Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
File: xFz9uYA84FcULRh_hrxPVnHX63s.mft (raw, json)
Hash identifier: XhQxdDMQLzGBZYtHWT4v7755+tTfFYg19DS9x3U5rU4=
Subject key identifier: EC:84:D8:9C:71:59:09:3C:C3:23:5F:68:3D:84:F4:4D:7A:3C:DA:82
Authority key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
Certificate issuer: /CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Certificate serial: 0197D775A1EA58F4D8EB6D56076CFC9DF6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
Manifest number: 15C0
Signing time: Fri 04 Jul 2025 22:01:39 +0000
Manifest this update: Fri 04 Jul 2025 22:01:39 +0000
Manifest next update: Sat 05 Jul 2025 22:01:39 +0000
Files and hashes: 1: xFz9uYA84FcULRh_hrxPVnHX63s.crl (hash: Q3SbrUQlRKh/rvsJf5kExziwYmEwOh2tNDiLXgPy95Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:75:a1:ea:58:f4:d8:eb:6d:56:07:6c:fc:9d:f6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Validity
Not Before: Jul 4 22:01:39 2025 GMT
Not After : Jul 5 22:01:39 2025 GMT
Subject: CN=ec84d89c7159093cc3235f683d84f44d7a3cda82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:e0:e7:bb:1a:7d:8a:f2:80:0b:53:e0:52:
f6:d4:d8:79:6d:6a:29:a0:a4:4e:c5:6a:76:ab:43:
df:91:d3:df:5f:f3:61:be:61:61:9f:db:67:fc:8f:
6d:0f:a6:ea:b9:a0:df:07:4b:64:8f:46:01:77:ca:
99:8f:ab:d1:89:9e:d9:41:9d:a0:f9:3c:4a:c9:7a:
13:3c:50:00:ec:98:42:cb:b0:5e:62:bc:ce:4d:be:
7c:7f:77:8e:d7:5f:76:1d:73:0b:a3:30:f5:95:f3:
fc:62:87:f6:99:c7:34:3e:b8:20:62:19:60:b4:d7:
7c:b9:5f:71:17:1f:c4:ca:97:91:61:47:31:58:63:
5c:f9:98:fe:55:c0:8f:c0:91:3f:95:1c:b4:a6:9c:
79:06:63:71:36:e9:fe:8b:a0:ea:54:64:a6:64:e4:
3d:00:b4:9e:47:aa:2e:7c:c9:6a:f7:c1:dc:7d:10:
ab:ed:25:69:58:d6:0b:60:d1:fa:a5:60:fe:4a:16:
58:96:a1:7a:9c:00:9d:16:af:33:6a:9b:c9:e6:1b:
d5:a2:5a:ea:2e:d2:db:c2:23:4f:9a:07:b3:81:4c:
cc:6d:4d:8b:6d:d2:77:d1:81:f4:59:27:c5:fa:d1:
e8:4c:a3:92:e2:a8:60:9b:2b:93:e7:fb:f5:5f:f8:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:84:D8:9C:71:59:09:3C:C3:23:5F:68:3D:84:F4:4D:7A:3C:DA:82
X509v3 Authority Key Identifier:
keyid:C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6f:7d:2b:e2:27:35:4d:48:2e:52:1d:00:27:00:7b:06:3c:
ea:18:87:7b:74:89:29:fc:cd:9d:b1:25:f4:9d:8a:13:ae:83:
c1:d5:39:88:ad:fe:e7:0d:fc:32:6e:c8:f5:dc:5d:8e:7c:fc:
