Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
File: xDzur3eV-33zSLBLIn5QpJoaG3w.mft (raw, json)
Hash identifier: BIpQz2vbInk7g6zyO+5lGfXBKIoCDaKFdoBgJPbTnF0=
Subject key identifier: 07:A7:3D:BF:EE:AF:93:E2:31:A8:78:96:CE:9C:B1:CE:95:F9:CF:AA
Authority key identifier: C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
Certificate issuer: /CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
Certificate serial: 019872CFF560F633002F0B45A5A809CA2A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
Manifest number: 1350
Signing time: Mon 04 Aug 2025 02:01:27 +0000
Manifest this update: Mon 04 Aug 2025 02:01:27 +0000
Manifest next update: Tue 05 Aug 2025 02:01:27 +0000
Files and hashes: 1: xDzur3eV-33zSLBLIn5QpJoaG3w.crl (hash: Jax7Dc4qYcWgVSBIQxQe5PamKbcHbI2YZi4lubWMItY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:f5:60:f6:33:00:2f:0b:45:a5:a8:09:ca:2a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c
Validity
Not Before: Aug 4 02:01:27 2025 GMT
Not After : Aug 5 02:01:27 2025 GMT
Subject: CN=07a73dbfeeaf93e231a87896ce9cb1ce95f9cfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:bf:c9:2a:d1:af:bd:83:b5:d4:04:87:3e:
0c:a0:0a:0b:ea:17:e6:b8:69:d0:35:00:50:92:73:
6b:c1:49:6d:2d:5f:e7:81:72:b2:39:8d:aa:bc:b1:
4e:c7:a5:d9:9f:5b:16:e2:eb:35:1f:e0:6c:a8:00:
f8:89:45:df:9b:6a:15:bc:e7:76:bf:c4:f8:01:e6:
9d:af:79:71:e9:da:2c:a3:b4:7f:91:0d:3e:21:ad:
d3:84:f7:4c:56:80:79:72:71:35:21:64:fc:2d:d4:
5f:46:f7:c0:10:75:84:fc:2d:e8:56:69:95:d7:1f:
21:74:57:d7:7d:c9:6c:82:75:f4:18:98:b2:07:2c:
92:e8:99:41:a2:f9:f9:37:f0:b5:60:8f:de:f9:7a:
9e:c6:5f:50:c5:83:01:58:74:eb:db:c8:a2:75:70:
2c:d3:20:5d:0a:e9:ce:4e:52:83:c2:1a:16:5d:7b:
39:34:81:41:ed:f3:5a:a1:6a:87:68:34:a9:aa:d0:
7b:55:f0:3e:18:fc:79:7b:f5:86:b0:ef:86:c1:e3:
c6:42:35:00:03:57:24:1b:33:d6:23:ea:5f:b5:e8:
ac:83:6a:53:47:b0:8c:68:3b:c1:90:cc:f8:fa:42:
37:99:53:48:48:e9:01:23:1a:d7:5c:6e:0e:68:10:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A7:3D:BF:EE:AF:93:E2:31:A8:78:96:CE:9C:B1:CE:95:F9:CF:AA
X509v3 Authority Key Identifier:
keyid:C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bd:17:1e:46:ba:6f:05:39:64:22:28:84:40:98:6d:00:66:
59:66:c1:79:0e:cf:3c:3e:35:3f:a9:6c:f4:71:42:b6:c3:d6:
43:6e:a8:d3:c2:6b:1c:78:37:9a:a6:79:cd:2b:42:cd:f0:af:
f6:c7:14:f0:7c:d3:85:da:e7:54:11:f1:26:95:90:3c:f5:a7:
23:e6:99:38:be:87:b2:7c:f4:63:eb:84:0f:9a:5c:35:4c:98:
45:bb:c9:4f:28:3e:bc:de:82:6d:34:ca:a7:52:c6:3c:3f:df:
a9:f6:29:89:cc:8f:93:93:e6:c3:a4:5b:44:77:69:1b:39:3c:
fd:3a:c1:11:88:c5:9d:a6:1b:ae:69:de:9b:c2:75:8a:2a:fe:
00:9c:15:d8:35:0d:68:51:99:b9:4c:85:a9:ee:4a:90:64:f8:
06:cd:7a:7e:4e:a9:d7:2e:b6:20:7f:d3:f7:39:cb:fd:15:ca:
27:35:b1:d7:24:01:4f:1e:04:76:7a:99:42:33:c4:a9:20:d3:
13:d4:11:85:d4:89:59:55:a1:4d:4a:27:46:bd:03:8d:50:7d:
b5:dc:4a:69:b4:c0:4d:50:e8:05:21:0b:09:c4:ea:36:53:cf:
24:68:ea:fa:3d:de:f4:c8:db:18:25:26:6f:b7:ca:cf:b5:95:
bb:fb:bc:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz/Vg9jMALwtFpagJyipAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0M2NlZWFmNzc5NWZiN2RmMzQ4YjA0YjIyN2U1MGE0OWEx
YTFiN2MwHhcNMjUwODA0MDIwMTI3WhcNMjUwODA1MDIwMTI3WjAzMTEwLwYDVQQD
EygwN2E3M2RiZmVlYWY5M2UyMzFhODc4OTZjZTljYjFjZTk1ZjljZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulS/ySrRr72DtdQEhz4MoAoL6hfm
uGnQNQBQknNrwUltLV/ngXKyOY2qvLFOx6XZn1sW4us1H+BsqAD4iUXfm2oVvOd2
v8T4Aeadr3lx6doso7R/kQ0+Ia3ThPdMVoB5cnE1IWT8LdRfRvfAEHWE/C3oVmmV
1x8hdFfXfclsgnX0GJiyByyS6JlBovn5N/C1YI/e+Xqexl9QxYMBWHTr28iidXAs
0yBdCunOTlKDwhoWXXs5NIFB7fNaoWqHaDSpqtB7VfA+GPx5e/WGsO+GwePGQjUA
A1ckGzPWI+pfteisg2pTR7CMaDvBkMz4+kI3mVNISOkBIxrXXG4OaBCACQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAenPb/ur5PiMah4ls6csc6V+c+qMB8GA1UdIwQY
MBaAFMQ87q93lft980iwSyJ+UKSaGht8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveER6dXIzZVYtMzN6U0xCTEluNVFwSm9hRzN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS84YThkM2EtMDgwNC00NGQ3LTg2NTUt
MDhiYWUzYTU0ZmY2LzEveER6dXIzZVYtMzN6U0xCTEluNVFwSm9hRzN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS84YThkM2EtMDgwNC00NGQ3LTg2NTUtMDhiYWUzYTU0ZmY2
LzEveER6dXIzZVYtMzN6U0xCTEluNVFwSm9hRzN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApb0XHka6
bwU5ZCIohECYbQBmWWbBeQ7PPD41P6ls9HFCtsPWQ26o08JrHHg3mqZ5zStCzfCv
9scU8HzThdrnVBHxJpWQPPWnI+aZOL6Hsnz0Y+uED5pcNUyYRbvJTyg+vN6CbTTK
p1LGPD/fqfYpicyPk5Pmw6RbRHdpGzk8/TrBEYjFnaYbrmnem8J1iir+AJwV2DUN
aFGZuUyFqe5KkGT4Bs16fk6p1y62IH/T9znL/RXKJzWx1yQBTx4EdnqZQjPEqSDT
E9QRhdSJWVWhTUonRr0DjVB9tdxKabTATVDoBSELCcTqNlPPJGjq+j3e9MjbGCUm
b7fKz7WVu/u86Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:43 2025 by rpki-client