Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: BugZy3nOhn6mbTCmLiUUUuO9jKjeLALzYf9At0q7sZQ=
Subject key identifier: 70:E1:B1:13:24:2B:DF:3B:31:2D:A7:74:29:83:2A:3F:CF:2A:49:CE
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 0197B77C4DF4E0D20B019397ED41AD807C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:06 +0000
Manifest this update: Sat 28 Jun 2025 17:01:06 +0000
Manifest next update: Sun 29 Jun 2025 17:01:06 +0000
Files and hashes: 1: O4OjioqtdLSc9vBVs2H8waPnIgU.roa (hash: NSGxfFoC9xrE9ZgK+kDfAmJ0Yg5M2rh+aZQuRq8sgYc=)
2: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: jgbG+36BjfEsKuxnkugP3BSX8cngO0TMRuBujAHYnjM=)
3: znlmvW2DpaFnQW1nyRCgCW8WLGw.roa (hash: YJSRBnkvLzhRF6OldluTcKQjvHWbbSsxO+vBSGh4+Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:4d:f4:e0:d2:0b:01:93:97:ed:41:ad:80:7c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Jun 28 17:01:06 2025 GMT
Not After : Jun 29 17:01:06 2025 GMT
Subject: CN=70e1b113242bdf3b312da77429832a3fcf2a49ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:a2:d9:1f:83:79:05:b2:e3:d0:5b:f2:f6:
c1:03:6c:cb:c2:0e:a3:78:c3:72:ab:69:b8:7d:44:
13:fe:68:42:22:e2:bd:7e:fa:e4:f3:64:d3:92:f0:
f3:49:2f:ce:04:6e:7b:ce:e6:77:e5:06:bf:3a:67:
e9:c3:2f:8b:16:5e:a4:e7:05:f7:30:6c:e1:bb:f2:
b5:89:ea:1b:ef:e6:21:8f:80:0d:f0:5f:75:6a:75:
ad:d3:74:9e:cc:6d:77:45:e8:d6:aa:ca:ee:d9:b0:
b3:91:82:09:e1:2a:d6:9f:65:6b:59:32:28:15:7d:
4a:d9:5a:4c:6e:bc:f8:d9:54:85:e8:ee:b8:24:f2:
60:20:d2:f5:90:a8:fe:27:66:dc:d5:9c:b0:b3:dc:
dd:b6:be:f9:36:8c:f7:c3:09:c5:a8:d4:56:8f:dd:
f1:02:de:e2:b2:22:8a:e1:e0:e4:7c:cb:a1:0a:41:
67:b1:19:c5:2d:f5:42:71:c3:07:21:d9:67:2b:5a:
48:db:8b:bc:dd:d3:65:3b:11:c4:97:47:dd:29:4a:
44:06:ba:95:ef:58:09:dd:1d:7b:73:4a:4b:a7:61:
df:68:a1:38:23:db:b7:20:0e:95:e2:94:a3:5f:73:
6c:e8:22:51:8c:3d:5a:56:7e:19:3e:b6:89:1c:fb:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E1:B1:13:24:2B:DF:3B:31:2D:A7:74:29:83:2A:3F:CF:2A:49:CE
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:02:d5:0f:d0:49:aa:81:eb:51:e8:a9:f0:83:9b:77:33:8d:
a4:d5:a7:45:ba:72:84:2c:5d:12:a6:eb:f1:55:1a:f5:51:92:
c8:c1:3a:e3:9f:c2:88:87:85:85:e8:4c:71:5a:94:5f:10:20:
b2:83:a7:33:77:04:47:a1:a5:62:c0:d9:53:5b:9e:88:f7:51:
d2:5a:88:75:52:14:72:d3:72:61:2e:ae:82:75:63:72:fe:64:
de:35:99:63:1d:00:2e:f2:5f:10:c0:57:2e:7f:a9:fe:56:f9:
6c:46:41:b8:fb:84:fa:9a:9a:6e:bf:64:8c:6e:1a:e2:b6:05:
1b:28:13:c6:1a:b2:09:8f:ad:f4:6e:db:ec:be:50:10:38:35:
ab:c0:c2:32:ad:4c:ab:9d:cd:80:aa:45:e8:fa:92:ae:39:ce:
ba:3b:cd:2a:61:c4:0f:c8:f8:51:b3:df:98:01:6a:ca:2a:55:
a6:5a:22:b7:98:af:a8:64:69:e3:30:32:e1:8d:1a:50:f0:6f:
0e:3a:9d:9c:b4:ce:d8:03:a4:ca:ba:40:c7:4a:e0:2a:0b:47:
a8:95:7a:31:32:72:8e:99:9d:66:86:79:00:a6:12:c7:5f:69:
f6:87:f1:72:68:91:aa:61:81:4a:87:7a:73:b3:c4:de:5a:28:
d8:58:e0:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fE304NILAZOX7UGtgHwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTc5MWE1ODExYzdmNmVkODFmZDQ0MWI1MDI2NWFmNWU5
YzYxYjAwHhcNMjUwNjI4MTcwMTA2WhcNMjUwNjI5MTcwMTA2WjAzMTEwLwYDVQQD
Eyg3MGUxYjExMzI0MmJkZjNiMzEyZGE3NzQyOTgzMmEzZmNmMmE0OWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN2i2R+DeQWy49Bb8vbBA2zLwg6j
eMNyq2m4fUQT/mhCIuK9fvrk82TTkvDzSS/OBG57zuZ35Qa/Omfpwy+LFl6k5wX3
MGzhu/K1ieob7+Yhj4AN8F91anWt03SezG13RejWqsru2bCzkYIJ4SrWn2VrWTIo
FX1K2VpMbrz42VSF6O64JPJgINL1kKj+J2bc1Zyws9zdtr75Noz3wwnFqNRWj93x
At7isiKK4eDkfMuhCkFnsRnFLfVCccMHIdlnK1pI24u83dNlOxHEl0fdKUpEBrqV
71gJ3R17c0pLp2HfaKE4I9u3IA6V4pSjX3Ns6CJRjD1aVn4ZPraJHPsjBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDhsRMkK987MS2ndCmDKj/PKknOMB8GA1UdIwQY
MBaAFMUXkaWBHH9u2B/UQbUCZa9enGGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEt
ODE5MTY0YjkyYjg4LzEveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEtODE5MTY0YjkyYjg4
LzEveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApALVD9BJ
qoHrUeip8IObdzONpNWnRbpyhCxdEqbr8VUa9VGSyME645/CiIeFhehMcVqUXxAg
soOnM3cER6GlYsDZU1ueiPdR0lqIdVIUctNyYS6ugnVjcv5k3jWZYx0ALvJfEMBX
Ln+p/lb5bEZBuPuE+pqabr9kjG4a4rYFGygTxhqyCY+t9G7b7L5QEDg1q8DCMq1M
q53NgKpF6PqSrjnOujvNKmHED8j4UbPfmAFqyipVploit5ivqGRp4zAy4Y0aUPBv
DjqdnLTO2AOkyrpAx0rgKgtHqJV6MTJyjpmdZoZ5AKYSx19p9ofxcmiRqmGBSod6
c7PE3loo2Fjg5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:28 2025 by rpki-client