Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier: U4feA7zbWj9GzpB+dGXy96+Sx6gboLkeJFn2Co5+uFc=
Subject key identifier: 95:F1:56:E4:EF:B6:98:32:83:F4:44:DD:7E:F0:B2:32:FF:9D:20:16
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 01984A40D272B63C5D32D5CBD6AA0A3A2833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number: 1116
Signing time: Sun 27 Jul 2025 05:00:18 +0000
Manifest this update: Sun 27 Jul 2025 05:00:18 +0000
Manifest next update: Mon 28 Jul 2025 05:00:18 +0000
Files and hashes: 1: 6Cj8H-p47dvCNhMHuB2pJCnFujI.roa (hash: etPYOFcz4B7xl7Yvi1fe6awoP2aM1hrkcXjgzl1XW2c=)
2: iNe91R6y78p-QSDXxoxxAjDA_Og.roa (hash: HR8YO++Y/qB7B+dcbqN5/SgR3c8dd7aULLQGyyrd4j8=)
3: tK6dqORitjCE9QSeqzn0Dd8QVZY.roa (hash: d9AZ6zPbtFV6hygn8HjICm+c22UNHE83e16IdW/3Zl4=)
4: uHPtlU3qdVrOCAD4M6mdiGrDzqE.roa (hash: AeMGCTul+AJixElOuUQNIP59RKHExeTwQIkWiWRzSzs=)
5: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: kbAcggbh9Xv8qH8B0PCWa8X5ekEy0TXHTNEPAtECG2w=)
6: ydG33gjsDAOMifL-LMV8iBUmj5I.roa (hash: mGme2Sxc1/UzWWlnkXXzLuxU/TszYoE3oiJl3a+U4Tg=)
7: z131uKF1Jpc6EpB3kAHYRRM7XIQ.roa (hash: Z5tMUZHaMA8Bu87tPX511k88Z6BiQWZ5tSalbDOuIEw=)
8: zbII4RxH17JoDR9ukyJuiEde7IM.roa (hash: xBWfldiZFP31dGe7bTsuSEU+4Mx9LEr9W5jDRfUDGfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:d2:72:b6:3c:5d:32:d5:cb:d6:aa:0a:3a:28:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Jul 27 05:00:18 2025 GMT
Not After : Jul 28 05:00:18 2025 GMT
Subject: CN=95f156e4efb6983283f444dd7ef0b232ff9d2016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e6:1f:fc:e8:0c:e9:1a:af:c1:90:b4:09:e6:
e4:2f:68:b7:07:77:29:36:19:22:ed:60:60:a8:58:
c2:ea:99:e4:96:9c:93:9d:f1:64:97:f2:f4:0d:ba:
5f:6c:8c:eb:ff:ed:cc:1c:4c:86:c2:d3:88:ce:80:
e2:fb:af:4a:bd:51:58:8e:3d:b8:29:be:e7:6f:12:
45:9e:29:39:04:a9:43:85:8f:41:96:93:11:d7:6c:
a0:f5:63:33:6e:25:e3:96:74:e7:8d:cc:c6:a3:d9:
e7:34:72:65:ed:19:ca:60:93:43:43:58:90:f0:12:
5f:e5:99:72:99:59:d8:d6:77:c5:d0:31:cf:fd:ac:
8f:8b:89:50:aa:fc:42:f0:2d:e9:25:50:05:54:c6:
fa:4c:9b:1f:0d:7e:8b:1d:19:5f:9a:eb:38:8c:11:
9d:10:86:a1:f6:39:10:30:ff:54:d2:71:1f:b8:7f:
15:cd:e5:d9:ce:c6:3e:df:39:4d:a0:3e:13:84:c1:
a7:e7:bb:54:fc:e1:c7:89:fc:b8:7f:47:d8:6f:3b:
18:93:01:b5:70:46:ad:b1:ff:d8:65:6e:e2:36:1c:
ed:44:a5:8b:77:da:82:75:d0:a9:a0:05:fd:af:34:
b5:d2:9b:7e:40:9b:09:e7:7b:87:84:a0:d2:ea:48:
