Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier: NF6PY464jy8/2jfB/Szp4BJJgtubKMGBFdRmWc1jgcw=
Subject key identifier: 9B:39:25:96:DC:39:C2:A7:D3:BA:9C:95:D5:54:59:79:F8:2D:0F:20
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 0197474284606E101E111ABA3291F8B82557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number: 1581
Signing time: Fri 06 Jun 2025 22:00:30 +0000
Manifest this update: Fri 06 Jun 2025 22:00:30 +0000
Manifest next update: Sat 07 Jun 2025 22:00:30 +0000
Files and hashes: 1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=)
2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=)
3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: Ce0V03seHiI+Dhkkq+OfD5z7I0hxeBFrSRPsXw4r1Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:84:60:6e:10:1e:11:1a:ba:32:91:f8:b8:25:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Jun 6 22:00:30 2025 GMT
Not After : Jun 7 22:00:30 2025 GMT
Subject: CN=9b392596dc39c2a7d3ba9c95d5545979f82d0f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:42:15:f4:f5:77:40:de:d5:a4:08:f0:15:22:
7f:3b:43:62:ab:8a:16:67:96:f9:7c:22:7d:49:ef:
82:ba:df:d6:6e:47:c1:93:5a:00:be:b9:9e:34:c5:
32:19:d1:af:de:b5:df:34:39:8d:94:75:36:51:40:
54:30:8f:90:aa:2b:85:d4:1c:1a:4d:83:39:10:64:
5a:e9:7a:b9:01:33:cf:e5:77:03:1c:4a:92:46:5a:
1b:e4:8e:d3:9b:fa:f2:3b:6d:06:f3:e7:74:77:b0:
dc:9c:22:19:56:94:9b:92:13:1e:0b:30:f7:20:1a:
6f:6f:3b:81:30:49:4f:e6:7b:10:db:0d:eb:3b:fe:
2a:a9:ac:12:b5:03:da:f5:4e:2b:20:bc:df:06:81:
a6:6b:76:d8:20:88:f2:5a:b4:d4:cb:27:89:de:7e:
5d:da:91:41:03:e0:30:d5:de:8b:99:6f:fc:af:3e:
45:94:07:19:2e:85:85:14:d0:bc:41:ba:da:6e:48:
64:08:9a:a8:05:d2:b3:ac:47:f7:ce:68:e3:12:73:
21:bb:9b:f1:81:bf:e5:de:75:e0:50:77:2c:9f:4d:
0b:47:b0:83:53:74:f0:a8:6a:f8:f5:4a:88:ca:75:
d6:f3:48:15:5b:35:6c:e3:83:04:43:87:ee:4a:75:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:39:25:96:DC:39:C2:A7:D3:BA:9C:95:D5:54:59:79:F8:2D:0F:20
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1f:fd:8f:fc:34:9a:e0:47:99:f8:1b:69:64:4e:48:04:24:
bb:a9:04:b9:03:57:0d:a4:3a:4c:37:82:bc:e8:ec:a6:dc:10:
6f:bd:cd:95:55:e8:fd:7f:84:c0:45:fc:18:9d:9c:47:60:75:
f1:5c:be:25:61:89:6c:74:53:e0:06:d8:ed:1f:36:89:17:c2:
bc:9d:e5:d7:e0:76:27:08:92:b1:bc:f2:7d:cc:cb:33:f1:90:
64:d9:6b:94:65:b1:04:6e:d7:f8:27:b9:52:36:66:80:62:35:
5e:97:09:86:29:0a:4d:b3:47:41:c9:5d:aa:e7:05:5a:22:1f:
8b:b5:63:28:69:69:e0:4d:ff:d7:0a:97:14:bf:f0:32:da:a2:
8d:ca:2c:15:b5:89:15:7f:1e:07:f3:18:8d:eb:59:f1:ae:1f:
e9:28:61:f6:46:f4:35:90:04:4c:dd:22:c5:b5:77:bf:ac:63:
3d:c2:5c:5f:af:63:7d:f0:92:08:11:85:5c:87:f1:3b:ee:b0:
38:f6:e1:9c:97:16:16:2c:77:1e:26:d9:0a:64:52:a0:ac:48:
09:c8:fb:ce:d4:88:30:36:e6:34:f5:7d:f3:62:c4:30:f7:8d:
27:1d:05:65:c6:f5:66:24:bd:df:a4:05:e6:a5:39:44:1d:46:
e9:56:86:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQoRgbhAeERq6MpH4uCVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZWJhMWZkZjZjNGRlMTkyYzFkM2VkZjhhODAwY2E1OTdm
OTdkNjgwHhcNMjUwNjA2MjIwMDMwWhcNMjUwNjA3MjIwMDMwWjAzMTEwLwYDVQQD
Eyg5YjM5MjU5NmRjMzljMmE3ZDNiYTljOTVkNTU0NTk3OWY4MmQwZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUIV9PV3QN7VpAjwFSJ/O0Niq4oW
Z5b5fCJ9Se+Cut/WbkfBk1oAvrmeNMUyGdGv3rXfNDmNlHU2UUBUMI+QqiuF1Bwa
TYM5EGRa6Xq5ATPP5XcDHEqSRlob5I7Tm/ryO20G8+d0d7DcnCIZVpSbkhMeCzD3
IBpvbzuBMElP5nsQ2w3rO/4qqawStQPa9U4rILzfBoGma3bYIIjyWrTUyyeJ3n5d
2pFBA+Aw1d6LmW/8rz5FlAcZLoWFFNC8QbrabkhkCJqoBdKzrEf3zmjjEnMhu5vx
gb/l3nXgUHcsn00LR7CDU3TwqGr49UqIynXW80gVWzVs44MEQ4fuSnU9MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJs5JZbcOcKn07qcldVUWXn4LQ8gMB8GA1UdIwQY
MBaAFMTrof32xN4ZLB0+34qADKWX+X1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYTYxNTktMWRjNi00YTA5LTg0NGYt
NTEyODU2MGRiZGZjLzEveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xYTYxNTktMWRjNi00YTA5LTg0NGYtNTEyODU2MGRiZGZj
LzEveE91aF9mYkUzaGtzSFQ3ZmlvQU1wWmY1ZldnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArR/9j/w0
muBHmfgbaWROSAQku6kEuQNXDaQ6TDeCvOjsptwQb73NlVXo/X+EwEX8GJ2cR2B1
8Vy+JWGJbHRT4AbY7R82iRfCvJ3l1+B2JwiSsbzyfczLM/GQZNlrlGWxBG7X+Ce5
UjZmgGI1XpcJhikKTbNHQcldqucFWiIfi7VjKGlp4E3/1wqXFL/wMtqijcosFbWJ
FX8eB/MYjetZ8a4f6Shh9kb0NZAETN0ixbV3v6xjPcJcX69jffCSCBGFXIfxO+6w
OPbhnJcWFix3HibZCmRSoKxICcj7ztSIMDbmNPV982LEMPeNJx0FZcb1ZiS936QF
5qU5RB1G6VaG8g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:57 2025 by rpki-client