Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
File: x43nqz8ef8G8o1IOrP4OGn5qVf4.mft (raw, json)
Hash identifier: L6Yuk/xSoGCQWYZKZhVoyKn52K+ieyhDPmoT8j6SWG0=
Subject key identifier: 5B:46:E4:87:EE:5D:3A:AD:DD:F9:88:E4:D3:54:76:55:6C:B2:88:EC
Authority key identifier: C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
Certificate issuer: /CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Certificate serial: 0197B70F57006ACA9DAAC89D10433935C0FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:02:05 +0000
Manifest this update: Sat 28 Jun 2025 15:02:05 +0000
Manifest next update: Sun 29 Jun 2025 15:02:05 +0000
Files and hashes: 1: g8YwGSQJtphdygepP_zngeWXvFU.roa (hash: MN0YFZEniJxqcHz8F+CefbhmwKUatb2Z2T+SIRMCHgk=)
2: x43nqz8ef8G8o1IOrP4OGn5qVf4.crl (hash: VpjkNVA7Krc7HcdakhojHWGNjMa+52RNzYGwsKSzNEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:57:00:6a:ca:9d:aa:c8:9d:10:43:39:35:c0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Validity
Not Before: Jun 28 15:02:05 2025 GMT
Not After : Jun 29 15:02:05 2025 GMT
Subject: CN=5b46e487ee5d3aadddf988e4d35476556cb288ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:95:c4:8f:d2:b4:35:f5:4d:9b:8e:f1:c4:
f1:eb:61:b1:92:8b:32:1d:21:34:e0:af:6e:f8:9e:
ac:86:39:7f:a2:e5:5c:ff:eb:d6:75:2e:ab:35:d1:
6a:b3:d2:2e:db:04:ab:d0:25:39:06:b8:03:2e:37:
1f:3b:76:01:00:bf:70:4c:2b:05:08:e8:69:3f:8a:
61:7e:b4:24:7c:9e:b7:65:0f:64:f0:00:66:00:fc:
8f:e7:f5:70:53:58:13:67:29:40:a4:de:c1:05:ec:
b0:24:2f:f4:99:94:52:aa:89:b6:e1:52:1a:d8:b4:
08:d1:7b:5e:3d:dd:dc:33:d8:44:b6:26:1f:5b:f6:
6b:d8:68:8e:1e:67:34:d5:15:0d:53:6e:c3:38:94:
ad:cf:1d:e0:58:5e:d9:67:40:ef:ee:8c:2b:8d:09:
f6:44:79:98:99:67:26:6e:20:94:4e:47:d7:63:5c:
0f:4a:64:63:73:71:d0:4c:8b:80:c5:f4:2d:ed:57:
bf:b1:69:22:36:70:18:5a:4f:8a:d8:c4:83:a2:20:
e2:38:7a:03:cf:e8:3b:ed:60:60:22:86:82:4d:e3:
76:71:6a:1f:15:5a:00:d8:a9:24:1f:49:d0:3b:45:
31:b9:26:45:fe:be:f6:d8:4a:b6:63:dd:5f:af:a4:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:46:E4:87:EE:5D:3A:AD:DD:F9:88:E4:D3:54:76:55:6C:B2:88:EC
X509v3 Authority Key Identifier:
keyid:C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:30:fc:f4:43:ad:db:83:8f:fd:70:67:f4:a4:f8:37:21:b4:
35:27:c9:27:45:69:92:73:2d:b7:a5:f2:c4:de:da:d3:e4:d0:
bc:04:9a:70:74:e0:48:85:36:01:2c:19:e3:56:ef:de:43:54:
