Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File: x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier: x+IFqiP6Aa6QHJpJY9Z57NNhxUw3BjzcFmWsmoTdjvc=
Subject key identifier: DC:58:73:8E:B6:3B:CB:8C:A1:94:18:0F:17:C7:02:0F:A1:73:34:8A
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial: 0197B6D7867AC39BFD434FDCBDE6F472CF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number: 12C7
Signing time: Sat 28 Jun 2025 14:01:07 +0000
Manifest this update: Sat 28 Jun 2025 14:01:07 +0000
Manifest next update: Sun 29 Jun 2025 14:01:07 +0000
Files and hashes: 1: 1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa (hash: 5WgQd9Yh0UTrO+r9EgLHuyHwMYhN32NKq3EDRy9j2p0=)
2: 7yURIEiYXPhLVZDi97wbUcsfcDY.roa (hash: Ol8VywPbGCR2MgIy9CM4htLL8MW0LNUUW5y21OBGiZM=)
3: I2QulkDn2KJ47c0S4-OMmVLx31g.roa (hash: 6xzBl4bZ4a5rXXVvnxUC4raf2cq3cMarrtfKS85kss0=)
4: RipMkwup9NsgAPIlQi1_XcX5wqM.roa (hash: PKXzaXWv76nde6R//GV8jsOM053aaHLrBAjby7FXNqk=)
5: b4vNMGbRo2o67bz3u22uz2ItyKI.roa (hash: F56Nx008CaMRp5Gdw8I8PExmWIZfZ1jjPIYQMLnTJ8s=)
6: hyGdIxYjhpqU0-02Qe9kMQYj3as.roa (hash: 9uhvciX7Lxjh2PeJ2H7HVv5jBuVg9P3AFweq88tYGFU=)
7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: ysM4jeEZN4i/NOVygf16010UbNm3Rt8fsJMcm9kk9I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:86:7a:c3:9b:fd:43:4f:dc:bd:e6:f4:72:cf:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Validity
Not Before: Jun 28 14:01:07 2025 GMT
Not After : Jun 29 14:01:07 2025 GMT
Subject: CN=dc58738eb63bcb8ca194180f17c7020fa173348a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c1:6b:b8:74:b9:da:c8:32:f4:f9:78:e4:dd:
54:43:2f:33:a9:12:09:5e:94:38:54:e4:b6:60:3d:
e3:20:4b:ae:cd:7d:dc:19:74:f6:96:58:75:b3:6b:
48:57:2a:a7:95:93:e8:0e:82:bb:ff:d7:23:5a:88:
d7:1a:92:1c:2f:3c:35:98:ff:91:0c:a3:45:60:29:
73:bc:f2:6b:9a:e4:e2:0c:5c:06:b0:f1:7d:4c:10:
31:23:85:6e:69:9d:82:03:9b:c2:82:2d:da:23:69:
8a:8d:46:6d:36:e4:85:11:0a:cb:42:97:ff:46:7a:
06:83:73:ed:26:ad:ae:b2:d6:0f:04:34:6a:ec:82:
70:11:97:2c:2e:06:34:8d:d7:b7:b0:25:57:28:5a:
a9:06:b6:91:0b:b6:22:57:13:d8:48:5d:af:e1:89:
f6:58:ce:bd:56:ec:4c:43:cd:00:2b:6f:e2:7a:2b:
c4:7c:5b:4b:d5:66:fe:25:89:78:51:e6:36:a7:79:
e2:d2:a3:52:48:c1:98:d7:7f:ed:07:f3:94:86:06:
72:d2:99:84:2c:d8:e7:cd:b8:dd:bf:25:98:3b:d0:
9d:08:5f:24:54:fd:d1:de:b3:d3:79:50:d8:5a:21:
0b:3a:12:e8:d4:d5:30:9d:e6:7c:48:b7:26:25:13:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:58:73:8E:B6:3B:CB:8C:A1:94:18:0F:17:C7:02:0F:A1:73:34:8A
