Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: ZCSP+o32Jwtr78EHYXF930jmyfLno/9NBuX7NfpmRds=
Subject key identifier: 1B:08:E9:35:AC:7B:7A:69:D7:01:1E:66:A7:E3:3B:BB:3D:71:EE:70
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 0199228D12EB31A28677D9D1788CB84AB0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 15F4
Signing time: Sun 07 Sep 2025 05:01:34 +0000
Manifest this update: Sun 07 Sep 2025 05:01:34 +0000
Manifest next update: Mon 08 Sep 2025 05:01:34 +0000
Files and hashes: 1: Fv4x63T3ojikq-5UgMnJdELk8sc.roa (hash: aEkLecdA0DcIECx9dg4mdlZcrGEzKCgWB2xD42hEp5g=)
2: TMkhKaPUJB4LI1mMmf3sccZhBEE.roa (hash: SQD8a+jFccoVxuuqM1aTazg815YSaiMZNjfARcco9Jw=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: AqPtfnssNVGa4naM9mj/fatrPLyUSjzViM6eSv/SW5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:12:eb:31:a2:86:77:d9:d1:78:8c:b8:4a:b0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Sep 7 05:01:34 2025 GMT
Not After : Sep 8 05:01:34 2025 GMT
Subject: CN=1b08e935ac7b7a69d7011e66a7e33bbb3d71ee70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a3:fd:e4:13:da:a0:33:45:44:cd:4f:28:ae:
43:55:72:39:c7:e5:e6:49:26:04:87:07:c2:9a:7a:
b9:b8:10:b4:b2:f8:c6:1d:7d:3a:3d:75:ca:de:a6:
3f:e1:02:4f:b6:49:b6:88:4e:f4:fe:b3:3e:94:69:
73:d3:8f:2c:26:e7:a9:18:9c:c4:95:d4:bc:b9:3a:
ad:54:34:32:c8:c5:4f:a7:cc:a8:a6:09:0d:d9:8a:
ef:10:bf:fd:74:53:ff:97:57:3c:02:6d:14:de:22:
1a:3e:f2:da:47:e5:67:07:dc:2b:f1:e3:d2:2c:b4:
8b:7b:cf:0d:fa:17:4a:43:f1:60:fb:00:6e:8a:1f:
ee:6a:89:27:73:52:8a:cf:38:06:4a:c7:ae:0b:a2:
3f:61:ea:7d:e0:c9:4a:8c:c3:b3:23:97:04:5b:6f:
3d:7c:50:bf:0f:fe:77:9d:24:8f:b6:9b:78:3d:9c:
33:b6:02:38:c9:65:31:ee:88:96:b0:e0:d0:8a:7f:
1b:7a:a9:47:a4:4b:14:7d:62:1f:4d:ce:52:e1:78:
1e:6d:bc:88:29:9a:38:56:da:6f:12:22:a9:5e:32:
e6:c2:94:5c:a9:9b:35:81:9c:0e:3f:8a:38:9a:93:
4b:94:73:da:d9:0a:63:60:62:4b:28:46:21:cd:50:
31:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:08:E9:35:AC:7B:7A:69:D7:01:1E:66:A7:E3:3B:BB:3D:71:EE:70
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:df:30:62:ea:6c:63:4e:c0:dd:af:99:3e:03:66:77:9f:ae:
06:26:53:c5:52:c0:ff:37:6e:89:6b:c7:06:1e:7d:ca:7e:59:
4e:27:63:6b:a0:e9:23:dc:a2:55:2b:cb:9c:fe:b5:28:19:57:
5e:f7:fd:f6:27:15:90:97:95:f7:01:da:56:26:38:a7:8e:7b:
b9:37:fd:64:ca:f3:7c:92:b3:9d:2d:f6:3d:f6:7b:f7:65:20:
ac:3c:e2:2a:38:4f:77:b4:a1:4c:81:8d:59:20:72:42:0f:09:
e3:82:78:bc:db:de:53:d7:ef:3e:40:d4:21:97:55:6d:f3:39:
3c:eb:2f:eb:86:8a:97:f7:a6:ae:62:e0:5f:a8:2d:05:a8:d0:
bf:4c:38:3f:59:03:7b:ce:dd:64:2f:55:63:e6:5b:43:ec:3e:
34:6e:43:6e:1d:9e:d8:84:14:f6:f5:cb:7f:b0:36:19:8f:35:
16:3b:a7:2a:91:88:88:c3:8b:6d:a9:e5:9b:3b:c3:3d:76:4c:
6a:5b:a9:7c:92:95:c5:90:3c:26:80:a5:06:e6:35:a1:6c:54:
21:b1:e3:1c:96:4d:11:2f:a9:6d:a0:4e:5b:6a:6d:d9:7c:13:
e8:2d:a2:6c:82:cb:79:79:cd:32:76:63:a8:2b:3e:cd:57:3c:
85:63:27:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijRLrMaKGd9nReIy4SrC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTc5OWZmNDMzNWI3YjFhZTcxODhlZGZhNTNmZDdlMjEz
ZWIyMTYwHhcNMjUwOTA3MDUwMTM0WhcNMjUwOTA4MDUwMTM0WjAzMTEwLwYDVQQD
EygxYjA4ZTkzNWFjN2I3YTY5ZDcwMTFlNjZhN2UzM2JiYjNkNzFlZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aP95BPaoDNFRM1PKK5DVXI5x+Xm
SSYEhwfCmnq5uBC0svjGHX06PXXK3qY/4QJPtkm2iE70/rM+lGlz048sJuepGJzE
ldS8uTqtVDQyyMVPp8yopgkN2YrvEL/9dFP/l1c8Am0U3iIaPvLaR+VnB9wr8ePS
LLSLe88N+hdKQ/Fg+wBuih/uaoknc1KKzzgGSseuC6I/Yep94MlKjMOzI5cEW289
fFC/D/53nSSPtpt4PZwztgI4yWUx7oiWsODQin8beqlHpEsUfWIfTc5S4XgebbyI
KZo4VtpvEiKpXjLmwpRcqZs1gZwOP4o4mpNLlHPa2QpjYGJLKEYhzVAxLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsI6TWse3pp1wEeZqfjO7s9ce5wMB8GA1UdIwQY
MBaAFMdXmf9DNbexrnGI7fpT/X4hPrIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQt
MzZlZjdhZWViZTNiLzEveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQtMzZlZjdhZWViZTNi
LzEveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIt8wYups
Y07A3a+ZPgNmd5+uBiZTxVLA/zduiWvHBh59yn5ZTidja6DpI9yiVSvLnP61KBlX
Xvf99icVkJeV9wHaViY4p457uTf9ZMrzfJKznS32PfZ792UgrDziKjhPd7ShTIGN
WSByQg8J44J4vNveU9fvPkDUIZdVbfM5POsv64aKl/emrmLgX6gtBajQv0w4P1kD
e87dZC9VY+ZbQ+w+NG5Dbh2e2IQU9vXLf7A2GY81FjunKpGIiMOLbanlmzvDPXZM
alupfJKVxZA8JoClBuY1oWxUIbHjHJZNES+pbaBOW2pt2XwT6C2ibILLeXnNMnZj
qCs+zVc8hWMnQQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:33 2025 by rpki-client