Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: Bj2FvS7i8dkUxJzn9V8gwqkzE9ImaXohov8ipELKuzk=
Subject key identifier: DD:C1:A7:40:A0:06:87:46:D8:0F:41:96:36:E6:47:E0:26:7A:A5:67
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 0198481BD816E30F50AE95155DEF445FA252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 0DCD
Signing time: Sat 26 Jul 2025 19:00:40 +0000
Manifest this update: Sat 26 Jul 2025 19:00:40 +0000
Manifest next update: Sun 27 Jul 2025 19:00:40 +0000
Files and hashes: 1: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (hash: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=)
2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: 0mRHbCPq9kU0ZYt6h1dVBnTjcHAfDV4gksF6pa0HXmo=)
3: rAM6r2SFYvSQGaseydRgOte_bds.roa (hash: RYGmm+YYhr7YTk+o6zMn3og3hxzFO1fF/P5WPNoHQX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:d8:16:e3:0f:50:ae:95:15:5d:ef:44:5f:a2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Jul 26 19:00:40 2025 GMT
Not After : Jul 27 19:00:40 2025 GMT
Subject: CN=ddc1a740a0068746d80f419636e647e0267aa567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:07:d7:dd:7b:12:d6:2d:61:31:5c:0c:eb:
3c:34:73:4a:96:91:6e:de:45:a4:44:07:0c:76:f6:
bb:5c:37:e2:ee:15:a2:bd:c0:a7:24:2b:f2:93:69:
73:8c:a7:81:5a:f9:dd:59:a8:01:d1:4c:79:a7:ac:
c4:2b:6d:f5:28:74:01:11:8a:9a:d0:1f:e2:b4:6d:
5b:f1:4d:f2:61:f4:b0:c1:68:41:38:2f:10:a6:45:
f5:04:de:6f:c5:f0:e2:07:83:0f:02:ca:5a:16:8a:
14:b4:34:7a:26:a0:9e:fe:61:48:e2:29:10:dd:b8:
bd:9b:f2:b8:af:dd:d1:d9:3b:ba:5a:f4:15:37:68:
b4:a4:96:74:14:9c:5e:db:44:d5:a7:00:fc:8b:a7:
44:32:a2:7c:14:00:bb:4b:7a:7c:b1:16:53:d1:57:
cb:83:f0:72:e8:0d:7b:6c:43:2d:3d:c3:24:05:b2:
c6:08:30:c6:07:a0:95:cb:fb:94:7e:8c:c0:67:d5:
14:8a:e6:47:89:8a:b2:ff:d0:25:64:58:5f:53:bc:
04:e8:e7:8e:3c:b4:7a:90:4f:69:84:f2:27:e7:fd:
5d:b8:55:72:ea:cf:4a:1b:61:23:e9:84:79:80:29:
9e:9e:29:02:28:53:53:5a:6b:b7:2f:d7:d9:29:15:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:A7:40:A0:06:87:46:D8:0F:41:96:36:E6:47:E0:26:7A:A5:67
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:06:5e:7f:50:cd:37:bd:c5:64:0b:6c:8b:9d:f9:c6:58:7a:
b2:81:50:49:a0:4b:f9:45:cc:ac:ff:a7:fc:66:69:ba:ab:da:
25:16:91:ba:1c:80:f6:7b:f1:36:14:c4:82:8a:07:3a:cf:87:
ad:c4:a2:68:53:ef:03:95:74:20:86:ee:8d:70:a7:34:19:1c:
a1:a8:52:83:ff:ec:e0:68:47:b0:f2:b5:0d:2f:76:07:83:d8:
ef:c9:fb:1c:d2:12:bc:8c:56:4b:14:a9:c1:35:f4:81:a5:ee:
73:c1:88:7c:84:00:1e:c9:af:bd:bc:68:f3:79:35:72:0e:0b:
bf:b4:10:e6:bf:3d:72:74:98:fd:39:96:30:d3:4f:90:74:aa:
11:7c:b2:64:ec:0d:7a:c3:09:ea:db:80:14:e3:31:81:19:0a:
91:db:55:50:a2:25:fb:fd:31:f4:3b:e9:a3:ed:88:70:a7:ea:
de:0e:75:46:2b:1e:eb:d2:c0:48:ce:89:80:b4:99:95:35:1f:
9d:bd:84:a5:1c:f3:0d:bd:7d:2b:15:ce:f9:63:42:8a:3b:5d:
22:5d:dc:9c:5b:60:bf:69:44:25:e5:42:71:1a:d0:6b:14:70:
35:51:7c:c3:f2:e0:10:57:d7:80:f8:9f:1b:ab:c0:45:42:4f:
a9:79:14:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG9gW4w9QrpUVXe9EX6JSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlN2M3NzM2OTQ1YzI5YTc3YmFjZDViMThiMGZmNTg3NTEx
MTdiYWQwHhcNMjUwNzI2MTkwMDQwWhcNMjUwNzI3MTkwMDQwWjAzMTEwLwYDVQQD
EyhkZGMxYTc0MGEwMDY4NzQ2ZDgwZjQxOTYzNmU2NDdlMDI2N2FhNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmcH1917EtYtYTFcDOs8NHNKlpFu
3kWkRAcMdva7XDfi7hWivcCnJCvyk2lzjKeBWvndWagB0Ux5p6zEK231KHQBEYqa
0B/itG1b8U3yYfSwwWhBOC8QpkX1BN5vxfDiB4MPAspaFooUtDR6JqCe/mFI4ikQ
3bi9m/K4r93R2Tu6WvQVN2i0pJZ0FJxe20TVpwD8i6dEMqJ8FAC7S3p8sRZT0VfL
g/By6A17bEMtPcMkBbLGCDDGB6CVy/uUfozAZ9UUiuZHiYqy/9AlZFhfU7wE6OeO
PLR6kE9phPIn5/1duFVy6s9KG2Ej6YR5gCmenikCKFNTWmu3L9fZKRUnwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3Bp0CgBodG2A9BljbmR+AmeqVnMB8GA1UdIwQY
MBaAFF58dzaUXCmne6zVsYsP9YdREXutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWIt
ZWVlZGQ5OWI4Y2M0LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWItZWVlZGQ5OWI4Y2M0
LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAZef1DN
N73FZAtsi535xlh6soFQSaBL+UXMrP+n/GZpuqvaJRaRuhyA9nvxNhTEgooHOs+H
rcSiaFPvA5V0IIbujXCnNBkcoahSg//s4GhHsPK1DS92B4PY78n7HNISvIxWSxSp
wTX0gaXuc8GIfIQAHsmvvbxo83k1cg4Lv7QQ5r89cnSY/TmWMNNPkHSqEXyyZOwN
esMJ6tuAFOMxgRkKkdtVUKIl+/0x9Dvpo+2IcKfq3g51Rise69LASM6JgLSZlTUf
nb2EpRzzDb19KxXO+WNCijtdIl3cnFtgv2lEJeVCcRrQaxRwNVF8w/LgEFfXgPif
G6vARUJPqXkUTw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:22:33 2025 by rpki-client