Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: 1GSLrIkQZjQcnMv1PtHMFdK4krm39dJknP+CfpR+8Xc=
Subject key identifier: BA:DC:AD:79:F8:82:2E:B2:9D:D2:66:1A:3B:E1:63:45:BB:75:3C:11
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 0198499BF01323362AD86FAB37E92CA1CC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 054E
Signing time: Sun 27 Jul 2025 02:00:12 +0000
Manifest this update: Sun 27 Jul 2025 02:00:12 +0000
Manifest next update: Mon 28 Jul 2025 02:00:12 +0000
Files and hashes: 1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: HaRiUGGdlWlggSOqWw+gP/nG8Mi8/KNrNZINVAnBxeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:f0:13:23:36:2a:d8:6f:ab:37:e9:2c:a1:cc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Jul 27 02:00:12 2025 GMT
Not After : Jul 28 02:00:12 2025 GMT
Subject: CN=badcad79f8822eb29dd2661a3be16345bb753c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:82:57:48:af:f9:82:a5:71:4f:91:5c:15:
21:b8:f2:41:40:2d:4f:0e:07:19:f7:43:7e:3b:b4:
d9:0b:3c:19:27:9b:dd:65:41:4d:3e:79:91:71:89:
8b:87:ef:10:0e:7a:80:98:14:d8:a6:10:5d:4b:93:
59:bd:1a:1f:6a:6e:af:41:4b:3a:2b:55:d5:a5:ff:
6f:c4:d0:9f:69:26:75:e7:e9:10:75:cf:75:7d:7b:
ff:7c:c0:16:4e:4c:7e:b6:b0:0d:3e:fe:45:c1:0c:
72:22:09:21:dc:77:07:1e:43:74:04:8e:89:4c:d1:
58:b5:6e:08:ae:fe:38:e3:bd:3f:63:b4:de:f9:5c:
e2:db:aa:28:7c:ba:76:73:00:f0:0f:88:ef:47:49:
76:57:e4:eb:79:b4:13:0f:4d:16:00:ce:c3:80:8d:
d1:68:a2:05:5d:1d:c0:07:3c:70:9c:fa:f0:b0:c8:
31:ef:73:e8:fc:ef:53:d3:c8:ef:02:67:00:14:e8:
99:e7:78:d4:9d:43:e3:d7:e7:32:a4:10:9f:9a:27:
6d:68:22:13:1e:dd:91:d0:19:db:dd:75:82:26:f0:
f1:ce:8d:50:8f:14:38:69:a4:a0:3e:65:19:34:d5:
36:aa:0a:4c:67:d5:2a:a1:49:e1:23:69:ed:21:39:
9a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DC:AD:79:F8:82:2E:B2:9D:D2:66:1A:3B:E1:63:45:BB:75:3C:11
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1d:7b:85:81:c9:a6:a8:b4:9e:4f:ba:92:51:21:73:3b:5f:
fa:6e:72:a7:16:1a:ea:b1:f3:df:69:93:a2:08:28:c7:e7:45:
89:83:35:41:65:5c:55:09:77:f7:22:96:0d:b4:4a:1b:a7:80:
68:99:26:b8:42:5b:be:87:14:c5:90:e6:0a:a0:16:01:3c:6e:
11:f5:45:fa:2c:c7:c2:af:a5:79:a1:25:27:00:d9:43:87:33:
43:13:65:d1:eb:36:0c:38:3e:22:6e:b5:58:be:39:64:b3:e5:
6e:16:ee:4d:f7:66:7b:72:40:50:32:89:d7:96:3f:67:ac:26:
6f:02:36:1c:8d:d6:17:7e:9d:78:6f:52:a8:61:9c:0d:09:f4:
77:d9:ea:ec:7a:1a:d7:d8:82:b3:37:e2:3a:d4:23:a0:e4:2e:
ff:85:fd:51:1c:5b:bf:15:67:cd:39:11:3f:3d:69:5a:f2:7c:
a4:c5:c4:87:9f:db:ba:79:fe:bc:b9:d2:d5:05:78:69:20:2c:
4c:db:fb:c7:7e:d0:76:62:10:ae:dd:c4:4f:d8:e3:dd:75:f6:
bc:c3:8e:2b:db:e7:41:ee:08:5d:0e:c5:f0:0a:54:d5:bb:fa:
9b:d9:09:b8:d5:89:b7:f4:0d:9f:50:c6:85:89:2b:65:20:e2:
2d:04:3d:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJm/ATIzYq2G+rN+ksocx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ODQyZjgyNjJmZWJkMjNkMDEzZDQwYTMxNGQ4OGUyNTRi
MmE1NDIwHhcNMjUwNzI3MDIwMDEyWhcNMjUwNzI4MDIwMDEyWjAzMTEwLwYDVQQD
EyhiYWRjYWQ3OWY4ODIyZWIyOWRkMjY2MWEzYmUxNjM0NWJiNzUzYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzOCV0iv+YKlcU+RXBUhuPJBQC1P
DgcZ90N+O7TZCzwZJ5vdZUFNPnmRcYmLh+8QDnqAmBTYphBdS5NZvRofam6vQUs6
K1XVpf9vxNCfaSZ15+kQdc91fXv/fMAWTkx+trANPv5FwQxyIgkh3HcHHkN0BI6J
TNFYtW4Irv44470/Y7Te+Vzi26oofLp2cwDwD4jvR0l2V+TrebQTD00WAM7DgI3R
aKIFXR3ABzxwnPrwsMgx73Po/O9T08jvAmcAFOiZ53jUnUPj1+cypBCfmidtaCIT
Ht2R0Bnb3XWCJvDxzo1QjxQ4aaSgPmUZNNU2qgpMZ9UqoUnhI2ntITmakQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrcrXn4gi6yndJmGjvhY0W7dTwRMB8GA1UdIwQY
MBaAFMSEL4Ji/r0j0BPUCjFNiOJUsqVCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYt
ZmRkNjc0MWZjY2EzLzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYtZmRkNjc0MWZjY2Ez
LzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqh17hYHJ
pqi0nk+6klEhcztf+m5ypxYa6rHz32mToggox+dFiYM1QWVcVQl39yKWDbRKG6eA
aJkmuEJbvocUxZDmCqAWATxuEfVF+izHwq+leaElJwDZQ4czQxNl0es2DDg+Im61
WL45ZLPlbhbuTfdme3JAUDKJ15Y/Z6wmbwI2HI3WF36deG9SqGGcDQn0d9nq7Hoa
19iCszfiOtQjoOQu/4X9URxbvxVnzTkRPz1pWvJ8pMXEh5/bunn+vLnS1QV4aSAs
TNv7x37QdmIQrt3ET9jj3XX2vMOOK9vnQe4IXQ7F8ApU1bv6m9kJuNWJt/QNn1DG
hYkrZSDiLQQ9TQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:34:36 2025 by rpki-client