Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: +W5+D/ViuegWC30wovCzdw5NE2JQD+4au3Fwjachhqw=
Subject key identifier: 77:40:6C:D8:30:0E:D0:95:96:81:CE:12:29:46:9D:AC:3F:58:0D:6C
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 0197B88FE62CB3092757D325F05FF398003F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 1174
Signing time: Sat 28 Jun 2025 22:02:07 +0000
Manifest this update: Sat 28 Jun 2025 22:02:07 +0000
Manifest next update: Sun 29 Jun 2025 22:02:07 +0000
Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=)
2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: +wBc9EhiiGbD+pgyYqbXh9EJQjPIV/H9nGH1lw7WU1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:e6:2c:b3:09:27:57:d3:25:f0:5f:f3:98:00:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Jun 28 22:02:07 2025 GMT
Not After : Jun 29 22:02:07 2025 GMT
Subject: CN=77406cd8300ed0959681ce1229469dac3f580d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:82:68:40:eb:09:bb:10:9a:4f:d3:86:13:
72:f4:b8:76:23:31:37:3d:78:ac:73:72:e4:6f:cb:
9a:32:2a:d6:68:b9:62:88:ba:22:26:7c:ae:9d:44:
df:df:70:db:21:69:a8:b5:04:9e:bc:69:ea:e9:5a:
9c:2f:57:dd:82:46:cf:a8:cc:02:9a:c6:c8:33:c1:
d3:41:3a:6a:c8:a2:4d:5c:19:dc:17:04:ee:53:8b:
30:e2:39:77:ad:91:86:8e:ba:9b:30:da:6e:b3:4d:
9e:27:ca:51:8a:0b:c3:ab:65:1d:ff:b5:15:47:44:
3f:24:96:a2:1a:d6:74:5e:ac:57:d6:a0:2d:6f:d8:
e5:3d:71:e4:45:12:ed:11:18:68:48:94:68:14:09:
3b:48:27:bc:34:51:d0:f8:98:66:c3:08:5f:a2:1c:
c4:f4:68:1d:71:7e:2b:35:63:bf:f1:be:cf:b9:4d:
da:87:d3:50:65:f0:28:79:fb:cb:d7:bf:49:7e:95:
fe:8a:35:31:c7:e8:59:45:0f:a5:59:b5:f3:b9:01:
10:e9:25:b6:80:8b:71:a4:24:90:12:98:cb:5f:fd:
cf:c8:6a:a4:20:81:e4:87:17:14:55:5b:ed:cd:9b:
dd:96:3b:3c:5a:0b:d1:d9:2d:75:9c:d7:dd:bf:c9:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:40:6C:D8:30:0E:D0:95:96:81:CE:12:29:46:9D:AC:3F:58:0D:6C
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f4:c4:9f:10:fc:d6:f9:7c:89:4c:99:3f:ef:11:b0:ac:3c:
02:c3:32:d5:5f:58:27:2f:da:26:df:a3:97:9d:33:2d:ba:ea:
2d:fb:42:14:c2:f6:35:7b:bd:65:33:a8:9a:9d:98:fc:98:ec:
62:5d:e6:59:c5:52:12:9d:17:45:35:4c:ad:96:bd:9b:9b:5a:
10:a9:c0:e7:39:83:25:dd:3b:84:d8:1f:72:9c:d3:be:7b:a1:
d1:16:96:e1:e8:c0:40:56:6a:72:47:78:70:64:00:e2:01:18:
34:b7:75:14:40:d1:20:c1:3e:a4:f4:ac:2f:3a:62:68:67:0e:
5b:1d:29:39:37:90:bf:75:cc:bc:dc:bf:46:4b:e0:14:5c:f3:
d1:43:c0:2e:5c:25:20:96:a2:57:bf:d1:7e:2c:3d:49:ac:45:
1c:75:50:a5:c1:98:0d:90:2e:ff:6a:62:4c:80:ed:ab:0d:b4:
f2:e6:b1:63:56:90:ea:8e:8b:2e:89:a0:49:86:08:a4:d8:06:
c5:d8:0c:64:db:28:e4:4d:02:00:1e:a0:d8:4f:65:76:2e:76:
dc:bc:b2:8d:5a:36:ba:20:0f:9e:26:fd:e0:84:7b:27:c8:77:
3f:60:6b:77:8a:cd:fc:4b:91:ba:64:0f:b9:71:d5:4c:1a:38:
1e:f4:c0:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j+YsswknV9Ml8F/zmAA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTZiY2NiZGM5ZjJlNGJhZGMwYTA1N2VhMDhmN2M3NDgx
ODhiMWYwHhcNMjUwNjI4MjIwMjA3WhcNMjUwNjI5MjIwMjA3WjAzMTEwLwYDVQQD
Eyg3NzQwNmNkODMwMGVkMDk1OTY4MWNlMTIyOTQ2OWRhYzNmNTgwZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApneCaEDrCbsQmk/ThhNy9Lh2IzE3
PXisc3Lkb8uaMirWaLliiLoiJnyunUTf33DbIWmotQSevGnq6VqcL1fdgkbPqMwC
msbIM8HTQTpqyKJNXBncFwTuU4sw4jl3rZGGjrqbMNpus02eJ8pRigvDq2Ud/7UV
R0Q/JJaiGtZ0XqxX1qAtb9jlPXHkRRLtERhoSJRoFAk7SCe8NFHQ+JhmwwhfohzE
9GgdcX4rNWO/8b7PuU3ah9NQZfAoefvL179JfpX+ijUxx+hZRQ+lWbXzuQEQ6SW2
gItxpCSQEpjLX/3PyGqkIIHkhxcUVVvtzZvdljs8WgvR2S11nNfdv8nkJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdAbNgwDtCVloHOEilGnaw/WA1sMB8GA1UdIwQY
MBaAFMVWvMvcny5LrcCgV+oI98dIGIsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYt
NDJlYTU1MTRlNzIyLzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYtNDJlYTU1MTRlNzIy
LzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPTEnxD8
1vl8iUyZP+8RsKw8AsMy1V9YJy/aJt+jl50zLbrqLftCFML2NXu9ZTOomp2Y/Jjs
Yl3mWcVSEp0XRTVMrZa9m5taEKnA5zmDJd07hNgfcpzTvnuh0RaW4ejAQFZqckd4
cGQA4gEYNLd1FEDRIME+pPSsLzpiaGcOWx0pOTeQv3XMvNy/RkvgFFzz0UPALlwl
IJaiV7/Rfiw9SaxFHHVQpcGYDZAu/2piTIDtqw208uaxY1aQ6o6LLomgSYYIpNgG
xdgMZNso5E0CAB6g2E9ldi523LyyjVo2uiAPnib94IR7J8h3P2Brd4rN/EuRumQP
uXHVTBo4HvTAOA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:38:37 2025 by rpki-client