1e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F1:56:E4:EF:B6:98:32:83:F4:44:DD:7E:F0:B2:32:FF:9D:20:16
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:17:25:c0:b7:70:42:68:0b:1f:f3:9f:01:d0:e1:be:67:c2:
de:87:d2:42:f6:a5:3b:db:b1:bb:fe:31:82:b6:b8:a0:e2:bd:
1e:de:e0:91:9a:80:06:f5:e3:95:7f:95:21:a5:b6:00:de:8a:
08:06:b0:dd:5f:67:83:92:9f:83:84:b8:10:8d:77:a0:95:75:
a0:51:5b:8f:0d:0a:7e:06:f7:e9:f1:5a:2c:d1:79:5e:81:5d:
4c:ef:df:80:b7:c0:84:a7:f4:8b:58:d8:a8:fc:b7:b5:db:3f:
46:dc:39:8e:9b:03:f9:69:c9:09:16:f9:df:1a:99:aa:bd:ac:
5a:35:f2:7b:53:fb:e9:cb:11:ad:34:b4:41:9c:79:01:0b:10:
85:bf:a0:0e:0e:d9:14:86:a1:55:d5:35:96:2f:af:97:21:5a:
36:7e:6e:01:dc:9b:4c:b7:2f:19:3d:8f:44:ac:a1:46:22:eb:
49:b6:80:59:94:64:1e:dd:d6:d5:46:90:bf:b9:90:04:aa:06:
be:aa:63:9f:cd:88:01:3c:81:e7:ff:55:55:ea:35:e2:ca:fb:
0e:eb:59:68:df:43:01:19:b3:4e:32:8d:11:1d:02:68:92:d3:
be:3d:57:49:69:c4:a9:6e:8a:db:5e:e6:b8:a6:4d:6d:9b:5f:
0d:16:90:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQNJytjxdMtXL1qoKOigzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk
NTBhNjMwHhcNMjUwNzI3MDUwMDE4WhcNMjUwNzI4MDUwMDE4WjAzMTEwLwYDVQQD
Eyg5NWYxNTZlNGVmYjY5ODMyODNmNDQ0ZGQ3ZWYwYjIzMmZmOWQyMDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uYf/OgM6RqvwZC0CebkL2i3B3cp
Nhki7WBgqFjC6pnklpyTnfFkl/L0DbpfbIzr/+3MHEyGwtOIzoDi+69KvVFYjj24
Kb7nbxJFnik5BKlDhY9BlpMR12yg9WMzbiXjlnTnjczGo9nnNHJl7RnKYJNDQ1iQ
8BJf5ZlymVnY1nfF0DHP/ayPi4lQqvxC8C3pJVAFVMb6TJsfDX6LHRlfmus4jBGd
EIah9jkQMP9U0nEfuH8VzeXZzsY+3zlNoD4ThMGn57tU/OHHify4f0fYbzsYkwG1
cEatsf/YZW7iNhztRKWLd9qCddCpoAX9rzS10pt+QJsJ53uHhKDS6kgeywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXxVuTvtpgyg/RE3X7wsjL/nSAWMB8GA1UdIwQY
MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt
ZWQ1ZDZjZThkN2U4LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4
LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRclwLdw
QmgLH/OfAdDhvmfC3ofSQvalO9uxu/4xgra4oOK9Ht7gkZqABvXjlX+VIaW2AN6K
CAaw3V9ng5Kfg4S4EI13oJV1oFFbjw0Kfgb36fFaLNF5XoFdTO/fgLfAhKf0i1jY
qPy3tds/Rtw5jpsD+WnJCRb53xqZqr2sWjXye1P76csRrTS0QZx5AQsQhb+gDg7Z
FIahVdU1li+vlyFaNn5uAdybTLcvGT2PRKyhRiLrSbaAWZRkHt3W1UaQv7mQBKoG
vqpjn82IATyB5/9VVeo14sr7DutZaN9DARmzTjKNER0CaJLTvj1XSWnEqW6K217m
uKZNbZtfDRaQ7w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:52:36 2025 by rpki-client