Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier: c915vgr90UU7+14Mkjo2Q7veKIqwrKiUdtxUwwnbHuo=
Subject key identifier: 86:DB:C2:21:8C:48:13:55:6F:1C:15:BC:58:A4:BA:B6:10:E2:DD:49
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial: 0197B88F776B2D1041E0CA88BE6EB12E5EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 22:01:39 +0000
Manifest this update: Sat 28 Jun 2025 22:01:39 +0000
Manifest next update: Sun 29 Jun 2025 22:01:39 +0000
Files and hashes: 1: 31Tgo6hkUgGEDxpcJDek08Avr_U.roa (hash: kmmgYbNt9oWzUWS0e88Ufjcw3KVy4vM/TBImZVi6icQ=)
2: BVA-ewMKFfhNlaM9uEKeCRcxb44.roa (hash: p6Ztck3uBhR0bzcjLWO0QVdiIOvuYAXPjQqrSbEcptQ=)
3: HqPvNlx7UZiRVbk5_3PH9NhbC6A.roa (hash: +/Uf0WY1OyHo7LRFa5WaahOPnbyyowzO8Q8lBC3l8kM=)
4: RowHyzmbIUhwLNzP2aGdUq-bTxw.roa (hash: BWNoFSha19ToKG1Hm+elPv4NQAdo5EC6p+W2DfujBas=)
5: dcug0fKg-KsGzBpKENJINtdS5vw.roa (hash: 4mmQ47qSm1UkTR696jh82p3nO+ZrpORkySuxILnJi4I=)
6: kXFsWv63EX5LzlpEXl1PFUMjMlU.roa (hash: 55+NcYoCAfsxn/1QTku+M6mFFv7l9njuKzUccasgI84=)
7: qBz1hjzykMH_ZcIwvTn0SDyhgfs.roa (hash: W/hp3H2l3tBtLyOj1Fa5/YEuC/XubK4WM06Ks3Q9e/8=)
8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: 59ZC83bG0odoNr0dSYg3Pgh3uxodPMpDWDs7ExPvEz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:77:6b:2d:10:41:e0:ca:88:be:6e:b1:2e:5e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Validity
Not Before: Jun 28 22:01:39 2025 GMT
Not After : Jun 29 22:01:39 2025 GMT
Subject: CN=86dbc2218c4813556f1c15bc58a4bab610e2dd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:bd:48:53:9a:5b:55:1f:5f:5c:13:17:7a:
43:80:6a:34:e0:27:0e:97:78:56:cf:42:5f:69:93:
a9:c0:de:94:54:b8:48:47:90:1f:e6:e2:8c:2d:4c:
69:65:ed:ec:0f:ce:52:0b:81:ab:4c:70:58:48:25:
4a:57:83:fa:aa:81:1e:6c:1f:d8:a0:1a:48:0d:58:
36:3c:85:28:b3:2d:c0:b9:d3:5a:1c:fc:d1:f8:1b:
b5:33:e6:41:20:3d:c3:c8:ce:4b:22:80:85:1b:59:
f4:80:52:eb:95:00:9d:36:01:88:16:3a:93:4e:e2:
d7:37:a5:7e:64:49:34:c1:9c:32:ee:c9:42:9d:af:
11:b1:77:43:70:68:88:31:44:22:32:29:a1:cd:38:
91:fc:55:d4:f2:0f:95:05:a5:fc:e9:dd:24:4d:55:
77:d0:04:94:9a:58:0e:9a:a6:00:c4:cd:58:bc:b1:
fe:eb:44:16:c6:88:66:68:fd:09:19:95:b4:03:3e:
91:3a:09:70:65:80:88:b7:76:2e:26:e5:f9:ba:41:
4f:28:ca:16:48:6f:df:f0:50:2f:1e:46:f2:68:1f:
93:83:fd:4b:f4:99:43:2e:15:c9:a6:92:9c:bc:46:
