Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
File: xJ7uJN6rVSARm2o9oEV9OcQGQds.mft (raw, json)
Hash identifier: WO6PmCiL6T73bJgZmNf8dKfYxW+OGrjWfK3bBON2lcw=
Subject key identifier: 8A:88:27:15:77:9A:6A:41:3D:F4:D7:D0:87:97:AF:DB:B8:CE:C6:C0
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Certificate issuer: /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial: 0197C3B77468BE4623D783A428E2CB2C4918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
Manifest number: 0EE1
Signing time: Tue 01 Jul 2025 02:01:09 +0000
Manifest this update: Tue 01 Jul 2025 02:01:09 +0000
Manifest next update: Wed 02 Jul 2025 02:01:09 +0000
Files and hashes: 1: eZo07jBCKWD2FYiNfDITWNW5OaU.roa (hash: 09rC6Rc4KHaoiqlZ0+3v+LC/tqWiWb4ZuqXZ8h/EnX0=)
2: xJ7uJN6rVSARm2o9oEV9OcQGQds.crl (hash: SqDPWV3AafGj8lpREDqqVzDP486kY+jWwU+nTlYorA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:b7:74:68:be:46:23:d7:83:a4:28:e2:cb:2c:49:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
Validity
Not Before: Jul 1 02:01:09 2025 GMT
Not After : Jul 2 02:01:09 2025 GMT
Subject: CN=8a882715779a6a413df4d7d08797afdbb8cec6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:56:36:8a:21:61:63:68:18:e7:bf:91:69:
c7:05:d5:2e:13:b7:be:ce:ed:0f:b0:e7:69:25:c6:
78:d4:be:67:8b:93:e5:63:66:3b:12:9c:22:15:d3:
15:e2:9c:5c:10:a5:8f:06:45:80:71:dc:39:74:52:
9e:36:22:28:97:ef:f2:94:a8:53:bf:5e:07:49:38:
2e:ee:4f:2b:12:69:77:a9:4f:3c:90:28:c6:8a:89:
35:4b:3b:dd:2a:7f:e5:b7:3e:09:53:d7:81:7b:f7:
c7:ec:07:fb:63:c6:97:77:26:7a:11:10:3d:78:9d:
88:1f:62:dc:1d:35:7f:f4:61:6e:44:e9:75:dc:6c:
09:ae:9b:12:47:7d:7e:71:e1:47:28:98:07:2a:a4:
9f:85:4e:07:68:a7:74:ac:ac:5c:f4:0e:a2:3e:a0:
3d:9a:89:fb:02:07:6d:76:38:dc:0a:68:37:9c:01:
fe:29:f1:eb:73:7a:62:34:f1:f7:29:31:78:5f:71:
73:dc:8d:49:2b:e1:cd:4f:09:a7:82:c8:8b:a0:42:
76:a4:bf:7b:b1:77:ec:f8:ba:5a:28:ea:c9:4e:da:
c4:4f:c1:6d:58:8b:e3:f1:85:fe:21:70:08:25:7f:
ee:a2:fe:cd:89:4f:39:49:e7:ce:c2:5b:4c:1e:c4:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:88:27:15:77:9A:6A:41:3D:F4:D7:D0:87:97:AF:DB:B8:CE:C6:C0
X509v3 Authority Key Identifier:
keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b5:1f:6f:dc:bb:f2:09:36:63:d2:b0:05:24:1d:63:fe:3b:
73:c4:8b:24:c7:17:5b:66:d0:86:a9:c2:c5:96:5f:2c:ff:d6:
46:03:49:a7:0a:a4:94:fc:7d:3b:f3:9c:65:f5:cc:2f:94:df:
