Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: aQ7U+ZDeNbUAVWmO/gRlnTU1DtU+BBQTM/iKEa46f0c=
Subject key identifier: 25:A0:32:E4:BD:36:25:AC:8F:41:B9:06:34:68:84:66:F0:E8:FA:9E
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 019738E1E9AE71B4583B10DE507033B08C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 0F67
Signing time: Wed 04 Jun 2025 03:00:18 +0000
Manifest this update: Wed 04 Jun 2025 03:00:18 +0000
Manifest next update: Thu 05 Jun 2025 03:00:18 +0000
Files and hashes: 1: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
2: NaWY6gql3wBz8Pil2M7Di_n9FnY.roa (hash: 4GSKhVAf5u4AXVlhwrS0PWR/1TvZopKaziCJkOtjX+E=)
3: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
4: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
5: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
6: gDrJ_yW-_CzbWfpTMme-odFmJlw.roa (hash: gy5Z4mzDyCMzzZeJUBNPlOeBnObygQh/RNlUGtI+BkA=)
7: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
8: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: XgobqvoXe42eY/tzFfGfLXcp/9CJrUxMzeWJsGC/o/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:e1:e9:ae:71:b4:58:3b:10:de:50:70:33:b0:8c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jun 4 03:00:18 2025 GMT
Not After : Jun 5 03:00:18 2025 GMT
Subject: CN=25a032e4bd3625ac8f41b90634688466f0e8fa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:62:87:0b:05:44:e5:ce:4e:aa:64:87:c4:
ae:96:9f:b6:21:65:31:e8:5b:0d:8e:9b:c0:69:f2:
22:7c:e8:cb:bf:af:55:c6:dd:aa:7e:ad:47:32:59:
fe:7e:1f:2f:2d:ba:13:83:28:02:3b:04:4f:70:25:
29:0c:12:fc:43:fc:4c:09:56:34:62:91:92:7a:a4:
10:97:2d:17:85:43:c0:20:08:bd:22:74:06:6f:19:
e6:14:bd:b5:49:73:83:b5:39:a8:8c:04:33:1b:ac:
8c:40:a3:ea:54:c1:92:86:23:89:3e:7f:74:f0:c6:
f4:ca:d4:48:c1:1e:e1:27:68:e5:2f:7b:4f:aa:40:
1e:70:57:b6:a3:a9:30:4e:1f:e3:13:b7:04:4a:15:
c3:b1:de:b5:31:d0:10:c7:b4:79:eb:50:f5:26:16:
80:49:77:1b:30:a3:42:e8:e4:cc:af:6b:48:5e:c7:
a4:1f:21:d4:1e:cb:0d:f3:ae:7b:f9:5c:14:88:a0:
bd:ca:5d:74:80:5c:1a:54:e0:89:75:6f:b3:7f:ef:
3b:20:05:99:b9:28:33:56:3e:38:c4:9f:9b:74:89:
1b:69:88:80:37:ec:b2:02:fd:d5:67:95:00:8f:54:
07:8d:c7:2d:7e:02:f7:4d:19:7f:f5:a9:17:33:a7:
47:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A0:32:E4:BD:36:25:AC:8F:41:B9:06:34:68:84:66:F0:E8:FA:9E
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ea:74:27:c3:9f:49:18:59:f9:70:c2:1c:1b:bf:80:67:c9:
7b:d8:35:98:9d:9c:6b:7c:b9:75:67:74:29:a8:5e:0b:26:9a:
05:58:bc:6e:cf:f2:6a:a3:b5:64:10:ff:ea:1f:dd:46:48:fa:
3e:9a:88:2d:92:d7:66:dc:7e:a8:3c:bb:e6:1d:e0:3d:34:84:
24:1d:a7:f3:e6:02:aa:78:3b:3d:b0:d0:9e:27:6b:bd:f8:f1:
8b:ce:08:3b:64:ae:bc:30:d9:6d:b3:af:c9:14:f1:cf:fd:79:
3b:2e:8e:6b:bf:6d:ec:e1:3d:21:17:ee:52:2a:57:60:7a:6a:
4b:3e:a7:d9:23:06:8b:0f:fb:11:9c:cd:1a:a9:10:1d:2c:2c:
d5:62:62:c7:0e:01:9d:46:79:19:f5:e7:4f:76:9f:86:00:e1:
41:ce:31:c4:14:48:32:3e:63:02:36:38:ef:b4:53:b7:be:41:
45:dd:9e:8c:08:13:84:e1:61:fe:60:12:cf:92:b9:4b:69:ed:
6f:0c:c2:1c:a8:e8:78:2e:2d:c4:1c:ec:24:0e:d9:7b:28:8c:
42:7b:cb:64:52:06:4c:83:8f:a7:80:d7:0c:b8:5d:06:30:8e:
9f:5f:a4:b4:a7:85:82:63:fa:9e:13:05:1f:20:92:8d:32:4e:
e7:51:56:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc44emucbRYOxDeUHAzsIwlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi
NDE1M2UwHhcNMjUwNjA0MDMwMDE4WhcNMjUwNjA1MDMwMDE4WjAzMTEwLwYDVQQD
EygyNWEwMzJlNGJkMzYyNWFjOGY0MWI5MDYzNDY4ODQ2NmYwZThmYTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuVihwsFROXOTqpkh8Sulp+2IWUx
6FsNjpvAafIifOjLv69Vxt2qfq1HMln+fh8vLboTgygCOwRPcCUpDBL8Q/xMCVY0
YpGSeqQQly0XhUPAIAi9InQGbxnmFL21SXODtTmojAQzG6yMQKPqVMGShiOJPn90
8Mb0ytRIwR7hJ2jlL3tPqkAecFe2o6kwTh/jE7cEShXDsd61MdAQx7R561D1JhaA
SXcbMKNC6OTMr2tIXsekHyHUHssN8657+VwUiKC9yl10gFwaVOCJdW+zf+87IAWZ
uSgzVj44xJ+bdIkbaYiAN+yyAv3VZ5UAj1QHjcctfgL3TRl/9akXM6dHiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWgMuS9NiWsj0G5BjRohGbw6PqeMB8GA1UdIwQY
MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt
MWQzNzM0OTk5MjRlLzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl
LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOp0J8Of
SRhZ+XDCHBu/gGfJe9g1mJ2ca3y5dWd0KaheCyaaBVi8bs/yaqO1ZBD/6h/dRkj6
PpqILZLXZtx+qDy75h3gPTSEJB2n8+YCqng7PbDQnidrvfjxi84IO2SuvDDZbbOv
yRTxz/15Oy6Oa79t7OE9IRfuUipXYHpqSz6n2SMGiw/7EZzNGqkQHSws1WJixw4B
nUZ5GfXnT3afhgDhQc4xxBRIMj5jAjY477RTt75BRd2ejAgThOFh/mASz5K5S2nt
bwzCHKjoeC4txBzsJA7ZeyiMQnvLZFIGTIOPp4DXDLhdBjCOn1+ktKeFgmP6nhMF
HyCSjTJO51FWog==
-----END CERTIFICATE-----
Generated at Wed Jun 4 12:02:19 2025 by rpki-client