Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
File: b_xyU8DaFbVuAJVzGhDCu61sEX4.mft (raw, json)
Hash identifier: JCgz43q/hNgJKE8r7QzIrIK8wFPV9nJwJcqTXhIiZzM=
Subject key identifier: 68:B9:9D:DD:78:20:B6:B1:8B:9B:AF:28:E4:92:23:F8:56:7E:D2:3A
Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Certificate issuer: /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Certificate serial: 01984A7837096D55F83452F3A3973B4D615B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
Manifest number: 0458
Signing time: Sun 27 Jul 2025 06:00:49 +0000
Manifest this update: Sun 27 Jul 2025 06:00:49 +0000
Manifest next update: Mon 28 Jul 2025 06:00:49 +0000
Files and hashes: 1: ViU3nx0KMvyzkw-cFoaI3YiJf24.roa (hash: 2MVqhG3jfXK0CnKSuEcQLvgpRXs6MX1MKLdphJMDw6E=)
2: b_xyU8DaFbVuAJVzGhDCu61sEX4.crl (hash: EwkS9igFdTh0XnURuV2S8v5aqwHFOlpgdJvxJYQcZpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:37:09:6d:55:f8:34:52:f3:a3:97:3b:4d:61:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Validity
Not Before: Jul 27 06:00:49 2025 GMT
Not After : Jul 28 06:00:49 2025 GMT
Subject: CN=68b99ddd7820b6b18b9baf28e49223f8567ed23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:fa:ef:b3:23:dd:a6:0e:a9:75:7f:68:35:
b6:16:6a:0b:91:43:bc:e3:20:05:65:13:5b:f6:5c:
b2:37:ec:79:0d:78:b5:41:98:cc:ad:0a:d7:bc:ed:
0f:12:64:cb:9c:88:f6:5e:bd:e9:14:9f:b9:5d:25:
85:07:89:60:07:33:1a:d7:78:e9:da:7b:fa:6b:20:
ec:74:0e:fc:4e:8a:5f:0e:15:f9:f5:92:47:93:26:
62:a0:7c:c8:dd:54:cc:93:9d:20:8d:28:1e:57:cc:
14:28:58:98:5f:10:81:5d:99:98:24:04:00:ba:8b:
7f:c6:66:4b:5a:89:7e:ae:e5:d4:a3:0c:e5:db:a3:
cf:0f:cd:30:69:14:82:20:aa:9d:9e:5e:16:4e:68:
44:99:26:18:12:92:92:83:50:15:12:5d:73:9a:66:
ba:f9:93:bc:12:b9:02:6b:27:b3:2a:f6:73:2d:e7:
7b:3f:1f:73:7b:fe:39:d3:d4:76:92:79:b6:8e:c8:
ad:8a:cd:44:90:89:b8:55:9c:bf:96:78:95:3b:33:
14:90:c9:c9:14:c2:bd:1b:42:2b:99:98:1e:4a:f8:
02:40:ec:76:45:6e:4d:f1:52:e8:4e:65:e5:bb:7f:
19:45:d4:f4:41:90:11:5e:36:e8:8e:de:5b:91:07:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B9:9D:DD:78:20:B6:B1:8B:9B:AF:28:E4:92:23:F8:56:7E:D2:3A
X509v3 Authority Key Identifier:
keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:93:df:0a:e6:32:f5:16:04:d0:26:43:89:cc:4b:f6:af:f0:
24:95:38:f4:12:aa:9e:90:1b:ea:dc:6a:9f:b8:f5:d6:17:f7:
e9:de:a7:3f:2d:6b:68:26:93:ca:72:c8:f5:38:a9:04:0d:49:
87:a4:c3:f8:91:58:c8:ab:25:c3:d5:7b:73:e4:42:e7:17:77:
b6:e2:52:79:26:c0:e5:d9:d1:19:d4:27:ad:b2:26:7d:1a:ce:
08:e4:48:fd:1e:f8:04:50:ac:bb:5e:62:4c:1b:e8:ec:e3:9f:
05:ef:36:ff:78:8d:b7:5c:ee:a3:34:3b:85:95:c6:d9:1b:22:
3b:78:6b:9d:be:48:d1:63:b5:4a:0f:83:4d:8d:d0:a1:8d:68:
1d:9c:1a:ef:dd:12:a2:5f:fe:38:c5:34:4c:a6:33:f6:66:a7:
e1:fc:6c:8a:96:5c:98:77:44:fa:34:27:36:72:88:d9:21:dd:
1e:6c:04:df:2d:dd:47:e4:93:e2:43:34:3e:a1:05:32:01:1d:
58:a4:17:b2:6c:34:3d:22:13:7a:32:8f:68:05:c8:4c:96:63:
40:67:0e:c2:b8:5e:41:bb:3b:01:e7:6d:5a:f3:4c:98:69:71:
e2:fd:29:4f:6d:7c:c9:ae:17:73:7d:ae:22:b2:41:3e:a3:7f:
9e:68:ea:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKeDcJbVX4NFLzo5c7TWFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmM3MjUzYzBkYTE1YjU2ZTAwOTU3MzFhMTBjMmJiYWQ2
YzExN2UwHhcNMjUwNzI3MDYwMDQ5WhcNMjUwNzI4MDYwMDQ5WjAzMTEwLwYDVQQD
Eyg2OGI5OWRkZDc4MjBiNmIxOGI5YmFmMjhlNDkyMjNmODU2N2VkMjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2z677Mj3aYOqXV/aDW2FmoLkUO8
4yAFZRNb9lyyN+x5DXi1QZjMrQrXvO0PEmTLnIj2Xr3pFJ+5XSWFB4lgBzMa13jp
2nv6ayDsdA78TopfDhX59ZJHkyZioHzI3VTMk50gjSgeV8wUKFiYXxCBXZmYJAQA
uot/xmZLWol+ruXUowzl26PPD80waRSCIKqdnl4WTmhEmSYYEpKSg1AVEl1zmma6
+ZO8ErkCayezKvZzLed7Px9ze/4509R2knm2jsitis1EkIm4VZy/lniVOzMUkMnJ
FMK9G0IrmZgeSvgCQOx2RW5N8VLoTmXlu38ZRdT0QZARXjbojt5bkQd26QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGi5nd14ILaxi5uvKOSSI/hWftI6MB8GA1UdIwQY
MBaAFG/8clPA2hW1bgCVcxoQwrutbBF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZWU3MmQtZDkxZC00NjVlLTlkNTct
MzdhN2NkMzdkNDllLzEvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kZWU3MmQtZDkxZC00NjVlLTlkNTctMzdhN2NkMzdkNDll
LzEvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5PfCuYy
9RYE0CZDicxL9q/wJJU49BKqnpAb6txqn7j11hf36d6nPy1raCaTynLI9TipBA1J
h6TD+JFYyKslw9V7c+RC5xd3tuJSeSbA5dnRGdQnrbImfRrOCORI/R74BFCsu15i
TBvo7OOfBe82/3iNt1zuozQ7hZXG2RsiO3hrnb5I0WO1Sg+DTY3QoY1oHZwa790S
ol/+OMU0TKYz9man4fxsipZcmHdE+jQnNnKI2SHdHmwE3y3dR+ST4kM0PqEFMgEd
WKQXsmw0PSITejKPaAXITJZjQGcOwrheQbs7AedtWvNMmGlx4v0pT218ya4Xc32u
IrJBPqN/nmjqkg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:06:40 2025 by rpki-client