Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
File: xRg7G2FacNeXwnfPyEC5CjLZaWw.mft (raw, json)
Hash identifier: 6b+1g9Hz+4b1qBg4gir6felyBwatYz/PIbZ1R/EwrBk=
Subject key identifier: E8:A3:16:35:02:8C:CD:F3:BD:16:49:6D:92:54:72:5F:00:73:2C:85
Authority key identifier: C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
Certificate issuer: /CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Certificate serial: 0197B820FD7FB79846D9E7021744279015DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
Manifest number: 0CD9
Signing time: Sat 28 Jun 2025 20:00:59 +0000
Manifest this update: Sat 28 Jun 2025 20:00:59 +0000
Manifest next update: Sun 29 Jun 2025 20:00:59 +0000
Files and hashes: 1: xRg7G2FacNeXwnfPyEC5CjLZaWw.crl (hash: fplqCAPXnbuQOk8bpKd9XZYjAA1iRlvojxTLT5QWQSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:fd:7f:b7:98:46:d9:e7:02:17:44:27:90:15:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Validity
Not Before: Jun 28 20:00:59 2025 GMT
Not After : Jun 29 20:00:59 2025 GMT
Subject: CN=e8a31635028ccdf3bd16496d9254725f00732c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:92:ad:c7:72:85:79:b2:5b:61:82:73:e6:
f1:1e:bb:f7:73:c5:5a:f0:f3:58:e7:66:81:bc:c1:
79:96:c3:f1:d2:3e:33:12:07:c3:a4:17:23:af:4d:
c1:c2:d6:4e:01:a2:f0:d5:bb:b8:48:b6:8d:86:95:
5c:ee:9f:a7:c2:a4:3b:62:de:08:c0:16:ee:87:19:
92:c4:bb:52:ec:50:d7:4e:bc:f1:a0:c1:02:43:0d:
e4:11:e3:a0:e2:fa:44:5f:b3:01:e0:3c:7b:af:af:
63:5d:01:f1:77:5e:8e:36:0e:2d:51:39:2e:5c:56:
80:1a:01:f6:86:de:37:79:00:1d:a5:49:10:93:10:
d2:ca:bb:8f:e2:f7:fb:83:5f:58:3c:65:d2:aa:82:
5a:42:b0:85:80:7a:ac:9d:d4:0b:09:a2:6a:5b:fc:
8b:a5:19:d3:cf:0d:e5:d3:a8:e0:77:81:14:d0:98:
1e:82:ab:f0:d6:9e:51:4c:53:c8:d6:63:d0:f9:47:
6f:10:ae:ff:54:31:b1:0d:fc:5c:65:a5:d0:14:85:
49:36:06:2e:df:4b:26:dc:0f:be:f9:8b:b6:01:76:
f1:ab:57:ee:4c:7f:f4:1d:9d:5a:3e:4e:32:d5:ff:
d9:00:ef:0e:fb:a1:48:9d:7c:f1:79:2a:b7:29:d9:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A3:16:35:02:8C:CD:F3:BD:16:49:6D:92:54:72:5F:00:73:2C:85
X509v3 Authority Key Identifier:
keyid:C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a4:ab:1c:a8:6e:a2:9b:eb:74:22:28:02:cf:2e:7a:f6:e5:
81:5e:de:68:72:76:0e:82:59:ef:db:9b:79:ea:e2:e2:0c:6c:
8c:e2:d4:45:a8:95:d0:42:95:46:fd:91:15:95:57:db:a8:38:
43:fa:de:0d:60:0a:68:26:b7:d3:3e:aa:3e:9a:1b:fb:a4:c2:
32:94:e8:98:6d:3f:66:53:18:65:b2:a0:7b:73:0b:41:78:9d:
22:a0:26:2f:3e:64:a7:0b:44:99:48:92:40:c0:31:fb:a9:32:
81:13:47:9b:6a:73:94:8b:17:6f:0e:b0:a5:de:41:95:d2:60:
6c:4e:03:ac:62:7a:de:47:42:8e:08:0a:be:b9:c3:69:e1:f8:
ce:d3:0c:73:da:8a:10:07:e5:96:47:07:b2:cd:c9:5b:64:11:
67:8a:73:85:79:c2:75:d6:91:65:3f:3c:63:09:48:b3:c8:9d:
f5:e0:f5:76:6a:ce:2e:95:05:21:47:62:96:ec:2f:cc:ca:03:
d6:e6:56:0b:04:2a:bf:01:2c:35:60:17:9d:f8:dd:22:99:b2:
e2:c6:ee:08:bb:66:db:41:ba:6e:87:c3:79:39:09:62:e4:83:
36:7f:69:08:11:b7:4b:bf:ee:ef:6b:af:b1:68:0f:fe:2c:8c:
03:47:ea:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IP1/t5hG2ecCF0QnkBXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTgzYjFiNjE1YTcwZDc5N2MyNzdjZmM4NDBiOTBhMzJk
OTY5NmMwHhcNMjUwNjI4MjAwMDU5WhcNMjUwNjI5MjAwMDU5WjAzMTEwLwYDVQQD
EyhlOGEzMTYzNTAyOGNjZGYzYmQxNjQ5NmQ5MjU0NzI1ZjAwNzMyYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8KSrcdyhXmyW2GCc+bxHrv3c8Va
8PNY52aBvMF5lsPx0j4zEgfDpBcjr03BwtZOAaLw1bu4SLaNhpVc7p+nwqQ7Yt4I
wBbuhxmSxLtS7FDXTrzxoMECQw3kEeOg4vpEX7MB4Dx7r69jXQHxd16ONg4tUTku
XFaAGgH2ht43eQAdpUkQkxDSyruP4vf7g19YPGXSqoJaQrCFgHqsndQLCaJqW/yL
pRnTzw3l06jgd4EU0Jgegqvw1p5RTFPI1mPQ+UdvEK7/VDGxDfxcZaXQFIVJNgYu
30sm3A+++Yu2AXbxq1fuTH/0HZ1aPk4y1f/ZAO8O+6FInXzxeSq3Kdl36QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOijFjUCjM3zvRZJbZJUcl8AcyyFMB8GA1UdIwQY
MBaAFMUYOxthWnDXl8J3z8hAuQoy2WlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNjY1OGItYjJlNy00NjZmLWEzOWMt
NjU2ZTJlYjgwNGM3LzEveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNjY1OGItYjJlNy00NjZmLWEzOWMtNjU2ZTJlYjgwNGM3
LzEveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6SrHKhu
opvrdCIoAs8uevblgV7eaHJ2DoJZ79ubeeri4gxsjOLURaiV0EKVRv2RFZVX26g4
Q/reDWAKaCa30z6qPpob+6TCMpTomG0/ZlMYZbKge3MLQXidIqAmLz5kpwtEmUiS
QMAx+6kygRNHm2pzlIsXbw6wpd5BldJgbE4DrGJ63kdCjggKvrnDaeH4ztMMc9qK
EAfllkcHss3JW2QRZ4pzhXnCddaRZT88YwlIs8id9eD1dmrOLpUFIUdiluwvzMoD
1uZWCwQqvwEsNWAXnfjdIpmy4sbuCLtm20G6bofDeTkJYuSDNn9pCBG3S7/u72uv
sWgP/iyMA0fqkw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:20 2025 by rpki-client