Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
File: xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json)
Hash identifier: lDlYbKyG6Kq+dgMxJTCobLNQuEayF2kq8H6sXhNJW/Y=
Subject key identifier: F0:96:51:3A:91:1A:5C:E1:4C:75:95:CE:80:4A:C6:A9:D2:A6:3E:2A
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial: 01974AE83C7864C64400B2D877B820ED6B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 15:00:23 +0000
Manifest this update: Sat 07 Jun 2025 15:00:23 +0000
Manifest next update: Sun 08 Jun 2025 15:00:23 +0000
Files and hashes: 1: 8lcvOAYawA8m44njSriAA46ohqM.roa (hash: dgK9JD6WHGLDC+yE4xMsU1SgCBsr9GlbtGy0j7WmX9Y=)
2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: e8jhVfEZKNGvnBQiVYSb8B7xs3jB61rqL01FbgnM2KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:3c:78:64:c6:44:00:b2:d8:77:b8:20:ed:6b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Validity
Not Before: Jun 7 15:00:23 2025 GMT
Not After : Jun 8 15:00:23 2025 GMT
Subject: CN=f096513a911a5ce14c7595ce804ac6a9d2a63e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4a:88:32:b3:b9:43:d7:01:04:6b:a8:e7:ff:
bf:44:ae:8e:e7:9a:9a:48:a6:fc:6e:c5:88:24:7a:
fe:d7:ef:49:ec:e9:b5:46:d4:6b:ca:d7:1e:63:0d:
8f:3c:02:76:ec:3a:1b:56:ca:14:53:49:b4:89:dd:
ab:a1:33:e8:cb:f6:86:6e:da:1c:34:c0:99:d1:bb:
f2:d7:4c:a0:cf:f9:df:3a:5f:cf:ea:5b:d5:2d:36:
c1:80:1a:47:1b:c0:50:54:c1:0b:d2:71:c5:9b:d1:
6b:4c:ea:db:30:ad:6e:51:e1:4c:87:84:ed:77:0f:
9a:3d:c1:64:0a:39:cb:fd:b1:df:47:3b:17:f2:b8:
20:57:bb:ae:be:c0:ce:01:68:59:5d:4b:06:43:91:
6b:c7:f5:08:02:4e:ec:dc:8a:e9:00:a9:4c:e6:74:
20:ea:95:25:fd:81:30:04:fb:50:b5:4b:f0:e4:76:
97:59:d8:6d:6c:65:15:7b:45:94:92:70:89:c1:aa:
ec:b2:6a:dc:3f:32:30:ee:5f:72:ec:e8:e3:aa:ad:
7b:81:50:22:ea:ca:eb:8b:33:84:91:ca:dc:f5:59:
83:3a:0a:21:46:6e:68:80:84:7d:52:2c:58:d1:13:
2e:20:e9:9d:88:36:3a:9a:2c:16:10:8d:03:2a:42:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:96:51:3A:91:1A:5C:E1:4C:75:95:CE:80:4A:C6:A9:D2:A6:3E:2A
X509v3 Authority Key Identifier:
keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c8:dd:35:3b:b6:df:b0:f1:ae:22:d1:cd:43:5c:34:aa:36:
8b:10:1f:9d:c6:6b:25:86:7a:bd:ae:3c:c9:f8:d7:ab:8a:a0:
16:02:56:e9:96:06:6d:92:1c:ac:6c:d6:88:b6:0a:bf:0f:75:
a2:ab:df:ca:2b:d0:4a:26:ae:d2:4e:97:ce:0e:6f:a7:68:88:
7a:b0:ec:5c:2f:44:3f:10:55:3d:a2:e4:3f:15:ea:62:f5:df:
d2:9b:38:c8:37:c7:7b:63:44:ee:0e:db:a9:05:98:dc:52:74:
88:93:fc:70:41:27:40:fe:71:28:72:41:df:26:7c:b2:14:a1:
22:36:0b:72:ff:c3:27:70:5e:60:e0:68:da:b3:95:3d:77:76:
3e:da:f0:85:c0:55:98:97:b3:7c:b3:79:0b:40:b6:2f:1d:8a:
45:58:a8:74:ef:09:6f:90:66:1c:d8:65:f7:0d:54:1c:d6:df:
30:f4:57:74:f8:fe:a5:9c:59:c7:ba:65:ef:4d:18:c6:70:93:
97:68:06:08:b0:2a:02:b1:a5:76:81:ae:29:65:be:e6:90:74:
38:70:85:e8:db:e4:8a:0c:4b:81:5f:a1:b3:81:00:c6:63:5a:
0d:80:ff:cd:14:65:29:a1:fb:d9:15:d7:e2:aa:03:74:1d:ed:
c7:cb:e4:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6Dx4ZMZEALLYd7gg7WtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MWVmMGFkNDNjN2I4ZTI2YzE3NWZkYzFmMTY5NmQwMDgx
ZGM0ZGEwHhcNMjUwNjA3MTUwMDIzWhcNMjUwNjA4MTUwMDIzWjAzMTEwLwYDVQQD
EyhmMDk2NTEzYTkxMWE1Y2UxNGM3NTk1Y2U4MDRhYzZhOWQyYTYzZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0qIMrO5Q9cBBGuo5/+/RK6O55qa
SKb8bsWIJHr+1+9J7Om1RtRrytceYw2PPAJ27DobVsoUU0m0id2roTPoy/aGbtoc
NMCZ0bvy10ygz/nfOl/P6lvVLTbBgBpHG8BQVMEL0nHFm9FrTOrbMK1uUeFMh4Tt
dw+aPcFkCjnL/bHfRzsX8rggV7uuvsDOAWhZXUsGQ5Frx/UIAk7s3IrpAKlM5nQg
6pUl/YEwBPtQtUvw5HaXWdhtbGUVe0WUknCJwarssmrcPzIw7l9y7Ojjqq17gVAi
6srrizOEkcrc9VmDOgohRm5ogIR9UixY0RMuIOmdiDY6miwWEI0DKkKVwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCWUTqRGlzhTHWVzoBKxqnSpj4qMB8GA1UdIwQY
MBaAFMce8K1Dx7jibBdf3B8WltAIHcTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHg3d3JVUEh1T0pzRjFfY0h4YVcwQWdkeE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMWMzYWEtYTJhNy00MmU3LTgwNDYt
MjI0M2UzNjk4M2UzLzEveHg3d3JVUEh1T0pzRjFfY0h4YVcwQWdkeE5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wMWMzYWEtYTJhNy00MmU3LTgwNDYtMjI0M2UzNjk4M2Uz
LzEveHg3d3JVUEh1T0pzRjFfY0h4YVcwQWdkeE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsjdNTu2
37DxriLRzUNcNKo2ixAfncZrJYZ6va48yfjXq4qgFgJW6ZYGbZIcrGzWiLYKvw91
oqvfyivQSiau0k6Xzg5vp2iIerDsXC9EPxBVPaLkPxXqYvXf0ps4yDfHe2NE7g7b
qQWY3FJ0iJP8cEEnQP5xKHJB3yZ8shShIjYLcv/DJ3BeYOBo2rOVPXd2PtrwhcBV
mJezfLN5C0C2Lx2KRViodO8Jb5BmHNhl9w1UHNbfMPRXdPj+pZxZx7pl700YxnCT
l2gGCLAqArGldoGuKWW+5pB0OHCF6NvkigxLgV+hs4EAxmNaDYD/zRRlKaH72RXX
4qoDdB3tx8vkNg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:41 2025 by rpki-client