Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
File: xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json)
Hash identifier: kgIU5+XpmyWx9TAM7+/NvBfTcDwtELwRy0y0ktdnqiE=
Subject key identifier: 72:E0:AC:D8:F0:DF:FD:65:7D:2F:2D:92:84:DF:A3:E0:3B:5A:09:C9
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial: 0197B6A1C2049E72A489A8EE9481585F54D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:02:23 +0000
Manifest this update: Sat 28 Jun 2025 13:02:23 +0000
Manifest next update: Sun 29 Jun 2025 13:02:23 +0000
Files and hashes: 1: jdCs0ZL0SC55THdB8buccPHazLk.roa (hash: Ysfj2YuY8qZacfJ0Pia1kl0dqiNsbRo1lLBBPEofGfg=)
2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: mXn0ebunOXnt20boCDZwTvixIgxQyEM6rLcHQrai1rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c2:04:9e:72:a4:89:a8:ee:94:81:58:5f:54:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
Validity
Not Before: Jun 28 13:02:23 2025 GMT
Not After : Jun 29 13:02:23 2025 GMT
Subject: CN=72e0acd8f0dffd657d2f2d9284dfa3e03b5a09c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a2:dc:d2:1c:eb:72:68:cf:49:b1:36:c6:1e:
88:a4:44:9e:48:84:b0:3b:f0:89:28:8e:77:df:1f:
6c:4b:41:2f:8b:6f:69:97:ac:d9:d3:6e:01:7b:83:
13:77:e4:44:d4:03:5b:0f:a0:4f:63:0f:6c:66:6a:
d3:a3:10:5c:0d:5f:35:a8:cc:c8:39:c3:53:b8:f1:
be:bc:1a:35:7c:1a:3b:5a:a7:3d:45:f0:13:a0:a7:
77:0c:8a:f5:6b:04:e2:5a:2c:ae:1f:4a:f8:18:51:
58:6c:5c:22:79:1d:53:54:5e:88:c2:8d:27:f5:a6:
e0:ed:56:87:66:8d:e9:0c:af:36:7c:63:9b:c0:6d:
ac:fa:fe:74:69:dc:25:f7:72:0b:b6:ef:a7:7e:13:
bd:38:23:0e:e4:c8:e4:93:5d:a0:a7:01:d9:c9:48:
27:28:3f:85:2c:26:05:10:21:01:dc:bd:02:01:13:
35:34:e3:c4:b3:06:ee:fe:8e:38:54:a2:75:19:42:
86:e3:e0:75:30:95:7e:03:2f:40:6a:aa:3f:0c:74:
bd:f3:0a:57:f2:26:89:1a:70:51:ff:46:22:dd:64:
3d:e9:7e:8e:79:26:54:54:e5:73:9a:22:00:a9:9e:
1e:99:28:a9:e4:2e:f3:f1:47:a7:46:1c:4d:8c:72:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E0:AC:D8:F0:DF:FD:65:7D:2F:2D:92:84:DF:A3:E0:3B:5A:09:C9
X509v3 Authority Key Identifier:
keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e5:85:1f:ef:6c:fa:c7:c4:10:00:00:42:ee:43:8f:2e:a6:
00:82:7a:59:e3:a7:23:6d:fe:90:4d:0e:8c:ae:12:c5:39:dd:
ee:79:d6:44:28:49:fa:79:42:19:d3:38:63:d2:b0:e6:54:4c:
66:2e:0d:c1:9a:9e:fd:29:76:a9:be:40:fc:35:fb:6b:96:d0:
bb:29:ce:bc:1d:18:d6:67:51:f5:cd:03:d8:5c:14:59:98:31:
5a:b1:bb:60:c1:e3:a9:f0:42:b5:c4:23:8f:e3:f0:60:ee:0d:
76:a4:52:46:64:cf:61:42:64:24:55:70:a3:b4:9f:ab:a1:2c:
38:78:51:9d:bc:8b:b6:37:bd:1e:eb:f4:64:88:b5:31:bf:ce:
cd:26:6f:93:83:81:9a:eb:4c:10:0c:be:4e:7e:62:38:14:82:
63:bb:1a:ae:a2:0d:06:d1:47:83:b9:c0:5e:44:59:66:91:c5:
af:9a:d5:7f:17:5c:0f:ad:5b:ab:17:96:2a:b3:35:19:8c:d8:
94:49:40:25:b1:f5:c4:84:05:3d:14:3d:37:8e:5f:46:31:10:
cb:6e:16:40:e6:e9:4e:46:bb:d9:10:a1:1d:2a:8c:8e:96:6f:
20:c7:31:cd:93:60:fa:04:7f:7d:e0:06:82:68:de:74:ff:45:
47:f0:16:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ocIEnnKkiajulIFYX1TSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MDQ5MTA5MjEzMGRlZGQ4NDY2ZmZkNWNjNTEwNTc2Yzg5
NGRmNmUwHhcNMjUwNjI4MTMwMjIzWhcNMjUwNjI5MTMwMjIzWjAzMTEwLwYDVQQD
Eyg3MmUwYWNkOGYwZGZmZDY1N2QyZjJkOTI4NGRmYTNlMDNiNWEwOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KLc0hzrcmjPSbE2xh6IpESeSISw
O/CJKI533x9sS0Evi29pl6zZ024Be4MTd+RE1ANbD6BPYw9sZmrToxBcDV81qMzI
OcNTuPG+vBo1fBo7Wqc9RfAToKd3DIr1awTiWiyuH0r4GFFYbFwieR1TVF6Iwo0n
9abg7VaHZo3pDK82fGObwG2s+v50adwl93ILtu+nfhO9OCMO5Mjkk12gpwHZyUgn
KD+FLCYFECEB3L0CARM1NOPEswbu/o44VKJ1GUKG4+B1MJV+Ay9Aaqo/DHS98wpX
8iaJGnBR/0Yi3WQ96X6OeSZUVOVzmiIAqZ4emSip5C7z8UenRhxNjHIqmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLgrNjw3/1lfS8tkoTfo+A7WgnJMB8GA1UdIwQY
MBaAFMUEkQkhMN7dhGb/1cxRBXbIlN9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2EyNmMtYzM3My00ZTZkLTlmZDgt
YmYxOTFkOWEyYzljLzEveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kN2EyNmMtYzM3My00ZTZkLTlmZDgtYmYxOTFkOWEyYzlj
LzEveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuWFH+9s
+sfEEAAAQu5Djy6mAIJ6WeOnI23+kE0OjK4SxTnd7nnWRChJ+nlCGdM4Y9Kw5lRM
Zi4NwZqe/Sl2qb5A/DX7a5bQuynOvB0Y1mdR9c0D2FwUWZgxWrG7YMHjqfBCtcQj
j+PwYO4NdqRSRmTPYUJkJFVwo7Sfq6EsOHhRnbyLtje9Huv0ZIi1Mb/OzSZvk4OB
mutMEAy+Tn5iOBSCY7sarqINBtFHg7nAXkRZZpHFr5rVfxdcD61bqxeWKrM1GYzY
lElAJbH1xIQFPRQ9N45fRjEQy24WQObpTka72RChHSqMjpZvIMcxzZNg+gR/feAG
gmjedP9FR/AWAw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:20 2025 by rpki-client