Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json)
Hash identifier: pdY1BCxRTQEf8JF61MIuhWjlslDCnr1bGmE+WunTUZQ=
Subject key identifier: AD:32:2A:D4:C4:48:3D:1A:85:01:A5:32:7E:23:EE:22:C2:5C:C7:01
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 0197B7EA8DC221DBCFB2039C6D5777AC8A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
Manifest number: 1522
Signing time: Sat 28 Jun 2025 19:01:31 +0000
Manifest this update: Sat 28 Jun 2025 19:01:31 +0000
Manifest next update: Sun 29 Jun 2025 19:01:31 +0000
Files and hashes: 1: 2-ZT3D_TT57WgEPZaHLs56UG0Yg.roa (hash: NyVeJy4V1X4eJ9opwnQRbcNHZ8PbRqXsdUICPp/i7rs=)
2: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: EbZ16Y48yvzXbl3KsNV12HcPGe63vfYYHNJQGDE+BhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8d:c2:21:db:cf:b2:03:9c:6d:57:77:ac:8a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Jun 28 19:01:31 2025 GMT
Not After : Jun 29 19:01:31 2025 GMT
Subject: CN=ad322ad4c4483d1a8501a5327e23ee22c25cc701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:2f:8c:3a:5d:52:e3:13:72:6a:31:ea:cb:
66:f0:fd:61:52:97:f8:a3:b9:62:59:83:93:b5:d3:
42:d1:e0:3a:1b:1b:00:9d:c7:0d:9b:75:5a:00:24:
0a:4d:de:77:bc:83:5a:4c:00:70:fa:f1:89:25:3e:
9e:0a:4c:33:b0:96:fe:d9:45:1e:e7:b9:3a:4e:a0:
27:96:84:fe:01:b6:c0:33:c7:da:6c:04:8c:41:73:
3d:58:fa:57:68:4e:6a:01:7f:e3:31:3a:f5:82:aa:
95:ec:1c:8e:17:fc:f9:df:b0:5d:86:a5:a5:fd:a7:
2e:66:7d:5d:87:75:ab:70:77:d2:89:8b:6a:8a:f1:
51:ad:6b:81:53:a7:c1:2f:b8:5a:78:45:34:0c:9e:
fc:7e:1e:bf:01:00:ef:eb:ca:f3:5c:d2:81:90:3e:
86:ce:52:33:af:58:3e:fa:e5:97:f1:82:03:d4:60:
78:f9:45:f9:62:41:68:57:40:aa:01:49:92:61:01:
df:a1:4a:96:8f:1a:d7:fc:a5:22:b5:14:85:f7:ce:
28:bb:c6:e7:5d:90:25:f3:5e:ba:8c:35:cf:40:d5:
37:15:f7:84:7b:26:b7:77:ec:5c:7d:ad:5b:72:c4:
24:ab:e8:2e:88:ef:08:f6:d3:87:0b:e2:ca:dd:55:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:32:2A:D4:C4:48:3D:1A:85:01:A5:32:7E:23:EE:22:C2:5C:C7:01
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c1:ec:ab:33:eb:6e:83:56:8f:e3:59:59:62:71:8a:e4:5a:
58:05:dd:72:50:97:17:d7:a6:73:f2:24:e4:79:70:97:00:82:
4c:04:6f:61:fe:29:1c:5e:eb:40:f1:63:8e:f3:94:1c:66:e2:
73:49:8f:3b:c6:44:4b:ef:90:3c:2c:d9:ad:90:a4:04:57:a3:
97:50:53:98:44:75:f8:19:fa:f3:31:cd:1e:39:a1:66:72:bc:
5f:7f:3a:bc:ed:8b:0b:a7:03:91:11:45:74:9a:86:82:02:0b:
31:01:c1:da:69:b1:d7:0f:2f:2a:51:d1:5c:f8:4a:37:57:bc:
eb:ed:e1:a4:14:a4:a6:e9:11:43:57:05:2b:50:51:9f:e9:d9:
08:ea:6b:6d:e1:6a:f7:18:10:f7:2c:5d:90:4e:09:b4:25:3a:
76:ed:2d:6c:1c:8c:5f:00:74:c3:52:4c:cb:80:61:62:32:59:
04:77:58:1a:7f:a4:c9:ea:04:4f:01:ae:25:8c:c9:6a:79:7d:
cf:cb:34:e6:fd:50:88:f7:ad:62:b8:96:f3:c8:35:92:bb:0c:
c4:d1:a6:5f:f2:5f:5c:71:3d:a2:62:b0:a7:2a:5d:4d:3c:48:
22:33:c1:2b:d8:b8:1c:f5:47:95:8d:b3:cf:70:03:e8:2e:ed:
57:8e:d8:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36o3CIdvPsgOcbVd3rIpYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMWZhMDZkNWRiYWRhNDNkZTQ0ZjRlNGIxZGM5NDkyYmIy
ODdjOWQwHhcNMjUwNjI4MTkwMTMxWhcNMjUwNjI5MTkwMTMxWjAzMTEwLwYDVQQD
EyhhZDMyMmFkNGM0NDgzZDFhODUwMWE1MzI3ZTIzZWUyMmMyNWNjNzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k4vjDpdUuMTcmox6stm8P1hUpf4
o7liWYOTtdNC0eA6GxsAnccNm3VaACQKTd53vINaTABw+vGJJT6eCkwzsJb+2UUe
57k6TqAnloT+AbbAM8fabASMQXM9WPpXaE5qAX/jMTr1gqqV7ByOF/z537BdhqWl
/acuZn1dh3WrcHfSiYtqivFRrWuBU6fBL7haeEU0DJ78fh6/AQDv68rzXNKBkD6G
zlIzr1g++uWX8YID1GB4+UX5YkFoV0CqAUmSYQHfoUqWjxrX/KUitRSF984ou8bn
XZAl8166jDXPQNU3FfeEeya3d+xcfa1bcsQkq+guiO8I9tOHC+LK3VUbDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0yKtTESD0ahQGlMn4j7iLCXMcBMB8GA1UdIwQY
MBaAFF8foG1dutpD3kT05LHclJK7KHydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84NDdkMTctYmE3Yy00ZWFlLTlkNTUt
MjU4NDZkNTlmZDYwLzEvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84NDdkMTctYmE3Yy00ZWFlLTlkNTUtMjU4NDZkNTlmZDYw
LzEvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisHsqzPr
boNWj+NZWWJxiuRaWAXdclCXF9emc/Ik5HlwlwCCTARvYf4pHF7rQPFjjvOUHGbi
c0mPO8ZES++QPCzZrZCkBFejl1BTmER1+Bn68zHNHjmhZnK8X386vO2LC6cDkRFF
dJqGggILMQHB2mmx1w8vKlHRXPhKN1e86+3hpBSkpukRQ1cFK1BRn+nZCOprbeFq
9xgQ9yxdkE4JtCU6du0tbByMXwB0w1JMy4BhYjJZBHdYGn+kyeoETwGuJYzJanl9
z8s05v1QiPetYriW88g1krsMxNGmX/JfXHE9omKwpypdTTxIIjPBK9i4HPVHlY2z
z3AD6C7tV47YMw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:53 2025 by rpki-client