Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: RH8MjbGJl4cUhfPtN6xNvAM3gTTZstL7js7lt6L0+WY=
Subject key identifier: B7:68:FC:CE:CA:A8:22:4A:3F:2F:FD:A4:BB:E4:92:49:3F:C3:71:28
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 0197B6A20CF3DE992E9EB9FB77960369C40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:42 +0000
Manifest this update: Sat 28 Jun 2025 13:02:42 +0000
Manifest next update: Sun 29 Jun 2025 13:02:42 +0000
Files and hashes: 1: 6SCwO2S48Mqpl17CxJjrl18GrEo.roa (hash: +iW+64GQ290TRZ7pzpFa83Xn8R6dcie2oLJMOqdfhwM=)
2: 70-0-C2qfwRFGOmXs7z0P9rO1Dg.roa (hash: UXG2vfv9VFhp8kbUsMPdFVXztsWH0VKzkTqdDHZBLZY=)
3: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: Ll5jIwQ1CQKd4pbd/EnGL5ZQA2D06UWjBh3EJgGXz6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:0c:f3:de:99:2e:9e:b9:fb:77:96:03:69:c4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jun 28 13:02:42 2025 GMT
Not After : Jun 29 13:02:42 2025 GMT
Subject: CN=b768fccecaa8224a3f2ffda4bbe492493fc37128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:7d:f6:fc:bd:99:e4:87:ea:2a:b3:d0:a9:
7e:d1:5d:1c:23:98:8c:4f:85:a7:4e:cb:52:b8:2d:
57:b6:79:58:76:d1:3c:cc:ad:f5:7d:30:da:39:6a:
eb:d8:f6:80:52:09:25:eb:09:50:3d:d7:ec:35:e0:
7f:81:b7:fd:c1:dd:01:59:cc:96:e2:89:3a:34:6a:
90:7a:3a:8d:c5:69:91:d9:37:d2:04:e8:39:23:93:
9e:79:80:91:52:32:fc:97:d9:26:15:91:16:3c:19:
7c:da:33:a3:a2:65:13:35:b9:ea:35:a1:6a:3e:2c:
f1:e2:67:22:86:54:88:78:ee:44:61:3f:84:ae:b0:
4f:a7:61:e6:0f:a7:0c:78:67:d5:cd:81:bf:03:8a:
23:d9:ac:c9:1b:57:d3:73:79:37:00:84:e1:b9:37:
42:e5:b7:ed:0e:7a:55:cb:9f:99:07:c9:cb:ef:0d:
f7:98:80:b1:5d:55:87:22:0b:3f:e2:68:2e:e8:b1:
bc:a6:f2:d8:0d:b8:1f:e2:44:4e:84:4f:c6:b2:34:
6d:a8:7f:20:de:4e:14:b9:e9:63:b3:b5:4b:dd:07:
47:03:e8:fe:fd:cb:be:33:32:0b:eb:74:66:7a:d7:
f7:df:19:5a:e0:7d:0b:3d:6f:8a:06:50:db:40:e9:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:68:FC:CE:CA:A8:22:4A:3F:2F:FD:A4:BB:E4:92:49:3F:C3:71:28
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:42:6e:fc:fb:0c:3b:0a:d8:34:0e:08:e3:cf:c3:13:ee:53:
27:33:f1:c5:fa:21:6e:e4:0d:af:a0:cd:d5:4c:14:4d:64:af:
f0:73:40:9b:83:a4:73:ed:22:87:5c:10:38:60:91:00:42:34:
40:cc:36:cd:c8:be:13:3f:80:80:0d:b9:7a:e5:b9:7f:8b:aa:
f0:11:b6:ff:37:87:b9:a0:49:97:47:a0:21:2d:ad:56:11:65:
0b:3c:f6:46:3d:4d:22:22:a4:22:d2:5d:c9:bb:44:08:0a:28:
a4:68:c7:a5:07:1a:40:3b:f1:25:a9:97:40:ef:dd:1b:c2:ab:
dc:96:2e:03:f0:a8:b2:49:bb:02:15:d2:53:2f:86:cd:e9:fa:
9b:79:41:c2:ad:7d:d9:0f:d4:42:aa:c0:5e:37:cd:ec:25:21:
bd:8b:d7:3a:f7:41:ed:55:f9:41:c5:37:be:ea:0f:b2:f3:4a:
1a:d0:80:bb:2f:14:cf:bc:19:98:0e:5c:75:82:e3:6f:24:a3:
d5:15:17:5b:22:01:60:70:60:0e:92:76:7c:fd:7e:37:9b:a2:
bf:02:61:42:a3:bb:6a:15:39:4c:32:e3:1d:e9:5b:bc:9a:c6:
34:1b:8a:88:0b:cd:10:e9:44:a7:8b:84:e0:0b:09:cb:d4:2e:
dd:c1:85:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ogzz3pkunrn7d5YDacQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3
ZjEyMWYwHhcNMjUwNjI4MTMwMjQyWhcNMjUwNjI5MTMwMjQyWjAzMTEwLwYDVQQD
EyhiNzY4ZmNjZWNhYTgyMjRhM2YyZmZkYTRiYmU0OTI0OTNmYzM3MTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUl99vy9meSH6iqz0Kl+0V0cI5iM
T4WnTstSuC1XtnlYdtE8zK31fTDaOWrr2PaAUgkl6wlQPdfsNeB/gbf9wd0BWcyW
4ok6NGqQejqNxWmR2TfSBOg5I5OeeYCRUjL8l9kmFZEWPBl82jOjomUTNbnqNaFq
Pizx4mcihlSIeO5EYT+ErrBPp2HmD6cMeGfVzYG/A4oj2azJG1fTc3k3AIThuTdC
5bftDnpVy5+ZB8nL7w33mICxXVWHIgs/4mgu6LG8pvLYDbgf4kROhE/GsjRtqH8g
3k4Uueljs7VL3QdHA+j+/cu+MzIL63Rmetf33xla4H0LPW+KBlDbQOmczwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdo/M7KqCJKPy/9pLvkkkk/w3EoMB8GA1UdIwQY
MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt
MWY2YjJkMTRmNGY5LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5
LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkJu/PsM
OwrYNA4I48/DE+5TJzPxxfohbuQNr6DN1UwUTWSv8HNAm4Okc+0ih1wQOGCRAEI0
QMw2zci+Ez+AgA25euW5f4uq8BG2/zeHuaBJl0egIS2tVhFlCzz2Rj1NIiKkItJd
ybtECAoopGjHpQcaQDvxJamXQO/dG8Kr3JYuA/Coskm7AhXSUy+Gzen6m3lBwq19
2Q/UQqrAXjfN7CUhvYvXOvdB7VX5QcU3vuoPsvNKGtCAuy8Uz7wZmA5cdYLjbySj
1RUXWyIBYHBgDpJ2fP1+N5uivwJhQqO7ahU5TDLjHelbvJrGNBuKiAvNEOlEp4uE
4AsJy9Qu3cGFxA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:46 2025 by rpki-client