Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: GxEPWRZQPJiRAAi8rYRRXxyc+NZeKX1UOuGdPImrtTg=
Subject key identifier: 7D:1B:06:FE:CA:9F:45:A5:95:64:45:F7:5C:50:A4:D6:7A:02:FD:A7
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 01974DE9803C21DA2888F2D3B91EF63DB988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 05:00:37 +0000
Manifest this update: Sun 08 Jun 2025 05:00:37 +0000
Manifest next update: Mon 09 Jun 2025 05:00:37 +0000
Files and hashes: 1: 8Y6XKuO-_q-eZcd8PYJP4ppiukg.roa (hash: yAyB9mAE7fWNNJ4M45GAzvUfCPqHWuDqtJYIq1FJlDc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: iWFMtzHhQMnC+VCJDbdvnNwoaBvREF6Fo/ULn4bITXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:80:3c:21:da:28:88:f2:d3:b9:1e:f6:3d:b9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: Jun 8 05:00:37 2025 GMT
Not After : Jun 9 05:00:37 2025 GMT
Subject: CN=7d1b06feca9f45a5956445f75c50a4d67a02fda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:87:02:1d:45:a8:f9:ff:3d:9e:7d:14:77:
60:58:c9:aa:5e:da:ea:18:e2:dd:21:f8:57:2e:a1:
65:95:15:7d:37:27:c1:77:54:f9:b6:09:a4:5d:36:
2d:f8:c4:9d:9b:e3:cf:8d:8c:18:ba:28:c6:40:e8:
04:c9:a8:c9:b3:09:45:67:2e:70:f7:79:df:cf:09:
0f:74:10:bd:fa:33:57:7b:88:fb:ab:69:6f:81:94:
d3:4a:0c:9e:bc:44:17:5f:b0:da:74:1e:07:ba:73:
a3:c0:ce:21:80:02:d7:42:bd:a6:61:fd:f3:a6:94:
60:1f:dd:49:4e:7c:e1:cd:42:57:ce:35:25:6c:e7:
f0:35:0d:ab:ae:ab:3f:57:36:14:f7:af:22:22:45:
0c:da:22:91:a4:87:5f:fa:43:ad:f2:5b:55:3e:ce:
3e:64:7b:74:00:e5:f5:c7:28:f9:68:5c:4e:81:0c:
42:4c:65:ae:fc:00:0d:4c:16:45:5c:50:a4:36:a6:
0d:0c:14:80:89:f2:4f:9b:b1:68:a9:43:1b:77:1a:
af:c6:41:fa:26:17:15:f4:eb:ae:69:e6:3d:d2:1a:
cf:98:e0:1c:99:0e:4a:aa:b1:30:a2:c9:bc:bf:e6:
fa:63:a7:6a:2f:82:bc:3f:46:43:ab:9e:cb:3c:ff:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1B:06:FE:CA:9F:45:A5:95:64:45:F7:5C:50:A4:D6:7A:02:FD:A7
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:46:43:76:e0:a8:03:0f:9b:f8:16:f2:af:67:f2:d1:c1:75:
82:4d:f1:a0:0f:2e:a4:a7:cd:8a:3b:10:5e:d2:4b:60:dc:95:
c8:2b:d2:80:90:27:7a:ca:e8:d1:07:7f:ef:f1:0e:60:ec:34:
29:4a:29:0d:0e:68:09:3f:c0:73:7f:99:c5:56:ec:54:87:08:
19:5a:06:49:15:53:75:d6:ac:64:47:aa:fc:34:00:f0:99:5d:
da:f5:71:25:8c:ce:44:65:50:f2:88:d3:89:3b:fa:11:24:c4:
63:e2:93:01:b9:c7:50:ef:de:e7:cb:46:89:b1:f6:8f:41:b6:
ba:23:06:3d:dc:87:81:dd:5b:ed:77:2c:c2:75:88:a4:0f:02:
24:ac:43:62:97:7f:a8:e9:fe:b4:b6:0a:a9:04:64:0f:81:12:
ac:87:15:fa:c5:ec:51:94:27:4f:2e:99:3a:f3:fa:1c:c4:53:
a4:03:06:ed:34:f1:1e:40:79:89:5c:57:4b:a1:85:5b:bb:0e:
62:38:43:13:f0:75:b2:8f:55:6f:a4:ec:f5:ea:11:0e:61:7b:
83:9b:07:68:ae:5a:e5:b3:02:78:83:07:29:0f:ed:e1:25:73:
fd:ca:a3:41:b6:9e:1c:52:cc:36:74:b6:e9:ca:6d:b6:3d:d4:
ac:c5:62:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6YA8IdooiPLTuR72PbmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MjI4N2M2ODQ1OGY5ODBjYTliN2MzNmQ2MWY2YWY1ODY0
NjRiMjgwHhcNMjUwNjA4MDUwMDM3WhcNMjUwNjA5MDUwMDM3WjAzMTEwLwYDVQQD
Eyg3ZDFiMDZmZWNhOWY0NWE1OTU2NDQ1Zjc1YzUwYTRkNjdhMDJmZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHSHAh1FqPn/PZ59FHdgWMmqXtrq
GOLdIfhXLqFllRV9NyfBd1T5tgmkXTYt+MSdm+PPjYwYuijGQOgEyajJswlFZy5w
93nfzwkPdBC9+jNXe4j7q2lvgZTTSgyevEQXX7DadB4HunOjwM4hgALXQr2mYf3z
ppRgH91JTnzhzUJXzjUlbOfwNQ2rrqs/VzYU968iIkUM2iKRpIdf+kOt8ltVPs4+
ZHt0AOX1xyj5aFxOgQxCTGWu/AANTBZFXFCkNqYNDBSAifJPm7FoqUMbdxqvxkH6
JhcV9OuuaeY90hrPmOAcmQ5KqrEwosm8v+b6Y6dqL4K8P0ZDq57LPP8sYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0bBv7Kn0WllWRF91xQpNZ6Av2nMB8GA1UdIwQY
MBaAFMQih8aEWPmAypt8NtYfavWGRksoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NWYzYmMtOTNjOC00YmI5LThkNGMt
YjEyZDdmODkyZjViLzEveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy80NWYzYmMtOTNjOC00YmI5LThkNGMtYjEyZDdmODkyZjVi
LzEveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0ZDduCo
Aw+b+Bbyr2fy0cF1gk3xoA8upKfNijsQXtJLYNyVyCvSgJAnesro0Qd/7/EOYOw0
KUopDQ5oCT/Ac3+ZxVbsVIcIGVoGSRVTddasZEeq/DQA8Jld2vVxJYzORGVQ8ojT
iTv6ESTEY+KTAbnHUO/e58tGibH2j0G2uiMGPdyHgd1b7XcswnWIpA8CJKxDYpd/
qOn+tLYKqQRkD4ESrIcV+sXsUZQnTy6ZOvP6HMRTpAMG7TTxHkB5iVxXS6GFW7sO
YjhDE/B1so9Vb6Ts9eoRDmF7g5sHaK5a5bMCeIMHKQ/t4SVz/cqjQbaeHFLMNnS2
6cpttj3UrMVi9Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:17:55 2025 by rpki-client