21:1b:db:9e:f4:4c:06:35:69:14:62:2a:48:bc:67:88:09:15:
db:8d:70:ae:a4:13:1e:10:2a:db:3e:61:f8:e0:c4:44:ad:36:
af:b3:f5:77:35:a0:83:4f:22:3b:84:9c:44:85:16:52:de:3d:
ae:b9:80:e2:e6:09:66:e1:70:c1:db:3f:b3:d3:8e:fc:bb:dc:
c9:8c:e9:9e:1b:12:c8:ca:40:a3:a5:ed:ca:47:b7:73:f8:5a:
44:3f:5a:a4:af:25:2d:68:5d:b5:37:55:f8:c3:e7:da:6d:60:
8c:55:72:b9:f0:20:ca:c1:35:db:f9:44:42:89:4a:2a:3f:ce:
61:50:7d:f6:41:06:f0:af:19:5f:57:72:13:47:02:fc:97:9a:
f1:9b:50:61:c9:d3:92:2d:9e:3b:3b:82:9c:70:c7:41:dd:0a:
a0:f1:3d:4a:f9:fc:a6:8a:81:89:cc:8d:dc:3c:60:f6:a6:1e:
ba:c8:9c:e0:b9:d2:58:2c:ca:8e:ea:79:36:25:77:d9:21:cf:
e9:f9:a2:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfXdaHqWPTY621WB2z8nfbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NWNmZGI5ODAzY2UwNTcxNDJkMTg3Zjg2YmM0ZjU2NzFk
N2ViN2IwHhcNMjUwNzA0MjIwMTM5WhcNMjUwNzA1MjIwMTM5WjAzMTEwLwYDVQQD
EyhlYzg0ZDg5YzcxNTkwOTNjYzMyMzVmNjgzZDg0ZjQ0ZDdhM2NkYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaXg57safYrygAtT4FL21Nh5bWop
oKROxWp2q0PfkdPfX/NhvmFhn9tn/I9tD6bquaDfB0tkj0YBd8qZj6vRiZ7ZQZ2g
+TxKyXoTPFAA7JhCy7BeYrzOTb58f3eO1192HXMLozD1lfP8Yof2mcc0PrggYhlg
tNd8uV9xFx/EypeRYUcxWGNc+Zj+VcCPwJE/lRy0ppx5BmNxNun+i6DqVGSmZOQ9
ALSeR6oufMlq98HcfRCr7SVpWNYLYNH6pWD+ShZYlqF6nACdFq8zapvJ5hvVolrq
LtLbwiNPmgezgUzMbU2LbdJ30YH0WSfF+tHoTKOS4qhgmyuT5/v1X/hzvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyE2JxxWQk8wyNfaD2E9E16PNqCMB8GA1UdIwQY
MBaAFMRc/bmAPOBXFC0Yf4a8T1Zx1+t7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZ6OXVZQTg0RmNVTFJoX2hyeFBWbkhYNjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMjU0YmQtMTQ1Yy00MDE5LTg4YTQt
ZDVhMTc3MTc4ZjRhLzEveEZ6OXVZQTg0RmNVTFJoX2hyeFBWbkhYNjNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iMjU0YmQtMTQ1Yy00MDE5LTg4YTQtZDVhMTc3MTc4ZjRh
LzEveEZ6OXVZQTg0RmNVTFJoX2hyeFBWbkhYNjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU299K+In
NU1ILlIdACcAewY86hiHe3SJKfzNnbEl9J2KE66DwdU5iK3+5w38Mm7I9dxdjnz8
IRvbnvRMBjVpFGIqSLxniAkV241wrqQTHhAq2z5h+ODERK02r7P1dzWgg08iO4Sc
RIUWUt49rrmA4uYJZuFwwds/s9OO/LvcyYzpnhsSyMpAo6Xtyke3c/haRD9apK8l
LWhdtTdV+MPn2m1gjFVyufAgysE12/lEQolKKj/OYVB99kEG8K8ZX1dyE0cC/Jea
8ZtQYcnTki2eOzuCnHDHQd0KoPE9Svn8poqBicyN3Dxg9qYeusic4LnSWCzKjup5
NiV32SHP6fmiLg==
-----END CERTIFICATE-----
Generated at Sat Jul 5 01:36:10 2025 by rpki-client