5:f6:bf:d6:07:15:c3:a2:02:12:74:f6:c1:ca:cb:36:ec:
f1:10:fe:6d:35:76:54:22:b2:46:45:4f:42:e9:1f:43:da:94:
01:e7:29:59:63:94:91:00:58:d5:6b:6f:e3:a7:01:92:d8:a6:
d4:ee:00:7d:55:dc:c3:b8:20:40:ae:9c:08:be:e8:34:05:7f:
9f:22:61:39:a8:2a:c0:e7:56:b3:6b:af:bf:21:2e:5c:ad:80:
29:aa:46:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQMrdX/yRS21zfuoQm/3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZjFmMjE0ZmIyMmNjNTM2MTI4ZjVkZTRhYTAxN2E4Nzg4
MGYyODUwHhcNMjUwNzI3MDUwMDE2WhcNMjUwNzI4MDUwMDE2WjAzMTEwLwYDVQQD
Eyg1MDIyYzYxYmQ5MjA1YmJiMWVkNTdlMWQ2M2ViMGU1OGRkNmI5YzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj6/D0nHvbxPIqgxjzQl6iJpXOI4
z4OYSaFFaJX1T/JGgEIFC7TiC/h6tTviZXwf0eqq+2vy3p5i0A00v7y2aEoOhiyr
ITDIDDte5PMKcpBO6GX4by1GlkKT48qNNkepAMs2Mtb0qETv8h7OLiC1xSfJLizV
RicaUlTvSDpXnjpHjCnf6Mdb3uns7n5/LrN1uUBf1xphhxVyyCNDJfB3O6bMqJTd
SlbqKpehG4VxR9M91kkZ5FlUi739rKgAZa9wfF8WUtDWSzp1rZLtABI5NmgpBMNt
DfZEFykw2qiLl3CYTdSyd0R4o+zKtDuPv46VRBNAO7s5TEZK7rQwrlvl7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAixhvZIFu7HtV+HWPrDljda5w+MB8GA1UdIwQY
MBaAFMTx8hT7IsxTYSj13kqgF6h4gPKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAt
ZWNmNGY0MjBjOThhLzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lMmIzNDktZTc5Ni00ODY1LTgwNDAtZWNmNGY0MjBjOThh
LzEveFBIeUZQc2l6Rk5oS1BYZVNxQVhxSGlBOG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCQEz748
8386JdQPRizyPCINhFe01PrUVs9sXfP6OpUC/THE9IvEScSe9aJ/S/D2kcCgmafZ
TsP1z3TJtAs5YkJJPVUlAqXQUQFfRlcGQkWMWo+ytCwSNLzZDEm/unsBdRg4sPs+
vlvAlaOGkNrl2CvZmSUDqqtmJ2BfxbzPkp7HwX8qUu+F2EMz4c1pT7mtNpvTNbCi
tNR0sXWH2AGPWpJNHtX2v9YHFcOiAhJ09sHKyzbs8RD+bTV2VCKyRkVPQukfQ9qU
AecpWWOUkQBY1Wtv46cBktim1O4AfVXcw7ggQK6cCL7oNAV/nyJhOagqwOdWs2uv
vyEuXK2AKapGlA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:38 2025 by rpki-client