Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
File: xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json)
Hash identifier: Vl60WNk0n1uODjkU4IKU6LrzeG9zptuVhDJD9IzPZg4=
Subject key identifier: BE:43:97:14:88:D5:C3:94:E2:C2:DC:95:19:50:E8:B8:37:6E:C4:2F
Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
Certificate issuer: /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Certificate serial: 0197B6A221B0201546E3E9E58E2C1EFE8650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
Manifest number: 14D8
Signing time: Sat 28 Jun 2025 13:02:48 +0000
Manifest this update: Sat 28 Jun 2025 13:02:48 +0000
Manifest next update: Sun 29 Jun 2025 13:02:48 +0000
Files and hashes: 1: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: Cq4EEUu82G5nb99m99ZjlBPcz1Gsaw7uQurBwljpH8g=)
2: zG4ly3FhpsRy_muFf41M8ZKPF5o.roa (hash: 9tm7KsG1SMgxDQdJBogQZSZKc5Vw7KrlfAJHfrS64mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:21:b0:20:15:46:e3:e9:e5:8e:2c:1e:fe:86:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Validity
Not Before: Jun 28 13:02:48 2025 GMT
Not After : Jun 29 13:02:48 2025 GMT
Subject: CN=be43971488d5c394e2c2dc951950e8b8376ec42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:de:ec:e3:5c:f6:4b:78:b4:1d:6a:01:f8:
3d:fc:30:12:b2:85:b0:3a:b4:27:6c:51:6e:f6:99:
b0:19:9e:29:46:c9:59:3f:5f:02:01:5f:37:2a:f6:
55:a6:0d:e9:ce:72:04:6d:1e:2c:0f:eb:e0:ae:8f:
fc:18:ee:33:69:e6:86:99:2a:82:46:02:60:f8:6b:
dc:81:88:d7:d0:f1:de:8b:98:c8:ae:63:cb:3c:76:
ea:c7:f2:1a:a8:00:a4:8a:fa:29:06:9e:d6:06:69:
c6:90:6a:24:0b:f4:10:81:9b:28:20:1e:a7:b5:98:
32:53:28:0b:f5:f6:d8:9a:53:d0:46:b5:f9:d1:8d:
c7:2b:de:67:b2:b7:16:ba:4d:1a:8b:48:41:a1:d8:
07:bc:e3:7c:a7:8a:bf:55:f9:d9:da:29:99:67:e8:
3a:60:b2:9f:3e:23:fc:d2:3b:a0:b2:50:08:9d:f4:
e6:e7:42:41:ec:69:c2:d3:62:9a:46:17:84:f9:0c:
2b:20:7c:b7:f6:28:d6:00:fe:82:5b:73:c4:9e:38:
53:cb:8f:a8:25:0d:9c:df:f2:00:a8:8b:f2:ef:da:
eb:1c:81:74:ee:ed:5d:c5:b2:ef:a1:79:53:cc:9d:
fe:31:96:b9:27:81:0a:44:8b:4d:a0:ef:c9:3b:39:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:43:97:14:88:D5:C3:94:E2:C2:DC:95:19:50:E8:B8:37:6E:C4:2F
X509v3 Authority Key Identifier:
keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f3:ec:29:ab:63:09:a7:bc:eb:ab:6b:72:fb:1d:14:f5:24:
66:d9:1f:d3:55:3e:80:53:c3:fa:66:c4:05:a4:a5:09:38:46:
45:02:3f:86:59:c6:11:9c:7c:ea:29:75:f1:0e:12:f8:4e:e9:
66:56:9d:6d:a9:eb:f1:f8:5a:51:f0:d3:4b:8d:9d:f3:a4:ee:
3e:e9:a8:a5:d0:80:a8:23:f1:fc:50:6f:fb:0a:cf:a9:57:bd:
89:dc:2b:5e:d1:3a:83:07:8d:6d:e0:cc:ba:56:1f:2a:b9:2f:
d0:08:cf:9e:22:fa:5c:bd:62:89:1e:48:24:ce:06:5f:30:06:
c6:a7:21:6b:32:ed:3e:58:be:b3:2a:21:fb:e6:44:59:a6:e0:
82:40:f4:d5:b5:4b:3c:ae:6b:23:35:ea:29:bc:91:9f:63:a7:
6d:ed:da:16:31:6e:28:3a:d1:88:ab:de:01:23:a7:03:fa:88:
8b:60:7f:67:f8:23:bb:e8:2e:55:5a:9b:bd:8b:30:27:1c:d7:
85:de:40:59:ec:ea:75:47:8b:89:5c:d0:de:f1:4c:1b:f2:e7:
d2:74:29:d3:76:c7:49:57:cd:bf:cb:7c:d5:28:c6:e8:15:72:
27:f9:ab:d8:dc:65:88:61:bc:fd:b9:59:81:9b:9a:ec:ee:b9:
37:00:a5:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oiGwIBVG4+nljiwe/oZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZWJiOGI3OTQyMmZiMmQ2ZDhhODJkYjdmMWFjMGI2YWE1
OWIzN2YwHhcNMjUwNjI4MTMwMjQ4WhcNMjUwNjI5MTMwMjQ4WjAzMTEwLwYDVQQD
EyhiZTQzOTcxNDg4ZDVjMzk0ZTJjMmRjOTUxOTUwZThiODM3NmVjNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynve7ONc9kt4tB1qAfg9/DASsoWw
OrQnbFFu9pmwGZ4pRslZP18CAV83KvZVpg3pznIEbR4sD+vgro/8GO4zaeaGmSqC
RgJg+GvcgYjX0PHei5jIrmPLPHbqx/IaqACkivopBp7WBmnGkGokC/QQgZsoIB6n
tZgyUygL9fbYmlPQRrX50Y3HK95nsrcWuk0ai0hBodgHvON8p4q/VfnZ2imZZ+g6
YLKfPiP80jugslAInfTm50JB7GnC02KaRheE+QwrIHy39ijWAP6CW3PEnjhTy4+o
JQ2c3/IAqIvy79rrHIF07u1dxbLvoXlTzJ3+MZa5J4EKRItNoO/JOznAjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5DlxSI1cOU4sLclRlQ6Lg3bsQvMB8GA1UdIwQY
MBaAFMXruLeUIvstbYqC238awLaqWbN/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTBlY2QtMWMxNi00YmQzLWJkMGUt
Yzg0YmZkNGVlODc4LzEveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNTBlY2QtMWMxNi00YmQzLWJkMGUtYzg0YmZkNGVlODc4
LzEveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPPsKatj
Cae866trcvsdFPUkZtkf01U+gFPD+mbEBaSlCThGRQI/hlnGEZx86il18Q4S+E7p
Zladbanr8fhaUfDTS42d86TuPumopdCAqCPx/FBv+wrPqVe9idwrXtE6gweNbeDM
ulYfKrkv0AjPniL6XL1iiR5IJM4GXzAGxqchazLtPli+syoh++ZEWabggkD01bVL
PK5rIzXqKbyRn2Onbe3aFjFuKDrRiKveASOnA/qIi2B/Z/gju+guVVqbvYswJxzX
hd5AWezqdUeLiVzQ3vFMG/Ln0nQp03bHSVfNv8t81SjG6BVyJ/mr2NxliGG8/blZ
gZua7O65NwClzw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:47 2025 by rpki-client