Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
File: xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft (raw, json)
Hash identifier: bcQ3QDl6gmI9ER31PxzBjRH+6I8echzn0QLjm3P30FY=
Subject key identifier: 3F:28:07:8E:4A:49:F1:35:E5:0D:9F:EC:17:24:A3:9B:E9:FE:BC:08
Authority key identifier: C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
Certificate issuer: /CN=c4402c55758faee473938f8067a889ad5e271261
Certificate serial: 0197B9A1587651911C88103C1E8EEA0C2ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
Manifest number: 1587
Signing time: Sun 29 Jun 2025 03:00:48 +0000
Manifest this update: Sun 29 Jun 2025 03:00:48 +0000
Manifest next update: Mon 30 Jun 2025 03:00:48 +0000
Files and hashes: 1: E8OPd8A6_dgzaBqnWV201n06rXs.roa (hash: hcTcW3JT+mi3CMuGaWLI1AgOOEgBHBo13pVy947r0uY=)
2: XY1Eges0ofwvvFCGnxnMTZuzqq0.roa (hash: 4lDMbdxSfWLvbOB4pHjSTKQ4KFN1x9vtL2R0MqxD430=)
3: xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl (hash: IjGCa/0qWYYRkX5NeD7UWqBknskABZJw8wiuD0+VdRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:58:76:51:91:1c:88:10:3c:1e:8e:ea:0c:2e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4402c55758faee473938f8067a889ad5e271261
Validity
Not Before: Jun 29 03:00:48 2025 GMT
Not After : Jun 30 03:00:48 2025 GMT
Subject: CN=3f28078e4a49f135e50d9fec1724a39be9febc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:3d:59:0f:49:5e:85:d5:c6:b9:22:21:d6:
9b:29:b9:56:07:99:1b:db:10:e0:f2:81:d1:e3:2c:
09:6f:bc:75:b8:cd:38:56:8f:99:ec:82:c9:e5:6c:
24:da:d0:08:8b:90:3a:ca:0c:f6:aa:f9:6d:cb:4d:
6e:c2:24:3e:2e:cd:62:11:5f:01:32:c8:5b:62:5a:
c7:d4:9e:36:16:eb:64:65:1a:fd:0b:66:da:0e:63:
e9:db:a5:a2:a3:18:f2:ba:f1:5d:29:0a:40:ef:e1:
20:b8:a1:95:e7:c9:3c:e5:a5:b2:0d:40:b2:67:74:
d5:eb:33:c0:cd:aa:61:a0:ba:82:3f:c3:77:e5:dd:
39:58:d7:6e:06:51:af:df:bc:12:db:05:51:3c:f1:
23:0f:31:e6:0f:d0:ac:1f:e2:63:81:98:50:c6:45:
02:b4:b1:57:b7:39:12:38:41:cb:44:f3:9e:4e:8c:
10:20:b0:43:7a:89:d6:5e:64:78:09:1b:56:2e:23:
7d:b3:71:59:70:08:4e:db:73:3a:88:3f:77:27:f5:
f9:0e:2c:13:d6:68:51:33:a8:2d:9a:34:5d:f1:73:
3c:c4:22:c1:34:52:3a:dc:36:11:0f:37:3b:80:f4:
70:e2:e0:02:b4:d4:3a:21:ef:e0:95:32:9c:ec:4e:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:28:07:8E:4A:49:F1:35:E5:0D:9F:EC:17:24:A3:9B:E9:FE:BC:08
X509v3 Authority Key Identifier:
keyid:C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e7:93:63:e3:db:19:91:85:34:57:81:9a:16:a7:4e:64:38:
