Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: KKMaqIWFaGCSlu3AR1AEW0VmUg20iWU3zNsURyfxZt0=
Subject key identifier: A1:5D:2F:B9:9B:93:BD:AB:EB:2D:2C:C4:71:FA:C0:05:36:88:AA:93
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 0197BA0F7DDA86B1D0F62AEF87C85E66CA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0B19
Signing time: Sun 29 Jun 2025 05:01:06 +0000
Manifest this update: Sun 29 Jun 2025 05:01:06 +0000
Manifest next update: Mon 30 Jun 2025 05:01:06 +0000
Files and hashes: 1: kF7mXs8Y_UB13udEpA0xGHCjAro.roa (hash: /PhN9JbWE0fzSWBg1QkZrpWYEK+tJrQFKSHOqe1g6qY=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: p9zT4vFppf/2dhXg+6lhrOguf/MKUmBf64MIMPA6NGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:7d:da:86:b1:d0:f6:2a:ef:87:c8:5e:66:ca:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Jun 29 05:01:06 2025 GMT
Not After : Jun 30 05:01:06 2025 GMT
Subject: CN=a15d2fb99b93bdabeb2d2cc471fac0053688aa93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:46:81:89:ad:50:2b:7f:bf:c4:6c:fa:f2:
a8:31:b9:0d:35:23:1b:9b:90:a9:78:9f:94:e9:3b:
b3:7c:8e:0e:af:d6:d5:88:f8:bd:79:c5:88:a4:cf:
be:c5:5e:62:11:d5:08:59:a4:fe:e5:12:71:8e:0f:
04:c2:15:ab:b3:2e:b3:a5:67:a1:de:61:a3:a5:da:
0a:54:66:8c:df:e4:8e:32:6c:7e:0f:9d:24:8e:38:
b2:4c:da:38:4d:d7:a0:cf:84:2d:28:07:a2:f9:b0:
fe:9d:22:a1:cd:a6:37:07:c0:52:35:fa:f5:09:b2:
9c:01:ef:b5:09:2b:8d:c8:c0:12:67:8c:fc:09:c3:
55:de:58:19:86:81:fb:5d:d6:d9:a7:db:78:9b:95:
02:64:51:c4:10:5e:ae:9d:c2:0c:ba:c6:e3:b6:a2:
1e:33:37:45:e5:07:00:02:a6:22:81:bf:f9:45:1f:
3c:ea:c7:4a:85:b0:be:e9:a6:79:6c:74:44:85:87:
a0:c7:84:0c:07:1c:9d:41:45:d9:b5:b2:fd:35:2e:
ff:50:7d:7b:02:10:44:0a:35:41:fa:5d:e3:fa:35:
cc:3c:fd:5a:2f:7f:bc:46:a9:cb:65:63:10:f6:66:
76:97:58:45:be:8f:d5:a1:cf:a1:3f:03:b8:30:77:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5D:2F:B9:9B:93:BD:AB:EB:2D:2C:C4:71:FA:C0:05:36:88:AA:93
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ec:d2:a5:9d:56:76:80:dd:7f:21:fe:12:18:ec:ba:69:12:
ad:75:45:8c:1f:a2:d2:a3:34:27:36:0a:99:17:a9:e6:26:a1:
60:8e:e6:d0:55:a8:e4:9e:05:e7:3c:7a:db:e6:78:ef:d4:05:
e9:dc:ad:86:59:f5:a9:24:54:81:62:a2:5a:7b:47:af:7d:3f:
c0:c8:33:2d:d6:33:e5:02:05:7b:0f:3b:ae:ef:c6:70:08:74:
fe:bb:a9:7a:b5:fa:50:d8:03:6d:a4:65:51:fe:66:1a:5f:1d:
ae:70:1d:bd:74:71:da:69:7f:bf:9d:5f:ec:f7:d6:ec:2d:9c:
3b:11:5d:93:1f:39:e0:49:49:d2:53:6d:67:f6:9b:c1:f6:cc:
47:a9:f1:52:70:a9:a7:25:c9:ef:17:88:e4:e9:90:c0:b3:41:
b0:56:7b:ae:08:ef:97:a3:eb:e6:61:d9:e8:f2:84:70:c6:42:
16:fe:6e:e2:41:ce:a7:36:c1:05:4f:d4:47:fb:79:46:00:9b:
6c:26:b7:8a:48:29:37:dd:80:50:38:65:c1:69:26:f7:26:78:
db:c5:e0:f8:15:22:18:cd:3f:4f:7f:95:4c:c3:aa:7a:4d:3a:
82:a5:28:a4:fe:45:bf:0e:f0:38:4b:da:8c:b8:38:94:0d:c2:
88:5e:21:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6D33ahrHQ9irvh8heZsomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTA5MWQzNDcwM2MwM2VmOGY4ZDI5Y2JiZGNkOThjM2U3
MDZmODQwHhcNMjUwNjI5MDUwMTA2WhcNMjUwNjMwMDUwMTA2WjAzMTEwLwYDVQQD
EyhhMTVkMmZiOTliOTNiZGFiZWIyZDJjYzQ3MWZhYzAwNTM2ODhhYTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvspGgYmtUCt/v8Rs+vKoMbkNNSMb
m5CpeJ+U6TuzfI4Or9bViPi9ecWIpM++xV5iEdUIWaT+5RJxjg8EwhWrsy6zpWeh
3mGjpdoKVGaM3+SOMmx+D50kjjiyTNo4Tdegz4QtKAei+bD+nSKhzaY3B8BSNfr1
CbKcAe+1CSuNyMASZ4z8CcNV3lgZhoH7XdbZp9t4m5UCZFHEEF6uncIMusbjtqIe
MzdF5QcAAqYigb/5RR886sdKhbC+6aZ5bHREhYegx4QMBxydQUXZtbL9NS7/UH17
AhBECjVB+l3j+jXMPP1aL3+8RqnLZWMQ9mZ2l1hFvo/Voc+hPwO4MHftTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFdL7mbk72r6y0sxHH6wAU2iKqTMB8GA1UdIwQY
MBaAFMQQkdNHA8A++PjSnLvc2Yw+cG+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQt
ZjdlN2JiMDE0ZGI4LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQtZjdlN2JiMDE0ZGI4
LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhezSpZ1W
doDdfyH+EhjsumkSrXVFjB+i0qM0JzYKmRep5iahYI7m0FWo5J4F5zx62+Z479QF
6dythln1qSRUgWKiWntHr30/wMgzLdYz5QIFew87ru/GcAh0/ruperX6UNgDbaRl
Uf5mGl8drnAdvXRx2ml/v51f7PfW7C2cOxFdkx854ElJ0lNtZ/abwfbMR6nxUnCp
pyXJ7xeI5OmQwLNBsFZ7rgjvl6Pr5mHZ6PKEcMZCFv5u4kHOpzbBBU/UR/t5RgCb
bCa3ikgpN92AUDhlwWkm9yZ428Xg+BUiGM0/T3+VTMOqek06gqUopP5Fvw7wOEva
jLg4lA3CiF4hrQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:31:07 2025 by rpki-client