Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier: TsJE/aWeEuOI/DuZlL61n3bLBK+TTQdDEpieJLHp0Zo=
Subject key identifier: 4B:5B:A6:BA:40:46:E0:9D:0A:04:03:BF:90:6F:CE:76:A3:20:00:16
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 0197B77C357FDB29525D7B94308CBCF5D38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number: 0892
Signing time: Sat 28 Jun 2025 17:01:00 +0000
Manifest this update: Sat 28 Jun 2025 17:01:00 +0000
Manifest next update: Sun 29 Jun 2025 17:01:00 +0000
Files and hashes: 1: 3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa (hash: FJ26OKzgHHeltXGq/dly/S1GCLExUrR4LooVCROsPhY=)
2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: V4MY//t4UJuOSu7Yh9EgWrJ1SL03dkiosVqm6djI3Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:35:7f:db:29:52:5d:7b:94:30:8c:bc:f5:d3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Jun 28 17:01:00 2025 GMT
Not After : Jun 29 17:01:00 2025 GMT
Subject: CN=4b5ba6ba4046e09d0a0403bf906fce76a3200016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f0:fc:25:d6:99:68:9b:ac:22:1d:d3:69:19:
1e:84:47:be:e9:67:0a:50:08:3f:8b:93:4e:4c:f4:
58:7e:12:36:46:d1:ec:d7:15:04:21:79:f7:8f:50:
62:8c:82:f0:15:91:6d:a7:d1:bd:f7:11:4d:4e:3c:
91:58:62:9d:2a:41:18:6e:24:cb:8d:8c:6c:72:67:
6b:f1:a6:e7:b2:6f:de:ed:06:53:64:0d:de:12:f5:
78:e3:2b:42:3e:31:97:47:82:88:d4:96:59:66:f0:
13:77:d1:cb:30:1d:33:22:e8:82:68:f6:7b:ab:e5:
ef:68:29:e0:3c:e5:0a:6d:82:d0:65:01:10:ee:25:
72:30:e6:a2:95:19:9f:c0:25:0c:23:ee:88:c1:53:
ec:39:5b:2f:7c:16:58:26:41:6c:e7:4d:6a:ee:90:
f5:80:e0:ac:29:d0:0b:89:91:e4:0d:d7:14:05:6f:
35:3b:c8:49:24:89:ca:61:b4:86:2d:87:90:91:2b:
75:7b:4e:05:a6:b4:7f:dc:ad:f7:89:c0:77:cf:89:
dc:63:98:19:d1:9d:1b:20:6b:d0:8e:6e:ae:5e:fd:
07:e9:84:6b:a1:ce:b1:8c:f5:55:5b:d2:de:97:ef:
31:55:7d:c4:7b:b3:17:51:30:de:31:59:f5:26:98:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5B:A6:BA:40:46:E0:9D:0A:04:03:BF:90:6F:CE:76:A3:20:00:16
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e0:ba:97:a5:7a:5c:15:43:45:d8:58:35:2c:fb:02:9f:ec:
ac:98:cd:ae:28:b6:85:20:b6:40:d6:39:da:14:5f:df:8a:f1:
88:9d:8d:25:88:1d:37:b2:4d:aa:38:68:2b:61:d1:25:a7:f5:
71:c0:7a:2e:f7:19:e7:09:88:5b:87:c2:54:f0:ef:89:63:d4:
84:4e:d5:34:57:70:de:8f:c5:d9:e4:b3:03:83:8e:59:6c:0f:
60:eb:39:b3:3b:55:90:29:20:12:52:14:f5:89:df:1b:78:2c:
cb:d4:93:a9:f6:1b:d7:d4:66:2b:b4:71:a4:ab:9b:41:6c:10:
41:88:e6:42:dc:18:d4:09:87:90:3d:05:05:1f:47:35:f5:8a:
96:87:13:07:ac:82:be:cf:89:4d:24:51:5d:26:6b:2e:cc:c0:
29:16:29:a6:a4:ee:9a:3f:de:84:80:f4:55:6b:f0:ed:17:df:
77:b8:95:22:40:5e:c9:c1:2a:4f:8a:5d:f7:d0:bd:e4:e3:dd:
43:66:c2:d2:b4:bd:5b:ff:89:3a:4c:3f:73:35:19:e5:59:1d:
3b:be:b9:fb:43:b6:47:a7:b0:c1:e6:e7:fd:1d:16:bf:0a:e0:
c8:30:4e:92:9e:99:5e:42:43:6c:be:b4:aa:eb:b2:84:1b:ee:
11:c6:77:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fDV/2ylSXXuUMIy89dONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmIwODJmMTdjMjBiNWRiYTI0NWNlYTZlNGU2ZTljNjA5
OWNlZjcwHhcNMjUwNjI4MTcwMTAwWhcNMjUwNjI5MTcwMTAwWjAzMTEwLwYDVQQD
Eyg0YjViYTZiYTQwNDZlMDlkMGEwNDAzYmY5MDZmY2U3NmEzMjAwMDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfD8JdaZaJusIh3TaRkehEe+6WcK
UAg/i5NOTPRYfhI2RtHs1xUEIXn3j1BijILwFZFtp9G99xFNTjyRWGKdKkEYbiTL
jYxscmdr8abnsm/e7QZTZA3eEvV44ytCPjGXR4KI1JZZZvATd9HLMB0zIuiCaPZ7
q+XvaCngPOUKbYLQZQEQ7iVyMOailRmfwCUMI+6IwVPsOVsvfBZYJkFs501q7pD1
gOCsKdALiZHkDdcUBW81O8hJJInKYbSGLYeQkSt1e04FprR/3K33icB3z4ncY5gZ
0Z0bIGvQjm6uXv0H6YRroc6xjPVVW9Lel+8xVX3Ee7MXUTDeMVn1Jpi/FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtbprpARuCdCgQDv5BvznajIAAWMB8GA1UdIwQY
MBaAFMdrCC8XwgtduiRc6m5Obpxgmc73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJzSUx4ZkNDMTI2SkZ6cWJrNXVuR0NaenZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kNmFkOTYtNTQ3OC00MGY3LWIxYWMt
NmM3MjA5MmMwZjE4LzEveDJzSUx4ZkNDMTI2SkZ6cWJrNXVuR0NaenZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kNmFkOTYtNTQ3OC00MGY3LWIxYWMtNmM3MjA5MmMwZjE4
LzEveDJzSUx4ZkNDMTI2SkZ6cWJrNXVuR0NaenZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+C6l6V6
XBVDRdhYNSz7Ap/srJjNrii2hSC2QNY52hRf34rxiJ2NJYgdN7JNqjhoK2HRJaf1
ccB6LvcZ5wmIW4fCVPDviWPUhE7VNFdw3o/F2eSzA4OOWWwPYOs5sztVkCkgElIU
9YnfG3gsy9STqfYb19RmK7RxpKubQWwQQYjmQtwY1AmHkD0FBR9HNfWKlocTB6yC
vs+JTSRRXSZrLszAKRYppqTumj/ehID0VWvw7Rffd7iVIkBeycEqT4pd99C95OPd
Q2bC0rS9W/+JOkw/czUZ5VkdO765+0O2R6ewwebn/R0WvwrgyDBOkp6ZXkJDbL60
quuyhBvuEcZ3Sg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:12 2025 by rpki-client