Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier: 8oLb+f0IPQjeCZ9E2i1Zbn5Uy07SU0tUi47uZrSNjoA=
Subject key identifier: E7:8B:DF:58:F9:C7:30:0E:8C:F7:A4:45:61:88:38:E2:04:93:0A:E8
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 0197B632A0CF8F21F71E896E176BE6FAE693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number: 15CE
Signing time: Sat 28 Jun 2025 11:01:00 +0000
Manifest this update: Sat 28 Jun 2025 11:01:00 +0000
Manifest next update: Sun 29 Jun 2025 11:01:00 +0000
Files and hashes: 1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=)
2: 7jTBlGSOzUArG5VVhBc9-xgZPdQ.roa (hash: yavmUXM6+em4MudJtfPugju27DvKZrSpZnOFW626fug=)
3: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=)
4: MZ6xYFtxdQrHBhvq9x4yDITh6r4.roa (hash: qbK/ZmO17AT20ukIyQfbqqvKJQudIBqu9g/K4Rno+qc=)
5: SDCjGiu7HlJmu92riiwnYJVUZkM.roa (hash: dRu22wu3jt3btScf5pPPepbiwZpCNe4LeyeAtOs7QoU=)
6: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: gm0QnwPkJ2nhoMpk2WFiVhjbMgaUdNpiHx31V7RuxVw=)
7: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=)
8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a0:cf:8f:21:f7:1e:89:6e:17:6b:e6:fa:e6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Jun 28 11:01:00 2025 GMT
Not After : Jun 29 11:01:00 2025 GMT
Subject: CN=e78bdf58f9c7300e8cf7a445618838e204930ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0a:16:ce:85:b1:75:12:75:84:32:58:a7:8e:
f1:a5:b9:60:ac:1d:26:64:99:35:b9:c0:0f:a0:4d:
1a:13:c1:78:3f:48:1d:5b:10:5d:08:f4:49:83:e2:
10:cf:2c:12:4a:42:5e:35:0d:55:58:a6:f8:85:73:
a1:65:56:b4:a8:7f:b5:f5:80:5f:ff:b4:19:bb:00:
f7:a6:77:16:54:82:f8:71:4e:bc:85:ce:ca:17:98:
7a:ec:3c:84:2d:1e:75:19:a5:a3:ce:f7:4a:7d:d8:
fb:fd:cf:e6:c9:12:58:56:a7:91:71:b5:bf:95:df:
49:c2:85:2a:18:7e:6f:4d:c5:dd:3d:6a:d6:97:a4:
8d:17:d8:4c:5c:dd:8e:0f:84:01:ea:1c:15:60:47:
b5:dc:71:80:f0:8d:3d:f8:5a:33:5d:53:d6:6a:a7:
c6:25:f3:18:2c:05:f8:73:81:56:72:08:b6:78:99:
72:d3:13:59:18:54:e8:4b:ab:81:2c:bb:4c:bf:34:
a3:89:ac:e6:37:f1:c3:b3:d6:87:8b:c0:47:d8:5a:
8d:66:08:b4:7a:c8:1a:f0:5e:37:02:65:a1:e3:87:
4b:8b:89:7d:2a:07:2e:c5:12:e0:c7:41:21:39:e0:
3a:71:24:41:77:87:5a:b4:2a:48:1a:de:8d:78:2d:
df:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8B:DF:58:F9:C7:30:0E:8C:F7:A4:45:61:88:38:E2:04:93:0A:E8
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:33:ad:52:33:41:09:f2:76:fd:6b:a1:38:6a:62:82:60:c0:
8a:29:e0:c9:85:e4:c4:ef:f7:6c:fe:a4:f3:65:67:09:48:a1:
7c:78:f9:d5:68:6f:24:d5:13:56:13:72:09:0b:c1:47:95:6a:
c2:35:99:78:5d:5b:27:6b:69:55:b6:35:8a:af:2e:57:82:66:
9c:30:6b:f0:82:ae:51:8a:97:8e:93:33:26:7c:a7:6a:a7:53:
25:a2:50:22:3a:58:c7:b1:90:48:3e:91:b3:a8:ea:dd:48:5f:
77:85:fc:94:30:22:cd:32:31:bd:02:b8:87:8a:67:c7:a2:bf:
ba:a5:a2:65:53:19:85:ef:34:4e:d4:f9:14:b3:e9:a3:e9:9b:
3e:f0:f2:cf:3d:36:b2:f9:74:96:ae:84:21:0c:fe:12:07:02:
9b:5e:0a:3f:36:d1:fb:ef:d5:21:f8:7c:63:23:19:10:98:98:
41:69:f9:e4:fe:96:9a:83:cd:5f:d1:2a:03:e2:01:66:8b:42:
dd:d0:b2:8f:44:53:92:e1:25:96:f4:e9:5e:2f:71:a5:36:eb:
43:0c:f6:fd:77:35:f7:39:e4:a8:1e:e4:ee:c8:95:ac:86:f0:
6f:ec:22:02:57:60:d6:dd:f9:d3:53:ef:fa:5d:54:92:96:dc:
24:94:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:41 2025 by rpki-client