Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: 0F+aw0+GTA5wZE8PZ4q9oo5wZ0wFv5cVTeLv4MF5Pq0=
Subject key identifier: 5C:A2:51:D6:01:F9:84:6B:8A:4C:46:F1:A9:92:FA:AB:76:FF:F6:85
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 0197488D1449774C7DCF7F8547ACD3080DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1583
Signing time: Sat 07 Jun 2025 04:01:34 +0000
Manifest this update: Sat 07 Jun 2025 04:01:34 +0000
Manifest next update: Sun 08 Jun 2025 04:01:34 +0000
Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=)
2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: JI7uFLRmVK5A4Y0wafIW4ZnC3OtfxIdJko5ZBt3d0jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:14:49:77:4c:7d:cf:7f:85:47:ac:d3:08:0d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Jun 7 04:01:34 2025 GMT
Not After : Jun 8 04:01:34 2025 GMT
Subject: CN=5ca251d601f9846b8a4c46f1a992faab76fff685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:c9:dc:d5:b7:3a:21:96:76:eb:e7:53:e6:
75:76:97:80:f5:dc:e7:0b:94:63:85:d3:78:71:a3:
d1:38:d2:06:db:f1:22:25:e2:9b:c8:f9:2a:b9:02:
45:2d:5e:d3:4a:76:13:ce:c3:b9:32:69:d0:76:94:
a1:fa:48:de:d3:fb:9c:96:e5:2f:05:eb:75:46:e2:
86:0e:28:ba:b3:7b:40:e8:48:c3:d6:e8:bd:10:84:
15:4e:ac:b1:be:cf:bd:cc:a6:30:2e:56:10:51:0c:
d8:64:7b:af:a2:ba:ba:eb:5e:57:d9:46:2b:48:67:
c1:7c:10:a8:8a:2f:32:3b:b2:d9:11:b9:41:71:6e:
23:f3:c3:b1:24:d3:a6:14:e6:75:4d:74:71:80:5a:
6d:de:3a:98:d0:83:18:06:4e:87:fb:04:22:a9:3c:
63:7b:6e:f2:c1:f4:12:95:47:a4:5a:bd:5d:2d:e7:
13:3c:92:a5:ad:47:9d:11:66:84:6d:b3:9b:3e:a9:
21:67:3b:b8:20:fc:39:5f:b0:3a:6b:21:ed:81:a1:
8b:e3:da:49:75:64:55:f2:3e:bc:f5:84:81:f2:e9:
9e:21:0f:44:40:17:32:c8:a1:a5:ec:16:eb:0b:ed:
84:f5:b7:cd:b8:f1:b0:1d:62:26:6a:6b:d1:9d:38:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A2:51:D6:01:F9:84:6B:8A:4C:46:F1:A9:92:FA:AB:76:FF:F6:85
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a3:00:2b:38:7c:70:13:ab:17:06:2a:1e:09:07:d9:8c:99:
de:36:f2:29:5c:0f:54:2b:90:ea:09:8c:56:f1:62:94:50:32:
1c:67:10:35:d7:b1:27:bf:68:64:c6:ea:7d:77:96:61:6a:e6:
20:4e:46:60:58:a7:42:77:dc:03:3d:ae:37:16:75:b1:2c:5a:
86:94:52:85:35:ea:85:85:51:e9:a9:a4:3a:c6:4a:86:70:6d:
74:49:a1:15:06:bb:84:57:cd:1a:60:bf:b2:5f:2b:f5:d7:b0:
99:a4:c8:df:f0:4c:e8:40:34:de:bd:7e:56:83:64:d2:40:4f:
01:fe:fd:d3:b5:8f:71:97:31:fc:44:5c:7d:88:0f:7a:87:aa:
5e:dd:49:53:ff:eb:70:aa:1b:e9:5e:a8:bb:82:94:e6:2c:70:
5c:ad:3d:b3:f8:2d:b3:af:a9:e0:8b:38:6f:24:6b:a0:04:0f:
2c:ab:92:cb:d9:76:73:df:06:a4:70:fa:08:23:ed:19:38:a1:
14:20:61:32:80:f5:a6:20:d4:2c:28:66:40:90:48:f4:10:0c:
4b:8d:69:3b:82:06:0d:4c:68:2d:d0:90:df:06:56:bc:78:c1:
1c:45:44:4c:77:45:60:10:ef:57:5e:16:1d:02:11:64:07:c0:
ef:db:87:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjRRJd0x9z3+FR6zTCA3IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmJlODQyMjQzMjcyN2QzODc0YjE1NjRiYWVhYzhhODA1
NTdiMmQwHhcNMjUwNjA3MDQwMTM0WhcNMjUwNjA4MDQwMTM0WjAzMTEwLwYDVQQD
Eyg1Y2EyNTFkNjAxZjk4NDZiOGE0YzQ2ZjFhOTkyZmFhYjc2ZmZmNjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPjJ3NW3OiGWduvnU+Z1dpeA9dzn
C5RjhdN4caPRONIG2/EiJeKbyPkquQJFLV7TSnYTzsO5MmnQdpSh+kje0/ucluUv
Bet1RuKGDii6s3tA6EjD1ui9EIQVTqyxvs+9zKYwLlYQUQzYZHuvorq6615X2UYr
SGfBfBCoii8yO7LZEblBcW4j88OxJNOmFOZ1TXRxgFpt3jqY0IMYBk6H+wQiqTxj
e27ywfQSlUekWr1dLecTPJKlrUedEWaEbbObPqkhZzu4IPw5X7A6ayHtgaGL49pJ
dWRV8j689YSB8umeIQ9EQBcyyKGl7BbrC+2E9bfNuPGwHWImamvRnTiFXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyiUdYB+YRrikxG8amS+qt2//aFMB8GA1UdIwQY
MBaAFMT76EIkMnJ9OHSxVkuurIqAVXstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmIt
ZWNmMjIxN2Y5ODY3LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmItZWNmMjIxN2Y5ODY3
LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6MAKzh8
cBOrFwYqHgkH2YyZ3jbyKVwPVCuQ6gmMVvFilFAyHGcQNdexJ79oZMbqfXeWYWrm
IE5GYFinQnfcAz2uNxZ1sSxahpRShTXqhYVR6amkOsZKhnBtdEmhFQa7hFfNGmC/
sl8r9dewmaTI3/BM6EA03r1+VoNk0kBPAf7907WPcZcx/ERcfYgPeoeqXt1JU//r
cKob6V6ou4KU5ixwXK09s/gts6+p4Is4byRroAQPLKuSy9l2c98GpHD6CCPtGTih
FCBhMoD1piDULChmQJBI9BAMS41pO4IGDUxoLdCQ3wZWvHjBHEVETHdFYBDvV14W
HQIRZAfA79uHGA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:35 2025 by rpki-client