Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: ARSFmkFxwJf8kJjfNOoxyZqM9pbwFHO6iXhZ5xRpqXM=
Subject key identifier: 5B:02:66:9B:2E:71:9A:E9:77:B9:D9:1B:99:8D:D4:25:21:34:F6:8D
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 019845886DC70EF6187B73E354A5C6198224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0995
Signing time: Sat 26 Jul 2025 07:00:25 +0000
Manifest this update: Sat 26 Jul 2025 07:00:25 +0000
Manifest next update: Sun 27 Jul 2025 07:00:25 +0000
Files and hashes: 1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=)
2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=)
3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=)
4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: RuJCVc1NLzNOFRbMUg5mkyAOAMvMTervfJv5nKU3efM=)
5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=)
6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=)
7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=)
8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:6d:c7:0e:f6:18:7b:73:e3:54:a5:c6:19:82:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Jul 26 07:00:25 2025 GMT
Not After : Jul 27 07:00:25 2025 GMT
Subject: CN=5b02669b2e719ae977b9d91b998dd4252134f68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:af:0c:49:36:d3:14:e9:bf:23:b7:34:29:
40:c8:61:87:4e:a1:33:40:b5:82:d9:de:12:23:0d:
93:f9:f7:9d:8a:72:f9:d6:e3:85:95:0f:02:d3:72:
00:14:50:e9:8e:bd:58:d8:6f:f0:1b:9d:b6:8b:c5:
3e:94:8f:e9:c2:8d:3e:8e:25:ca:0f:9e:dd:46:8a:
5a:f4:07:c3:13:90:5e:3c:e7:5f:87:59:2e:29:37:
0e:b3:8e:1b:44:37:c4:07:ce:6c:eb:0a:86:e2:1e:
f8:5e:30:65:f8:94:a4:e0:dd:09:6d:c7:61:27:30:
26:cc:7d:f5:e2:40:33:82:5d:1e:e7:a4:49:b3:88:
0b:6d:fb:88:32:8b:d1:17:b9:7f:5e:18:d2:a4:d0:
dc:22:ba:a8:48:95:24:01:28:5c:9f:51:ac:2a:f0:
26:75:af:3b:2f:c1:ee:9a:aa:ce:29:14:22:23:3a:
1e:9a:8c:ed:b6:b8:e3:3d:48:4b:c5:46:4c:88:00:
55:c7:72:12:8f:a2:a5:5e:5b:19:1e:90:f7:8e:9c:
da:ef:d9:bc:55:97:1e:af:f8:ed:ef:ea:75:51:0b:
da:14:cd:2a:8f:0b:a9:b6:aa:45:41:dd:87:d0:ab:
b4:c5:5f:39:40:3b:e9:b1:2e:b9:ca:05:5a:2e:83:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:02:66:9B:2E:71:9A:E9:77:B9:D9:1B:99:8D:D4:25:21:34:F6:8D
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:01:73:22:52:90:18:4d:04:df:c0:ee:18:b1:bb:84:4a:b1:
20:dc:ff:d1:df:c8:fd:8a:62:93:cb:2a:09:e2:f3:a5:d5:69:
10:1b:81:a7:85:ed:e6:19:49:18:8b:a5:42:f3:25:69:97:dd:
5e:ac:2e:e9:88:94:9e:65:f1:6e:dc:05:3b:d2:63:60:45:15:
6d:56:2e:97:c7:26:32:b6:47:b7:85:1e:5d:0d:82:a3:69:29:
1e:92:90:ce:40:77:e1:e8:0f:3b:e6:35:a8:bf:5f:d2:b4:58:
f6:8f:8d:1a:99:16:9b:69:43:95:17:4e:a2:b4:db:c6:ff:88:
5b:cd:95:cc:8c:8e:5f:03:19:3d:a3:60:11:27:22:4b:da:42:
84:2d:1f:2b:54:6d:67:a6:bf:af:e6:7c:7d:d1:be:a5:d7:50:
32:8c:31:45:8b:2e:98:0c:b5:3e:e2:30:cd:a0:fb:86:de:c5:
14:ab:a5:77:e3:90:ee:94:72:59:2d:39:b4:28:ad:2d:b6:08:
ce:4f:89:ae:6a:16:c3:67:09:b4:92:42:b7:38:fa:03:f3:f0:
29:69:6c:09:47:fe:f0:c7:d4:77:60:d5:30:e0:c2:06:af:d1:
01:c0:5f:12:30:b2:cc:81:93:1f:f9:b6:2e:b9:fb:9a:20:dd:
a4:8d:2e:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiG3HDvYYe3PjVKXGGYIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzQ2ZTlmMTJjMmMwZTU0NTlmZTRlM2Q0MTNjMWM4OWRl
NmRiMGUwHhcNMjUwNzI2MDcwMDI1WhcNMjUwNzI3MDcwMDI1WjAzMTEwLwYDVQQD
Eyg1YjAyNjY5YjJlNzE5YWU5NzdiOWQ5MWI5OThkZDQyNTIxMzRmNjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDuvDEk20xTpvyO3NClAyGGHTqEz
QLWC2d4SIw2T+fedinL51uOFlQ8C03IAFFDpjr1Y2G/wG522i8U+lI/pwo0+jiXK
D57dRopa9AfDE5BePOdfh1kuKTcOs44bRDfEB85s6wqG4h74XjBl+JSk4N0Jbcdh
JzAmzH314kAzgl0e56RJs4gLbfuIMovRF7l/XhjSpNDcIrqoSJUkAShcn1GsKvAm
da87L8HumqrOKRQiIzoemozttrjjPUhLxUZMiABVx3ISj6KlXlsZHpD3jpza79m8
VZcer/jt7+p1UQvaFM0qjwuptqpFQd2H0Ku0xV85QDvpsS65ygVaLoMi7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsCZpsucZrpd7nZG5mN1CUhNPaNMB8GA1UdIwQY
MBaAFFx0bp8SwsDlRZ/k49QTwcid5tsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMt
ZTU5NDc2MTRlZjNmLzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMtZTU5NDc2MTRlZjNm
LzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgFzIlKQ
GE0E38DuGLG7hEqxINz/0d/I/Ypik8sqCeLzpdVpEBuBp4Xt5hlJGIulQvMlaZfd
Xqwu6YiUnmXxbtwFO9JjYEUVbVYul8cmMrZHt4UeXQ2Co2kpHpKQzkB34egPO+Y1
qL9f0rRY9o+NGpkWm2lDlRdOorTbxv+IW82VzIyOXwMZPaNgESciS9pChC0fK1Rt
Z6a/r+Z8fdG+pddQMowxRYsumAy1PuIwzaD7ht7FFKuld+OQ7pRyWS05tCitLbYI
zk+JrmoWw2cJtJJCtzj6A/PwKWlsCUf+8MfUd2DVMODCBq/RAcBfEjCyzIGTH/m2
Lrn7miDdpI0uVg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:35:06 2025 by rpki-client