Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: dD4+Mn6NXCx3W0VW+q7OINwv6O5hFPEHdoBPYGYWfcw=
Subject key identifier: CC:0B:57:DB:94:C7:B5:10:E2:8D:01:B9:C6:C0:3A:B9:C1:E7:97:77
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 0197B8FD520F2A9298C751619426442BF18C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 0B2A
Signing time: Sun 29 Jun 2025 00:01:38 +0000
Manifest this update: Sun 29 Jun 2025 00:01:38 +0000
Manifest next update: Mon 30 Jun 2025 00:01:38 +0000
Files and hashes: 1: Zjp5spJdh84vGP_NYi-8y5LIKQU.roa (hash: rWVrxK253VGyHCI0i7PfPHvDu/qTwuTk4y8VuJ8okKA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: EnIPcMOaYl9ugsCToyTOs6h4Mz/a1i59Ra1mEzfmuzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:52:0f:2a:92:98:c7:51:61:94:26:44:2b:f1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Jun 29 00:01:38 2025 GMT
Not After : Jun 30 00:01:38 2025 GMT
Subject: CN=cc0b57db94c7b510e28d01b9c6c03ab9c1e79777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:84:06:33:33:7c:c9:2b:4d:ad:1d:1d:66:cf:
e6:40:d8:e5:4d:6c:a5:ec:3d:2c:82:13:9a:f9:4e:
74:1b:d4:4b:82:05:cb:9e:d4:6b:d0:67:68:ac:58:
37:db:fc:15:77:f2:ca:c5:6e:1c:00:56:fd:00:6e:
57:48:42:01:a3:4e:8a:e0:d7:25:f7:f5:9b:1c:77:
2e:ed:e4:07:5e:f0:cc:47:b4:e5:e4:44:0b:ff:df:
95:3c:6c:47:eb:ad:97:87:19:90:07:e2:b0:b1:84:
25:57:58:1c:9b:16:1f:a4:d7:a9:1a:c3:80:9e:32:
f3:b1:1e:02:61:1e:21:94:0c:44:84:1e:4d:94:54:
e2:49:65:8c:da:a0:79:a3:80:82:19:a1:89:9f:cf:
db:41:e7:8a:7c:8f:80:ab:e2:e3:39:63:03:76:9c:
dc:1d:bb:8c:45:ec:2d:3b:07:67:23:84:c4:b6:6b:
cc:8d:0d:48:da:b0:ef:ad:af:ed:5a:f8:9f:2b:e9:
45:14:2e:06:c3:2a:17:3f:cd:1c:a8:71:94:4d:2a:
7d:40:5d:97:d7:40:6a:7f:43:08:b9:7f:30:c5:c3:
14:2e:69:99:ab:a0:a1:04:d3:17:42:55:50:d1:b2:
7c:99:27:d4:32:dd:fd:77:45:23:c9:fd:de:2d:2c:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0B:57:DB:94:C7:B5:10:E2:8D:01:B9:C6:C0:3A:B9:C1:E7:97:77
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:70:61:7a:c0:90:4f:54:7a:c3:ee:d0:cf:e8:f1:50:75:4d:
a9:57:1f:09:a2:da:14:13:21:7b:30:b5:67:5c:5f:76:be:24:
58:42:01:c0:b9:1e:7e:71:35:bd:54:5e:f1:86:c6:64:32:b7:
b4:3a:71:d6:40:7b:0c:bf:dd:82:ef:2a:15:17:36:f5:f9:43:
8f:0f:18:30:ad:63:9b:09:40:f3:2d:e7:f0:e8:16:96:a5:ab:
ec:dd:55:dd:35:cc:1e:92:c7:c2:1c:7b:ff:b2:7c:f7:b0:6c:
7c:0b:12:92:08:ef:66:60:62:9b:77:e4:52:7d:fc:9c:16:4c:
b8:fb:96:28:6f:62:67:9d:27:58:f3:69:5f:f8:56:a7:b0:b8:
36:21:2d:e3:85:3d:22:35:bd:45:7d:41:2d:c4:3e:44:aa:d6:
38:00:ae:fe:bc:88:29:32:b5:5c:96:42:dd:0a:49:11:5d:e4:
6e:b6:98:07:22:b4:6b:67:f5:72:64:4c:ef:42:4b:22:70:b4:
1d:77:4a:2d:60:a2:e4:94:83:01:bc:cd:f9:e7:79:fc:b1:33:
95:4e:f0:90:23:04:42:1c:78:1c:ca:da:a2:74:85:77:3c:8b:
8c:68:5d:16:04:05:e8:f9:0b:7c:2c:de:bc:d8:8a:30:3d:a6:
70:64:19:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/VIPKpKYx1FhlCZEK/GMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3Mzg5Y2U4MjZiYzhkMjY4NjliNDUyZjNjZDkzNjkwMmM1
NTJmYmYwHhcNMjUwNjI5MDAwMTM4WhcNMjUwNjMwMDAwMTM4WjAzMTEwLwYDVQQD
EyhjYzBiNTdkYjk0YzdiNTEwZTI4ZDAxYjljNmMwM2FiOWMxZTc5Nzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YQGMzN8yStNrR0dZs/mQNjlTWyl
7D0sghOa+U50G9RLggXLntRr0GdorFg32/wVd/LKxW4cAFb9AG5XSEIBo06K4Ncl
9/WbHHcu7eQHXvDMR7Tl5EQL/9+VPGxH662XhxmQB+KwsYQlV1gcmxYfpNepGsOA
njLzsR4CYR4hlAxEhB5NlFTiSWWM2qB5o4CCGaGJn8/bQeeKfI+Aq+LjOWMDdpzc
HbuMRewtOwdnI4TEtmvMjQ1I2rDvra/tWvifK+lFFC4GwyoXP80cqHGUTSp9QF2X
10Bqf0MIuX8wxcMULmmZq6ChBNMXQlVQ0bJ8mSfUMt39d0Ujyf3eLSz4EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwLV9uUx7UQ4o0BucbAOrnB55d3MB8GA1UdIwQY
MBaAFMc4nOgmvI0mhptFLzzZNpAsVS+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kYzFkMDktOWY2OS00NzFiLWJlN2Et
NTIwMDhkMWNiOWI2LzEveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kYzFkMDktOWY2OS00NzFiLWJlN2EtNTIwMDhkMWNiOWI2
LzEveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnBhesCQ
T1R6w+7Qz+jxUHVNqVcfCaLaFBMhezC1Z1xfdr4kWEIBwLkefnE1vVRe8YbGZDK3
tDpx1kB7DL/dgu8qFRc29flDjw8YMK1jmwlA8y3n8OgWlqWr7N1V3TXMHpLHwhx7
/7J897BsfAsSkgjvZmBim3fkUn38nBZMuPuWKG9iZ50nWPNpX/hWp7C4NiEt44U9
IjW9RX1BLcQ+RKrWOACu/ryIKTK1XJZC3QpJEV3kbraYByK0a2f1cmRM70JLInC0
HXdKLWCi5JSDAbzN+ed5/LEzlU7wkCMEQhx4HMraonSFdzyLjGhdFgQF6PkLfCze
vNiKMD2mcGQZdQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:41 2025 by rpki-client