Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: 1PdDWrGHRqtCzN5JX99ya4lHgl5nFAsrJ0S9RdT5Das=
Subject key identifier: 43:0A:D1:2A:3C:B5:1D:88:F0:95:5F:EF:7C:DB:60:F1:EF:4A:48:E3
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 01974B568E9F6100ED513F604F6F30D6C653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 17:00:53 +0000
Manifest this update: Sat 07 Jun 2025 17:00:53 +0000
Manifest next update: Sun 08 Jun 2025 17:00:53 +0000
Files and hashes: 1: 5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa (hash: 8v0kYzcJWu+TAkPVdBOzyNTyiBLW9zT8UuMidU5kl/I=)
2: g9JYtF8ph5GLoyu-Nq2vbYm-D1I.roa (hash: Cvh5BPuE+knEynT2OCQwuxH59fgMDl8/lGUoeYUQxFY=)
3: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: R0MRsNygrd8LJCM4CEFL8HzFDwdvEwamwvyc5C+yR0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:8e:9f:61:00:ed:51:3f:60:4f:6f:30:d6:c6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Jun 7 17:00:53 2025 GMT
Not After : Jun 8 17:00:53 2025 GMT
Subject: CN=430ad12a3cb51d88f0955fef7cdb60f1ef4a48e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:38:ae:ea:ae:36:52:fa:77:6a:9b:94:a5:
48:41:27:e1:df:28:87:b0:88:b8:c3:4e:91:fb:f2:
c3:46:a4:d2:cc:a8:bb:a8:fb:2e:47:a5:cc:1c:5e:
3a:ad:1d:7c:b7:c3:c1:b3:d0:ef:6a:94:3d:d0:7e:
96:42:e1:f3:cc:c9:96:5b:f7:ec:80:7e:94:3d:d6:
fb:95:ac:df:d6:bb:dd:2f:32:b0:24:6e:e7:68:80:
27:d8:74:1c:51:f0:37:a8:e8:e0:9f:8a:4d:c7:31:
a3:d4:46:d2:b8:b8:a2:ad:94:e4:b7:f3:5e:f2:d9:
ad:f9:e2:b8:6b:48:9e:d2:a0:84:46:29:1f:f2:3a:
9d:5e:93:60:0d:c1:ce:55:11:7f:20:df:90:a2:0a:
0d:f7:8f:4a:89:d9:27:bd:85:6c:66:91:95:fa:da:
0e:42:73:ca:5a:16:0a:19:2c:91:14:a2:7c:30:44:
e3:34:0d:47:d6:3f:19:f7:24:e4:b8:d4:36:6a:bf:
39:83:8e:36:0d:a0:d4:0c:de:a3:7f:14:8e:8d:d5:
66:4d:1a:f9:cd:27:de:3c:ee:36:d6:6b:fb:ab:50:
58:4d:5d:90:7d:de:38:c8:40:a3:61:a2:73:f3:9b:
94:c1:3e:01:a0:5c:ab:bc:e4:d4:85:de:3a:26:7e:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0A:D1:2A:3C:B5:1D:88:F0:95:5F:EF:7C:DB:60:F1:EF:4A:48:E3
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bd:d4:d5:1e:30:3d:f0:e7:d0:21:07:dc:b8:db:be:e1:a2:
ab:92:b6:f8:bc:59:56:21:06:19:ab:2e:00:5b:fc:13:73:91:
a0:0b:97:ab:57:f6:17:1d:0f:21:07:96:49:b6:5e:16:5e:9b:
33:40:3c:73:55:f5:f0:9b:a8:f6:8a:61:d4:7d:e1:85:17:b5:
76:e2:30:2f:89:97:75:f2:83:6f:50:76:42:82:81:af:ea:5d:
19:03:27:78:e4:1b:c7:e7:1b:7e:7b:88:01:a9:19:66:1c:e9:
8c:25:a8:2e:65:3e:cb:4d:cc:e7:8c:a1:c8:62:a9:8f:17:55:
57:c9:6c:5f:5d:26:52:77:ac:f6:20:89:36:ca:43:7b:ab:aa:
e1:9d:46:b1:b5:46:71:88:ae:73:19:76:3c:55:6f:28:cf:15:
93:4a:89:6a:dd:0f:37:5a:86:a0:ed:ce:12:5e:e9:82:53:68:
6c:29:1a:ef:f0:6d:29:5c:75:10:60:0e:16:7a:0e:cf:f1:60:
59:af:b5:87:b4:6c:40:6e:f2:31:8d:7f:94:39:d6:ce:b9:2d:
ca:58:17:36:d6:bb:be:1c:72:a7:86:cb:6b:74:cf:a7:a5:a8:
4c:07:c1:7d:2d:9f:91:a7:e9:35:4f:79:a0:bb:94:14:90:8d:
39:87:8c:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLVo6fYQDtUT9gT28w1sZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTFmYjViYmMyZmE4NTcxZTNkNWY4Y2FlNDE5NmE4ZDdl
OTZjMzUwHhcNMjUwNjA3MTcwMDUzWhcNMjUwNjA4MTcwMDUzWjAzMTEwLwYDVQQD
Eyg0MzBhZDEyYTNjYjUxZDg4ZjA5NTVmZWY3Y2RiNjBmMWVmNGE0OGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Jg4ruquNlL6d2qblKVIQSfh3yiH
sIi4w06R+/LDRqTSzKi7qPsuR6XMHF46rR18t8PBs9DvapQ90H6WQuHzzMmWW/fs
gH6UPdb7lazf1rvdLzKwJG7naIAn2HQcUfA3qOjgn4pNxzGj1EbSuLiirZTkt/Ne
8tmt+eK4a0ie0qCERikf8jqdXpNgDcHOVRF/IN+QogoN949KidknvYVsZpGV+toO
QnPKWhYKGSyRFKJ8METjNA1H1j8Z9yTkuNQ2ar85g442DaDUDN6jfxSOjdVmTRr5
zSfePO421mv7q1BYTV2Qfd44yECjYaJz85uUwT4BoFyrvOTUhd46Jn7q6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMK0So8tR2I8JVf73zbYPHvSkjjMB8GA1UdIwQY
MBaAFMWh+1u8L6hXHj1fjK5BlqjX6Ww1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTct
ZDhhMGI0MWY0NmU4LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTctZDhhMGI0MWY0NmU4
LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWL3U1R4w
PfDn0CEH3LjbvuGiq5K2+LxZViEGGasuAFv8E3ORoAuXq1f2Fx0PIQeWSbZeFl6b
M0A8c1X18Juo9oph1H3hhRe1duIwL4mXdfKDb1B2QoKBr+pdGQMneOQbx+cbfnuI
AakZZhzpjCWoLmU+y03M54yhyGKpjxdVV8lsX10mUnes9iCJNspDe6uq4Z1GsbVG
cYiucxl2PFVvKM8Vk0qJat0PN1qGoO3OEl7pglNobCka7/BtKVx1EGAOFnoOz/Fg
Wa+1h7RsQG7yMY1/lDnWzrktylgXNta7vhxyp4bLa3TPp6WoTAfBfS2fkafpNU95
oLuUFJCNOYeMLw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:05:20 2025 by rpki-client