fe:ec:89:f5:5d:39:36:f5:1e:9d:5f:42:87:89:d7:5f:43:ed:
e4:72:d5:f4:64:e0:da:95:19:d4:f0:19:2c:b9:55:6c:b9:7f:
9b:6f:b8:42:28:d0:9d:d1:94:ae:9b:ee:57:7a:c4:a5:0d:8c:
5c:1a:fb:44:49:69:fb:79:c9:15:72:7b:29:36:ce:21:0e:90:
a1:8f:57:f6:ac:a2:d9:f7:b7:34:2e:0e:2a:28:69:7f:c4:16:
6d:cc:16:25:93:37:ef:c8:11:f1:8d:b3:fc:28:90:f2:08:8d:
a7:bc:35:f5:48:82:a6:35:a9:27:bb:dc:aa:f8:88:7a:6c:47:
38:af:e2:2e:f7:6d:e4:e6:30:00:c7:5c:6d:a8:5d:a3:18:19:
ef:d6:9c:bb:73:01:b1:86:62:d5:73:1f:6a:1b:5d:02:f0:9c:
68:67:06:4c:0e:db:e4:4d:fa:97:cf:a2:00:4a:c3:bf:ce:b2:
46:3f:a2:d8:3b:fb:ea:26:08:44:22:da:ef:c2:fc:14:53:33:
57:c9:15:ce:9c:93:9b:c3:fe:cc:4c:f9:74:fa:e8:6d:f7:48:
e8:d8:97:67:87:a0:d7:ad:78:5d:15:86:a7:23:82:88:03:e4:
d8:c0:3c:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oVh2UZEciBA8Ho7qDC7KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDAyYzU1NzU4ZmFlZTQ3MzkzOGY4MDY3YTg4OWFkNWUy
NzEyNjEwHhcNMjUwNjI5MDMwMDQ4WhcNMjUwNjMwMDMwMDQ4WjAzMTEwLwYDVQQD
EygzZjI4MDc4ZTRhNDlmMTM1ZTUwZDlmZWMxNzI0YTM5YmU5ZmViYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu09WQ9JXoXVxrkiIdabKblWB5kb
2xDg8oHR4ywJb7x1uM04Vo+Z7ILJ5Wwk2tAIi5A6ygz2qvlty01uwiQ+Ls1iEV8B
MshbYlrH1J42FutkZRr9C2baDmPp26WioxjyuvFdKQpA7+EguKGV58k85aWyDUCy
Z3TV6zPAzaphoLqCP8N35d05WNduBlGv37wS2wVRPPEjDzHmD9CsH+JjgZhQxkUC
tLFXtzkSOEHLRPOeTowQILBDeonWXmR4CRtWLiN9s3FZcAhO23M6iD93J/X5DiwT
1mhRM6gtmjRd8XM8xCLBNFI63DYRDzc7gPRw4uACtNQ6Ie/glTKc7E4QswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8oB45KSfE15Q2f7Bcko5vp/rwIMB8GA1UdIwQY
MBaAFMRALFV1j67kc5OPgGeoia1eJxJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVBc1ZYV1BydVJ6azQtQVo2aUpyVjRuRW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85NjRjM2MtYjU3MC00MTEzLWI0YWEt
Y2ZkZjAzMTFhZDhjLzEveEVBc1ZYV1BydVJ6azQtQVo2aUpyVjRuRW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy85NjRjM2MtYjU3MC00MTEzLWI0YWEtY2ZkZjAzMTFhZDhj
LzEveEVBc1ZYV1BydVJ6azQtQVo2aUpyVjRuRW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+eTY+Pb
GZGFNFeBmhanTmQ4/uyJ9V05NvUenV9Ch4nXX0Pt5HLV9GTg2pUZ1PAZLLlVbLl/
m2+4QijQndGUrpvuV3rEpQ2MXBr7RElp+3nJFXJ7KTbOIQ6QoY9X9qyi2fe3NC4O
Kihpf8QWbcwWJZM378gR8Y2z/CiQ8giNp7w19UiCpjWpJ7vcqviIemxHOK/iLvdt
5OYwAMdcbahdoxgZ79acu3MBsYZi1XMfahtdAvCcaGcGTA7b5E36l8+iAErDv86y
Rj+i2Dv76iYIRCLa78L8FFMzV8kVzpyTm8P+zEz5dProbfdI6NiXZ4eg1614XRWG
pyOCiAPk2MA8TQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:25:33 2025 by rpki-client