Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: 0Bb9QTN+3QEo4xI8phfuD4kEFAl82ScrHZDcoAA+GqM=
Subject key identifier: 87:DE:F5:CB:9C:F3:15:53:B5:F4:B4:C1:B1:26:05:C9:BF:21:86:F3
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 01984A415A3F633A3E9DFFDAF4F85DBE7053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 05:00:53 +0000
Manifest this update: Sun 27 Jul 2025 05:00:53 +0000
Manifest next update: Mon 28 Jul 2025 05:00:53 +0000
Files and hashes: 1: 5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa (hash: 8v0kYzcJWu+TAkPVdBOzyNTyiBLW9zT8UuMidU5kl/I=)
2: g9JYtF8ph5GLoyu-Nq2vbYm-D1I.roa (hash: Cvh5BPuE+knEynT2OCQwuxH59fgMDl8/lGUoeYUQxFY=)
3: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: 4yToPQDbzemJzeWNdRP0c7WcwlLyhfe5zo14WoEJlNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:5a:3f:63:3a:3e:9d:ff:da:f4:f8:5d:be:70:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Jul 27 05:00:53 2025 GMT
Not After : Jul 28 05:00:53 2025 GMT
Subject: CN=87def5cb9cf31553b5f4b4c1b12605c9bf2186f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:58:9a:60:43:32:36:7d:bd:86:fe:df:2c:
e8:55:83:54:14:7f:ab:5c:59:c7:a7:1a:12:a5:c2:
ad:48:e3:da:57:4f:5c:2d:59:5a:9a:34:0f:13:67:
f6:5d:09:4e:e0:4e:f4:bc:cb:6b:1b:1c:9d:94:5f:
26:8c:7b:d5:63:ae:94:dc:b8:de:c9:5d:71:ce:48:
3a:0a:ff:13:19:0f:4f:27:26:88:e6:9e:c7:59:ad:
14:75:fc:b4:0c:0a:c9:5f:ad:93:ff:36:7f:ce:16:
45:bd:44:be:63:92:93:18:89:9b:98:05:cd:ac:3f:
f1:c9:a2:5f:6e:67:16:71:5f:9a:2c:c9:f4:77:d7:
59:fd:19:d4:2e:20:2e:09:b3:9d:62:8e:c5:cf:44:
42:25:bb:2c:58:5b:26:63:85:d6:3c:e3:ff:6d:a8:
89:cb:9e:00:f2:ac:0a:57:2c:37:5c:9f:ef:f3:bf:
64:b3:76:35:73:e4:ad:ce:2f:ba:e7:46:6c:1e:0a:
e6:54:f0:26:4f:fc:d8:ab:dd:93:40:d4:a7:cb:30:
1d:24:b5:a0:1b:76:78:ee:9c:b9:4d:3d:70:d3:5c:
87:4a:f1:72:b1:73:ec:ad:d1:8e:66:c1:32:ad:f7:
91:a7:7f:13:69:f3:c1:b7:de:5b:59:ed:7f:00:90:
31:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DE:F5:CB:9C:F3:15:53:B5:F4:B4:C1:B1:26:05:C9:BF:21:86:F3
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7d:b0:87:5f:6d:c0:7a:8b:21:41:7d:d4:a9:ea:58:2f:aa:
c2:60:1f:fe:a2:4b:b4:06:c2:56:ea:3e:07:13:8c:a7:3f:9f:
78:f5:b6:69:4d:c9:7f:ba:b7:57:80:fa:46:c9:df:bd:2e:9c:
f8:9d:2d:b9:e1:bd:b7:cf:1b:ce:3d:41:db:b6:0b:26:9f:fc:
d2:e1:89:60:f3:d9:61:27:3f:94:ae:1d:d6:05:83:0e:3a:22:
b7:34:f7:43:3d:f3:8a:c7:06:da:3a:56:d1:05:57:e7:6d:f8:
56:ad:37:7b:af:f0:4e:bb:02:60:40:eb:f0:7d:9f:f4:1b:ba:
04:11:82:44:f9:38:ae:93:84:17:e3:f7:f1:a2:ec:82:ca:9b:
75:cc:ab:28:81:03:25:33:f9:89:50:4d:2b:1d:4e:a8:c4:6a:
fc:45:eb:6d:71:71:bf:c6:9b:cb:b8:31:a4:32:5d:cc:d8:b9:
cb:30:e3:48:69:81:ad:71:4e:d6:ae:43:d1:37:b2:8c:4b:62:
56:13:a6:c5:8c:c0:d8:5c:c6:95:c9:c7:7c:ce:cc:3f:18:d7:
66:c2:a6:b9:4b:c3:b8:a1:5b:c5:c0:b1:ce:89:f3:11:74:a0:
35:8d:0c:d1:06:42:73:7b:78:ee:15:25:ca:6f:b2:6f:e0:4b:
e5:04:3a:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQVo/Yzo+nf/a9PhdvnBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTFmYjViYmMyZmE4NTcxZTNkNWY4Y2FlNDE5NmE4ZDdl
OTZjMzUwHhcNMjUwNzI3MDUwMDUzWhcNMjUwNzI4MDUwMDUzWjAzMTEwLwYDVQQD
Eyg4N2RlZjVjYjljZjMxNTUzYjVmNGI0YzFiMTI2MDVjOWJmMjE4NmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqdYmmBDMjZ9vYb+3yzoVYNUFH+r
XFnHpxoSpcKtSOPaV09cLVlamjQPE2f2XQlO4E70vMtrGxydlF8mjHvVY66U3Lje
yV1xzkg6Cv8TGQ9PJyaI5p7HWa0Udfy0DArJX62T/zZ/zhZFvUS+Y5KTGImbmAXN
rD/xyaJfbmcWcV+aLMn0d9dZ/RnULiAuCbOdYo7Fz0RCJbssWFsmY4XWPOP/baiJ
y54A8qwKVyw3XJ/v879ks3Y1c+Stzi+650ZsHgrmVPAmT/zYq92TQNSnyzAdJLWg
G3Z47py5TT1w01yHSvFysXPsrdGOZsEyrfeRp38TafPBt95bWe1/AJAxewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfe9cuc8xVTtfS0wbEmBcm/IYbzMB8GA1UdIwQY
MBaAFMWh+1u8L6hXHj1fjK5BlqjX6Ww1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTct
ZDhhMGI0MWY0NmU4LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTctZDhhMGI0MWY0NmU4
LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh32wh19t
wHqLIUF91KnqWC+qwmAf/qJLtAbCVuo+BxOMpz+fePW2aU3Jf7q3V4D6RsnfvS6c
+J0tueG9t88bzj1B27YLJp/80uGJYPPZYSc/lK4d1gWDDjoitzT3Qz3ziscG2jpW
0QVX5234Vq03e6/wTrsCYEDr8H2f9Bu6BBGCRPk4rpOEF+P38aLsgsqbdcyrKIED
JTP5iVBNKx1OqMRq/EXrbXFxv8aby7gxpDJdzNi5yzDjSGmBrXFO1q5D0TeyjEti
VhOmxYzA2FzGlcnHfM7MPxjXZsKmuUvDuKFbxcCxzonzEXSgNY0M0QZCc3t47hUl
ym+yb+BL5QQ6YQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:14 2025 by rpki-client