Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier: 0f8Jntd7UVtzsAR4MMmn/7yfjkr3X02BnOLutGcnUZg=
Subject key identifier: 79:78:B1:F2:CE:B4:D7:A3:51:5E:71:F9:4E:15:E4:B8:F9:47:C8:D4
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial: 0197BA0F5D121CA8FF26F816003148856DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 05:00:58 +0000
Manifest this update: Sun 29 Jun 2025 05:00:58 +0000
Manifest next update: Mon 30 Jun 2025 05:00:58 +0000
Files and hashes: 1: oovi2OmG_5VdF1BT8Wlu5iiczL4.roa (hash: ULm+SV4rhE1jkvbhaN1N+xEz8jSZPDpTsULqKLOAFoY=)
2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: 9z2YnSDYaE3e+PbI/Sm8ps2Vr/CaQFwBWWTcawuyrU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:5d:12:1c:a8:ff:26:f8:16:00:31:48:85:6d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Validity
Not Before: Jun 29 05:00:58 2025 GMT
Not After : Jun 30 05:00:58 2025 GMT
Subject: CN=7978b1f2ceb4d7a3515e71f94e15e4b8f947c8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:e4:e4:38:ab:06:e2:e1:ab:12:43:90:03:
96:92:1f:c7:4b:e0:b6:6a:00:cb:00:70:5e:f3:05:
32:b5:45:e6:37:ef:67:ab:c0:af:c7:f5:a7:c5:e3:
20:d1:33:77:42:65:aa:e2:91:ae:6c:81:91:55:6a:
77:05:ca:ae:f5:16:21:84:dc:46:e0:51:25:da:33:
fc:20:9c:90:9c:c9:42:bd:2e:b3:d6:9a:05:9a:7b:
f9:02:4e:3f:b4:94:79:5c:93:b0:ed:c2:fa:41:fb:
e4:e8:d1:17:b1:14:d4:1a:05:3e:f5:81:f4:25:ab:
81:6d:dc:49:f6:21:c5:3c:6a:ad:b5:ce:b6:bd:15:
8d:92:20:1c:14:7b:6a:78:38:8c:34:b1:bc:9d:90:
bd:81:31:e4:e1:37:6e:ee:8e:42:7d:7b:be:72:8b:
f6:9b:2f:a4:2f:e0:85:d7:5f:e4:8e:3b:1b:45:74:
49:ef:b8:15:9c:fa:fc:98:27:70:f6:4a:c2:9b:a9:
96:fe:53:c0:03:6a:08:80:b6:74:df:5c:cd:c5:e4:
a1:7c:e3:f1:2a:fa:47:61:a9:72:75:56:ed:08:57:
3f:57:83:28:4d:69:61:c4:20:3d:cb:3b:32:43:61:
b8:10:96:91:6b:bb:ac:4e:38:a0:9a:0f:12:0a:e7:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:78:B1:F2:CE:B4:D7:A3:51:5E:71:F9:4E:15:E4:B8:F9:47:C8:D4
X509v3 Authority Key Identifier:
keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:92:47:66:25:77:e4:92:4e:49:c4:0d:c1:74:a6:5b:22:0e:
a0:2a:94:5d:fe:2c:f9:ce:c2:7a:d5:da:78:54:fa:f9:3b:2a:
ce:c7:1b:1a:00:cb:ec:a6:2d:2c:a4:00:08:f0:26:1d:a2:ca:
f5:30:b0:cf:58:d5:d4:74:38:12:49:b9:29:ec:e3:a0:20:68:
d7:9a:62:33:c8:eb:e8:dc:f4:fa:5e:49:78:28:fd:ac:3a:df:
ad:92:01:24:eb:1e:f6:f0:3f:f6:2d:20:44:28:14:e9:ca:f1:
53:5c:fe:0a:0c:61:b2:3b:17:1b:70:8a:3d:ff:85:9f:0e:48:
80:6c:27:41:18:ce:a4:b4:4e:6a:7f:8b:c4:2c:bd:ef:18:f1:
e9:8a:91:ce:de:12:41:a1:9b:01:e4:54:10:f5:71:1e:7c:eb:
a7:fc:5f:df:a6:23:fd:f2:9b:49:2e:fd:ce:44:6c:75:23:ae:
35:40:48:54:38:b1:4c:57:42:5a:d8:eb:de:91:e3:66:c8:8e:
df:26:3a:80:85:0c:9b:b6:88:ef:44:8d:9c:6c:ad:33:20:2d:
83:db:54:8a:f7:8d:b1:c5:3e:ea:e2:b7:a8:ac:11:21:32:5b:
60:d6:34:1d:cb:87:62:b2:72:c7:f2:02:0b:a8:0d:83:b5:3f:
fd:3b:82:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6D10SHKj/JvgWADFIhW2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTQ1NDY1ZjA2OTZhNzBkNWYwM2VlMWQ1ZGVjYWZkNDFk
YzYzODUwHhcNMjUwNjI5MDUwMDU4WhcNMjUwNjMwMDUwMDU4WjAzMTEwLwYDVQQD
Eyg3OTc4YjFmMmNlYjRkN2EzNTE1ZTcxZjk0ZTE1ZTRiOGY5NDdjOGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPzk5DirBuLhqxJDkAOWkh/HS+C2
agDLAHBe8wUytUXmN+9nq8Cvx/WnxeMg0TN3QmWq4pGubIGRVWp3Bcqu9RYhhNxG
4FEl2jP8IJyQnMlCvS6z1poFmnv5Ak4/tJR5XJOw7cL6Qfvk6NEXsRTUGgU+9YH0
JauBbdxJ9iHFPGqttc62vRWNkiAcFHtqeDiMNLG8nZC9gTHk4Tdu7o5CfXu+cov2
my+kL+CF11/kjjsbRXRJ77gVnPr8mCdw9krCm6mW/lPAA2oIgLZ031zNxeShfOPx
KvpHYalydVbtCFc/V4MoTWlhxCA9yzsyQ2G4EJaRa7usTjigmg8SCueCAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHl4sfLOtNejUV5x+U4V5Lj5R8jUMB8GA1UdIwQY
MBaAFMQUVGXwaWpw1fA+4dXeyv1B3GOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJSVVpmQnBhbkRWOEQ3aDFkN0tfVUhjWTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xYTU4ZDQtMTMzZi00NzUwLWE3ZWQt
NjVlOTk2MzEyY2JlLzEveEJSVVpmQnBhbkRWOEQ3aDFkN0tfVUhjWTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8xYTU4ZDQtMTMzZi00NzUwLWE3ZWQtNjVlOTk2MzEyY2Jl
LzEveEJSVVpmQnBhbkRWOEQ3aDFkN0tfVUhjWTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZJHZiV3
5JJOScQNwXSmWyIOoCqUXf4s+c7CetXaeFT6+TsqzscbGgDL7KYtLKQACPAmHaLK
9TCwz1jV1HQ4Ekm5KezjoCBo15piM8jr6Nz0+l5JeCj9rDrfrZIBJOse9vA/9i0g
RCgU6crxU1z+CgxhsjsXG3CKPf+Fnw5IgGwnQRjOpLROan+LxCy97xjx6YqRzt4S
QaGbAeRUEPVxHnzrp/xf36Yj/fKbSS79zkRsdSOuNUBIVDixTFdCWtjr3pHjZsiO
3yY6gIUMm7aI70SNnGytMyAtg9tUiveNscU+6uK3qKwRITJbYNY0HcuHYrJyx/IC
C6gNg7U//TuClA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:04:33 2025 by rpki-client