ef:ee:20:4b:97:a7:95:2c:d3:35:8b:8a:88:e8:6e:dd:c1:2d:
d9:99:bc:f1:10:f9:d7:43:6a:4b:a1:e9:38:1e:6f:c4:72:39:
63:f0:53:4f:30:02:1b:9d:38:4c:b0:91:56:43:b3:17:94:ae:
39:4e:87:8d:52:35:65:27:fd:d4:22:a6:c2:b0:b1:65:b2:ef:
a2:97:cc:e9:e2:f8:f6:12:44:35:e3:a1:0f:cf:99:96:55:0e:
2a:d3:f6:0e:49:5c:fd:b6:8c:32:b8:55:fe:78:12:ff:27:36:
47:9e:db:e0:37:ac:14:30:ef:af:79:34:c3:e6:ef:d2:07:3a:
5f:0e:e9:2e:ed:1b:91:52:7c:02:9d:91:5e:62:1b:04:bb:58:
da:e2:d7:e7:2b:75:3f:fa:8c:04:53:32:5a:0d:78:28:69:8e:
52:ca:83:73:f6:33:c8:8e:a7:f1:9b:f6:bd:1f:66:92:71:8d:
77:50:11:cf:7c:a9:9c:a3:d7:c3:ad:a2:8a:17:b5:50:7c:33:
55:8d:fe:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfDt3RovkYj14OkKOLLLEkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWVlZTI0ZGVhYjU1MjAxMTliNmEzZGEwNDU3ZDM5YzQw
NjQxZGIwHhcNMjUwNzAxMDIwMTA5WhcNMjUwNzAyMDIwMTA5WjAzMTEwLwYDVQQD
Eyg4YTg4MjcxNTc3OWE2YTQxM2RmNGQ3ZDA4Nzk3YWZkYmI4Y2VjNmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RNWNoohYWNoGOe/kWnHBdUuE7e+
zu0PsOdpJcZ41L5ni5PlY2Y7EpwiFdMV4pxcEKWPBkWAcdw5dFKeNiIol+/ylKhT
v14HSTgu7k8rEml3qU88kCjGiok1SzvdKn/ltz4JU9eBe/fH7Af7Y8aXdyZ6ERA9
eJ2IH2LcHTV/9GFuROl13GwJrpsSR31+ceFHKJgHKqSfhU4HaKd0rKxc9A6iPqA9
mon7AgdtdjjcCmg3nAH+KfHrc3piNPH3KTF4X3Fz3I1JK+HNTwmngsiLoEJ2pL97
sXfs+LpaKOrJTtrET8FtWIvj8YX+IXAIJX/uov7NiU85SefOwltMHsQJ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqIJxV3mmpBPfTX0IeXr9u4zsbAMB8GA1UdIwQY
MBaAFMSe7iTeq1UgEZtqPaBFfTnEBkHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEo3dUpONnJWU0FSbTJvOW9FVjlPY1FHUWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85Nzg2ZjQtZGQ1NC00ZTQzLWFlYTQt
NTljNGMxMGFlYmQ5LzEveEo3dUpONnJWU0FSbTJvOW9FVjlPY1FHUWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85Nzg2ZjQtZGQ1NC00ZTQzLWFlYTQtNTljNGMxMGFlYmQ5
LzEveEo3dUpONnJWU0FSbTJvOW9FVjlPY1FHUWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbUfb9y7
8gk2Y9KwBSQdY/47c8SLJMcXW2bQhqnCxZZfLP/WRgNJpwqklPx9O/OcZfXML5Tf
7+4gS5enlSzTNYuKiOhu3cEt2Zm88RD510NqS6HpOB5vxHI5Y/BTTzACG504TLCR
VkOzF5SuOU6HjVI1ZSf91CKmwrCxZbLvopfM6eL49hJENeOhD8+ZllUOKtP2Dklc
/baMMrhV/ngS/yc2R57b4DesFDDvr3k0w+bv0gc6Xw7pLu0bkVJ8Ap2RXmIbBLtY
2uLX5yt1P/qMBFMyWg14KGmOUsqDc/YzyI6n8Zv2vR9mknGNd1ARz3ypnKPXw62i
ihe1UHwzVY3+Kg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 10:56:34 2025 by rpki-client