Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier: eO8/aOLy78PSZGO7+4pJ5JlLsCLle4M9ZHl4jaUYLro=
Subject key identifier: 18:7B:09:AB:0D:D7:36:82:28:AF:27:E1:C6:52:68:8E:1E:5F:42:45
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 0197CACC903062386D16846EE0685B4782AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 11:01:33 +0000
Manifest this update: Wed 02 Jul 2025 11:01:33 +0000
Manifest next update: Thu 03 Jul 2025 11:01:33 +0000
Files and hashes: 1: XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa (hash: gRwlESvwtxXSn0EGN2mej0K6SBjpUL0fcU4oPomp9Tg=)
2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: LDSQU5XeiZUKcKDjCIfTiNf318X4g0W/ukUWTvINUZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:90:30:62:38:6d:16:84:6e:e0:68:5b:47:82:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Jul 2 11:01:33 2025 GMT
Not After : Jul 3 11:01:33 2025 GMT
Subject: CN=187b09ab0dd7368228af27e1c652688e1e5f4245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:44:81:30:f3:ce:52:f7:59:80:7f:d1:bf:
d6:d1:4a:44:04:0c:87:ce:84:2a:50:ae:58:a1:bf:
c1:e5:26:d2:74:a5:6c:81:c5:3b:5f:97:76:69:1f:
a8:18:ab:2e:33:bb:59:5a:ba:99:d5:5e:82:bd:e9:
08:cc:7b:42:b4:c6:d9:24:77:49:e2:02:a3:ab:fa:
3c:7a:2b:3b:ff:97:83:a9:65:ac:5c:a5:47:ff:ed:
64:26:ca:a7:9d:5d:e4:5b:6d:bf:d8:12:b7:c7:f9:
de:fb:4b:c8:5b:46:ac:e8:c4:ff:29:c9:bd:96:e1:
58:5f:c4:6b:04:d2:88:cb:ae:0c:eb:44:0b:c9:c9:
e3:1e:fe:26:63:11:2f:dd:24:70:42:7f:03:75:8e:
4c:87:9a:13:c4:95:71:1a:8c:f7:6c:8f:19:75:18:
f7:bd:87:36:01:32:6b:39:e4:1a:0f:8f:cd:a2:61:
8a:38:6d:2e:3b:bf:a9:86:f4:3c:07:6d:1b:6c:47:
c8:ab:6a:c1:df:63:12:e5:3f:b9:06:f8:b2:d6:22:
8a:80:6e:56:53:44:bb:ae:33:2c:d5:10:ed:ec:d8:
be:d5:56:8f:f4:88:05:0e:03:ce:3a:b1:a6:e5:b5:
8e:f9:0e:a3:2d:cb:8f:61:93:b1:66:c9:f6:e5:85:
04:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7B:09:AB:0D:D7:36:82:28:AF:27:E1:C6:52:68:8E:1E:5F:42:45
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:76:46:af:b6:4a:0c:03:22:ae:6b:99:52:62:c3:dd:f4:d6:
f0:4b:34:7a:d8:94:1a:75:2f:df:99:e8:e5:d8:2b:11:97:c0:
84:79:23:bd:9d:74:eb:bf:63:e8:44:83:9d:f0:44:63:06:63:
1b:47:8e:5f:29:fa:f1:0a:3d:8b:30:b4:a7:76:ae:18:45:c8:
b8:31:5d:63:bc:4c:d2:c3:4e:ae:a3:40:89:4a:0b:c1:95:8a:
2c:8f:0d:7b:90:c2:8a:a0:1f:dc:d0:e3:01:89:6d:c8:38:45:
99:65:4d:39:d5:e7:f4:fa:5b:22:70:7f:27:74:0a:06:4f:e1:
7f:3b:48:43:69:22:db:c6:9a:fd:9f:da:86:6e:66:cc:fb:3a:
c5:6c:84:30:b2:38:10:55:e8:97:15:f9:3e:36:b0:ed:7a:1c:
39:5d:05:27:21:86:70:a3:96:79:3b:9b:c7:90:e2:7d:a8:6c:
fe:7a:39:f6:e3:34:80:44:db:47:51:58:7a:38:82:20:9f:27:
d8:6c:2e:6d:1c:90:5a:d0:75:8b:9f:7d:dd:b4:cb:2a:c9:c2:
c8:bd:a2:2f:1f:88:54:94:59:7b:66:4f:35:a5:cd:65:ff:77:
2b:d5:d5:81:6d:70:eb:92:e5:a9:07:22:dd:b7:4b:7a:6b:38:
45:24:a0:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKzJAwYjhtFoRu4GhbR4KqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzQzNWY0YmUyYzU0M2JmMzQ4M2UzNzdmODAzMTRkMjgy
MzAxODQwHhcNMjUwNzAyMTEwMTMzWhcNMjUwNzAzMTEwMTMzWjAzMTEwLwYDVQQD
EygxODdiMDlhYjBkZDczNjgyMjhhZjI3ZTFjNjUyNjg4ZTFlNWY0MjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EVEgTDzzlL3WYB/0b/W0UpEBAyH
zoQqUK5Yob/B5SbSdKVsgcU7X5d2aR+oGKsuM7tZWrqZ1V6CvekIzHtCtMbZJHdJ
4gKjq/o8eis7/5eDqWWsXKVH/+1kJsqnnV3kW22/2BK3x/ne+0vIW0as6MT/Kcm9
luFYX8RrBNKIy64M60QLycnjHv4mYxEv3SRwQn8DdY5Mh5oTxJVxGoz3bI8ZdRj3
vYc2ATJrOeQaD4/NomGKOG0uO7+phvQ8B20bbEfIq2rB32MS5T+5Bviy1iKKgG5W
U0S7rjMs1RDt7Ni+1VaP9IgFDgPOOrGm5bWO+Q6jLcuPYZOxZsn25YUEhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBh7CasN1zaCKK8n4cZSaI4eX0JFMB8GA1UdIwQY
MBaAFMU0NfS+LFQ780g+N3+AMU0oIwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWIt
OWY0ZmU0Y2QwMjQ2LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWItOWY0ZmU0Y2QwMjQ2
LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXZGr7ZK
DAMirmuZUmLD3fTW8Es0etiUGnUv35no5dgrEZfAhHkjvZ10679j6ESDnfBEYwZj
G0eOXyn68Qo9izC0p3auGEXIuDFdY7xM0sNOrqNAiUoLwZWKLI8Ne5DCiqAf3NDj
AYltyDhFmWVNOdXn9PpbInB/J3QKBk/hfztIQ2ki28aa/Z/ahm5mzPs6xWyEMLI4
EFXolxX5Pjaw7XocOV0FJyGGcKOWeTubx5Difahs/no59uM0gETbR1FYejiCIJ8n
2GwubRyQWtB1i5993bTLKsnCyL2iLx+IVJRZe2ZPNaXNZf93K9XVgW1w65LlqQci
3bdLems4RSSgZg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:42:27 2025 by rpki-client