Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: 0hSjPvmAjJCp9EygvqonnFitxpCCsLwUVyOBSLlIKx8=
Subject key identifier: B0:1D:C3:87:62:27:02:F7:5D:93:7A:35:B8:54:40:A8:64:F4:95:34
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 0198496520B1681378BD24760D0060067C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 0824
Signing time: Sun 27 Jul 2025 01:00:20 +0000
Manifest this update: Sun 27 Jul 2025 01:00:20 +0000
Manifest next update: Mon 28 Jul 2025 01:00:20 +0000
Files and hashes: 1: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: qJ0u/erUVtZ7mYK9UpOHkKqgs8IhMMYC6fv+Cfb7ou0=)
2: uf-arnId1HYZtG_ay-tvYG5euMI.roa (hash: 6r9UIy+WK+zSulidwASGF2T21EGYdiGkhNIvNvh45j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:20:b1:68:13:78:bd:24:76:0d:00:60:06:7c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Jul 27 01:00:20 2025 GMT
Not After : Jul 28 01:00:20 2025 GMT
Subject: CN=b01dc387622702f75d937a35b85440a864f49534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:c2:87:93:71:1c:78:67:19:b4:10:a2:16:
2e:33:72:55:b7:f1:27:41:1a:d0:48:2d:ae:b1:aa:
f5:26:48:6f:fc:dd:94:45:88:4c:ac:0e:dc:fb:cb:
ce:c5:9d:e6:95:ad:b7:ff:79:f8:1e:f4:62:6b:ab:
6e:0a:36:d4:ce:bf:2f:6f:6b:0c:bc:f6:34:e2:7b:
49:05:b5:78:94:ea:df:ec:45:bd:8e:0f:d0:13:af:
ac:a8:8e:39:68:8e:90:c8:ae:c8:8b:7e:7b:01:b1:
91:df:3a:c6:b3:44:da:86:a2:57:ed:6a:ff:16:32:
0b:d7:02:a8:c5:c2:c4:79:ea:ed:24:93:3b:de:92:
12:98:f7:64:e6:9d:07:28:23:10:5a:ae:f2:d0:4a:
29:67:bf:51:fa:d8:99:bd:60:0a:c8:9f:d1:88:58:
cf:81:bd:6f:28:ac:04:c9:92:4a:11:ce:e5:98:60:
97:67:9e:34:4d:10:91:be:56:b7:3b:54:7a:17:69:
03:b5:c4:1c:c9:66:58:a9:86:b0:ce:fa:dc:de:5a:
b2:c0:28:5e:4b:cc:17:db:a9:1f:22:10:1f:91:e8:
a4:41:c3:41:f0:51:f5:72:be:53:43:72:46:a2:c8:
ff:d9:8e:f5:c5:1a:64:37:09:d4:f8:bd:56:8c:cf:
51:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1D:C3:87:62:27:02:F7:5D:93:7A:35:B8:54:40:A8:64:F4:95:34
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b2:e4:42:1a:95:a4:ac:e4:69:69:bc:17:6e:cd:73:5c:79:
c6:a9:10:9f:69:a9:0f:1e:af:ff:d9:27:e8:f7:01:3b:57:c0:
b5:c3:c9:b0:53:74:1b:6e:72:cc:31:a0:f5:2e:d4:29:fa:3c:
85:f4:62:c3:6a:cf:55:23:6c:99:3f:e3:ec:8d:44:b4:26:ce:
37:01:01:02:2e:ba:10:3e:d9:b0:ff:ee:a2:a5:ed:d3:3c:ce:
e0:38:28:22:fc:f5:6b:bb:dc:a2:49:12:76:6a:e2:e7:03:59:
24:80:72:57:ee:9b:3d:70:a5:52:fc:2b:09:51:08:57:82:7e:
79:b2:7f:c6:a5:d2:00:d8:b1:00:0b:ab:cc:ec:20:95:3a:6a:
84:6f:4a:87:c4:91:cb:a1:ea:28:8d:ff:c4:9e:4c:3c:25:86:
c8:4d:26:1b:9d:36:6e:36:5e:7f:ee:73:69:b9:d0:b8:04:55:
74:0b:91:a1:75:da:70:4a:a2:61:f0:5b:bc:cb:5b:30:15:08:
05:05:4e:16:0a:59:1c:ec:c3:98:e0:f8:72:e1:1c:6b:44:3e:
82:8f:9b:55:ea:f9:4f:e4:a1:d8:b5:73:42:21:88:2a:d3:84:
10:aa:8b:7a:6a:88:54:71:3b:aa:a1:0a:ee:f2:e6:5d:f8:6f:
b2:31:d1:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZSCxaBN4vSR2DQBgBnwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTA3OWUwZTU4N2M0N2ZmMTRkMjAyMTEyZjRlZWY3OGIw
Nzg0OTEwHhcNMjUwNzI3MDEwMDIwWhcNMjUwNzI4MDEwMDIwWjAzMTEwLwYDVQQD
EyhiMDFkYzM4NzYyMjcwMmY3NWQ5MzdhMzViODU0NDBhODY0ZjQ5NTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZzCh5NxHHhnGbQQohYuM3JVt/En
QRrQSC2usar1Jkhv/N2URYhMrA7c+8vOxZ3mla23/3n4HvRia6tuCjbUzr8vb2sM
vPY04ntJBbV4lOrf7EW9jg/QE6+sqI45aI6QyK7Ii357AbGR3zrGs0TahqJX7Wr/
FjIL1wKoxcLEeertJJM73pISmPdk5p0HKCMQWq7y0EopZ79R+tiZvWAKyJ/RiFjP
gb1vKKwEyZJKEc7lmGCXZ540TRCRvla3O1R6F2kDtcQcyWZYqYawzvrc3lqywChe
S8wX26kfIhAfkeikQcNB8FH1cr5TQ3JGosj/2Y71xRpkNwnU+L1WjM9R2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAdw4diJwL3XZN6NbhUQKhk9JU0MB8GA1UdIwQY
MBaAFF9QeeDlh8R/8U0gIRL07veLB4SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQt
MWZjOGY3NmE4MDZhLzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQtMWZjOGY3NmE4MDZh
LzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7LkQhqV
pKzkaWm8F27Nc1x5xqkQn2mpDx6v/9kn6PcBO1fAtcPJsFN0G25yzDGg9S7UKfo8
hfRiw2rPVSNsmT/j7I1EtCbONwEBAi66ED7ZsP/uoqXt0zzO4DgoIvz1a7vcokkS
dmri5wNZJIByV+6bPXClUvwrCVEIV4J+ebJ/xqXSANixAAurzOwglTpqhG9Kh8SR
y6HqKI3/xJ5MPCWGyE0mG502bjZef+5zabnQuARVdAuRoXXacEqiYfBbvMtbMBUI
BQVOFgpZHOzDmOD4cuEca0Q+go+bVer5T+Sh2LVzQiGIKtOEEKqLemqIVHE7qqEK
7vLmXfhvsjHReQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:49 2025 by rpki-client