Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: KP05Bv+Q5methdEy+8k3DKqt9hYvpETI1SpSPH7CSaM=
Subject key identifier: 39:C2:42:F1:08:B5:A8:F0:44:1F:79:D6:B5:A0:77:4D:B0:61:7E:B8
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 0197B77C16475118A95E7A9DECCC20CA9C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 1064
Signing time: Sat 28 Jun 2025 17:00:52 +0000
Manifest this update: Sat 28 Jun 2025 17:00:52 +0000
Manifest next update: Sun 29 Jun 2025 17:00:52 +0000
Files and hashes: 1: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: F1iJZgiYKtYYhZdcrn5bSJeVsBtAxwCocMLAVy3G0DQ=)
2: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (hash: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:16:47:51:18:a9:5e:7a:9d:ec:cc:20:ca:9c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Jun 28 17:00:52 2025 GMT
Not After : Jun 29 17:00:52 2025 GMT
Subject: CN=39c242f108b5a8f0441f79d6b5a0774db0617eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:33:7f:1a:dd:bd:44:18:16:a4:bd:a5:7e:
38:61:21:83:77:70:e2:6d:c5:ac:40:4b:ba:2d:18:
86:8e:f8:f3:11:4b:d7:dd:af:72:2e:97:f4:3a:7f:
48:23:f2:6d:14:75:d6:f7:12:f5:00:c7:ea:6a:d4:
cd:7c:7e:c0:56:75:73:01:57:25:47:4b:c4:b1:b3:
6b:b2:50:b9:e8:17:57:e0:0d:19:2a:d9:46:6b:bb:
b4:9e:10:d5:1f:c8:6e:9c:c5:cf:29:b0:b9:0a:47:
ae:19:99:b8:ae:d3:53:03:27:90:ad:11:1d:9e:b9:
ea:0e:1e:bc:c7:98:eb:e2:23:10:34:a3:f6:33:8c:
0b:44:11:97:08:a5:ae:23:f2:1a:a1:16:7c:af:b2:
d0:72:8e:ee:11:e6:93:a5:42:63:a4:8f:ea:e8:49:
96:58:89:fc:4d:8b:ca:ff:fe:08:27:5a:7f:6f:57:
d6:40:39:6c:f7:52:83:d2:8e:34:f4:79:be:ff:8b:
8f:5a:6d:e2:89:f7:e1:6d:e2:7f:6e:8a:fb:b7:74:
cd:95:c1:33:64:3a:a3:4e:7e:aa:e9:36:17:cd:aa:
45:9a:97:f3:30:f6:0a:fa:8e:3d:97:63:3f:f6:d1:
be:f7:87:23:ec:56:ac:f4:de:4a:34:6d:3f:07:64:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C2:42:F1:08:B5:A8:F0:44:1F:79:D6:B5:A0:77:4D:B0:61:7E:B8
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3d:09:fa:95:ad:31:f6:26:cb:e6:60:18:b7:40:7e:fa:8a:
43:85:0b:37:f3:fc:1f:31:bc:be:f1:ab:0e:b8:a9:f7:a0:d7:
28:1f:c2:e4:d2:19:10:a3:65:48:e8:51:f3:db:c0:7e:3b:c8:
c9:ba:1d:9c:bc:b6:30:f2:73:00:58:2e:57:b8:94:54:d4:a7:
04:38:61:96:4a:f1:2b:d0:cf:29:0b:6f:05:ba:a2:5c:4d:34:
4f:7b:62:5a:0d:94:c7:64:45:c7:c9:86:1d:45:fc:3a:73:27:
ca:6b:80:bd:ab:b5:9b:24:1e:13:5d:bb:25:1e:7f:d9:8b:67:
40:4f:d2:bb:f7:66:ec:56:8f:bf:5b:8b:62:d5:7f:56:67:00:
c3:8d:29:90:49:1c:2e:9a:b5:8a:04:b4:f1:d7:67:1f:2f:73:
72:11:e2:d5:18:3f:2c:ab:c5:90:e3:57:c9:f8:fd:b6:a7:85:
d9:7d:3a:4f:c5:db:a3:95:dd:aa:6b:ac:ba:5b:79:4f:a5:10:
15:c6:c2:fb:90:31:17:7f:60:75:d8:3c:4f:29:5b:4e:aa:fa:
d6:30:b1:37:c7:2c:87:96:cc:d5:01:82:96:56:7d:9f:d2:9a:
65:cf:eb:6d:f6:a3:68:c0:48:f9:f7:76:71:71:0d:42:10:cd:
4a:48:b4:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fBZHURipXnqd7MwgypyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Zjg4YjVjNmU1MTE2ZTUwY2YyYjViZGY0M2U4NzIwZjFk
OGM2MGYwHhcNMjUwNjI4MTcwMDUyWhcNMjUwNjI5MTcwMDUyWjAzMTEwLwYDVQQD
EygzOWMyNDJmMTA4YjVhOGYwNDQxZjc5ZDZiNWEwNzc0ZGIwNjE3ZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EUzfxrdvUQYFqS9pX44YSGDd3Di
bcWsQEu6LRiGjvjzEUvX3a9yLpf0On9II/JtFHXW9xL1AMfqatTNfH7AVnVzAVcl
R0vEsbNrslC56BdX4A0ZKtlGa7u0nhDVH8hunMXPKbC5CkeuGZm4rtNTAyeQrREd
nrnqDh68x5jr4iMQNKP2M4wLRBGXCKWuI/IaoRZ8r7LQco7uEeaTpUJjpI/q6EmW
WIn8TYvK//4IJ1p/b1fWQDls91KD0o409Hm+/4uPWm3iiffhbeJ/bor7t3TNlcEz
ZDqjTn6q6TYXzapFmpfzMPYK+o49l2M/9tG+94cj7Fas9N5KNG0/B2SxewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnCQvEItajwRB951rWgd02wYX64MB8GA1UdIwQY
MBaAFMT4i1xuURblDPK1vfQ+hyDx2MYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNTMwNzgtMGE3Yi00NWJiLWJjNjct
MDczNjM5OTM4NDM3LzEveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yNTMwNzgtMGE3Yi00NWJiLWJjNjctMDczNjM5OTM4NDM3
LzEveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXT0J+pWt
MfYmy+ZgGLdAfvqKQ4ULN/P8HzG8vvGrDrip96DXKB/C5NIZEKNlSOhR89vAfjvI
ybodnLy2MPJzAFguV7iUVNSnBDhhlkrxK9DPKQtvBbqiXE00T3tiWg2Ux2RFx8mG
HUX8OnMnymuAvau1myQeE127JR5/2YtnQE/Su/dm7FaPv1uLYtV/VmcAw40pkEkc
Lpq1igS08ddnHy9zchHi1Rg/LKvFkONXyfj9tqeF2X06T8Xbo5Xdqmusult5T6UQ
FcbC+5AxF39gddg8TylbTqr61jCxN8csh5bM1QGCllZ9n9KaZc/rbfajaMBI+fd2
cXENQhDNSki03A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:16 2025 by rpki-client