Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier: shLpUNEKQu16tOUPDgcSu2Vw4uLOnPsq6EjlI3TDQMQ=
Subject key identifier: D4:87:7C:C3:1C:06:37:FB:16:4E:65:A8:C1:E4:8E:8E:42:98:5B:ED
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial: 0197B7EA4091C45F8A6025D125B921B89637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number: 0A08
Signing time: Sat 28 Jun 2025 19:01:11 +0000
Manifest this update: Sat 28 Jun 2025 19:01:11 +0000
Manifest next update: Sun 29 Jun 2025 19:01:11 +0000
Files and hashes: 1: OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa (hash: e7Vy7pCIoWDvqhKmOHXfSd0NE1hCUf1lKUMb+Ggiqf0=)
2: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: b6+907LzIx9/L8rM2dj7QQT+sVpoVqM5r/lbCRxVPW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:40:91:c4:5f:8a:60:25:d1:25:b9:21:b8:96:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Validity
Not Before: Jun 28 19:01:11 2025 GMT
Not After : Jun 29 19:01:11 2025 GMT
Subject: CN=d4877cc31c0637fb164e65a8c1e48e8e42985bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:3a:f5:a9:00:ed:52:92:d9:0e:94:a3:83:
a6:14:cd:33:28:f0:83:a7:41:39:66:ad:89:93:a7:
43:d6:5e:7a:9b:6b:f4:66:c8:db:77:ee:9d:17:85:
41:2c:c8:cd:7b:af:7c:fd:d9:c1:a5:a6:f5:78:1a:
0e:6a:f4:26:a6:96:40:07:30:60:a2:5b:1a:44:b3:
a7:02:c9:6f:a3:7e:d6:fe:f1:41:79:d2:58:5e:4c:
22:40:01:11:4b:ff:20:14:90:59:a9:6f:f9:a7:d7:
f7:c2:a1:23:4a:a5:f5:d7:cc:90:ec:bd:8b:08:42:
78:20:be:e5:1f:0d:ed:d3:da:05:e8:36:de:9d:a5:
32:44:df:f3:97:32:19:09:84:cd:53:83:d0:ea:f8:
8b:36:08:a4:01:b0:2d:3a:1f:b9:46:c2:9c:92:bf:
41:99:16:d5:61:8d:8b:87:e7:f1:36:ed:65:71:b0:
a7:5a:d7:e0:55:d8:e0:27:19:e6:16:48:03:db:6b:
32:9b:97:d9:74:f1:a6:21:3e:32:fc:9a:78:8a:ce:
71:e0:33:b1:e4:78:03:17:77:5f:cb:93:dd:ca:31:
b9:b4:52:b3:bb:bf:f7:3e:ef:19:30:1f:93:99:a1:
a2:75:f0:8b:42:ca:0f:88:bb:b2:32:a8:d7:c9:77:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:87:7C:C3:1C:06:37:FB:16:4E:65:A8:C1:E4:8E:8E:42:98:5B:ED
X509v3 Authority Key Identifier:
keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:50:75:75:74:8c:f4:13:e2:c3:08:f3:14:25:1e:bc:39:da:
2a:0b:0d:8e:c8:d7:44:44:b7:cd:b6:82:39:71:ae:63:55:b2:
fd:15:aa:57:8b:43:b9:29:7f:74:eb:a5:3f:0d:c5:ef:b6:8c:
b1:f2:ec:73:a8:2e:74:dd:44:4d:d7:87:a8:1f:7f:8a:1a:87:
e2:5d:93:2e:13:dc:9b:7b:fa:9b:cc:5b:32:5c:db:6b:4a:9d:
b7:e2:75:27:2b:35:66:95:be:d2:fd:2b:0c:f2:24:79:60:f3:
e2:f6:b2:e9:33:c5:bc:09:a3:60:11:00:75:2d:ee:73:bd:64:
dd:74:f4:9c:a3:0e:46:1c:67:3f:14:da:f8:93:e3:54:5b:c4:
d1:a2:d4:e5:ed:e3:1f:12:97:84:2a:c6:c5:2a:4f:30:3e:a3:
bf:ea:13:5d:40:1f:14:87:8d:fb:e5:cc:a5:16:fd:8b:62:a4:
d4:ca:bd:cf:79:5a:95:12:96:82:58:6c:77:c2:28:9d:5d:22:
3f:1b:5e:ad:dc:01:3b:fe:87:1f:04:cd:f7:26:f2:2b:e7:8c:
94:d9:94:78:b1:ae:b6:25:5f:41:27:b5:b2:8e:63:5a:5c:47:
55:6f:56:b5:ee:6d:09:30:36:20:48:29:ee:3d:f0:85:15:8a:
05:d6:96:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36kCRxF+KYCXRJbkhuJY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOGFkMTM1NDEyYmY5MDQxYmU1ZmQwOGU3NGEyNDEyMGRi
M2VlYzcwHhcNMjUwNjI4MTkwMTExWhcNMjUwNjI5MTkwMTExWjAzMTEwLwYDVQQD
EyhkNDg3N2NjMzFjMDYzN2ZiMTY0ZTY1YThjMWU0OGU4ZTQyOTg1YmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5g69akA7VKS2Q6Uo4OmFM0zKPCD
p0E5Zq2Jk6dD1l56m2v0Zsjbd+6dF4VBLMjNe698/dnBpab1eBoOavQmppZABzBg
olsaRLOnAslvo37W/vFBedJYXkwiQAERS/8gFJBZqW/5p9f3wqEjSqX118yQ7L2L
CEJ4IL7lHw3t09oF6DbenaUyRN/zlzIZCYTNU4PQ6viLNgikAbAtOh+5RsKckr9B
mRbVYY2Lh+fxNu1lcbCnWtfgVdjgJxnmFkgD22sym5fZdPGmIT4y/Jp4is5x4DOx
5HgDF3dfy5PdyjG5tFKzu7/3Pu8ZMB+TmaGidfCLQsoPiLuyMqjXyXfcPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSHfMMcBjf7Fk5lqMHkjo5CmFvtMB8GA1UdIwQY
MBaAFF+K0TVBK/kEG+X9COdKJBINs+7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAt
Mzc5NzMzYWIzOGNkLzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAtMzc5NzMzYWIzOGNk
LzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1B1dXSM
9BPiwwjzFCUevDnaKgsNjsjXRES3zbaCOXGuY1Wy/RWqV4tDuSl/dOulPw3F77aM
sfLsc6gudN1ETdeHqB9/ihqH4l2TLhPcm3v6m8xbMlzba0qdt+J1Jys1ZpW+0v0r
DPIkeWDz4vay6TPFvAmjYBEAdS3uc71k3XT0nKMORhxnPxTa+JPjVFvE0aLU5e3j
HxKXhCrGxSpPMD6jv+oTXUAfFIeN++XMpRb9i2Kk1Mq9z3lalRKWglhsd8IonV0i
PxterdwBO/6HHwTN9ybyK+eMlNmUeLGutiVfQSe1so5jWlxHVW9Wte5tCTA2IEgp
7j3whRWKBdaW4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:24 2025 by rpki-client