Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: jer2Ynb3resEL4wQ6NVebHTCroVqHH4ysrq1YsrfgKQ=
Subject key identifier: AC:A8:11:1B:41:3F:9C:83:71:F3:96:46:56:28:01:A9:A7:13:F2:18
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 0197470B70D4BCF80580D0AA0332D0F9D976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 21:00:21 +0000
Manifest this update: Fri 06 Jun 2025 21:00:21 +0000
Manifest next update: Sat 07 Jun 2025 21:00:21 +0000
Files and hashes: 1: cFEMcTrZnpJM6OI3sLSildoG7_o.roa (hash: 9byuaTVIbm1V06CyQEH6JUvAc6lfIjdANtz73++4OCM=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: u9cs4tGfblsTXHx7AjfF3LcLZQ9zyjwCmQVJP3HncI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:70:d4:bc:f8:05:80:d0:aa:03:32:d0:f9:d9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Jun 6 21:00:21 2025 GMT
Not After : Jun 7 21:00:21 2025 GMT
Subject: CN=aca8111b413f9c8371f39646562801a9a713f218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4c:c1:4b:23:71:a4:01:d3:f4:6a:f0:a6:ff:
2a:7c:5b:ab:c9:08:36:45:59:4a:d6:30:92:5a:66:
cd:11:48:dd:71:ac:3f:fb:b6:c1:43:ab:ea:dd:3a:
9b:7d:e4:11:a8:42:a2:77:6f:1f:bc:04:0b:a4:e2:
3b:e2:34:97:60:3e:da:70:f1:98:15:d9:68:8b:cb:
60:0b:8d:38:48:65:e6:30:35:42:0c:56:f6:5a:9a:
2c:ae:6d:1d:b5:ab:55:78:00:f6:35:0c:71:68:24:
ac:07:0b:34:03:0b:7e:39:16:5c:81:ff:7e:2f:5e:
64:0b:f0:94:be:bc:4b:3c:2d:8a:04:4a:72:1e:21:
da:c1:77:80:7c:b9:0a:11:3c:5b:76:25:a5:a2:8a:
d4:86:d1:06:a9:5a:6c:f0:9e:ca:90:13:cb:2e:0b:
87:fe:e8:ba:bc:fe:d1:f1:06:c4:44:23:b7:49:f3:
05:ca:ad:08:e7:23:77:2d:ed:52:5a:81:12:ca:b7:
4e:09:f8:5c:c3:a0:6b:96:6d:bc:42:89:24:3e:35:
48:18:b2:74:f1:d3:f5:7e:c5:04:16:26:18:3c:10:
fe:e0:8e:13:a3:f4:3a:c3:bb:5e:b6:a0:3b:9a:f9:
bc:a7:1b:21:68:01:f4:e3:93:9b:a2:74:05:71:67:
d2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A8:11:1B:41:3F:9C:83:71:F3:96:46:56:28:01:A9:A7:13:F2:18
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e2:c8:35:18:4b:47:fd:51:39:3f:ca:03:ba:5f:bf:11:4b:
2e:b0:9e:4a:41:73:14:b1:2f:fd:2d:1e:17:bb:86:d8:aa:4e:
35:c5:76:79:9f:1b:30:cd:19:97:48:d1:46:a1:b2:21:fd:c5:
4d:1a:e3:19:66:1c:ac:5d:8c:61:89:32:9b:f5:a7:36:f7:a4:
21:6f:56:d4:07:b6:95:11:c4:62:49:33:1e:bd:47:60:cd:7b:
23:cd:52:04:8e:ae:3e:1b:d8:70:40:d8:fd:31:b9:08:cc:7c:
88:cb:b6:c4:29:13:81:47:09:3c:4e:6a:82:95:86:b8:1f:11:
f6:23:4f:e0:bb:b8:4d:a7:0d:37:18:b4:e0:77:f8:e6:42:ca:
73:d5:f2:8d:e4:82:12:12:b9:83:3e:a3:58:2f:f9:9d:66:ca:
67:d3:f1:c6:11:2b:a0:10:03:99:50:84:ce:49:64:67:c6:ea:
8b:bd:13:11:87:50:29:97:e7:31:9b:1a:22:fc:fb:27:a6:b5:
27:83:05:c5:82:d0:4a:46:2a:75:53:b1:c3:26:cf:3f:9a:a5:
ff:d8:f9:bb:d6:ce:76:ad:2f:37:2e:c2:99:56:0a:ea:f2:6a:
5c:4a:b5:89:2d:b7:78:ec:f4:70:0b:83:08:cc:7b:d4:65:39:
81:ab:16:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHC3DUvPgFgNCqAzLQ+dl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGE4MmU4Nzc5MzNkOWMyYzk1MmNiMzc2YzkzYWFhMzM3
ZGQ3ZDIwHhcNMjUwNjA2MjEwMDIxWhcNMjUwNjA3MjEwMDIxWjAzMTEwLwYDVQQD
EyhhY2E4MTExYjQxM2Y5YzgzNzFmMzk2NDY1NjI4MDFhOWE3MTNmMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0zBSyNxpAHT9Grwpv8qfFuryQg2
RVlK1jCSWmbNEUjdcaw/+7bBQ6vq3TqbfeQRqEKid28fvAQLpOI74jSXYD7acPGY
Fdloi8tgC404SGXmMDVCDFb2Wposrm0dtatVeAD2NQxxaCSsBws0Awt+ORZcgf9+
L15kC/CUvrxLPC2KBEpyHiHawXeAfLkKETxbdiWloorUhtEGqVps8J7KkBPLLguH
/ui6vP7R8QbERCO3SfMFyq0I5yN3Le1SWoESyrdOCfhcw6Brlm28QokkPjVIGLJ0
8dP1fsUEFiYYPBD+4I4To/Q6w7tetqA7mvm8pxshaAH045ObonQFcWfSIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyoERtBP5yDcfOWRlYoAamnE/IYMB8GA1UdIwQY
MBaAFMfaguh3kz2cLJUss3bJOqozfdfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2Mt
ZWFlNGY2ZDMzY2E2LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2MtZWFlNGY2ZDMzY2E2
LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeLINRhL
R/1ROT/KA7pfvxFLLrCeSkFzFLEv/S0eF7uG2KpONcV2eZ8bMM0Zl0jRRqGyIf3F
TRrjGWYcrF2MYYkym/WnNvekIW9W1Ae2lRHEYkkzHr1HYM17I81SBI6uPhvYcEDY
/TG5CMx8iMu2xCkTgUcJPE5qgpWGuB8R9iNP4Lu4TacNNxi04Hf45kLKc9XyjeSC
EhK5gz6jWC/5nWbKZ9PxxhEroBADmVCEzklkZ8bqi70TEYdQKZfnMZsaIvz7J6a1
J4MFxYLQSkYqdVOxwybPP5ql/9j5u9bOdq0vNy7CmVYK6vJqXEq1iS23eOz0cAuD
CMx71GU5gasWsw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:26:30 2025 by rpki-client