Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File: xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier: nmgDoNhoi+B9ZgNxCL32AgQxVwGC+xns5LXf0u/l/T0=
Subject key identifier: E5:06:52:CC:D9:DD:E2:70:1D:27:F9:9E:68:95:89:84:D2:04:1A:1A
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial: 0197B7B2E5C55B1617916BED41DC64D7D060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number: 14CA
Signing time: Sat 28 Jun 2025 18:00:44 +0000
Manifest this update: Sat 28 Jun 2025 18:00:44 +0000
Manifest next update: Sun 29 Jun 2025 18:00:44 +0000
Files and hashes: 1: 0D1cZUMTiqausR0yB4Xw8AGD91Y.roa (hash: P0VFSa5grr5g9c7ABjsVrUERemiG8ev+nwOdbvgc3k0=)
2: QPusgTTEf8Wg1WVLNKmPSmYCqFU.roa (hash: 06h/pyTSclOFt6N4vyOy5CCJkDE5PrqzeDGGP4Ri+K0=)
3: WjOmLQNoXIGKQgnNRMvsBtSl2rg.roa (hash: wNgkpDpelkaLW9cw3ktDA884g92/B+HsSMkXWMNF8/4=)
4: evx28IXwOssrh2ERCzJjqUVnHiA.roa (hash: UTeUnE//0NUZdu2DWXKhAAFi5WcYzx4EajufTh1aEMI=)
5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: U0K9o/C2+pk+eujk+9XiLOm95HnYdCmCxbS6AS2ft/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e5:c5:5b:16:17:91:6b:ed:41:dc:64:d7:d0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Validity
Not Before: Jun 28 18:00:44 2025 GMT
Not After : Jun 29 18:00:44 2025 GMT
Subject: CN=e50652ccd9dde2701d27f99e68958984d2041a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:f2:7b:a4:25:65:fc:0d:02:59:b7:ea:13:
c3:52:07:73:80:09:88:ea:5b:8e:4f:b2:b3:d5:e2:
72:fa:8e:10:0a:0e:e1:65:8b:33:a8:50:4f:a6:49:
dd:84:2e:5a:2b:32:c0:fb:12:f9:eb:fd:8e:7f:6b:
2c:40:ad:39:e8:84:6b:74:45:36:d2:08:0c:18:db:
f7:02:48:1f:06:50:93:83:03:38:9a:49:69:45:14:
df:5b:30:eb:10:04:4b:ef:54:c2:dd:17:7a:63:70:
9b:fe:a7:57:26:fd:ce:8f:12:9d:e3:94:5e:8f:60:
c8:14:dd:2c:bf:83:f9:93:ee:78:7b:06:36:a7:5d:
44:d3:a3:18:6c:21:35:11:4d:a8:81:c2:68:96:3a:
8f:28:39:81:a1:ad:0f:bc:b4:d8:82:7b:dc:f6:db:
6c:84:14:2c:2e:94:48:68:c1:75:e9:e4:5f:9d:46:
1c:7b:1f:4b:7e:45:10:20:e7:a1:f7:20:d4:d7:8e:
9b:6c:3c:cc:34:f0:03:88:72:c3:e9:06:d5:0b:4f:
87:92:50:6b:49:c3:76:9c:db:e7:3c:15:fc:ef:5e:
c4:4f:69:2a:a4:09:ee:7a:6c:1f:e2:03:06:fe:02:
94:43:43:92:6e:29:77:26:26:7d:72:fe:4d:af:ed:
c9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:06:52:CC:D9:DD:E2:70:1D:27:F9:9E:68:95:89:84:D2:04:1A:1A
X509v3 Authority Key Identifier:
keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7b:39:2c:c5:49:e2:96:32:94:6e:3e:40:2b:eb:b0:3c:f5:
99:38:35:5e:c0:7f:e5:6b:2f:08:e2:37:7c:cb:ab:3a:5f:9b:
3a:a4:d2:54:20:57:a1:32:fc:93:4a:fe:ff:bb:67:df:84:4e:
12:05:a1:40:07:ab:ac:42:37:87:58:9e:d9:da:10:c6:fa:c8:
5b:48:ae:2e:cf:e7:2b:2a:00:b7:76:9d:2d:e2:78:42:ee:4e:
6e:70:68:b0:94:53:c4:29:12:ec:54:56:88:96:e9:40:13:36:
b6:d2:0f:99:ad:cf:fe:15:41:5a:7f:f4:dc:e4:b5:34:6e:fa:
7c:7a:63:83:26:47:42:d8:58:f2:b5:a7:61:36:ee:c5:af:6c:
c3:36:6f:f2:7b:fe:0a:4e:89:41:1d:ed:ba:a7:c3:1c:b6:89:
93:82:32:65:e3:14:47:dc:c1:d6:5b:da:1b:f0:48:45:d2:9b:
12:13:c4:a9:4d:54:4e:be:e4:44:91:b1:e9:f8:48:39:cf:89:
c4:2f:ed:1a:47:9b:97:63:17:8c:ad:7d:f3:68:0a:35:3d:a4:
89:e0:e4:a7:26:51:e2:b4:5f:16:3e:8b:41:e4:bf:1a:21:27:
2a:18:97:ae:ae:96:6a:df:18:da:27:ed:dc:96:77:0f:7f:0f:
ec:6c:b2:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3suXFWxYXkWvtQdxk19BgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3Mzg4MDdhYmI5Y2UxNWI3YTg5MjU5MmI2ZjAwM2YxYTNl
MTZiNjAwHhcNMjUwNjI4MTgwMDQ0WhcNMjUwNjI5MTgwMDQ0WjAzMTEwLwYDVQQD
EyhlNTA2NTJjY2Q5ZGRlMjcwMWQyN2Y5OWU2ODk1ODk4NGQyMDQxYTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya/ye6QlZfwNAlm36hPDUgdzgAmI
6luOT7Kz1eJy+o4QCg7hZYszqFBPpkndhC5aKzLA+xL56/2Of2ssQK056IRrdEU2
0ggMGNv3AkgfBlCTgwM4mklpRRTfWzDrEARL71TC3Rd6Y3Cb/qdXJv3OjxKd45Re
j2DIFN0sv4P5k+54ewY2p11E06MYbCE1EU2ogcJoljqPKDmBoa0PvLTYgnvc9tts
hBQsLpRIaMF16eRfnUYcex9LfkUQIOeh9yDU146bbDzMNPADiHLD6QbVC0+HklBr
ScN2nNvnPBX8717ET2kqpAnuemwf4gMG/gKUQ0OSbil3JiZ9cv5Nr+3JNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUGUszZ3eJwHSf5nmiViYTSBBoaMB8GA1UdIwQY
MBaAFMc4gHq7nOFbeoklkrbwA/Gj4WtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWIt
M2QxZjMwZTA5MjNiLzEveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWItM2QxZjMwZTA5MjNi
LzEveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3s5LMVJ
4pYylG4+QCvrsDz1mTg1XsB/5WsvCOI3fMurOl+bOqTSVCBXoTL8k0r+/7tn34RO
EgWhQAerrEI3h1ie2doQxvrIW0iuLs/nKyoAt3adLeJ4Qu5ObnBosJRTxCkS7FRW
iJbpQBM2ttIPma3P/hVBWn/03OS1NG76fHpjgyZHQthY8rWnYTbuxa9swzZv8nv+
Ck6JQR3tuqfDHLaJk4IyZeMUR9zB1lvaG/BIRdKbEhPEqU1UTr7kRJGx6fhIOc+J
xC/tGkebl2MXjK1982gKNT2kieDkpyZR4rRfFj6LQeS/GiEnKhiXrq6Wat8Y2ift
3JZ3D38P7GyyRw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:35:40 2025 by rpki-client