Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: tM3Lk9YE5NaeIuBbk5LHeXPuAO0+QdN3KsVq1zI1Cw8=
Subject key identifier: 04:86:17:6F:60:B3:42:19:DB:43:71:1A:A3:EB:C1:AD:F2:DA:E4:88
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 019847E48D40BAF3CD43BD0659F2A0882F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 046C
Signing time: Sat 26 Jul 2025 18:00:17 +0000
Manifest this update: Sat 26 Jul 2025 18:00:17 +0000
Manifest next update: Sun 27 Jul 2025 18:00:17 +0000
Files and hashes: 1: 59Mn6Fq_ztW3ZpObO3_epXiDhpk.roa (hash: cp+rR6j5Vo4FlHwAzBmhQ3KTx+zcyZnQHkQLzqefDBI=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: rhy8Zp/39uE/3lKOCxTsF0MO68OXfq0kctZ0xAHu5xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:8d:40:ba:f3:cd:43:bd:06:59:f2:a0:88:2f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Jul 26 18:00:17 2025 GMT
Not After : Jul 27 18:00:17 2025 GMT
Subject: CN=0486176f60b34219db43711aa3ebc1adf2dae488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:00:4e:87:9b:97:5b:bd:bf:52:8b:6e:44:
46:af:19:96:00:cd:2d:23:1b:8b:2d:fa:7e:15:34:
c3:ae:4b:be:4b:de:49:81:43:82:52:7e:e1:ec:19:
1d:7a:a2:c8:12:c8:9d:c6:02:4f:79:95:0d:68:14:
c4:38:70:0d:cb:50:c6:fd:0e:8f:a7:a5:d4:d0:37:
f9:5a:d6:b2:0f:ee:a7:a9:d5:60:d8:19:07:18:4f:
7d:25:51:a9:4c:82:b7:66:20:96:da:8a:2b:59:65:
bd:9b:1e:1d:b6:a5:2a:6b:2b:ac:5b:ff:18:8f:cf:
37:72:79:d9:76:ae:38:f6:c7:1e:ce:ed:de:2f:1b:
02:f3:d5:93:2f:99:ab:e0:e7:55:86:fc:32:42:5b:
49:03:d8:0b:ab:38:e5:63:d1:85:65:86:18:46:92:
3a:f7:3b:c4:63:3a:60:20:c8:97:06:73:bf:28:9c:
a1:9b:78:2c:13:40:41:5e:60:27:46:43:ee:f7:8a:
e6:93:1e:57:d0:23:cf:7b:a1:a6:42:a5:08:9e:4d:
11:85:18:9c:7e:89:ad:89:88:02:37:62:94:fa:c4:
44:d0:f0:5b:5a:d0:30:2a:dd:1a:4c:d3:16:a4:36:
3f:e8:ca:75:90:74:bd:51:29:5c:15:ea:1f:ff:f6:
87:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:86:17:6F:60:B3:42:19:DB:43:71:1A:A3:EB:C1:AD:F2:DA:E4:88
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:eb:3b:8e:14:7b:86:51:f8:8b:81:69:98:31:eb:78:09:1a:
c1:f2:3a:ec:4d:48:9c:09:31:78:09:31:9b:44:07:46:ba:e6:
38:92:90:2c:6a:11:15:2b:c4:24:55:71:e7:2c:b5:3f:60:81:
d7:ad:2a:d5:51:b3:9a:b5:cb:43:76:fc:5f:05:af:bb:6f:31:
1b:58:b4:f4:63:6d:dd:2f:73:60:d3:ab:51:d7:56:4e:3c:1e:
97:2c:e9:a6:07:d2:f3:d0:fc:ee:3a:28:45:53:e8:1e:2c:2b:
f2:db:01:ba:e5:d3:f7:aa:c1:4a:11:2c:b1:2f:04:34:be:b0:
5a:2b:ec:2f:b8:72:e0:46:93:35:73:e4:82:8a:d5:b0:ab:a4:
c1:6c:e3:f1:a0:8f:70:05:9c:3e:8c:fe:b1:a3:05:f5:bf:cc:
96:32:e1:c5:7e:54:85:28:52:18:8b:c0:77:38:63:b0:1c:b2:
36:00:d4:8d:d4:45:9c:b9:59:55:0c:13:9a:29:04:95:ff:dd:
85:f0:dd:59:c6:f3:37:84:77:8b:4b:c1:ec:46:0b:5d:d6:f8:
33:21:2b:81:cb:54:f4:a2:34:1c:ed:55:2f:68:e7:f9:dd:98:
3a:05:a4:db:2d:82:a8:bc:bc:ce:6a:22:ce:7c:b5:ec:79:93:
e1:29:aa:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5I1AuvPNQ70GWfKgiC+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NzVkNTNkYjgyMmQyNWRiODI3ZDAzNzdjYmViMDZkMmNh
NDFhY2IwHhcNMjUwNzI2MTgwMDE3WhcNMjUwNzI3MTgwMDE3WjAzMTEwLwYDVQQD
EygwNDg2MTc2ZjYwYjM0MjE5ZGI0MzcxMWFhM2ViYzFhZGYyZGFlNDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBYAToebl1u9v1KLbkRGrxmWAM0t
IxuLLfp+FTTDrku+S95JgUOCUn7h7BkdeqLIEsidxgJPeZUNaBTEOHANy1DG/Q6P
p6XU0Df5WtayD+6nqdVg2BkHGE99JVGpTIK3ZiCW2oorWWW9mx4dtqUqayusW/8Y
j883cnnZdq449scezu3eLxsC89WTL5mr4OdVhvwyQltJA9gLqzjlY9GFZYYYRpI6
9zvEYzpgIMiXBnO/KJyhm3gsE0BBXmAnRkPu94rmkx5X0CPPe6GmQqUInk0RhRic
fomtiYgCN2KU+sRE0PBbWtAwKt0aTNMWpDY/6Mp1kHS9USlcFeof//aHFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASGF29gs0IZ20NxGqPrwa3y2uSIMB8GA1UdIwQY
MBaAFHV11T24ItJduCfQN3y+sG0spBrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mN2YwZjItNDc5ZS00ZjAzLWJhYTIt
MDYxZWQ5MzcxNDc1LzEvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mN2YwZjItNDc5ZS00ZjAzLWJhYTItMDYxZWQ5MzcxNDc1
LzEvZFhYVlBiZ2kwbDI0SjlBM2ZMNndiU3lrR3NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmus7jhR7
hlH4i4FpmDHreAkawfI67E1InAkxeAkxm0QHRrrmOJKQLGoRFSvEJFVx5yy1P2CB
160q1VGzmrXLQ3b8XwWvu28xG1i09GNt3S9zYNOrUddWTjwelyzppgfS89D87joo
RVPoHiwr8tsBuuXT96rBShEssS8ENL6wWivsL7hy4EaTNXPkgorVsKukwWzj8aCP
cAWcPoz+saMF9b/MljLhxX5UhShSGIvAdzhjsByyNgDUjdRFnLlZVQwTmikElf/d
hfDdWcbzN4R3i0vB7EYLXdb4MyErgctU9KI0HO1VL2jn+d2YOgWk2y2CqLy8zmoi
zny17HmT4SmqCA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:53:08 2025 by rpki-client