Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File: sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier: eJR7Udw0m9/NijaEBDARt8FwYM56/N3GyA8X/tL6DF8=
Subject key identifier: 29:DD:91:F6:8C:1C:55:55:8F:2C:E1:3D:86:B0:04:0E:D9:37:14:7C
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 0197C349B014066F08CB860A165775932A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number: 03AF
Signing time: Tue 01 Jul 2025 00:01:15 +0000
Manifest this update: Tue 01 Jul 2025 00:01:15 +0000
Manifest next update: Wed 02 Jul 2025 00:01:15 +0000
Files and hashes: 1: jw_UZUOgx6yF78j9CZngLPh5MJg.roa (hash: CTLi772NuP6ENX6hf9k8r6vRlCcaoedrcUdbAIXJuzo=)
2: mHdbhQxgyf7CV9jCGJvliFVilXc.roa (hash: 4CdqTf57TkDxaRHOcnXl2aFyjkgmNRswPmW9ZMUYxw8=)
3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: 6otiexHka/wjvKboBjTwmcdvsg5pK4UNUpdWjreRUO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:49:b0:14:06:6f:08:cb:86:0a:16:57:75:93:2a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Jul 1 00:01:15 2025 GMT
Not After : Jul 2 00:01:15 2025 GMT
Subject: CN=29dd91f68c1c55558f2ce13d86b0040ed937147c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:16:e1:4d:1d:cc:e7:0e:7c:8a:dd:05:34:99:
29:0e:af:30:0f:49:43:03:a1:17:cd:b2:76:64:da:
b4:96:16:ba:18:a2:2d:90:87:ee:02:3c:88:a5:3c:
5b:22:e8:9a:52:5a:7a:57:11:a7:74:2a:4b:ad:38:
dd:59:68:4f:dc:f7:3b:e1:2d:06:b3:84:5e:22:0f:
f1:77:c7:9a:7d:ab:36:36:8b:b1:ee:ed:30:5a:54:
ea:a1:68:cb:38:66:e4:c8:da:ed:fc:53:32:58:01:
e0:30:84:7a:63:73:cf:9c:66:a6:a4:01:61:3b:cf:
a5:2a:c2:9f:d0:4d:bd:0a:0f:d8:9a:f2:ff:95:41:
8e:be:d9:21:a0:4c:92:ab:1b:71:c4:34:7b:f4:19:
9b:f7:a3:65:f3:5a:7e:c4:23:58:a2:b1:c3:65:6c:
75:52:f5:d2:59:98:3e:64:04:ce:77:62:85:f4:c6:
86:a0:08:44:ed:e6:fa:ed:b1:ec:7d:09:60:28:d9:
ff:82:cf:79:aa:79:4f:e9:cc:7c:b4:c8:a6:d0:1b:
f1:77:38:7e:e2:63:bf:31:45:eb:44:35:c9:49:f1:
43:8b:e5:d5:39:46:f3:e0:cd:ed:f7:a8:29:fc:82:
72:20:94:fa:41:08:0a:1c:21:37:c7:d4:7a:48:fe:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DD:91:F6:8C:1C:55:55:8F:2C:E1:3D:86:B0:04:0E:D9:37:14:7C
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ce:4b:e3:2d:b9:f6:bf:9b:fa:6d:95:89:d1:13:5a:28:eb:
23:fe:6b:3c:ad:e3:98:84:43:51:72:17:62:5f:a7:32:c2:f7:
5e:98:4c:6a:ef:d4:1a:52:91:02:27:9d:0a:21:8a:ad:32:4e:
ce:84:65:06:3d:ae:8a:68:b9:6f:b5:b0:27:bd:1e:e2:64:46:
f1:b5:91:66:1e:62:c5:6c:69:c8:dc:54:73:93:18:bc:38:25:
05:2d:39:ba:0f:98:38:eb:ed:62:ae:d2:77:d9:de:5a:a7:93:
5c:0c:24:4f:53:27:35:0d:c6:5f:d6:2b:d7:2b:df:f8:63:9a:
ec:d7:7f:7f:52:07:4d:79:15:d2:4e:41:e6:f7:dd:03:9d:f1:
97:02:67:bc:e3:d1:13:bd:6a:bb:c2:f1:d7:8b:6e:4d:f7:5e:
85:72:e2:10:bc:b8:66:82:f8:2d:a1:bf:22:49:58:2e:f3:92:
a2:dd:a3:77:04:29:74:10:10:02:9d:7b:f2:4e:aa:00:9b:68:
79:2a:48:ba:d7:df:2b:72:a8:38:8c:7f:0d:bd:75:ba:65:f4:
94:c5:98:b7:31:2c:67:3a:95:23:bf:b9:77:b2:f4:c1:a1:08:
24:96:0c:f1:50:c2:58:c3:a0:03:73:1e:8c:46:9f:12:ad:4f:
fe:e1:93:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfDSbAUBm8Iy4YKFld1kyqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWM0Y2U2NjNlMWVjMjQ1ZTc0N2NkODQ2ZjFhNjlkZGI4
MzRiM2IwHhcNMjUwNzAxMDAwMTE1WhcNMjUwNzAyMDAwMTE1WjAzMTEwLwYDVQQD
EygyOWRkOTFmNjhjMWM1NTU1OGYyY2UxM2Q4NmIwMDQwZWQ5MzcxNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxbhTR3M5w58it0FNJkpDq8wD0lD
A6EXzbJ2ZNq0lha6GKItkIfuAjyIpTxbIuiaUlp6VxGndCpLrTjdWWhP3Pc74S0G
s4ReIg/xd8eafas2Noux7u0wWlTqoWjLOGbkyNrt/FMyWAHgMIR6Y3PPnGampAFh
O8+lKsKf0E29Cg/YmvL/lUGOvtkhoEySqxtxxDR79Bmb96Nl81p+xCNYorHDZWx1
UvXSWZg+ZATOd2KF9MaGoAhE7eb67bHsfQlgKNn/gs95qnlP6cx8tMim0Bvxdzh+
4mO/MUXrRDXJSfFDi+XVOUbz4M3t96gp/IJyIJT6QQgKHCE3x9R6SP5jXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCndkfaMHFVVjyzhPYawBA7ZNxR8MB8GA1UdIwQY
MBaAFLMcTOZj4ewkXnR82Ebxpp3bg0s7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMt
NDY1YWRjMjk1OWYyLzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84NGQ0NzYtMzIzMy00MTMxLThmZmMtNDY1YWRjMjk1OWYy
LzEvc3h4TTVtUGg3Q1JlZEh6WVJ2R21uZHVEU3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQc5L4y25
9r+b+m2VidETWijrI/5rPK3jmIRDUXIXYl+nMsL3XphMau/UGlKRAiedCiGKrTJO
zoRlBj2uimi5b7WwJ70e4mRG8bWRZh5ixWxpyNxUc5MYvDglBS05ug+YOOvtYq7S
d9neWqeTXAwkT1MnNQ3GX9Yr1yvf+GOa7Nd/f1IHTXkV0k5B5vfdA53xlwJnvOPR
E71qu8Lx14tuTfdehXLiELy4ZoL4LaG/IklYLvOSot2jdwQpdBAQAp178k6qAJto
eSpIutffK3KoOIx/Db11umX0lMWYtzEsZzqVI7+5d7L0waEIJJYM8VDCWMOgA3Me
jEafEq1P/uGTNw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 03:27:25 2025 by rpki-client