Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: jSsFiwEubs+lLsLI9tvsCoYEk86aEJa7ziS8XVSJpOE=
Subject key identifier: 63:86:5C:AE:A6:DA:7F:09:87:FA:65:90:97:DC:02:28:00:54:9A:D8
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 0197B77C8224E51B435B055AD58454DBD81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:19 +0000
Manifest this update: Sat 28 Jun 2025 17:01:19 +0000
Manifest next update: Sun 29 Jun 2025 17:01:19 +0000
Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: 1xzKMdl/PlN/H+7VU1K2fj+ZPaan3mABpiwjy9lHFJY=)
3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:82:24:e5:1b:43:5b:05:5a:d5:84:54:db:d8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Jun 28 17:01:19 2025 GMT
Not After : Jun 29 17:01:19 2025 GMT
Subject: CN=63865caea6da7f0987fa659097dc022800549ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:fe:b5:af:90:05:4d:04:af:15:0c:61:97:
5b:28:d0:a5:ec:5c:42:8c:9c:23:5c:25:a1:ac:3e:
eb:8e:89:c4:df:38:f0:fc:d3:60:ee:d4:cf:4e:54:
c6:2c:5f:97:33:f2:25:75:43:ea:e7:ad:2c:c8:27:
b6:ad:e6:6d:e9:d9:f8:63:2b:d6:a0:97:a9:91:70:
4d:16:9f:c2:f5:2a:b2:b5:b8:9a:45:6b:6b:82:89:
e2:58:d6:df:fb:8f:ac:3b:fd:93:6e:7a:c0:e6:34:
cd:c8:1c:43:67:ea:99:90:08:aa:e2:bd:62:35:a0:
43:1c:11:fe:ce:95:a9:72:d3:57:58:65:3d:aa:02:
9a:2f:f8:50:14:73:65:07:76:19:3c:2e:e4:69:33:
61:37:d5:bd:09:8f:f7:31:63:8c:67:17:66:18:87:
f6:63:41:3b:03:91:0e:45:de:ac:5d:92:1a:d3:47:
78:e7:61:67:16:57:aa:b6:c9:80:dd:34:6b:26:2d:
dd:cc:b6:a1:5a:58:ee:82:fd:53:eb:5f:92:18:d8:
8e:4a:47:04:25:6b:f7:0c:40:aa:fa:2d:f4:6e:35:
23:f3:75:9d:10:43:20:a3:7d:4f:db:9b:89:50:35:
46:1f:f5:71:f9:a7:0c:d5:33:53:da:14:75:ea:44:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:86:5C:AE:A6:DA:7F:09:87:FA:65:90:97:DC:02:28:00:54:9A:D8
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ce:2f:3e:a4:9d:38:85:6c:da:7a:0a:ef:5a:7a:dc:c0:69:
1b:3f:dc:b0:ac:c2:ba:6a:f3:e7:27:e2:e9:19:f0:47:05:61:
e2:a3:19:c0:7d:e8:87:33:cd:be:3b:28:13:bf:1d:7a:36:80:
be:ca:61:1b:39:66:9c:0c:2b:1e:16:27:02:23:5b:c1:26:9a:
91:dc:06:6f:58:f2:0e:31:e5:2d:b2:2c:de:5e:33:af:52:55:
0d:3b:a9:0c:65:7d:a0:26:0b:c4:ac:0c:2e:1d:e5:05:3c:f0:
6c:d8:7b:7a:26:da:52:d9:04:49:32:d9:3f:38:3c:00:d9:c7:
50:58:89:90:60:1b:fd:b4:06:8d:b0:28:5e:cc:05:f2:9b:9e:
c3:12:25:f6:2c:02:fe:5c:e9:ba:fc:6c:65:72:f6:81:ee:57:
e3:6c:3a:d4:5c:cb:53:c2:47:b9:53:b2:20:3a:f0:87:dd:12:
ff:98:fb:6b:91:e1:c4:d8:49:60:f9:a7:5d:4f:f0:9a:27:df:
58:4e:7c:1f:21:74:fd:ae:ab:bc:08:60:8d:c1:b5:f8:45:2a:
4e:3b:e5:1d:bf:ed:4f:30:8a:8f:a9:6a:59:e3:66:61:ed:98:
83:a7:b8:0c:ad:ad:f7:99:b0:b0:37:b3:ae:d9:ea:97:7d:50:
3a:55:22:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fIIk5RtDWwVa1YRU29gaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNDFjNjY0YzBjMDEzZGZmYjZlMGRkMWQ3M2IzNjljYmE1
ZmJkMWMwHhcNMjUwNjI4MTcwMTE5WhcNMjUwNjI5MTcwMTE5WjAzMTEwLwYDVQQD
Eyg2Mzg2NWNhZWE2ZGE3ZjA5ODdmYTY1OTA5N2RjMDIyODAwNTQ5YWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstP+ta+QBU0ErxUMYZdbKNCl7FxC
jJwjXCWhrD7rjonE3zjw/NNg7tTPTlTGLF+XM/IldUPq560syCe2reZt6dn4YyvW
oJepkXBNFp/C9SqytbiaRWtrgoniWNbf+4+sO/2TbnrA5jTNyBxDZ+qZkAiq4r1i
NaBDHBH+zpWpctNXWGU9qgKaL/hQFHNlB3YZPC7kaTNhN9W9CY/3MWOMZxdmGIf2
Y0E7A5EORd6sXZIa00d452FnFleqtsmA3TRrJi3dzLahWljugv1T61+SGNiOSkcE
JWv3DECq+i30bjUj83WdEEMgo31P25uJUDVGH/Vx+acM1TNT2hR16kQ6NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOGXK6m2n8Jh/plkJfcAigAVJrYMB8GA1UdIwQY
MBaAFF9BxmTAwBPf+24N0dc7Npy6X70cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUt
NjIzMDZhYmRmYTAzLzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUtNjIzMDZhYmRmYTAz
LzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAic4vPqSd
OIVs2noK71p63MBpGz/csKzCumrz5yfi6RnwRwVh4qMZwH3ohzPNvjsoE78dejaA
vsphGzlmnAwrHhYnAiNbwSaakdwGb1jyDjHlLbIs3l4zr1JVDTupDGV9oCYLxKwM
Lh3lBTzwbNh7eibaUtkESTLZPzg8ANnHUFiJkGAb/bQGjbAoXswF8puewxIl9iwC
/lzpuvxsZXL2ge5X42w61FzLU8JHuVOyIDrwh90S/5j7a5HhxNhJYPmnXU/wmiff
WE58HyF0/a6rvAhgjcG1+EUqTjvlHb/tTzCKj6lqWeNmYe2Yg6e4DK2t95mwsDez
rtnql31QOlUiQQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:18 2025 by rpki-client