Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
File: xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft (raw, json)
Hash identifier: iHL8vo3qBAUcxIRQtzPZZFRds3YNat0MiFnTwJ3h9zk=
Subject key identifier: 11:31:47:3E:86:6D:51:9C:53:90:00:33:6E:F0:59:D1:AC:E0:1A:DB
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial: 01974AE8D1DD856A2220B2DB9DF28BCB01D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 15:01:01 +0000
Manifest this update: Sat 07 Jun 2025 15:01:01 +0000
Manifest next update: Sun 08 Jun 2025 15:01:01 +0000
Files and hashes: 1: 8lw7rY_Ajlikule3WA_Zgmg5cis.roa (hash: uoCLZlitJLa4D0er3NIiIxLiXBDaARcafRxsb7h6IVY=)
2: UwWcIaqQRE1DQREqUyPP2KFZpkQ.roa (hash: HnBuQV/6MGAsdCkHVntRtFAvZeGR4LaMonjb9Ez79gg=)
3: Ymnq870-hTRbzxW7QHa4AoItEis.roa (hash: EVgp5rZ0myk3IS//+2PgncuHs2ECv2APPwVwVowLkug=)
4: xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl (hash: R6o9OsEvXg9DQSL7pNqaNyPxn2CeKGG0Or/zJh4hnI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:d1:dd:85:6a:22:20:b2:db:9d:f2:8b:cb:01:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
Validity
Not Before: Jun 7 15:01:01 2025 GMT
Not After : Jun 8 15:01:01 2025 GMT
Subject: CN=1131473e866d519c539000336ef059d1ace01adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:ed:39:27:f1:5a:36:72:e5:cd:e3:d8:b6:
56:20:ee:75:e2:7a:10:73:ff:af:a3:86:73:76:00:
d9:78:83:e6:13:ac:ac:2e:6c:86:f2:b1:a1:e0:da:
ec:35:9b:af:02:55:b8:93:7b:50:d0:5e:0c:93:d6:
36:c2:1d:fd:2d:85:6b:a6:cc:6e:be:e2:1c:ea:97:
21:07:84:98:b2:96:db:a7:17:c8:45:7d:4d:9e:ee:
e4:e8:9f:3d:c5:85:45:c6:de:fa:47:73:b8:03:0b:
70:59:fe:5a:a2:fa:2f:38:8a:d0:fb:b6:13:90:a4:
3c:56:47:bc:14:59:df:bc:f9:f3:92:3f:16:c4:9e:
ec:94:c3:2b:7e:73:09:f3:13:f7:45:40:86:29:9d:
da:bd:99:27:ac:99:18:bc:1b:1d:af:7a:6f:50:c3:
ea:69:78:f6:4c:96:e2:ac:9e:5f:28:bd:17:66:97:
bf:1d:4e:09:e0:5b:c9:29:74:d1:ea:f4:84:c3:ca:
0e:07:72:eb:43:b7:80:d0:66:a3:57:37:f2:d1:e1:
aa:ce:67:2e:07:9b:f2:3a:6a:91:25:7f:02:1e:07:
18:1e:4a:f2:6a:c8:29:1f:6f:4f:a4:69:cc:99:ea:
18:45:9f:df:1e:e2:bb:d9:6b:40:6d:e1:b8:76:e3:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:31:47:3E:86:6D:51:9C:53:90:00:33:6E:F0:59:D1:AC:E0:1A:DB
X509v3 Authority Key Identifier:
keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0c:0d:35:93:c2:c2:50:94:09:09:2a:0e:8c:b9:ab:1c:59:
30:61:a6:cf:08:5f:ed:c4:41:48:c1:7a:35:42:a0:64:57:35:
f0:d2:7d:65:35:b1:cc:a2:37:c8:04:e2:a7:62:6e:69:18:46:
c6:06:19:df:f2:89:1b:7f:b5:5b:99:39:ae:8c:d2:9b:fa:da:
af:a8:97:e4:de:6a:c3:69:b5:a5:9d:4a:58:cf:d4:d5:97:42:
33:11:dd:86:7b:f8:8a:bd:84:6c:4b:17:0d:eb:26:f6:f1:44:
b5:8f:27:96:f4:f5:b8:71:87:67:59:91:91:1d:0d:d5:27:51:
e1:59:eb:97:49:65:7a:0b:7f:4c:68:f0:7e:2f:06:5a:12:59:
fb:bf:68:db:76:51:27:45:10:af:80:b3:67:50:a3:bf:50:0a:
85:f3:1a:ce:fb:3b:e1:db:55:84:a9:42:7d:8b:69:70:ea:df:
81:ad:3a:ab:21:bf:e9:d6:7f:18:60:ca:22:ea:6d:54:0c:5b:
d7:58:ea:af:f7:84:ba:de:35:b0:81:8c:f7:af:4f:d1:1b:a5:
9e:d8:88:86:6a:2d:f3:7c:1d:18:7a:d7:61:4c:5c:87:74:fa:
9a:c2:c5:fb:89:fc:73:ce:92:11:9f:14:7f:d4:e8:6d:5d:9b:
93:28:63:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6NHdhWoiILLbnfKLywHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGM5N2ViOWJhZjU0MjhmNTBmNDVkMzMwMzU3Njc4Yjcz
ZTA2MWMwHhcNMjUwNjA3MTUwMTAxWhcNMjUwNjA4MTUwMTAxWjAzMTEwLwYDVQQD
EygxMTMxNDczZTg2NmQ1MTljNTM5MDAwMzM2ZWYwNTlkMWFjZTAxYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU7tOSfxWjZy5c3j2LZWIO514noQ
c/+vo4ZzdgDZeIPmE6ysLmyG8rGh4NrsNZuvAlW4k3tQ0F4Mk9Y2wh39LYVrpsxu
vuIc6pchB4SYspbbpxfIRX1Nnu7k6J89xYVFxt76R3O4AwtwWf5aovovOIrQ+7YT
kKQ8Vke8FFnfvPnzkj8WxJ7slMMrfnMJ8xP3RUCGKZ3avZknrJkYvBsdr3pvUMPq
aXj2TJbirJ5fKL0XZpe/HU4J4FvJKXTR6vSEw8oOB3LrQ7eA0GajVzfy0eGqzmcu
B5vyOmqRJX8CHgcYHkryasgpH29PpGnMmeoYRZ/fHuK72WtAbeG4duNZjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBExRz6GbVGcU5AAM27wWdGs4BrbMB8GA1UdIwQY
MBaAFMUMl+ubr1Qo9Q9F0zA1dni3PgYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUt
YmVlZWJlZGZmYzk1LzEveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUtYmVlZWJlZGZmYzk1
LzEveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQwNNZPC
wlCUCQkqDoy5qxxZMGGmzwhf7cRBSMF6NUKgZFc18NJ9ZTWxzKI3yATip2JuaRhG
xgYZ3/KJG3+1W5k5rozSm/rar6iX5N5qw2m1pZ1KWM/U1ZdCMxHdhnv4ir2EbEsX
Desm9vFEtY8nlvT1uHGHZ1mRkR0N1SdR4Vnrl0llegt/TGjwfi8GWhJZ+79o23ZR
J0UQr4CzZ1Cjv1AKhfMazvs74dtVhKlCfYtpcOrfga06qyG/6dZ/GGDKIuptVAxb
11jqr/eEut41sIGM969P0RulntiIhmot83wdGHrXYUxch3T6msLF+4n8c86SEZ8U
f9TobV2bkyhjCA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:00:21 2025 by rpki-client