Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier: y1WkNfJ+s5fEL+6RRBRopN4cdXsJVygIDhti3gpiMQo=
Subject key identifier: 55:A0:16:90:4D:E7:7D:CF:75:C0:5B:B6:05:27:5F:F7:8D:67:28:65
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 01984965B1ABA011C195DC485694213D7361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number: 0212
Signing time: Sun 27 Jul 2025 01:00:58 +0000
Manifest this update: Sun 27 Jul 2025 01:00:58 +0000
Manifest next update: Mon 28 Jul 2025 01:00:58 +0000
Files and hashes: 1: GUbgPZS8b1mJVA-CDXEfke3rKwU.roa (hash: DGiTGvvsu+oEkX+7jMPXSS7hmVWxoFzlEXAOHRpDGto=)
2: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: uiAUMKs7H2uBdrjCLbJDTUYg7In2QupUh9+VuOZ7jw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:b1:ab:a0:11:c1:95:dc:48:56:94:21:3d:73:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Jul 27 01:00:58 2025 GMT
Not After : Jul 28 01:00:58 2025 GMT
Subject: CN=55a016904de77dcf75c05bb605275ff78d672865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:61:eb:6e:8a:d8:6c:17:aa:3f:76:21:5b:
fd:ff:ec:04:64:65:a7:a5:99:8a:b0:49:f1:05:a5:
61:97:e3:dc:24:c3:1a:3e:21:2e:68:0d:e1:10:e1:
9a:07:05:8c:fa:69:1c:73:49:14:1d:e1:6e:9c:2f:
9b:dd:d6:0d:70:71:88:56:77:49:1a:6b:56:66:8f:
b5:8c:5c:47:c0:7b:42:5c:3b:98:b1:06:f4:64:33:
7c:85:9b:35:1f:08:57:73:2e:6c:cf:20:62:d7:d9:
15:af:76:49:e1:63:c5:15:0f:87:85:2b:14:18:66:
18:12:eb:5a:ab:be:02:b0:cb:19:73:92:8f:17:5c:
a2:f6:25:7f:19:ae:7d:cc:69:05:51:53:82:ad:de:
e7:96:28:81:3e:8c:87:8e:83:d8:99:bd:fb:b9:60:
9d:a1:7c:7a:e0:59:6a:13:04:a2:c1:28:3f:26:f5:
a8:a7:e1:a4:40:4f:73:e5:b7:f0:eb:06:e1:62:38:
0d:61:ac:76:f4:77:58:0b:05:8e:c8:72:5c:b3:c6:
14:5d:2c:0c:2d:a6:3f:90:b3:30:03:bc:e7:43:89:
2b:af:b0:40:9a:37:69:af:53:a7:09:85:11:25:b2:
55:38:bf:f1:94:09:6a:62:67:0d:2d:93:7d:33:f8:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A0:16:90:4D:E7:7D:CF:75:C0:5B:B6:05:27:5F:F7:8D:67:28:65
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:64:cf:24:21:dd:31:70:6d:44:95:ba:cf:29:b2:0f:b1:cd:
91:71:13:86:23:ed:19:40:80:ff:b1:2b:9c:6c:08:96:8c:70:
0d:1a:b0:6c:b0:d5:54:7a:7d:8c:90:44:d1:6d:4b:9f:38:a0:
56:33:83:a1:04:e7:5e:7b:66:64:5d:54:3e:d2:2e:e8:f7:02:
66:01:1f:c0:fd:26:af:d0:66:ab:f3:a4:eb:7b:42:6a:e9:ea:
4b:36:1f:60:8a:f4:0e:df:3b:06:34:4f:9c:b1:b9:34:f1:21:
19:c9:ae:fd:f2:ef:c2:45:df:fd:ba:5c:a7:ce:f5:1d:a6:fc:
16:3b:d0:41:dd:ad:ba:ab:46:55:28:81:af:5f:03:3b:4b:94:
d0:90:cc:7d:68:76:6b:bd:b0:9f:c4:2e:a1:4c:c0:55:6d:6f:
9f:5b:9e:14:95:ab:9d:14:66:4c:89:ed:bb:98:fb:89:d8:51:
34:48:26:17:00:92:f2:25:16:72:12:0e:bc:9b:a2:25:8d:fb:
6a:bc:db:43:4c:98:5c:09:51:bb:d5:03:92:fc:aa:e2:c4:3a:
fb:a6:ea:ea:8c:cd:cb:f4:2e:07:e7:c8:b1:06:ec:8c:60:20:
92:23:05:e1:29:93:40:07:95:80:cc:01:a1:ef:44:20:3f:10:
e2:fd:83:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZbGroBHBldxIVpQhPXNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2YwYWRhZWFmYjQwYzc3MjQ1OWU5MzkzNTRmNmJlNDUz
ZjE1OGYwHhcNMjUwNzI3MDEwMDU4WhcNMjUwNzI4MDEwMDU4WjAzMTEwLwYDVQQD
Eyg1NWEwMTY5MDRkZTc3ZGNmNzVjMDViYjYwNTI3NWZmNzhkNjcyODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw1h626K2GwXqj92IVv9/+wEZGWn
pZmKsEnxBaVhl+PcJMMaPiEuaA3hEOGaBwWM+mkcc0kUHeFunC+b3dYNcHGIVndJ
GmtWZo+1jFxHwHtCXDuYsQb0ZDN8hZs1HwhXcy5szyBi19kVr3ZJ4WPFFQ+HhSsU
GGYYEutaq74CsMsZc5KPF1yi9iV/Ga59zGkFUVOCrd7nliiBPoyHjoPYmb37uWCd
oXx64FlqEwSiwSg/JvWop+GkQE9z5bfw6wbhYjgNYax29HdYCwWOyHJcs8YUXSwM
LaY/kLMwA7znQ4krr7BAmjdpr1OnCYURJbJVOL/xlAlqYmcNLZN9M/j8ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWgFpBN533PdcBbtgUnX/eNZyhlMB8GA1UdIwQY
MBaAFMU/Ctrq+0DHckWek5NU9r5FPxWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zODA0YzItMGU0NC00YmUzLTkwMzct
NDYxN2NhMzc2MDgzLzEveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zODA0YzItMGU0NC00YmUzLTkwMzctNDYxN2NhMzc2MDgz
LzEveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmTPJCHd
MXBtRJW6zymyD7HNkXEThiPtGUCA/7ErnGwIloxwDRqwbLDVVHp9jJBE0W1Lnzig
VjODoQTnXntmZF1UPtIu6PcCZgEfwP0mr9Bmq/Ok63tCaunqSzYfYIr0Dt87BjRP
nLG5NPEhGcmu/fLvwkXf/bpcp871Hab8FjvQQd2tuqtGVSiBr18DO0uU0JDMfWh2
a72wn8QuoUzAVW1vn1ueFJWrnRRmTIntu5j7idhRNEgmFwCS8iUWchIOvJuiJY37
arzbQ0yYXAlRu9UDkvyq4sQ6+6bq6ozNy/QuB+fIsQbsjGAgkiMF4SmTQAeVgMwB
oe9EID8Q4v2DoQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:43:24 2025 by rpki-client