37:1d:00:07:82:be:fe:d3:26:b5:d6:a8:68:cc:ac:fd:0a:8d:
f7:23:46:75:4e:dc:e2:13:13:ce:92:ec:8c:84:4b:7f:b6:8f:
7e:b0:cd:a2:75:38:64:08:00:b2:ad:90:ed:0a:0c:fe:a9:5c:
db:81:44:c3:9f:9d:a7:c3:e4:e4:c3:d7:5c:1d:bc:78:f6:7e:
5c:ed:89:bb:fe:d1:57:bf:b3:52:f3:c4:85:06:35:13:1e:e9:
18:c2:05:de:28:ba:bd:5f:11:dd:a0:b8:7f:4a:1d:28:fc:d0:
76:0b:fc:41:3f:ce:f6:42:9a:97:b9:78:3d:25:ad:e1:9f:68:
9d:eb:f5:7f:07:81:08:f3:fa:b1:c3:14:f0:e5:8e:76:ef:76:
43:d4:de:7a:96:94:1f:7b:97:8f:ff:da:c1:08:9c:a5:5c:ce:
c9:aa:90:16:b1:41:fd:79:22:f7:a0:8c:0f:af:00:43:33:7b:
b2:16:cd:ee:4e:04:10:53:3d:fe:4a:64:68:ab:de:af:2e:19:
cc:53:cd:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D1cAasqdqsidEEM5NcD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3OGRlN2FiM2YxZTdmYzFiY2EzNTIwZWFjZmUwZTFhN2U2
YTU1ZmUwHhcNMjUwNjI4MTUwMjA1WhcNMjUwNjI5MTUwMjA1WjAzMTEwLwYDVQQD
Eyg1YjQ2ZTQ4N2VlNWQzYWFkZGRmOTg4ZTRkMzU0NzY1NTZjYjI4OGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzmVxI/StDX1TZuO8cTx62Gxkosy
HSE04K9u+J6shjl/ouVc/+vWdS6rNdFqs9Iu2wSr0CU5BrgDLjcfO3YBAL9wTCsF
COhpP4phfrQkfJ63ZQ9k8ABmAPyP5/VwU1gTZylApN7BBeywJC/0mZRSqom24VIa
2LQI0XtePd3cM9hEtiYfW/Zr2GiOHmc01RUNU27DOJStzx3gWF7ZZ0Dv7owrjQn2
RHmYmWcmbiCUTkfXY1wPSmRjc3HQTIuAxfQt7Ve/sWkiNnAYWk+K2MSDoiDiOHoD
z+g77WBgIoaCTeN2cWofFVoA2KkkH0nQO0UxuSZF/r722Eq2Y91fr6RScQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtG5IfuXTqt3fmI5NNUdlVssojsMB8GA1UdIwQY
MBaAFMeN56s/Hn/BvKNSDqz+Dhp+alX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDQzbnF6OGVmOEc4bzFJT3JQNE9HbjVxVmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNTMzMzgtOWVmYi00MGJkLTk4YTkt
YTdiZjllNTBhZjBiLzEveDQzbnF6OGVmOEc4bzFJT3JQNE9HbjVxVmY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zNTMzMzgtOWVmYi00MGJkLTk4YTktYTdiZjllNTBhZjBi
LzEveDQzbnF6OGVmOEc4bzFJT3JQNE9HbjVxVmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDD89EOt
24OP/XBn9KT4NyG0NSfJJ0VpknMtt6XyxN7a0+TQvASacHTgSIU2ASwZ41bv3kNU
Nx0AB4K+/tMmtdaoaMys/QqN9yNGdU7c4hMTzpLsjIRLf7aPfrDNonU4ZAgAsq2Q
7QoM/qlc24FEw5+dp8Pk5MPXXB28ePZ+XO2Ju/7RV7+zUvPEhQY1Ex7pGMIF3ii6
vV8R3aC4f0odKPzQdgv8QT/O9kKal7l4PSWt4Z9onev1fweBCPP6scMU8OWOdu92
Q9TeepaUH3uXj//awQicpVzOyaqQFrFB/Xki96CMD68AQzN7shbN7k4EEFM9/kpk
aKvery4ZzFPNsw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:01 2025 by rpki-client