Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: simYdjanE4yv+yI5JeZ87drY3EBDpPCIMxZN1jRC+qE=
Subject key identifier: BC:2F:1C:30:F3:91:B7:E2:B9:A5:9D:FF:7D:BF:E8:AE:2C:A7:9A:99
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 0197B745321BF4D27569644E9F55E0B9EE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 16:00:54 +0000
Manifest this update: Sat 28 Jun 2025 16:00:54 +0000
Manifest next update: Sun 29 Jun 2025 16:00:54 +0000
Files and hashes: 1: 2N_bsVB0KvO9RyGjzRLMSxh2whM.roa (hash: hwDDM8IuPT+bKKqC9g8Bom6jz4+b+lZbDkkn2LwwNsU=)
2: JvK-cLcIjgxCJ_K14_FWFEfc7vQ.roa (hash: 1p38hpbTbOTu95nT8/nMNcs2xO2ksXr8ZuGwpDzXer0=)
3: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: 34Ou6N9dsyEB+9Cvsfw8t6fkjkmfuYlwb4PwvcGaK54=)
4: t_DIdqaN6y2JKMbW8hZqlx5pBLI.roa (hash: sTPX3pfoCgx/hl/X8Ze0rx/7BembW5p7LcW8LP/fL7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:32:1b:f4:d2:75:69:64:4e:9f:55:e0:b9:ee:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Jun 28 16:00:54 2025 GMT
Not After : Jun 29 16:00:54 2025 GMT
Subject: CN=bc2f1c30f391b7e2b9a59dff7dbfe8ae2ca79a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:33:ba:cf:7f:2b:79:07:6a:2d:08:c4:03:
36:7b:9e:c9:10:53:4c:38:31:4f:99:03:ee:43:f0:
09:a4:ab:47:01:8c:44:91:78:ad:dd:26:dc:1a:eb:
16:6e:8b:c2:d6:f5:06:c7:4b:ac:bc:8d:70:60:de:
5b:e0:ff:bb:f5:87:eb:f7:33:43:ba:94:70:06:fc:
79:a7:0d:73:b5:af:3d:eb:86:de:30:15:0c:86:b7:
c6:44:bb:fa:37:18:8d:8e:75:01:28:73:56:5f:f0:
b8:c3:32:98:71:5e:14:ea:e0:fe:1a:d6:fa:86:c7:
1b:8c:fa:aa:74:5e:62:ae:c2:27:30:72:8c:aa:4f:
77:a4:f4:d7:75:60:2c:4c:c4:6b:a0:ac:b5:f3:68:
1f:47:04:3f:a5:01:8c:b7:f8:7b:61:e5:2e:a6:43:
fa:34:bf:31:02:82:4d:c0:91:93:59:92:92:78:1a:
c1:8b:18:9e:b3:5d:8e:eb:29:0e:3b:7a:bc:47:da:
33:5f:74:6b:94:0a:5a:e9:3b:76:81:fb:bc:28:c4:
9e:ee:04:29:e1:69:a0:92:65:f1:02:29:bf:51:87:
49:ae:36:8c:65:44:7a:4d:7b:76:de:95:28:0f:77:
c2:1b:75:4f:05:88:2c:68:61:12:f5:44:f2:6a:82:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2F:1C:30:F3:91:B7:E2:B9:A5:9D:FF:7D:BF:E8:AE:2C:A7:9A:99
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4a:17:76:e3:b8:e4:fa:52:3e:ba:ff:4e:38:a6:87:30:d2:
41:7d:14:9d:4b:f1:7a:6a:6f:01:a9:8b:b7:9a:e3:30:d6:00:
7e:09:a2:f7:f5:c6:41:97:35:0c:cd:11:d0:55:9d:cd:f9:96:
93:9a:85:a4:84:58:a3:3e:5a:00:46:c3:9e:ad:80:08:96:3c:
c2:fb:0e:6b:ca:2f:69:11:6f:f5:ee:54:6b:8f:a1:b5:9c:ae:
a1:01:f2:96:22:c7:a0:d2:48:40:00:f0:d9:e9:40:c5:5e:b0:
43:68:af:54:a6:2e:85:d4:3b:e1:9b:4a:ae:39:ff:f0:99:88:
56:42:88:e8:94:ee:12:ab:f0:34:1f:5f:2a:6c:6b:da:7c:07:
c1:8a:3c:14:6a:b6:2a:8b:ee:ed:d5:f0:57:27:af:07:d5:80:
22:6e:81:29:60:be:e5:14:c5:2a:8d:8b:18:b7:ed:5b:e9:79:
46:11:dd:bb:ab:d3:be:04:33:24:8a:c3:1b:2b:2d:0e:18:14:
55:94:6a:c8:ca:1d:4d:5c:8e:78:3c:c1:f7:a2:6a:eb:6a:43:
bf:26:fa:4a:32:31:b3:43:5d:69:3f:93:6a:ad:5b:58:d0:87:
f2:87:d0:ce:a0:92:d0:85:30:77:44:c4:06:b1:01:81:26:9c:
b2:c4:77:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RTIb9NJ1aWROn1Xgue5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTk4MDEzMmQxOTNlMjcwZWQxZWZlMGFkMjg0OWZlOGFi
MGQ3NmMwHhcNMjUwNjI4MTYwMDU0WhcNMjUwNjI5MTYwMDU0WjAzMTEwLwYDVQQD
EyhiYzJmMWMzMGYzOTFiN2UyYjlhNTlkZmY3ZGJmZThhZTJjYTc5YTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZczus9/K3kHai0IxAM2e57JEFNM
ODFPmQPuQ/AJpKtHAYxEkXit3SbcGusWbovC1vUGx0usvI1wYN5b4P+79Yfr9zND
upRwBvx5pw1zta8964beMBUMhrfGRLv6NxiNjnUBKHNWX/C4wzKYcV4U6uD+Gtb6
hscbjPqqdF5irsInMHKMqk93pPTXdWAsTMRroKy182gfRwQ/pQGMt/h7YeUupkP6
NL8xAoJNwJGTWZKSeBrBixies12O6ykOO3q8R9ozX3RrlApa6Tt2gfu8KMSe7gQp
4WmgkmXxAim/UYdJrjaMZUR6TXt23pUoD3fCG3VPBYgsaGES9UTyaoJyAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwvHDDzkbfiuaWd/32/6K4sp5qZMB8GA1UdIwQY
MBaAFF9ZgBMtGT4nDtHv4K0oSf6KsNdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYt
MWUxZGU5MWE5ODdjLzEvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYtMWUxZGU5MWE5ODdj
LzEvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEoXduO4
5PpSPrr/TjimhzDSQX0UnUvxempvAamLt5rjMNYAfgmi9/XGQZc1DM0R0FWdzfmW
k5qFpIRYoz5aAEbDnq2ACJY8wvsOa8ovaRFv9e5Ua4+htZyuoQHyliLHoNJIQADw
2elAxV6wQ2ivVKYuhdQ74ZtKrjn/8JmIVkKI6JTuEqvwNB9fKmxr2nwHwYo8FGq2
Kovu7dXwVyevB9WAIm6BKWC+5RTFKo2LGLftW+l5RhHdu6vTvgQzJIrDGystDhgU
VZRqyModTVyOeDzB96Jq62pDvyb6SjIxs0NdaT+Taq1bWNCH8ofQzqCS0IUwd0TE
BrEBgSacssR3vA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:25:02 2025 by rpki-client