Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: +QU67CBK6lZ7DdSGVFUG6TXeJGE4UTJMJYpJvvZ56sE=
Subject key identifier: 07:F0:A0:30:1B:EB:CE:07:9D:5D:78:72:7F:4C:6E:B8:FC:19:66:D3
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 0197B70EEC019809ECE26D40E2A4C99BEB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:37 +0000
Manifest this update: Sat 28 Jun 2025 15:01:37 +0000
Manifest next update: Sun 29 Jun 2025 15:01:37 +0000
Files and hashes: 1: 3VwS8xn1dqlezDsMh8Sf9TR7g9g.roa (hash: MDTRApulTOvm2zrb3DRDrjk3d2nWoH+O6KEsT2PYF34=)
2: LAcLYgswdXBfgBZpgmI4v5l11G8.roa (hash: 4F279XlGd3FdMtCNdNRt8dMwroWFaHLg6v4i36Nk99c=)
3: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: 5RfVx0HXLR13v8VCkMAwL1vLAgdPBpHS11NBjwctI6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ec:01:98:09:ec:e2:6d:40:e2:a4:c9:9b:eb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Jun 28 15:01:37 2025 GMT
Not After : Jun 29 15:01:37 2025 GMT
Subject: CN=07f0a0301bebce079d5d78727f4c6eb8fc1966d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:e3:46:2f:65:d4:34:5a:a1:60:da:ff:86:
98:09:c3:7c:4e:10:12:3e:53:cd:7d:9a:37:e6:86:
10:5b:9e:7b:f2:78:09:e9:70:17:d8:b1:e5:d3:02:
bd:5b:30:2a:c3:51:2e:33:03:05:5d:47:4e:d7:15:
be:0a:79:9c:45:ec:ad:23:78:9b:f8:87:89:32:94:
b1:3a:9a:9f:4d:b7:86:3b:b5:2f:c8:12:e4:db:b3:
09:38:90:8c:35:e5:2f:f2:40:04:aa:64:ca:e4:9e:
d5:53:80:5d:0c:92:f6:9d:a7:ce:69:6f:f5:f9:2f:
33:36:25:ba:c9:76:ba:1f:2d:43:ac:0b:2c:e0:a4:
06:61:d2:7b:75:31:dd:b9:b2:a9:31:c7:2b:28:c6:
34:0f:4e:67:40:a6:72:9e:6d:89:af:2f:ff:c3:dc:
75:19:5c:ee:d1:3e:f7:9d:ac:9c:6c:a5:0c:fb:3f:
a3:50:89:97:ae:c3:de:04:1b:a9:50:fd:f6:c7:4f:
69:9d:27:26:c8:17:7c:9f:3d:7e:f2:56:e9:3c:a9:
4b:f5:ab:1c:27:f1:6e:23:ee:45:9e:6b:ba:a3:c2:
31:f5:03:4f:b3:c2:15:71:36:5b:39:5a:fa:ac:86:
65:2d:cc:aa:9f:32:01:48:95:38:58:71:0e:7d:62:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F0:A0:30:1B:EB:CE:07:9D:5D:78:72:7F:4C:6E:B8:FC:19:66:D3
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d6:54:18:84:86:2d:39:d9:ac:f6:b6:00:8d:33:32:b0:c9:
f4:6d:43:1e:6a:f2:88:ab:2c:56:f1:b3:a8:24:43:ba:2f:fd:
c1:97:a2:51:d4:63:ff:1b:ed:e6:33:6e:cd:f7:0c:40:64:39:
27:ce:63:de:7e:ca:de:c7:a5:fe:db:95:0d:41:f3:30:d2:68:
48:f6:02:73:72:9c:59:43:f9:f3:98:3f:11:37:ed:13:92:5f:
ed:32:d0:79:15:db:dc:ad:8e:d9:5e:bf:aa:18:03:c8:e8:3f:
2f:3c:b4:be:f7:f6:39:f4:3c:63:01:39:13:45:11:ba:c4:56:
1e:38:f9:52:df:76:70:e2:35:17:80:b4:1a:52:11:ea:4d:ae:
bb:1c:e6:4f:97:44:e6:0d:60:85:8d:85:83:7b:9c:59:e9:4d:
5c:da:ad:63:c9:0c:47:78:f8:a7:ca:d3:e6:51:c3:44:fd:ea:
15:6a:08:50:86:00:2d:8c:0f:96:6d:54:93:f2:ea:fd:47:a7:
1d:19:f9:d4:ae:63:f0:be:e4:61:0f:e3:8b:61:35:ea:aa:ee:
fb:a3:fb:c7:af:26:75:d6:86:8a:26:c2:29:f1:79:18:c2:7c:
69:b0:34:8f:38:1e:d5:dc:19:65:5d:9c:8d:68:68:d4:b6:21:
30:81:dc:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DuwBmAns4m1A4qTJm+uEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjRiYzYxMzdjNTQwYTg5YjkxNzNjYzJkZTMyZWIwNGM5
ZTZlYWUwHhcNMjUwNjI4MTUwMTM3WhcNMjUwNjI5MTUwMTM3WjAzMTEwLwYDVQQD
EygwN2YwYTAzMDFiZWJjZTA3OWQ1ZDc4NzI3ZjRjNmViOGZjMTk2NmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxInjRi9l1DRaoWDa/4aYCcN8ThAS
PlPNfZo35oYQW5578ngJ6XAX2LHl0wK9WzAqw1EuMwMFXUdO1xW+CnmcReytI3ib
+IeJMpSxOpqfTbeGO7UvyBLk27MJOJCMNeUv8kAEqmTK5J7VU4BdDJL2nafOaW/1
+S8zNiW6yXa6Hy1DrAss4KQGYdJ7dTHdubKpMccrKMY0D05nQKZynm2Jry//w9x1
GVzu0T73naycbKUM+z+jUImXrsPeBBupUP32x09pnScmyBd8nz1+8lbpPKlL9asc
J/FuI+5Fnmu6o8Ix9QNPs8IVcTZbOVr6rIZlLcyqnzIBSJU4WHEOfWJRIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfwoDAb684HnV14cn9Mbrj8GWbTMB8GA1UdIwQY
MBaAFF/0vGE3xUCom5FzzC3jLrBMnm6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jMDExY2EtNDU2Yi00ZjUxLWJjOGIt
MDA1Y2I0ZGNhNjNmLzEvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jMDExY2EtNDU2Yi00ZjUxLWJjOGItMDA1Y2I0ZGNhNjNm
LzEvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNZUGISG
LTnZrPa2AI0zMrDJ9G1DHmryiKssVvGzqCRDui/9wZeiUdRj/xvt5jNuzfcMQGQ5
J85j3n7K3sel/tuVDUHzMNJoSPYCc3KcWUP585g/ETftE5Jf7TLQeRXb3K2O2V6/
qhgDyOg/Lzy0vvf2OfQ8YwE5E0URusRWHjj5Ut92cOI1F4C0GlIR6k2uuxzmT5dE
5g1ghY2Fg3ucWelNXNqtY8kMR3j4p8rT5lHDRP3qFWoIUIYALYwPlm1Uk/Lq/Uen
HRn51K5j8L7kYQ/ji2E16qru+6P7x68mddaGiibCKfF5GMJ8abA0jzge1dwZZV2c
jWho1LYhMIHcqg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:56 2025 by rpki-client