Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: jd26xdI+D8gQGTmvWEZcpW0KpYAWVZFkPs3l4f8Hhfk=
Subject key identifier: 42:DC:A1:18:84:62:66:53:DF:3C:0D:49:B2:93:82:AE:CD:73:66:EE
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 0197C349EA19DCD885314CF7BE6329A11501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 00:01:30 +0000
Manifest this update: Tue 01 Jul 2025 00:01:30 +0000
Manifest next update: Wed 02 Jul 2025 00:01:30 +0000
Files and hashes: 1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=)
2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=)
3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: X3wvBRVG6wxarJyhaa/nShA2al1ekkutJg+x+v/KyHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:49:ea:19:dc:d8:85:31:4c:f7:be:63:29:a1:15:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Jul 1 00:01:30 2025 GMT
Not After : Jul 2 00:01:30 2025 GMT
Subject: CN=42dca11884626653df3c0d49b29382aecd7366ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:39:82:18:a9:d5:93:58:03:b7:be:54:d4:
b7:3a:6b:6e:0a:ad:1e:f8:7d:9f:1f:a5:e8:6e:cb:
02:bb:a4:54:8b:88:ab:81:1a:13:9a:29:50:e0:e1:
f2:5d:5f:55:eb:40:8f:26:a7:ff:ed:8e:8b:03:5b:
a4:24:b0:f8:ab:2d:a3:17:d7:42:b7:93:1b:5f:f1:
2b:83:de:fc:2c:70:8d:77:0e:7e:52:f6:a4:2c:b3:
c9:ae:d7:24:7e:dc:d0:23:7e:09:40:26:79:3f:ff:
bd:e2:69:fa:39:fd:93:43:bb:50:f1:4c:4a:0c:43:
d0:80:44:fe:a5:7d:63:d8:0b:58:48:cd:d5:5f:b1:
b3:cc:85:95:76:61:3a:69:49:96:2c:67:7f:ba:5c:
c2:3f:0f:86:cc:53:53:30:a8:97:fb:92:cb:4e:e6:
77:f2:05:90:7f:e3:4b:a8:f1:95:5b:07:e6:1a:db:
73:4e:20:9e:08:33:53:a3:31:d3:55:69:d3:58:d1:
f1:0d:7f:67:2f:c4:13:ea:82:24:fc:e7:0e:ef:95:
8e:4f:c6:30:8d:a7:d8:d8:2e:08:77:8d:fa:e2:ef:
7f:f0:81:81:a0:35:7c:d9:a2:91:f2:83:d2:11:ce:
85:dd:3f:f1:c0:c8:1c:58:4b:c7:95:99:4d:73:b7:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DC:A1:18:84:62:66:53:DF:3C:0D:49:B2:93:82:AE:CD:73:66:EE
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5d:71:7c:bd:d2:1f:6c:71:d2:6d:a0:14:40:81:97:c1:8a:
50:24:35:da:c6:9f:36:62:6b:fe:86:fc:f3:c4:35:95:82:12:
f9:fe:50:6c:6b:e0:7b:5b:7e:03:83:2a:56:a0:69:88:54:41:
ca:b2:a9:23:8f:97:bd:38:c9:f8:fa:fd:08:01:28:7a:c0:c6:
45:c4:2c:1b:9e:40:ed:92:94:26:f9:8b:fa:9e:f4:54:0c:77:
f7:51:78:a3:18:0c:33:28:06:11:3b:74:3a:20:98:16:b4:09:
c9:55:90:de:42:21:1c:ef:c2:df:82:d8:76:93:02:6e:07:40:
6d:1f:87:77:67:7e:20:f3:b0:20:dc:67:6c:f6:3c:da:86:66:
64:62:60:99:0c:bf:b2:12:a6:83:64:6e:9e:17:82:20:06:62:
ab:4b:c2:4c:2b:60:66:dc:35:76:37:2b:14:6f:0e:07:27:5e:
2e:c6:c1:45:50:d4:2b:ba:e8:94:b0:53:a1:5a:a4:5d:2e:79:
b5:7e:a0:0f:ee:bb:ec:a1:40:8a:22:1b:ce:3f:e6:21:a5:52:
fc:9e:ae:dd:7b:d1:45:a4:3f:63:2c:fd:13:e1:1c:1f:48:4c:
69:f7:d6:54:08:55:88:c4:09:b9:ec:87:df:ba:45:08:34:05:
8b:66:96:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfDSeoZ3NiFMUz3vmMpoRUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZTE3Mjg3MmViN2JlZjA5NjVkZjEzYjBmYzVkNjVlNzUz
NzBhMTkwHhcNMjUwNzAxMDAwMTMwWhcNMjUwNzAyMDAwMTMwWjAzMTEwLwYDVQQD
Eyg0MmRjYTExODg0NjI2NjUzZGYzYzBkNDliMjkzODJhZWNkNzM2NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5A5ghip1ZNYA7e+VNS3OmtuCq0e
+H2fH6XobssCu6RUi4irgRoTmilQ4OHyXV9V60CPJqf/7Y6LA1ukJLD4qy2jF9dC
t5MbX/Erg978LHCNdw5+UvakLLPJrtckftzQI34JQCZ5P/+94mn6Of2TQ7tQ8UxK
DEPQgET+pX1j2AtYSM3VX7GzzIWVdmE6aUmWLGd/ulzCPw+GzFNTMKiX+5LLTuZ3
8gWQf+NLqPGVWwfmGttzTiCeCDNTozHTVWnTWNHxDX9nL8QT6oIk/OcO75WOT8Yw
jafY2C4Id4364u9/8IGBoDV82aKR8oPSEc6F3T/xwMgcWEvHlZlNc7fD3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELcoRiEYmZT3zwNSbKTgq7Nc2buMB8GA1UdIwQY
MBaAFMXhcocut77wll3xOw/F1l51NwoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGIt
YzQ2NWQ4OTAyYzFiLzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGItYzQ2NWQ4OTAyYzFi
LzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeV1xfL3S
H2xx0m2gFECBl8GKUCQ12safNmJr/ob888Q1lYIS+f5QbGvge1t+A4MqVqBpiFRB
yrKpI4+XvTjJ+Pr9CAEoesDGRcQsG55A7ZKUJvmL+p70VAx391F4oxgMMygGETt0
OiCYFrQJyVWQ3kIhHO/C34LYdpMCbgdAbR+Hd2d+IPOwINxnbPY82oZmZGJgmQy/
shKmg2RunheCIAZiq0vCTCtgZtw1djcrFG8OBydeLsbBRVDUK7rolLBToVqkXS55
tX6gD+677KFAiiIbzj/mIaVS/J6u3XvRRaQ/Yyz9E+EcH0hMaffWVAhViMQJueyH
37pFCDQFi2aW5g==
-----END CERTIFICATE-----
Generated at Tue Jul 1 03:08:24 2025 by rpki-client