Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: H20yV56ZsXVETv+ERGGcalf+8cQExxiIhkP8lTdSSOg=
Subject key identifier: 1C:F6:8D:2A:BF:76:85:FC:2F:6F:49:4F:74:63:C8:B0:81:06:FB:0D
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 0197C45C436ECF39040A24E9BFD893F97887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 09A7
Signing time: Tue 01 Jul 2025 05:01:10 +0000
Manifest this update: Tue 01 Jul 2025 05:01:10 +0000
Manifest next update: Wed 02 Jul 2025 05:01:10 +0000
Files and hashes: 1: Rzw-FEYLvNzmn8z8pXMnNIdiuzY.roa (hash: 73aotFl5RqbhDVi5JA90kJT8GvN6s6DMcTXSbB1f0hU=)
2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: hTATqHZbbY13C9winxIsp5W3ei92K/6evp7bmiytm0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5c:43:6e:cf:39:04:0a:24:e9:bf:d8:93:f9:78:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Jul 1 05:01:10 2025 GMT
Not After : Jul 2 05:01:10 2025 GMT
Subject: CN=1cf68d2abf7685fc2f6f494f7463c8b08106fb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:6c:31:b2:bf:ff:99:2a:90:11:43:dd:32:
20:39:88:91:69:e9:05:50:7c:a6:c7:c4:3a:35:03:
ba:24:2f:75:a4:63:56:6d:1c:b5:6a:83:8c:e4:2b:
a8:61:34:d1:69:ef:56:ee:ef:c9:57:df:79:83:70:
bc:c8:fd:3c:e0:e1:18:79:cb:60:19:18:02:a1:19:
c7:2f:26:44:c9:de:37:41:9d:5c:e9:a7:5e:58:4d:
95:4d:aa:d4:fd:21:25:8d:c5:0d:07:3f:41:da:d4:
b2:53:b0:17:41:f5:f0:11:be:74:ef:cc:b0:ed:3b:
33:9a:d7:3a:1b:57:81:5f:16:fb:4d:cd:09:9c:c5:
04:2d:d5:c8:4b:8c:1a:54:5e:39:81:51:39:85:d0:
1b:c2:76:66:0b:76:28:db:17:d3:c0:b1:12:56:c3:
75:a4:a3:36:c4:d8:5c:44:bf:57:a4:70:db:83:66:
dc:84:91:5a:3c:d3:25:d3:d1:5d:be:9e:59:00:b4:
02:65:db:96:54:19:93:c9:4f:76:81:78:03:14:66:
06:96:76:9c:66:f6:7c:df:84:13:07:86:3c:b7:03:
f7:94:43:f5:f7:32:d6:a8:8b:27:f6:18:2c:2b:0c:
76:3a:9a:83:10:20:ad:92:ed:3a:a7:0f:e6:80:c0:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F6:8D:2A:BF:76:85:FC:2F:6F:49:4F:74:63:C8:B0:81:06:FB:0D
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3f:db:1f:a3:2b:00:00:01:1f:bd:85:6c:3e:bc:9d:d8:cf:
f8:9e:42:1f:39:18:9d:a4:05:9f:29:4f:99:a1:ce:49:36:cc:
7a:37:c8:19:6e:4e:3b:7b:c0:e4:07:c9:57:2c:28:da:33:8c:
1d:5e:7d:b7:dc:e7:52:ba:8a:a9:8a:1c:f3:07:b6:ac:e8:72:
8f:9b:cd:c3:ad:91:49:4a:fd:54:db:4b:36:72:b6:f1:2f:31:
50:ee:b3:7d:84:b3:5b:bc:f2:c3:15:9f:c2:6d:72:86:64:b5:
55:a9:74:28:26:d4:60:a7:81:22:b5:fc:a7:c2:b4:78:6a:03:
c6:87:29:87:18:cb:da:8d:44:b3:c8:ab:fe:5d:68:5b:1c:f8:
fe:1b:f2:cc:ed:79:79:6a:de:fd:6d:c9:5c:b1:28:b6:71:b6:
6d:56:77:42:fd:6f:2f:04:91:e7:59:1c:b9:30:ad:bf:99:c1:
e6:e3:ea:6c:2a:16:11:42:5d:17:8e:b4:48:12:26:f4:3b:7c:
8d:4a:81:65:d6:2a:b8:20:20:cd:d6:19:e9:f7:f8:6c:64:cc:
13:1f:f4:b4:b6:0b:cb:8c:c6:17:d4:fb:c6:65:8d:d4:9a:a3:
c7:7e:4a:42:f5:ae:6d:88:b8:53:e8:39:6e:e0:49:f9:83:ac:
09:38:83:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEXENuzzkECiTpv9iT+XiHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2IyOTE3MGI1NmE4NDI0MWY0Yjg0ZmQ0ZGFmZjA4MzZk
NTAzYzYwHhcNMjUwNzAxMDUwMTEwWhcNMjUwNzAyMDUwMTEwWjAzMTEwLwYDVQQD
EygxY2Y2OGQyYWJmNzY4NWZjMmY2ZjQ5NGY3NDYzYzhiMDgxMDZmYjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2ZsMbK//5kqkBFD3TIgOYiRaekF
UHymx8Q6NQO6JC91pGNWbRy1aoOM5CuoYTTRae9W7u/JV995g3C8yP084OEYectg
GRgCoRnHLyZEyd43QZ1c6adeWE2VTarU/SEljcUNBz9B2tSyU7AXQfXwEb5078yw
7Tszmtc6G1eBXxb7Tc0JnMUELdXIS4waVF45gVE5hdAbwnZmC3Yo2xfTwLESVsN1
pKM2xNhcRL9XpHDbg2bchJFaPNMl09Fdvp5ZALQCZduWVBmTyU92gXgDFGYGlnac
ZvZ834QTB4Y8twP3lEP19zLWqIsn9hgsKwx2OpqDECCtku06pw/mgMBjNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz2jSq/doX8L29JT3RjyLCBBvsNMB8GA1UdIwQY
MBaAFMU7KRcLVqhCQfS4T9Ta/wg21QPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTkt
N2RmYmJhZTAzNjhlLzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTktN2RmYmJhZTAzNjhl
LzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaj/bH6Mr
AAABH72FbD68ndjP+J5CHzkYnaQFnylPmaHOSTbMejfIGW5OO3vA5AfJVywo2jOM
HV59t9znUrqKqYoc8we2rOhyj5vNw62RSUr9VNtLNnK28S8xUO6zfYSzW7zywxWf
wm1yhmS1Val0KCbUYKeBIrX8p8K0eGoDxocphxjL2o1Es8ir/l1oWxz4/hvyzO15
eWre/W3JXLEotnG2bVZ3Qv1vLwSR51kcuTCtv5nB5uPqbCoWEUJdF460SBIm9Dt8
jUqBZdYquCAgzdYZ6ff4bGTMEx/0tLYLy4zGF9T7xmWN1Jqjx35KQvWubYi4U+g5
buBJ+YOsCTiDug==
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:19:03 2025 by rpki-client