Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
File: x5p8pEAn0uWtOJ8WntFZNteFEWY.mft (raw, json)
Hash identifier: P6UosXQ9IYm7znHHd1/yUGv6h8ITKUceY+knMSmwd4o=
Subject key identifier: 4D:CB:CE:1A:49:27:7F:5B:2B:F0:2A:1F:20:C3:8D:FD:66:E7:CE:91
Authority key identifier: C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
Certificate issuer: /CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Certificate serial: 01975AC96AB65DAA46D424A87012B0C0ACED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
Manifest number: 0BAD
Signing time: Tue 10 Jun 2025 17:00:38 +0000
Manifest this update: Tue 10 Jun 2025 17:00:38 +0000
Manifest next update: Wed 11 Jun 2025 17:00:38 +0000
Files and hashes: 1: abpRqtiQtQaZu4MHu087BH1phaI.roa (hash: Oq4Z5f20QFJa82wcUjWOln7tJ0DH2NRa/Bs4WGmPNhY=)
2: x5p8pEAn0uWtOJ8WntFZNteFEWY.crl (hash: j3zJUe9MjKgB+6zDNI3djP/gvE5UsHIMHnWHuuRZCuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:6a:b6:5d:aa:46:d4:24:a8:70:12:b0:c0:ac:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Validity
Not Before: Jun 10 17:00:38 2025 GMT
Not After : Jun 11 17:00:38 2025 GMT
Subject: CN=4dcbce1a49277f5b2bf02a1f20c38dfd66e7ce91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:a2:61:73:1b:0e:58:29:df:5a:f8:94:c1:
58:3d:74:c6:e2:ef:e8:b2:b4:8c:72:e6:d1:35:83:
95:7c:65:c6:40:03:e3:18:28:5d:82:53:17:61:a7:
7a:cd:86:e3:6f:a7:1a:1f:66:68:cc:9d:11:1f:e9:
12:d3:18:ec:3e:ef:ac:db:2c:f9:e0:6f:4b:f1:6e:
cf:a1:e3:54:ae:09:77:3b:38:89:df:03:96:8e:9e:
cd:23:a9:de:91:fd:72:76:e7:c1:41:75:fa:a6:b5:
d5:76:81:8b:9f:2f:f3:29:bd:d1:f8:28:5e:bd:f9:
af:91:d9:81:67:b6:90:45:11:3b:50:0b:87:03:bd:
f0:25:2f:4a:44:af:23:e9:c3:6e:28:f4:a3:bf:cd:
f1:f5:8e:3f:5c:3c:79:cb:72:9e:60:69:ec:d0:04:
55:ab:73:69:0a:e0:fd:de:ba:a9:86:9f:52:d4:16:
00:4c:8a:e2:31:26:44:c0:04:fd:de:0a:fb:86:61:
60:bc:ec:97:ad:09:2d:a6:09:71:bc:43:71:0b:28:
c9:65:f5:70:25:a9:3b:2a:b7:7d:c2:e3:b5:02:c6:
09:f9:98:aa:5d:69:f7:31:54:8d:df:7e:fd:0b:79:
9c:b2:1a:05:5e:28:e5:04:cf:08:fb:c0:80:84:3b:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CB:CE:1A:49:27:7F:5B:2B:F0:2A:1F:20:C3:8D:FD:66:E7:CE:91
X509v3 Authority Key Identifier:
keyid:C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:89:a1:a3:7e:43:e7:0c:ca:61:2a:d4:d5:87:bd:98:3a:74:
10:b3:e0:da:28:a7:af:46:b0:ad:88:42:eb:2a:7e:6b:96:30:
25:30:11:b1:d7:2e:a4:53:29:4a:a4:e2:d0:ce:50:8d:7f:04:
96:6e:ab:fd:de:f0:be:98:28:5f:97:1a:02:89:ea:fa:17:fc:
88:7b:6e:44:e1:db:c1:17:d9:b2:49:2a:9d:09:5c:27:8c:b1:
cf:c8:d7:56:39:30:de:3f:ba:59:b9:39:a6:dd:ea:df:b1:6d:
8f:6a:54:e8:60:c2:b8:6c:1b:98:fe:75:64:d5:a2:7f:0a:71:
52:d2:19:72:c4:0d:b3:c3:1d:37:98:38:ef:a2:9a:a3:dd:63:
90:e6:99:27:ab:d5:c1:2d:63:ed:9f:85:7a:18:23:fd:eb:00:
87:35:5d:c9:a0:a9:c8:88:f7:3d:74:b5:a4:db:25:08:86:21:
ee:c6:ce:8a:d0:52:67:b4:c0:da:33:f8:70:97:0a:dd:30:f1:
85:01:49:3f:c4:e2:8b:6c:c8:72:00:d7:9a:03:f2:d0:96:50:
cb:db:ae:6e:53:63:d9:c0:54:21:5c:57:27:49:f5:60:3f:11:
ae:e3:c3:2f:8a:f4:fb:f3:5a:2e:08:b6:8a:31:69:46:53:9f:
f0:bf:13:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdayWq2XapG1CSocBKwwKztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3OWE3Y2E0NDAyN2QyZTVhZDM4OWYxNjllZDE1OTM2ZDc4
NTExNjYwHhcNMjUwNjEwMTcwMDM4WhcNMjUwNjExMTcwMDM4WjAzMTEwLwYDVQQD
Eyg0ZGNiY2UxYTQ5Mjc3ZjViMmJmMDJhMWYyMGMzOGRmZDY2ZTdjZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUSiYXMbDlgp31r4lMFYPXTG4u/o
srSMcubRNYOVfGXGQAPjGChdglMXYad6zYbjb6caH2ZozJ0RH+kS0xjsPu+s2yz5
4G9L8W7PoeNUrgl3OziJ3wOWjp7NI6nekf1ydufBQXX6prXVdoGLny/zKb3R+Che
vfmvkdmBZ7aQRRE7UAuHA73wJS9KRK8j6cNuKPSjv83x9Y4/XDx5y3KeYGns0ARV
q3NpCuD93rqphp9S1BYATIriMSZEwAT93gr7hmFgvOyXrQktpglxvENxCyjJZfVw
Jak7Krd9wuO1AsYJ+ZiqXWn3MVSN3379C3mcshoFXijlBM8I+8CAhDvHhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3LzhpJJ39bK/AqHyDDjf1m586RMB8GA1UdIwQY
MBaAFMeafKRAJ9LlrTifFp7RWTbXhRFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDVwOHBFQW4wdVd0T0o4V250RlpOdGVGRVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9lNTMzMTMtYmE2YS00ZTgxLWJhN2It
NjcxNWY1OGNlZWJmLzEveDVwOHBFQW4wdVd0T0o4V250RlpOdGVGRVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9lNTMzMTMtYmE2YS00ZTgxLWJhN2ItNjcxNWY1OGNlZWJm
LzEveDVwOHBFQW4wdVd0T0o4V250RlpOdGVGRVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPomho35D
5wzKYSrU1Ye9mDp0ELPg2iinr0awrYhC6yp+a5YwJTARsdcupFMpSqTi0M5QjX8E
lm6r/d7wvpgoX5caAonq+hf8iHtuROHbwRfZskkqnQlcJ4yxz8jXVjkw3j+6Wbk5
pt3q37Ftj2pU6GDCuGwbmP51ZNWifwpxUtIZcsQNs8MdN5g476Kao91jkOaZJ6vV
wS1j7Z+Fehgj/esAhzVdyaCpyIj3PXS1pNslCIYh7sbOitBSZ7TA2jP4cJcK3TDx
hQFJP8Tii2zIcgDXmgPy0JZQy9uublNj2cBUIVxXJ0n1YD8RruPDL4r0+/NaLgi2
ijFpRlOf8L8TOQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 02:48:58 2025 by rpki-client