Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json)
Hash identifier: LTFacNOYWU5UgUNiFtRXxKbZ6CMGwAMWeIVJuYeH/uc=
Subject key identifier: 51:CA:E2:F4:57:D3:BF:98:B9:3E:23:84:59:FC:31:0F:3A:C6:6F:03
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 0197B7B34A4198B0A3804F873493D7402B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
Manifest number: 0318
Signing time: Sat 28 Jun 2025 18:01:09 +0000
Manifest this update: Sat 28 Jun 2025 18:01:09 +0000
Manifest next update: Sun 29 Jun 2025 18:01:09 +0000
Files and hashes: 1: gMn3NAKyq7saXpkPxZO8WkflotA.roa (hash: C/YIIPIOL8M4KETXlzNgei6yxSKu/8PUoNYZn01EOkY=)
2: rvEqkaSx88Mofyvgjk106t2jfIQ.roa (hash: Mt/fOTdq8tI+LHmhZzATBBPg2EKFAQ2gQnysBrQ+MLM=)
3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: 0JSG45sgEkJEStfK0kncDU4z9QBUIWuvpUTE6CwLbcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4a:41:98:b0:a3:80:4f:87:34:93:d7:40:2b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: Jun 28 18:01:09 2025 GMT
Not After : Jun 29 18:01:09 2025 GMT
Subject: CN=51cae2f457d3bf98b93e238459fc310f3ac66f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:96:cb:0a:6a:19:c9:7c:e4:17:70:af:6a:
02:d0:04:36:c4:62:c6:42:53:fa:bc:29:5a:8e:f4:
56:68:eb:0a:05:83:85:75:71:03:ac:f2:f8:40:bd:
1f:f5:2b:11:72:d5:4f:3d:4f:ba:36:c6:1e:62:6f:
d0:1a:b2:4f:22:3c:fb:5d:23:51:1e:df:10:a9:1b:
ad:12:be:00:fc:5f:1d:ab:52:41:ad:00:5c:44:2a:
71:d9:5d:18:0d:61:35:a8:d9:e5:2a:e3:08:e6:b1:
51:9d:70:e1:38:66:42:4a:25:64:0f:c0:6a:fd:38:
9f:2e:8b:4c:94:e9:82:83:1d:bf:45:65:f8:ab:67:
27:57:fc:24:73:16:2a:ed:1e:45:8b:34:93:d2:19:
51:5e:bf:8d:31:2f:19:12:54:5b:98:2a:5a:0f:95:
a1:90:12:10:69:52:79:a3:04:b4:f3:16:fc:1a:c6:
0a:d1:ae:80:f5:72:83:f8:58:ec:42:6e:56:1a:42:
f1:f5:3a:5c:48:75:28:c9:51:fb:ba:db:24:81:64:
9e:f5:39:6c:cf:69:c9:a4:d1:10:f6:82:4a:21:f9:
64:7c:6c:62:bc:4b:b6:14:b5:1f:e9:18:53:67:33:
ee:11:c6:3f:6d:37:97:55:a1:62:e8:5d:4d:95:3a:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CA:E2:F4:57:D3:BF:98:B9:3E:23:84:59:FC:31:0F:3A:C6:6F:03
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:dd:ea:d1:5e:5f:00:bb:14:1d:a5:ce:75:1d:e7:a3:15:3b:
6b:c9:6b:65:d4:4d:44:5c:d7:f1:b4:73:b5:3a:b3:41:4d:9c:
2d:9f:ac:86:99:a4:b6:cf:cd:97:d0:23:e5:f3:b6:71:9a:fa:
61:25:70:94:9c:c3:85:67:c6:5a:40:2b:11:e9:fd:0c:a5:f7:
5d:d2:27:25:78:83:f7:7a:a1:23:ed:4f:61:6f:db:9b:4b:8b:
b4:ee:2d:69:de:f5:0a:2b:d4:90:33:29:b7:71:d5:08:51:11:
c6:13:b7:3d:bf:9f:c2:aa:f2:7e:24:70:ab:43:01:97:b5:1a:
8c:28:a4:3d:72:af:1a:bd:6e:7e:ae:94:c9:95:a5:42:71:50:
1e:89:46:17:ee:3f:52:ac:0c:c5:4f:50:35:28:b1:24:19:25:
56:87:dd:e4:c8:12:93:20:c8:f5:41:04:05:19:05:00:00:a2:
c1:8e:c1:15:3b:bc:ad:bc:25:db:58:12:98:60:d1:0c:88:2d:
25:ca:17:da:39:cb:81:2e:66:e3:40:3b:a6:bb:27:71:1b:0c:
bb:e1:15:3b:e5:f5:9e:f2:ee:51:6b:a5:a5:21:d3:f5:39:8b:
a7:1a:9b:79:42:15:f0:db:6f:2e:02:42:ce:f2:51:d1:b3:0d:
8b:24:32:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s0pBmLCjgE+HNJPXQCshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGVlYTEzMDcyMWU5Y2QxOTc2ZmQ3ZTBmMzRjOTZkZjZl
YWM2YjAwHhcNMjUwNjI4MTgwMTA5WhcNMjUwNjI5MTgwMTA5WjAzMTEwLwYDVQQD
Eyg1MWNhZTJmNDU3ZDNiZjk4YjkzZTIzODQ1OWZjMzEwZjNhYzY2ZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBOWywpqGcl85Bdwr2oC0AQ2xGLG
QlP6vClajvRWaOsKBYOFdXEDrPL4QL0f9SsRctVPPU+6NsYeYm/QGrJPIjz7XSNR
Ht8QqRutEr4A/F8dq1JBrQBcRCpx2V0YDWE1qNnlKuMI5rFRnXDhOGZCSiVkD8Bq
/TifLotMlOmCgx2/RWX4q2cnV/wkcxYq7R5FizST0hlRXr+NMS8ZElRbmCpaD5Wh
kBIQaVJ5owS08xb8GsYK0a6A9XKD+FjsQm5WGkLx9TpcSHUoyVH7utskgWSe9Tls
z2nJpNEQ9oJKIflkfGxivEu2FLUf6RhTZzPuEcY/bTeXVaFi6F1NlTqlJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHK4vRX07+YuT4jhFn8MQ86xm8DMB8GA1UdIwQY
MBaAFMUO6hMHIenNGXb9fg80yW326sawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84Yjc4NjctMGE3MC00NGNhLTgxZmQt
NjNmNWZlMTEwZTc2LzEveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84Yjc4NjctMGE3MC00NGNhLTgxZmQtNjNmNWZlMTEwZTc2
LzEveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY93q0V5f
ALsUHaXOdR3noxU7a8lrZdRNRFzX8bRztTqzQU2cLZ+shpmkts/Nl9Aj5fO2cZr6
YSVwlJzDhWfGWkArEen9DKX3XdInJXiD93qhI+1PYW/bm0uLtO4tad71CivUkDMp
t3HVCFERxhO3Pb+fwqryfiRwq0MBl7UajCikPXKvGr1ufq6UyZWlQnFQHolGF+4/
UqwMxU9QNSixJBklVofd5MgSkyDI9UEEBRkFAACiwY7BFTu8rbwl21gSmGDRDIgt
JcoX2jnLgS5m40A7prsncRsMu+EVO+X1nvLuUWulpSHT9TmLpxqbeUIV8NtvLgJC
zvJR0bMNiyQyUw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:28 2025 by rpki-client