X509v3 Authority Key Identifier:
keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:89:8f:12:44:ad:0e:c5:68:8e:9f:e1:0a:fd:c1:38:d4:76:
54:4b:21:62:c1:7a:86:ae:fd:28:2f:47:d3:6e:40:96:c0:08:
c0:05:64:e6:2c:eb:cc:b3:f3:40:a9:59:e3:69:80:05:e5:79:
43:74:5c:95:9c:ba:ce:59:53:81:b4:cf:30:31:1b:f2:33:24:
17:67:7c:b8:94:81:29:a7:81:60:72:b4:81:e2:8d:e2:61:d6:
a8:08:f8:d1:62:3a:a7:ef:5f:65:d2:cf:37:e7:bd:f2:bc:ef:
00:aa:70:41:cd:12:95:e9:46:be:b5:09:69:b4:6e:e7:c2:cc:
61:28:0c:bc:c9:3d:ee:72:50:02:e0:a9:1d:48:34:8b:f8:33:
75:99:15:a1:45:41:0b:2c:3b:05:3e:f8:9b:6b:1f:77:60:53:
b5:9d:73:ae:7c:a2:2e:d1:7f:ea:52:23:a3:de:42:5e:3b:59:
c7:c8:ab:0e:14:9a:c4:75:d9:8d:8c:2e:87:2c:06:dc:52:0d:
4e:f6:af:fa:ee:f1:17:22:40:c8:9f:e0:1d:60:cc:5e:07:b9:
a5:8a:81:28:8d:29:00:40:84:62:c0:80:87:61:8e:16:73:f7:
d4:8e:ab:96:31:de:f1:5a:2c:0d:46:43:5c:4a:77:bf:03:0a:
6a:3c:dd:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe214Z6w5v9Q0/cveb0cs9KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3OTgzYjNhOTc1OGZjYmU3ODczM2Q5MTU1YWVkMjY2Yzg4
MmEyM2MwHhcNMjUwNjI4MTQwMTA3WhcNMjUwNjI5MTQwMTA3WjAzMTEwLwYDVQQD
EyhkYzU4NzM4ZWI2M2JjYjhjYTE5NDE4MGYxN2M3MDIwZmExNzMzNDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cFruHS52sgy9Pl45N1UQy8zqRIJ
XpQ4VOS2YD3jIEuuzX3cGXT2llh1s2tIVyqnlZPoDoK7/9cjWojXGpIcLzw1mP+R
DKNFYClzvPJrmuTiDFwGsPF9TBAxI4VuaZ2CA5vCgi3aI2mKjUZtNuSFEQrLQpf/
RnoGg3PtJq2ustYPBDRq7IJwEZcsLgY0jde3sCVXKFqpBraRC7YiVxPYSF2v4Yn2
WM69VuxMQ80AK2/ieivEfFtL1Wb+JYl4UeY2p3ni0qNSSMGY13/tB/OUhgZy0pmE
LNjnzbjdvyWYO9CdCF8kVP3R3rPTeVDYWiELOhLo1NUwneZ8SLcmJRND5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxYc462O8uMoZQYDxfHAg+hczSKMB8GA1UdIwQY
MBaAFMeYOzqXWPy+eHM9kVWu0mbIgqI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEt
MjM4NDA1ZjJjZGU5LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEtMjM4NDA1ZjJjZGU5
LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmomPEkSt
DsVojp/hCv3BONR2VEshYsF6hq79KC9H025AlsAIwAVk5izrzLPzQKlZ42mABeV5
Q3RclZy6zllTgbTPMDEb8jMkF2d8uJSBKaeBYHK0geKN4mHWqAj40WI6p+9fZdLP
N+e98rzvAKpwQc0SlelGvrUJabRu58LMYSgMvMk97nJQAuCpHUg0i/gzdZkVoUVB
Cyw7BT74m2sfd2BTtZ1zrnyiLtF/6lIjo95CXjtZx8irDhSaxHXZjYwuhywG3FIN
Tvav+u7xFyJAyJ/gHWDMXge5pYqBKI0pAECEYsCAh2GOFnP31I6rljHe8VosDUZD
XEp3vwMKajzdAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:26 2025 by rpki-client