fc:e9:7a:7e:09:1c:de:82:a6:b5:33:05:98:c1:05:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DB:C2:21:8C:48:13:55:6F:1C:15:BC:58:A4:BA:B6:10:E2:DD:49
X509v3 Authority Key Identifier:
keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:10:a3:73:62:b6:9d:2f:31:c6:b3:a2:8b:29:4f:fb:7b:dd:
05:0b:5b:ef:ee:ee:1c:9c:4e:14:73:f3:68:b0:2e:aa:1c:1a:
b2:2e:f7:67:1d:b4:e8:23:8c:0b:c9:0b:dd:60:c6:3d:c0:8a:
1f:5f:01:df:80:80:47:85:12:f5:d9:ff:d0:89:ad:dc:5e:26:
c1:58:42:0b:a8:76:7b:ac:02:14:26:51:72:65:6a:da:80:c0:
d1:b2:3a:e5:f4:57:52:d9:73:6d:fe:99:f1:b1:38:e4:5e:2d:
22:1a:e9:5e:d4:60:ed:7e:e0:52:2f:57:9e:4b:39:08:cd:ad:
8d:f4:8a:24:e6:fc:36:42:a6:0c:6a:17:2e:d1:93:19:9f:ab:
b7:84:d9:5e:6c:9b:f7:a4:03:6e:bc:74:73:19:03:53:1b:b0:
55:ed:31:93:6f:e5:12:c4:7c:4d:96:01:31:53:bb:92:57:7d:
4b:ae:17:41:51:f7:61:78:f8:4d:2e:79:b4:60:27:83:4d:3c:
29:1d:fb:d8:44:1f:d4:a1:7d:a7:6d:72:04:33:49:43:6a:a3:
a1:12:86:dd:94:dc:5a:d5:73:11:a5:38:20:4e:93:7a:8e:e0:
fa:9a:01:f2:52:41:4a:84:8b:7b:8e:c3:94:6a:c8:e0:16:93:
a7:24:78:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j3drLRBB4MqIvm6xLl65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm
MGY2NzEwHhcNMjUwNjI4MjIwMTM5WhcNMjUwNjI5MjIwMTM5WjAzMTEwLwYDVQQD
Eyg4NmRiYzIyMThjNDgxMzU1NmYxYzE1YmM1OGE0YmFiNjEwZTJkZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4i9SFOaW1UfX1wTF3pDgGo04CcO
l3hWz0JfaZOpwN6UVLhIR5Af5uKMLUxpZe3sD85SC4GrTHBYSCVKV4P6qoEebB/Y
oBpIDVg2PIUosy3AudNaHPzR+Bu1M+ZBID3DyM5LIoCFG1n0gFLrlQCdNgGIFjqT
TuLXN6V+ZEk0wZwy7slCna8RsXdDcGiIMUQiMimhzTiR/FXU8g+VBaX86d0kTVV3
0ASUmlgOmqYAxM1YvLH+60QWxohmaP0JGZW0Az6ROglwZYCIt3YuJuX5ukFPKMoW
SG/f8FAvHkbyaB+Tg/1L9JlDLhXJppKcvEb86Xp+CRzegqa1MwWYwQUcuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbbwiGMSBNVbxwVvFikurYQ4t1JMB8GA1UdIwQY
MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt
NGM5OGQ5YTUxNDA1LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1
LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqxCjc2K2
nS8xxrOiiylP+3vdBQtb7+7uHJxOFHPzaLAuqhwasi73Zx206COMC8kL3WDGPcCK
H18B34CAR4US9dn/0Imt3F4mwVhCC6h2e6wCFCZRcmVq2oDA0bI65fRXUtlzbf6Z
8bE45F4tIhrpXtRg7X7gUi9Xnks5CM2tjfSKJOb8NkKmDGoXLtGTGZ+rt4TZXmyb
96QDbrx0cxkDUxuwVe0xk2/lEsR8TZYBMVO7kld9S64XQVH3YXj4TS55tGAng008
KR372EQf1KF9p21yBDNJQ2qjoRKG3ZTcWtVzEaU4IE6Teo7g+poB8lJBSoSLe47D
lGrI4BaTpyR4XQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:28:35 2025 by rpki-client